last executing test programs: 9.223532192s ago: executing program 2 (id=2507): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4dd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x2c, 0x2, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1ff}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x10000, @loopback, 0x4}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280)=0x4, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0502103, &(0x7f00000001c0)) syz_usb_connect(0x0, 0x54, &(0x7f00000000c0)=ANY=[@ANYBLOB="12e6ffff33b17208d21930037eb501ac17010902420001000000040904fc0010ffffff0009058d0000000000040725010003090007250181a9030009050300000000000009e30b000002000000072501b080000200"], 0x0) 8.357963261s ago: executing program 0 (id=2508): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 8.300564354s ago: executing program 3 (id=2510): syz_usb_connect(0x2, 0x294, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0xcf, 0x7e, 0x8f, 0x40, 0x2040, 0x721f, 0xf262, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x282, 0x2, 0x81, 0x4, 0x0, 0x4f, [{{0x9, 0x4, 0x87, 0x6, 0xd, 0xa9, 0x7a, 0x37, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0xb0a, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x2, 0x4, 0x96}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x9c, "fe"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0x80, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf7, 0x9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x64, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0xbbbf}]}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0xa, 0x41, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x3, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x27, 0x3, 0x8, [@generic={0x6c, 0x11, "65ec3e0f1c98fb62f50cd59ee1975801a11e4833ff7cfff45fd649154caf05915b1ace2c8413997563a07be89ce6353e52879e85f0ef9e9b56fa92991fa8981e51361d118f9bf85d619a29eb0041064581977f7884c4fc23415aed461c44ce9951cec318b2171b99c8d6"}, @generic={0x2, 0x21}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x1, 0x0, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x6}, @generic={0xb6, 0x22, "783233f4166b17a900d27f54ef7bbffaf86a7440c19cec0042ff49fe61c37c81294c3ea37b14f99b49b66b773ed6c80126096ecdadf4e00b250c6a87a95ac5833f9d89ac8673b6489b2a5d16082a72b0b74873b766bbf2b999821eb469d7a853261d9138b42ffee41b85a1d2ed9fff4a9c69e288d9ca5f56c052f5ef2219f1e05baacac3af460821e91e5906fd6ca335aa77a64f1fb706c21cebecb1502096e162b833e0b86f8055adc4f7875f014b213e9daa93"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0x81, 0xd, 0xc3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x38}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0xf, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x5}]}}, {{0x9, 0x5, 0x5, 0xc, 0x10, 0x3, 0x7, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xe, 0x4}]}}, {{0x9, 0x5, 0x1, 0xc, 0x200, 0x4e, 0x9, 0x7, [@generic={0x6, 0x24, "7c88e9f3"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x20, 0x5, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xd0}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x8, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x7}]}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x63, 0x7, 0xc}}]}}, {{0x9, 0x4, 0xcd, 0x3, 0x5, 0x58, 0x5a, 0x87, 0x5, [], [{{0x9, 0x5, 0x2, 0x0, 0x8, 0x8, 0x10, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4d, 0x4}]}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0x3c, 0x40, 0x0, [@generic={0x13, 0x22, "b220c3b729cb730124ffd3a7ac2ef43bf1"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x400, 0x3, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xfb}]}}, {{0x9, 0x5, 0xe17bebb0bfe4c045, 0x1, 0x200, 0x80, 0xfd, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x9}]}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0x0, 0x0, 0xf3, [@generic={0x7, 0x5, "97523f7428"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc7, 0x5}]}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x2a, 0x3, 0x1, 0x10, 0x6d}, 0x61, &(0x7f0000000080)={0x5, 0xf, 0x61, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x0, 0xf000, 0x5, [0x30, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x3, 0x8}, @generic={0x6, 0x10, 0xa, "220d8a"}, @generic={0x2e, 0x10, 0x3, "ffbd36d0866bfacf0b7ce3543daf1b9acf12af3b4c1ef367b743d92eeceb0c4350e3d001e39c4cb2c9232b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x80, 0x5, 0x7}]}, 0x7, [{0x2, &(0x7f0000000180)=@string={0x2}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x436}}, {0x2, &(0x7f0000000300)=@string={0x2}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x380a}}, {0x36, &(0x7f0000000e40)=@string={0x36, 0x3, "dcd79152f5c635a31387c62ed173ec460b8e637d2ac9aa5f103f5781dcf72b0c10d2fca9eaec254f5cc96065387cd3ce939c347b"}}]}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 7.546182744s ago: executing program 0 (id=2513): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x185542, 0x0) ftruncate(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x4, 0x4002) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 5.496600808s ago: executing program 5 (id=2518): socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)) fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000006f80)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000100)={0x1}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000280)={0x1, 0x3}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000200)={0x2, 0x2}, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 5.130182453s ago: executing program 5 (id=2521): pipe2(&(0x7f0000000040), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000180)={'rose0\x00', 0x200}) bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r5, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x3fffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) 5.126626838s ago: executing program 2 (id=2522): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e21, 0x80000, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="140000000000000001"], 0x18}, 0x0) 5.097748233s ago: executing program 3 (id=2523): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75beb926118fb7af49ecc00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cf7cadb29c697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f5fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22786d0548b25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30237a6e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a402956564f854d71c892e4aada1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020f495750f9936d9c07130d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b6473338fe7c08fd9874e743a31582162232c7d6c614e7b3513abcc0feb99b2c9111300004fe291f5bd682c039183e61c1fdac90b2a015939a8d10b07a05e99e5772b4b9329275cef8de2b066d4e4d421e4a0a69cdd8f674b12f5b3fa764e4b1e9f4d767e252e37477813a03f18da16d598fddcf4be590d9f65f64c647cb2f330a614fe688d3d80182ed8aa59905a1cb0d3f034d927e070d71f56ee8e5c5bdf23c4f85c7a17834467bd6cf58218868fe53e3675c130bbe44bea271fa67999a0dc3dbf7c40dbba6e7d6cc0936bd8d466a1f041883c093a3a60743d0549b1a989a2fa41ff978388014434909053e279a21e7866bd4efb4a9f46b7a8b0d1d84d83020e9e68936ca3de030269784aa29a3e25146cd5b03d21ca82f961be925c9ad487fb24b1e35c2d043ee4b6a4aaf811c4308a6ced6b4c45e7513a3f0e1421cb3b0fd8571a7085c9a4b454e4ee8b44767428666cd108b78369b871ab32f36943e24976f4bb6bd4068cc19585a2de791e3f950d220b28f4ba268d8c9dbccc1a705b1b1c30881babdbc8cc4cf97b801e4d410fd7c61b34b1f126e6df1b0e9c676d1ab5", 0x5c9}, {&(0x7f0000000200)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b041e7dff102c6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a0120d1b4e671487a7b018d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69ecce", 0xe8}, {&(0x7f0000000100)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a90500b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d980ddfa9098d327d9559e82fceb2b1b1ca4b45c9e22b2de", 0xe3}, {&(0x7f0000000380)="c58cf2a0f0f863621a483b19e7ecfce0d34e53fbf2959272146847c314ac0cdfd79dc1815274c3ee57068b3793c243bc98585fab48eb353478689f452328afb023f75f93227bbe5a4aa3fea049ec0862c493e14eb44aacf27f9060bc2c826383c904750402dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e6", 0x87}, {&(0x7f0000000700)="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", 0xff}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b2374095ca6f14a6d13e03375c7029e28592c419bfb8957ac024ba8dc90ab15427410b870f3035ff95146d6e29f9b56ac096281d2f2b249f20c9fdc3239f838acc6b3433571d3", 0xad}, {&(0x7f0000000500)="8700144add194dc92e62bfdc1de91e98227f67410fae0aa2958eeb11856055f582d7ed3b9ca5bf48d2e97becf8673e1532a8", 0x32}, {&(0x7f00000008c0)="6aa7e221ef79afca996dde651fad6b8f1085c4567b3af29b90b3221f98f93ce7f8d32156d842e64f2dd8e9b969c22d076b5dbfb714449b009ff42ec0e2a2c1785d5129", 0x43}, {&(0x7f0000000dc0)="e94b02", 0x3}], 0x9, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback}}}], 0x20}, 0x0) 4.685534634s ago: executing program 2 (id=2526): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000001a0000850000000e000000850000000e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000020000008500000086", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x5e, &(0x7f00000005c0)=ANY=[], 0x0) 3.944296434s ago: executing program 3 (id=2528): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000000000002c001280110001006272696467655f736c617665000000001400058006000200003f"], 0x4c}}, 0x0) 3.8073653s ago: executing program 5 (id=2529): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0x80000, @rand_addr=' \x01\x00'}, 0x1c, 0x0}, 0x0) 3.785854206s ago: executing program 2 (id=2530): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040ac054182000000000001090224000100000000090400000103000000092100000001220700090581030000001800fa15ac291cdbece70e206fa6a0b38ffa6554ca6c313cb6a5a3c165e9e60ca049dea91764046e352667376293cde66d719235aab02ffd978635fe5c7b6f9855f606ad4a0f674c1e78bc9e96ac14d4909e99cebc7d68955a038af7d0eee46e959bdf4d508b71c818ef2458b1ced704e23ac6725c8952ee2d1a01f74120"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x0, "cd377296"}, @global=@item_4={0x3, 0x1, 0x0, "a99b6822"}]}}, 0x0}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d03, &(0x7f0000000080)) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffc, @local, 'nicvf0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x6b4d, 0x0, 0x0, 0x0, 0x0) 3.590336195s ago: executing program 5 (id=2531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x9}, 0x48) 3.579643848s ago: executing program 3 (id=2532): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x880}) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x606) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xc000000000}, 0x0) sched_setaffinity(0x0, 0x3c, &(0x7f0000000200)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x40}) read(r2, &(0x7f0000000200)=""/183, 0x28) 3.379976393s ago: executing program 0 (id=2534): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x90) socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x6, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffa}, {0x0, 0x9}, 0x0, 0x6e6bb0}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 3.233626376s ago: executing program 5 (id=2535): syz_usb_connect(0x2, 0x294, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0xcf, 0x7e, 0x8f, 0x40, 0x2040, 0x721f, 0xf262, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x282, 0x2, 0x81, 0x4, 0x0, 0x4f, [{{0x9, 0x4, 0x87, 0x6, 0xd, 0xa9, 0x7a, 0x37, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0xb0a, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x2, 0x4, 0x96}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x9c, "fe"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0x80, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf7, 0x9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x64, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0xbbbf}]}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0xa, 0x41, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x3, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x27, 0x3, 0x8, [@generic={0x6c, 0x11, "65ec3e0f1c98fb62f50cd59ee1975801a11e4833ff7cfff45fd649154caf05915b1ace2c8413997563a07be89ce6353e52879e85f0ef9e9b56fa92991fa8981e51361d118f9bf85d619a29eb0041064581977f7884c4fc23415aed461c44ce9951cec318b2171b99c8d6"}, @generic={0x2, 0x21}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x1, 0x0, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x6}, @generic={0xb6, 0x22, "783233f4166b17a900d27f54ef7bbffaf86a7440c19cec0042ff49fe61c37c81294c3ea37b14f99b49b66b773ed6c80126096ecdadf4e00b250c6a87a95ac5833f9d89ac8673b6489b2a5d16082a72b0b74873b766bbf2b999821eb469d7a853261d9138b42ffee41b85a1d2ed9fff4a9c69e288d9ca5f56c052f5ef2219f1e05baacac3af460821e91e5906fd6ca335aa77a64f1fb706c21cebecb1502096e162b833e0b86f8055adc4f7875f014b213e9daa93"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0x81, 0xd, 0xc3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x38}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0xf, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x5}]}}, {{0x9, 0x5, 0x5, 0xc, 0x10, 0x3, 0x7, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xe, 0x4}]}}, {{0x9, 0x5, 0x1, 0xc, 0x200, 0x4e, 0x9, 0x7, [@generic={0x6, 0x24, "7c88e9f3"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x20, 0x5, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xd0}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x8, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x7}]}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x63, 0x7, 0xc}}]}}, {{0x9, 0x4, 0xcd, 0x3, 0x5, 0x58, 0x5a, 0x87, 0x5, [], [{{0x9, 0x5, 0x2, 0x0, 0x8, 0x8, 0x10, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4d, 0x4}]}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0x3c, 0x40, 0x0, [@generic={0x13, 0x22, "b220c3b729cb730124ffd3a7ac2ef43bf1"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x400, 0x3, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xfb}]}}, {{0x9, 0x5, 0xe17bebb0bfe4c045, 0x1, 0x200, 0x80, 0xfd, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x9}]}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0x0, 0x0, 0xf3, [@generic={0x7, 0x5, "97523f7428"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc7, 0x5}]}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x2a, 0x3, 0x1, 0x10, 0x6d}, 0x61, &(0x7f0000000080)={0x5, 0xf, 0x61, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x0, 0xf000, 0x5, [0x30, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x3, 0x8}, @generic={0x6, 0x10, 0xa, "220d8a"}, @generic={0x2e, 0x10, 0x3, "ffbd36d0866bfacf0b7ce3543daf1b9acf12af3b4c1ef367b743d92eeceb0c4350e3d001e39c4cb2c9232b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x80, 0x5, 0x7}]}, 0x7, [{0x2, &(0x7f0000000180)=@string={0x2}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x436}}, {0x2, &(0x7f0000000300)=@string={0x2}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x380a}}, {0x36, &(0x7f0000000e40)=@string={0x36, 0x3, "dcd79152f5c635a31387c62ed173ec460b8e637d2ac9aa5f103f5781dcf72b0c10d2fca9eaec254f5cc96065387cd3ce939c347b"}}]}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.086224983s ago: executing program 0 (id=2536): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={r0, 0x200, 0x6505, 0x4}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40080) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x20002, 0x0, "af9956ca1018b9000000000000ec0a00"}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 2.705621941s ago: executing program 0 (id=2539): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 2.448255819s ago: executing program 3 (id=2540): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="9c982181", 0x4}], 0x1, 0xfffffffe, 0xfffffff8) 2.294306992s ago: executing program 0 (id=2541): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b31, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x24000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) 2.28428555s ago: executing program 4 (id=2542): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000001a0000850000000e000000850000000e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000020000008500000086", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x5e, &(0x7f00000005c0)=ANY=[], 0x0) 2.034248879s ago: executing program 3 (id=2543): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1243, @fixed}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000740)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001340)=""/4103, 0x1007}, &(0x7f0000000200)}}, @zcopy_cookie={0x18}], 0x60, 0x10}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) 1.840607812s ago: executing program 1 (id=2544): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000000000002c001280110001006272696467655f736c617665000000001400058006000200003f"], 0x4c}}, 0x0) 1.636310252s ago: executing program 4 (id=2545): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 1.49157574s ago: executing program 1 (id=2546): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r2}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r2, 0x0, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 1.189612229s ago: executing program 4 (id=2547): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg0\x00'}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={0xbc, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_TAIL={0x2a, 0xf, [@channel_switch={0x25, 0x3, {0x0, 0x0, 0x5}}, @prep={0x83, 0x1f, {{}, 0x0, 0x0, @device_a, 0x0, @void, 0x9, 0x5, @device_a, 0x5}}]}, @NL80211_ATTR_PROBE_RESP={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.014793443s ago: executing program 1 (id=2548): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={0x0}}, 0x0) 770.689017ms ago: executing program 4 (id=2549): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x90) socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x6, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffa}, {0x0, 0x9}, 0x0, 0x6e6bb0}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 622.384864ms ago: executing program 1 (id=2550): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x224a7000) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) 425.177918ms ago: executing program 1 (id=2551): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={r0, 0x200, 0x6505, 0x4}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40080) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x20002, 0x0, "af9956ca1018b9000000000000ec0a00"}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 339.085785ms ago: executing program 5 (id=2552): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x880}) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x606) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xc000000000}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x40}) read(r2, &(0x7f0000000200)=""/183, 0x28) 318.919418ms ago: executing program 4 (id=2553): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, 0x8) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 304.277588ms ago: executing program 2 (id=2554): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private0, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e21, 0x80000, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="140000000000000001"], 0x18}, 0x0) 74.246297ms ago: executing program 1 (id=2555): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mkdir(0x0, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffd8e}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x10) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$CAPI_GET_ERRCODE(r3, 0xc0044308, &(0x7f0000000080)) r4 = syz_open_dev$usbfs(&(0x7f0000000280), 0x80078, 0x10002) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200230318000aff6000000002000020"]) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r6 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x7, &(0x7f0000000000)={0x22, "14956544c869ef45cda7dd68fe132f1d0259da184039589d199f3db71c15666d95"}}) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x280000b, 0x28011, r5, 0xfc345000) openat$6lowpan_control(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) 1.939751ms ago: executing program 2 (id=2556): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0x40}}, 0x0) syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da20"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) read$FUSE(r3, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000000c0)={{0x7, 0x0, 0x80000001, 0x1000}, 0x6, 0x30, 0x1, 0x0, 0x2, 0x2, 'syz1\x00', &(0x7f0000000000)=['-\x00', 'cpuset.effective_mems\x00'], 0x18}) sync() socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) userfaultfd(0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000015c0)="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", 0x2000, &(0x7f0000003f00)={&(0x7f00000035c0)={0x50, 0x0, 0x7, {0x7, 0x28, 0x4, 0x2012, 0x8, 0x1, 0x6, 0x2}}, 0x0, 0x0, &(0x7f00000036c0)={0x18, 0x0, 0x7, {0x3}}, 0x0, &(0x7f0000003780)={0x28, 0xffffffffffffffda, 0xffffffffffffffff, {{0x80, 0x0, 0x1}}}, &(0x7f00000037c0)={0x60, 0x0, 0x9, {{0xe972, 0x100000000, 0x1, 0x76, 0x2, 0x3ff, 0x4d, 0x839}}}, 0x0, 0x0, &(0x7f00000038c0)={0x20, 0x0, 0x6}, 0x0, &(0x7f0000003ac0)={0x90, 0xfffffffffffffffe, 0x0, {0x4, 0x0, 0xa6b6, 0x5, 0x0, 0xe0e, {0x3, 0x0, 0x0, 0xa, 0x3, 0x1, 0x0, 0xd9, 0xfa2, 0xe000, 0x8, 0x0, 0x0, 0x8, 0x5}}}, &(0x7f0000000400)=ANY=[@ANYBLOB="90000000000000000000000000000000050000000000000004000000000000000200000009000000790000000000000001000000000000000000000000000000002d000000000000000600000000000000960d00000000000001000000000001000000002fe046b7250000000000020000000000000000000000000000000100"/149], &(0x7f0000003d40)=ANY=[@ANYBLOB="b000000000000000030000000000000004000000000000000200000000000000810b000000000000e000000000000000755d000002000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0080000000000000000000000500000000000000080000000000000003000000050000005c2623000000"], 0x0, &(0x7f0000003ec0)={0x20, 0x0, 0x6, {0x3, 0x0, 0x1}}}) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) r4 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000380)={'\v\x00', 0x0, 0x5, 0x1, 0x0, 0x41f, "f759e10000001000000000fc6300", '\x00\x00\a\x00', "0300", "e859ad13", ["8bada940edff000a00", "c2fed6bf0400000000000040", "200000001a00", "0000000000000000000100"]}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc10c5541, &(0x7f0000000080)) 0s ago: executing program 4 (id=2557): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000001a0000850000000e000000850000000e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000020000008500000086", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x5e, &(0x7f00000005c0)=ANY=[], 0x0) kernel console output (not intermixed with test programs): T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.885341][ T29] audit: type=1326 audit(1725712517.501:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.3.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 814.909262][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.938886][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.965898][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.975503][ T29] audit: type=1326 audit(1725712517.501:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.3.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 815.039250][ T29] audit: type=1326 audit(1725712517.511:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.3.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 815.086054][ T58] veth1_macvtap: left promiscuous mode [ 815.091623][ T58] veth0_macvtap: left promiscuous mode [ 815.098825][T13830] loop4: detected capacity change from 0 to 1024 [ 815.109595][ T58] veth1_vlan: left promiscuous mode [ 815.118893][ T29] audit: type=1326 audit(1725712517.511:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.3.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 815.128283][ T58] veth0_vlan: left promiscuous mode [ 815.268037][T12602] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.451790][T13832] loop3: detected capacity change from 0 to 256 [ 815.525576][T13832] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 816.191046][T13839] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2017'. [ 816.264517][T13839] loop3: detected capacity change from 0 to 1024 [ 816.316274][T13839] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2017: bad orphan inode 1536 [ 816.356571][T13839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 816.635518][T12602] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.664281][T13845] loop4: detected capacity change from 0 to 512 [ 816.671473][T13845] EXT4-fs: Ignoring removed mblk_io_submit option [ 816.679527][T13845] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 816.789571][T13845] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2019: corrupted in-inode xattr: e_value out of bounds [ 816.826984][T13845] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2019: couldn't read orphan inode 15 (err -117) [ 816.844567][T13845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 816.901128][ T58] team0 (unregistering): Port device team_slave_1 removed [ 817.001240][T13851] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.2021'. [ 817.019724][T13851] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2021'. [ 817.054435][ T58] team0 (unregistering): Port device team_slave_0 removed [ 817.576389][T12831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.264432][T13781] ip6gretap0 speed is unknown, defaulting to 1000 [ 818.556786][T13834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2015'. [ 818.601832][T13834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2015'. [ 818.693962][T13601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.740774][T13601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.923860][T13601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.025753][T13601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.075966][T13601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.142772][T13601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.164544][T13781] ip6gretap0 speed is unknown, defaulting to 1000 [ 819.175918][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 819.175937][ T29] audit: type=1326 audit(1725712522.301:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13860 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9697cef9 code=0x7ffc0000 [ 819.742861][ T29] audit: type=1326 audit(1725712522.501:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13860 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9697cef9 code=0x7ffc0000 [ 819.831355][T13869] loop1: detected capacity change from 0 to 256 [ 819.934487][ T29] audit: type=1326 audit(1725712522.521:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13860 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d9697cef9 code=0x7ffc0000 [ 819.964265][T13781] ip6gretap0 speed is unknown, defaulting to 1000 [ 819.974810][T13869] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 820.026529][ T29] audit: type=1326 audit(1725712522.571:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13860 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9697cef9 code=0x7ffc0000 [ 820.035710][T13781] ip6gretap0 speed is unknown, defaulting to 1000 [ 820.080000][ T29] audit: type=1326 audit(1725712522.571:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13860 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9697cef9 code=0x7ffc0000 [ 820.121130][T13601] hsr_slave_0: entered promiscuous mode [ 820.162980][ T29] audit: type=1326 audit(1725712522.651:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13860 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d9697cef9 code=0x7ffc0000 [ 820.212645][ T29] audit: type=1326 audit(1725712522.711:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13860 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9697cef9 code=0x7ffc0000 [ 820.250755][ T29] audit: type=1326 audit(1725712522.711:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13860 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9697cef9 code=0x7ffc0000 [ 820.344406][ T29] audit: type=1326 audit(1725712522.801:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13860 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7d9697cef9 code=0x7ffc0000 [ 820.373156][T13601] hsr_slave_1: entered promiscuous mode [ 820.486381][T13601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 820.506818][T13601] Cannot create hsr debugfs directory [ 820.513039][T13781] ip6gretap0 speed is unknown, defaulting to 1000 [ 820.812920][T13781] ip6gretap0 speed is unknown, defaulting to 1000 [ 820.943577][T13887] Device name cannot be null; rc = [-22] [ 821.389944][T13883] loop2: detected capacity change from 0 to 1024 [ 822.320771][T11034] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 822.332402][T11034] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 822.347828][T11034] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 822.392850][T11034] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 822.646543][T11034] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 822.657629][T11034] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 823.287692][T13897] loop4: detected capacity change from 0 to 8192 [ 823.659297][T13921] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 823.955846][T13905] ip6gretap0 speed is unknown, defaulting to 1000 [ 824.623229][ T8044] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 824.724860][T11034] Bluetooth: hci2: command tx timeout [ 824.972732][ T8044] usb 5-1: Using ep0 maxpacket: 16 [ 824.998365][ T8044] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 825.052863][ T8044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.112613][ T8044] usb 5-1: Product: syz [ 825.127098][ T8044] usb 5-1: Manufacturer: syz [ 825.131736][ T8044] usb 5-1: SerialNumber: syz [ 825.216328][ T8044] usb 5-1: config 0 descriptor?? [ 825.270264][ T8044] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 825.473310][ T6884] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.783320][ T25] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 825.954942][ T8044] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 826.211392][ T25] usb 4-1: config 1 interface 0 has no altsetting 0 [ 826.285567][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 826.332635][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.365595][ T25] usb 4-1: Product: syz [ 826.369804][ T25] usb 4-1: Manufacturer: syz [ 826.421900][ T25] usb 4-1: SerialNumber: syz [ 826.606474][ T6884] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.804836][T11034] Bluetooth: hci2: command tx timeout [ 827.049313][ T6884] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.326375][ T25] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 827.350102][ T6884] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.367427][ T25] usb 4-1: USB disconnect, device number 15 [ 827.391690][ T25] usblp0: removed [ 827.602773][ T5232] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 827.766185][ T5297] usb 5-1: USB disconnect, device number 14 [ 827.824494][ T5232] usb 3-1: Using ep0 maxpacket: 32 [ 827.844760][ T5232] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 827.853732][ T5232] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 827.862347][ T5232] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 827.875844][ T5232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 827.887429][ T5232] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 827.897780][ T5232] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 827.914149][ T5232] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 827.923524][ T5232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.958271][ T5232] usb 3-1: config 0 descriptor?? [ 828.061991][T13959] loop3: detected capacity change from 0 to 16 [ 828.135700][T13959] erofs: Unknown parameter 'ÿÿÿÿÿÿ18446744073709551615°íi‚®(ŒíˆµFïp' [ 828.150526][T13601] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 828.198725][ T5232] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 828.221823][T13959] binder: Unknown parameter 'èWê' [ 828.265979][T13601] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 828.338325][T13601] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 828.378644][T13905] chnl_net:caif_netlink_parms(): no params data found [ 828.438081][ T5297] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 828.464160][T13601] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 828.469404][ T7540] usb 3-1: USB disconnect, device number 12 [ 828.510988][ T7540] usblp0: removed [ 828.665150][ T5297] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 828.701609][ T5297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 828.738991][ T5297] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 828.766340][ T5297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 828.783604][ T5297] usb 5-1: SerialNumber: syz [ 828.902848][T11034] Bluetooth: hci2: command tx timeout [ 829.082383][ T6884] bridge_slave_1: left allmulticast mode [ 829.089484][ T5297] usb 5-1: 0:2 : does not exist [ 829.236818][ T6884] bridge_slave_1: left promiscuous mode [ 829.426554][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.703638][ T6884] bridge_slave_0: left allmulticast mode [ 829.739793][ T6884] bridge_slave_0: left promiscuous mode [ 829.782920][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.938746][ T5297] usb 5-1: USB disconnect, device number 15 [ 830.302479][T13136] udevd[13136]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 830.515809][T13990] loop4: detected capacity change from 0 to 16 [ 830.684591][T13990] erofs: (device loop4): mounted with root inode @ nid 36. [ 830.964873][T11034] Bluetooth: hci2: command tx timeout [ 832.448989][T14010] loop1: detected capacity change from 0 to 256 [ 832.893136][T14014] loop3: detected capacity change from 0 to 1024 [ 832.903349][T14017] loop1: detected capacity change from 0 to 256 [ 833.307221][ T29] audit: type=1326 audit(1725712536.411:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9cd7cef9 code=0x7ffc0000 [ 833.386448][ T29] audit: type=1326 audit(1725712536.411:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9cd7cef9 code=0x7ffc0000 [ 833.457847][ T29] audit: type=1326 audit(1725712536.461:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec9cd7cef9 code=0x7ffc0000 [ 833.501094][T14021] loop1: detected capacity change from 0 to 1024 [ 833.514534][T14021] EXT4-fs: Ignoring removed orlov option [ 833.520245][T14021] EXT4-fs: Ignoring removed nomblk_io_submit option [ 833.535199][ T29] audit: type=1326 audit(1725712536.461:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9cd7cef9 code=0x7ffc0000 [ 833.649819][ T29] audit: type=1326 audit(1725712536.461:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9cd7cef9 code=0x7ffc0000 [ 833.674493][ T29] audit: type=1326 audit(1725712536.481:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec9cd7cef9 code=0x7ffc0000 [ 833.711632][ T29] audit: type=1326 audit(1725712536.481:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9cd7cef9 code=0x7ffc0000 [ 833.713199][T14021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 833.738448][ T29] audit: type=1326 audit(1725712536.481:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9cd7cef9 code=0x7ffc0000 [ 833.862853][ T29] audit: type=1326 audit(1725712536.481:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec9cd7cef9 code=0x7ffc0000 [ 833.942720][ T29] audit: type=1326 audit(1725712536.481:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9cd7cef9 code=0x7ffc0000 [ 834.001236][ T6884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.052228][ T6884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.100364][ T6884] bond0 (unregistering): Released all slaves [ 834.236402][ T7533] ip6gretap0 speed is unknown, defaulting to 1000 [ 834.402426][T12889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.514684][T13905] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.521876][T13905] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.643349][T13905] bridge_slave_0: entered allmulticast mode [ 834.676822][T13905] bridge_slave_0: entered promiscuous mode [ 835.110191][T14049] loop2: detected capacity change from 0 to 256 [ 835.131200][T13905] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.166054][T13905] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.193037][T13905] bridge_slave_1: entered allmulticast mode [ 835.209369][T13905] bridge_slave_1: entered promiscuous mode [ 835.858273][T13905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.921665][T13905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.132832][ T6884] hsr_slave_0: left promiscuous mode [ 836.162873][ T6884] hsr_slave_1: left promiscuous mode [ 836.203179][ T6884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.212017][ T6884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.311074][ T6884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.352654][ T6884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.512856][ T6884] veth1_macvtap: left promiscuous mode [ 836.519809][ T6884] veth0_macvtap: left promiscuous mode [ 836.569812][ T6884] veth1_vlan: left promiscuous mode [ 836.593133][ T6884] veth0_vlan: left promiscuous mode [ 841.916216][T14084] loop2: detected capacity change from 0 to 256 [ 841.969612][T14085] Cannot find add_set index 0 as target [ 842.186243][T14084] FAT-fs (loop2): Directory bread(block 64) failed [ 842.193119][T14084] FAT-fs (loop2): Directory bread(block 65) failed [ 842.199760][T14084] FAT-fs (loop2): Directory bread(block 66) failed [ 842.207094][T14084] FAT-fs (loop2): Directory bread(block 67) failed [ 842.237138][T14084] FAT-fs (loop2): Directory bread(block 68) failed [ 842.259817][T14084] FAT-fs (loop2): Directory bread(block 69) failed [ 842.260802][T14088] netlink: 3064 bytes leftover after parsing attributes in process `syz.1.2070'. [ 842.267096][T14084] FAT-fs (loop2): Directory bread(block 70) failed [ 842.339153][T14088] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2070'. [ 842.365475][T14084] FAT-fs (loop2): Directory bread(block 71) failed [ 842.372121][T14084] FAT-fs (loop2): Directory bread(block 72) failed [ 842.398418][T14084] FAT-fs (loop2): Directory bread(block 73) failed [ 843.561342][T14101] loop2: detected capacity change from 0 to 256 [ 843.589447][ T6884] team0 (unregistering): Port device team_slave_1 removed [ 843.761481][ T6884] team0 (unregistering): Port device team_slave_0 removed [ 845.161981][T14116] loop2: detected capacity change from 0 to 1024 [ 846.204060][ T7533] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 847.136485][ T7533] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.171226][ T7533] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.191534][ T7533] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 847.212300][ T7533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.273486][ T7533] usb 4-1: config 0 descriptor?? [ 847.761852][ T7533] appleir 0003:05AC:8241.0009: item fetching failed at offset 5/7 [ 847.783397][ T7533] appleir 0003:05AC:8241.0009: parse failed [ 847.789423][ T7533] appleir 0003:05AC:8241.0009: probe with driver appleir failed with error -22 [ 849.880537][T13905] team0: Port device team_slave_0 added [ 849.952193][T13905] team0: Port device team_slave_1 added [ 850.065092][ T7540] usb 4-1: USB disconnect, device number 16 [ 850.664822][T14152] Device name cannot be null; rc = [-22] [ 851.452625][T11037] Bluetooth: hci4: command 0x0406 tx timeout [ 851.475444][T13905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.482404][T13905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.624062][T13905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.653513][T13905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.660465][T13905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.711734][T13905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.853216][T11037] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 851.865735][T11037] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 851.876151][T11037] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 851.885765][T11037] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 851.893700][T11037] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 851.901117][T11037] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 852.644764][T13905] hsr_slave_0: entered promiscuous mode [ 852.703045][T13905] hsr_slave_1: entered promiscuous mode [ 852.762295][T13905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 852.792755][T13905] Cannot create hsr debugfs directory [ 853.140777][T14174] Cannot find add_set index 0 as target [ 854.003074][T11037] Bluetooth: hci5: command tx timeout [ 855.318460][T14193] netlink: 3064 bytes leftover after parsing attributes in process `syz.1.2092'. [ 855.328935][T14193] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2092'. [ 855.416528][T14195] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 856.232920][T11037] Bluetooth: hci5: command tx timeout [ 857.059950][T14208] loop4: detected capacity change from 0 to 512 [ 857.118183][T14208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 857.118308][T14208] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 858.375464][T11037] Bluetooth: hci5: command tx timeout [ 858.426498][T11037] Bluetooth: hci4: unexpected event for opcode 0x2029 [ 858.767905][T12831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.806279][T14233] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.2103'. [ 858.919971][T14233] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2103'. [ 859.097437][T14160] chnl_net:caif_netlink_parms(): no params data found [ 860.182745][ T5295] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 860.375039][ T5295] usb 5-1: Using ep0 maxpacket: 16 [ 860.410944][T11037] Bluetooth: hci5: command tx timeout [ 860.470364][ T5295] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 860.502863][ T5295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.514400][ T5295] usb 5-1: Product: syz [ 860.518585][ T5295] usb 5-1: Manufacturer: syz [ 860.570847][ T5295] usb 5-1: SerialNumber: syz [ 860.590753][ T5295] usb 5-1: config 0 descriptor?? [ 860.616227][ T5295] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 861.273749][T14160] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.282010][T14160] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.291189][T14160] bridge_slave_0: entered allmulticast mode [ 861.432801][T14160] bridge_slave_0: entered promiscuous mode [ 861.468135][T14160] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.508979][T14160] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.542935][T14160] bridge_slave_1: entered allmulticast mode [ 861.581228][T14160] bridge_slave_1: entered promiscuous mode [ 862.039796][T14160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.069243][ T6884] bridge_slave_1: left allmulticast mode [ 862.089136][ T6884] bridge_slave_1: left promiscuous mode [ 862.107989][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.119853][ T5295] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 862.140419][ T6884] bridge_slave_0: left allmulticast mode [ 862.153571][ T6884] bridge_slave_0: left promiscuous mode [ 862.164291][ T5295] usb 5-1: USB disconnect, device number 16 [ 862.165199][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.273637][T14275] 9pnet_fd: Insufficient options for proto=fd [ 862.284713][T14274] loop3: detected capacity change from 0 to 512 [ 862.294170][T14274] EXT4-fs: Ignoring removed mblk_io_submit option [ 862.306774][T14274] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 862.346476][T14274] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2113: corrupted in-inode xattr: e_value out of bounds [ 862.362680][T14274] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2113: couldn't read orphan inode 15 (err -117) [ 862.383236][T14274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.481718][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 862.481742][ T29] audit: type=1800 audit(1725712565.601:580): pid=14278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2113" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 862.483046][T11037] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 862.519087][T11037] Bluetooth: hci4: Injecting HCI hardware error event [ 862.529983][T11034] Bluetooth: hci4: hardware error 0x00 [ 862.753848][ T6884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.988526][ T6884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 863.863116][ T6884] bond0 (unregistering): Released all slaves [ 863.927462][T12602] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.940721][T14160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.270302][ T6884] hsr_slave_0: left promiscuous mode [ 864.323579][ T6884] hsr_slave_1: left promiscuous mode [ 864.332261][T11037] Bluetooth: hci0: unexpected event for opcode 0x2029 [ 864.363634][ T6884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.389145][ T6884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.424950][T14291] loop4: detected capacity change from 0 to 256 [ 864.612931][T11034] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 864.676681][T14291] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 866.097647][T14306] loop4: detected capacity change from 0 to 1024 [ 866.723072][T14309] loop1: detected capacity change from 0 to 2048 [ 866.983438][ T29] audit: type=1800 audit(1725712570.111:581): pid=14309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2121" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 867.105270][ T6884] team0 (unregistering): Port device team_slave_1 removed [ 867.366598][ T6884] team0 (unregistering): Port device team_slave_0 removed [ 867.382867][T11983] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 867.441825][T14317] loop1: detected capacity change from 0 to 512 [ 867.470672][T14317] EXT4-fs: Ignoring removed mblk_io_submit option [ 867.488814][T14317] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 867.573318][T14317] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2125: corrupted in-inode xattr: e_value out of bounds [ 867.595926][T14317] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2125: couldn't read orphan inode 15 (err -117) [ 867.605355][T11983] usb 4-1: not running at top speed; connect to a high speed hub [ 867.618466][T14317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 867.683688][T11983] usb 4-1: config 129 has an invalid interface number: 135 but max is 1 [ 867.696829][T11983] usb 4-1: config 129 has an invalid interface number: 5 but max is 1 [ 867.746687][T11983] usb 4-1: config 129 has no interface number 0 [ 867.782774][T11983] usb 4-1: config 129 has no interface number 1 [ 867.822930][T11983] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 867.878053][ T29] audit: type=1800 audit(1725712570.991:582): pid=14320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2125" name="bus" dev="loop1" ino=19 res=0 errno=0 [ 867.902328][T11983] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 867.943731][T11983] usb 4-1: config 129 interface 5 altsetting 7 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 867.998235][T11983] usb 4-1: config 129 interface 5 altsetting 7 has an endpoint descriptor with address 0x97, changing to 0x87 [ 868.032194][T11983] usb 4-1: config 129 interface 5 altsetting 7 endpoint 0x87 has invalid maxpacket 29759, setting to 64 [ 868.057171][T11983] usb 4-1: config 129 interface 5 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 37 [ 868.082689][T11983] usb 4-1: config 129 interface 135 has no altsetting 0 [ 868.091417][T11983] usb 4-1: config 129 interface 5 has no altsetting 0 [ 868.099484][T11983] usb 4-1: language id specifier not provided by device, defaulting to English [ 868.120377][T11983] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 868.139597][T11983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.148453][T11983] usb 4-1: Product: à Š [ 868.157860][T11983] usb 4-1: Manufacturer: Ñ™ [ 868.162478][T11983] usb 4-1: SerialNumber: ж [ 868.396299][T14314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.423812][T14314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.444929][T11983] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 868.451903][T11983] usb 4-1: MIDIStreaming interface descriptor not found [ 868.473683][T14160] team0: Port device team_slave_0 added [ 868.498233][T12889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.530457][T14160] team0: Port device team_slave_1 added [ 868.588821][T11983] usb 4-1: USB disconnect, device number 17 [ 868.621902][T13905] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 868.687685][T13905] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 868.846335][T13704] udevd[13704]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 869.185647][T14331] 9pnet_fd: Insufficient options for proto=fd [ 869.198562][T13905] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 869.333423][T13905] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 869.418171][T14160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.449588][T14160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.787949][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.801654][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.044772][T14160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.393786][T14160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.400771][T14160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.543021][T14160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.880490][T14351] Device name cannot be null; rc = [-22] [ 872.587609][T14160] hsr_slave_0: entered promiscuous mode [ 872.823176][T14160] hsr_slave_1: entered promiscuous mode [ 872.919602][T14160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 872.933187][T14160] Cannot create hsr debugfs directory [ 874.179293][T11034] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 874.191532][T11034] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 874.252146][T11034] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 874.261637][T11034] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 874.270503][T11034] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 874.293450][T11034] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 874.627850][T13905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.664228][T14388] program syz.1.2138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 874.892654][ T5295] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 875.000726][T13905] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.148454][ T5295] usb 5-1: not running at top speed; connect to a high speed hub [ 875.159006][ T6866] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.166154][ T6866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.200719][ T5295] usb 5-1: config 129 has an invalid interface number: 135 but max is 1 [ 875.214866][ T6866] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.222065][ T6866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.246014][ T5295] usb 5-1: config 129 has an invalid interface number: 5 but max is 1 [ 875.264132][ T5295] usb 5-1: config 129 has no interface number 0 [ 875.279240][ T5295] usb 5-1: config 129 has no interface number 1 [ 875.286054][ T5295] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 875.299899][ T5295] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 875.317495][ T5295] usb 5-1: config 129 interface 5 altsetting 7 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 875.383965][T14385] loop3: detected capacity change from 0 to 32768 [ 875.395817][ T5295] usb 5-1: config 129 interface 5 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 37 [ 875.418871][T14385] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2137 (14385) [ 875.491861][ T5295] usb 5-1: config 129 interface 135 has no altsetting 0 [ 875.502948][T14385] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 875.535852][ T5295] usb 5-1: config 129 interface 5 has no altsetting 0 [ 875.542674][T14385] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 875.542719][T14385] BTRFS info (device loop3): using free-space-tree [ 875.873416][ T5295] usb 5-1: language id specifier not provided by device, defaulting to English [ 875.897068][ T5295] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 876.105561][ T5295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.403576][T11034] Bluetooth: hci6: command tx timeout [ 876.480250][ T5295] usb 5-1: Product: à Š [ 876.503613][ T5295] usb 5-1: Manufacturer: Ñ™ [ 876.534100][ T5295] usb 5-1: SerialNumber: ж [ 876.803959][T14392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.845450][T14392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.284996][ T5295] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 878.308850][ T5295] usb 5-1: MIDIStreaming interface descriptor not found [ 878.482815][T11034] Bluetooth: hci6: command tx timeout [ 878.532867][ T5295] usb 5-1: USB disconnect, device number 17 [ 878.706879][T13139] udevd[13139]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 878.898827][ T5365] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.145845][T12602] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 879.570236][ T5365] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.562867][T11034] Bluetooth: hci6: command tx timeout [ 880.586330][ T5365] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.835708][T14464] capability: warning: `syz.4.2148' uses 32-bit capabilities (legacy support in use) [ 881.068283][T14376] chnl_net:caif_netlink_parms(): no params data found [ 881.181365][T14468] Cannot find add_set index 0 as target [ 882.241906][T14476] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 882.411015][ T5365] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.645960][T11034] Bluetooth: hci6: command tx timeout [ 883.364104][T14160] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 883.583054][T14160] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 883.633386][T14160] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 883.776886][T11037] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 883.787353][T11037] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 883.799454][T11037] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 883.809279][T11037] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 883.850328][T11037] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 883.858659][T11037] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 883.913991][T14495] loop3: detected capacity change from 0 to 1024 [ 883.943416][T14376] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.951175][T14376] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.958749][T14376] bridge_slave_0: entered allmulticast mode [ 883.966711][T14376] bridge_slave_0: entered promiscuous mode [ 883.975491][T14160] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 884.029702][T14376] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.043073][T14376] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.056051][T14376] bridge_slave_1: entered allmulticast mode [ 884.065214][T14376] bridge_slave_1: entered promiscuous mode [ 884.133949][T14376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.189143][T14376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.368696][T14376] team0: Port device team_slave_0 added [ 885.535951][T14376] team0: Port device team_slave_1 added [ 885.934539][T11034] Bluetooth: hci2: command tx timeout [ 887.408910][T14376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.443410][T14376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.547996][T14376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.587960][T14376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.627618][T14376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.653919][T14376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.728940][ T5365] bridge_slave_1: left allmulticast mode [ 887.755115][ T5365] bridge_slave_1: left promiscuous mode [ 887.760928][ T5365] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.856823][ T5365] bridge_slave_0: left allmulticast mode [ 887.882816][ T5365] bridge_slave_0: left promiscuous mode [ 887.888597][ T5365] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.170723][T11034] Bluetooth: hci2: command tx timeout [ 889.410534][ T5365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.474432][ T5365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.508504][ T5365] bond0 (unregistering): Released all slaves [ 889.973347][T14565] netlink: 'syz.4.2172': attribute type 12 has an invalid length. [ 889.998475][T14565] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.2172'. [ 890.051452][T14376] hsr_slave_0: entered promiscuous mode [ 890.065889][T14376] hsr_slave_1: entered promiscuous mode [ 890.078303][T14376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 890.086248][T14376] Cannot create hsr debugfs directory [ 890.242652][T11034] Bluetooth: hci2: command tx timeout [ 890.549731][ T5365] hsr_slave_0: left promiscuous mode [ 890.573397][ T5365] hsr_slave_1: left promiscuous mode [ 890.584258][ T5365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.599579][ T5365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.616777][ T5365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.630176][ T5365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 890.719252][ T5365] veth1_macvtap: left promiscuous mode [ 890.749380][ T5365] veth0_macvtap: left promiscuous mode [ 890.759424][ T5365] veth1_vlan: left promiscuous mode [ 890.779538][ T5365] veth0_vlan: left promiscuous mode [ 890.804211][T11983] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 891.953563][T11983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.987562][T11983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.022053][T11983] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 892.031938][T11983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.059791][T11983] usb 5-1: config 0 descriptor?? [ 892.323970][T11034] Bluetooth: hci2: command tx timeout [ 892.544945][T11983] appleir 0003:05AC:8241.000A: item fetching failed at offset 5/7 [ 892.583629][T11983] appleir 0003:05AC:8241.000A: parse failed [ 892.600051][T11983] appleir 0003:05AC:8241.000A: probe with driver appleir failed with error -22 [ 893.918050][ T5365] team0 (unregistering): Port device team_slave_1 removed [ 893.946419][ T7540] usb 5-1: USB disconnect, device number 18 [ 894.038275][ T5365] team0 (unregistering): Port device team_slave_0 removed [ 895.848718][T14491] chnl_net:caif_netlink_parms(): no params data found [ 896.026363][T14596] loop4: detected capacity change from 0 to 8192 [ 896.052949][ T7533] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 896.066689][T14596] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 896.080453][T14596] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 896.093893][T14596] REISERFS (device loop4): using ordered data mode [ 896.100728][T14596] reiserfs: using flush barriers [ 896.121524][T14596] REISERFS warning (device loop4): sh-458 journal_init_dev: cannot init journal device unknown-block(7,4): -16 [ 896.136230][T14596] REISERFS warning (device loop4): sh-462 journal_init: unable to initialize journal device [ 896.190091][T14596] REISERFS warning (device loop4): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 896.278873][ T7533] usb 4-1: Using ep0 maxpacket: 8 [ 896.299240][ T7533] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 896.308705][T14160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.310899][ T7533] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 896.328513][ T7533] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 896.339567][ T7533] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 896.362661][ T7533] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 896.372104][ T7533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.495317][T14491] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.512215][T14491] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.528382][T14491] bridge_slave_0: entered allmulticast mode [ 896.549102][T14491] bridge_slave_0: entered promiscuous mode [ 896.581700][T14491] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.605393][T14491] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.634109][T14491] bridge_slave_1: entered allmulticast mode [ 896.660727][T14599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2183'. [ 896.670308][T14491] bridge_slave_1: entered promiscuous mode [ 896.764068][T14599] syz.3.2183: attempt to access beyond end of device [ 896.764068][T14599] loop16: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 896.825714][T14599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.849749][T14619] loop1: detected capacity change from 0 to 2048 [ 896.886225][T14599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.913339][T14619] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 896.926684][T14599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.957844][T14599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.973102][T11983] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 897.051672][ T7533] usb 4-1: usb_control_msg returned -71 [ 897.062627][ T7533] usbtmc 4-1:16.0: can't read capabilities [ 897.116070][ T7533] usb 4-1: USB disconnect, device number 18 [ 897.162648][T11983] usb 5-1: Using ep0 maxpacket: 16 [ 897.206646][T11983] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 897.237806][T11983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.272596][T11983] usb 5-1: Product: syz [ 897.283462][T11983] usb 5-1: Manufacturer: syz [ 897.292979][T11983] usb 5-1: SerialNumber: syz [ 897.309904][T14626] netlink: 3064 bytes leftover after parsing attributes in process `syz.1.2186'. [ 897.327093][T11983] usb 5-1: config 0 descriptor?? [ 897.343987][T14626] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.2186'. [ 897.356760][T11983] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 897.387429][T14160] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.414836][T14491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.428364][T14491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.556158][ T6874] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.563409][ T6874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.605928][ T6874] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.613160][ T6874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.637772][T14491] team0: Port device team_slave_0 added [ 898.185417][T11983] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 898.259468][T11983] usb 5-1: USB disconnect, device number 19 [ 898.897055][T14491] team0: Port device team_slave_1 added [ 899.248707][T14491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.279234][T14491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 899.314416][ T5312] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 899.355934][T14491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.542095][ T5312] usb 2-1: Using ep0 maxpacket: 32 [ 899.564605][ T5312] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 899.585082][ T5312] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 899.609677][T14491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.610153][ T5312] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 899.626462][T14491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 899.634540][ T5312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 899.672851][ T5312] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 899.687362][ T5312] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 899.695364][T14491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.702946][ T5312] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 899.729061][ T5312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.780342][ T5312] usb 2-1: config 0 descriptor?? [ 899.891690][T14160] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 899.904110][T14160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 899.933683][T14376] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 900.293141][ T5312] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 900.312173][ T5312] usb 2-1: USB disconnect, device number 18 [ 900.321725][ T5312] usblp0: removed [ 900.944226][T14376] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 901.213861][ T29] audit: type=1326 audit(1725712604.321:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 901.292751][ T29] audit: type=1326 audit(1725712604.321:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 901.361311][T14491] hsr_slave_0: entered promiscuous mode [ 901.378256][ T29] audit: type=1326 audit(1725712604.321:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 901.407319][T14491] hsr_slave_1: entered promiscuous mode [ 901.415147][ T29] audit: type=1326 audit(1725712604.321:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 901.439450][ T29] audit: type=1326 audit(1725712604.321:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 901.462214][T14491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 901.479341][T14491] Cannot create hsr debugfs directory [ 901.497186][T14376] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 901.513033][ T29] audit: type=1326 audit(1725712604.321:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 901.538820][T14376] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 901.552201][T14678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2201'. [ 901.563747][ T29] audit: type=1326 audit(1725712604.321:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 901.591421][ T29] audit: type=1326 audit(1725712604.321:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 901.634039][ T5297] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 901.637910][T11983] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 901.813165][T11983] usb 2-1: device descriptor read/64, error -71 [ 901.848564][ T5297] usb 5-1: not running at top speed; connect to a high speed hub [ 901.870479][ T5297] usb 5-1: config 129 has an invalid interface number: 135 but max is 1 [ 901.900546][ T5297] usb 5-1: config 129 has an invalid interface number: 5 but max is 1 [ 901.935200][ T5297] usb 5-1: config 129 has no interface number 0 [ 901.941510][ T5297] usb 5-1: config 129 has no interface number 1 [ 901.972859][ T5297] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 901.987311][ T5297] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 902.007198][ T5297] usb 5-1: config 129 interface 5 altsetting 7 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 902.027250][ T5297] usb 5-1: config 129 interface 5 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 902.058329][ T5297] usb 5-1: config 129 interface 5 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 37 [ 902.102773][ T5297] usb 5-1: config 129 interface 135 has no altsetting 0 [ 902.105165][T11983] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 902.109771][ T5297] usb 5-1: config 129 interface 5 has no altsetting 0 [ 902.122902][ T5297] usb 5-1: language id specifier not provided by device, defaulting to English [ 902.171542][ T5297] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 902.194271][ T5297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.202311][ T5297] usb 5-1: Product: à Š [ 902.240537][ T5297] usb 5-1: Manufacturer: Ñ™ [ 902.245471][ T5297] usb 5-1: SerialNumber: ж [ 902.303033][T11983] usb 2-1: device descriptor read/64, error -71 [ 902.402436][T14160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.418191][ T5365] bridge_slave_1: left allmulticast mode [ 902.424512][T11983] usb usb2-port1: attempt power cycle [ 902.443865][ T5365] bridge_slave_1: left promiscuous mode [ 902.452918][ T5365] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.472905][T14673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.499634][ T5365] bridge_slave_0: left allmulticast mode [ 902.506185][T14673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.508334][ T5365] bridge_slave_0: left promiscuous mode [ 902.520253][ T5365] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.576146][ T5297] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 902.601351][ T29] audit: type=1326 audit(1725712605.711:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.3.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 902.625568][ T5297] usb 5-1: MIDIStreaming interface descriptor not found [ 902.675454][ T29] audit: type=1326 audit(1725712605.711:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.3.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 902.732975][ T5297] usb 5-1: USB disconnect, device number 20 [ 902.830135][T13140] udevd[13140]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 902.855496][T11983] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 902.935388][T11983] usb 2-1: device descriptor read/8, error -71 [ 903.178195][T14707] loop3: detected capacity change from 0 to 2048 [ 903.232681][T11983] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 903.275176][T11983] usb 2-1: device descriptor read/8, error -71 [ 903.285735][T14707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.615153][T11983] usb usb2-port1: unable to enumerate USB device [ 903.812965][T14712] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 903.948896][ T5365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.952993][T14717] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 903.980401][T14717] EXT4-fs (loop3): This should not happen!! Data will be lost [ 903.980401][T14717] [ 903.993311][ T5365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.001958][T14717] EXT4-fs (loop3): Total free blocks count 0 [ 904.001985][T14717] EXT4-fs (loop3): Free/Dirty block details [ 904.002052][T14717] EXT4-fs (loop3): free_blocks=2415919104 [ 904.002108][T14717] EXT4-fs (loop3): dirty_blocks=2928 [ 904.002128][T14717] EXT4-fs (loop3): Block reservation details [ 904.002148][T14717] EXT4-fs (loop3): i_reserved_data_blocks=183 [ 904.098137][ T5365] bond0 (unregistering): Released all slaves [ 904.189444][T14717] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 866 with error 28 [ 904.274345][ T5365] hsr_slave_0: left promiscuous mode [ 904.297093][ T5365] hsr_slave_1: left promiscuous mode [ 904.332815][ T5365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 904.353019][ T5365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 905.172847][ T7533] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 905.294158][ T5365] team0 (unregistering): Port device team_slave_1 removed [ 905.372669][ T7533] usb 4-1: Using ep0 maxpacket: 32 [ 905.380112][ T7533] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 905.399420][ T7533] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.429102][ T7533] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 905.489629][ T7533] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 905.529653][ T5365] team0 (unregistering): Port device team_slave_0 removed [ 905.545029][ T7533] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.551146][T14755] loop1: detected capacity change from 0 to 256 [ 905.562278][ T7533] usb 4-1: Product: syz [ 905.567409][ T7533] usb 4-1: Manufacturer: syz [ 905.573033][ T7533] usb 4-1: SerialNumber: syz [ 905.588464][T14755] vfat: Bad value for 'dmask' [ 905.824130][T14742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.852965][T14742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.893074][T14742] loop3: detected capacity change from 0 to 2048 [ 905.979399][T14742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 905.993203][T14742] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 907.617471][T14769] 9pnet_fd: Insufficient options for proto=fd [ 907.824847][T14772] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 907.981742][ T7533] usb 4-1: 0:2 : does not exist [ 908.121591][ T7533] usb 4-1: USB disconnect, device number 19 [ 908.166634][T12602] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.209250][T14160] veth0_vlan: entered promiscuous mode [ 908.306678][T13136] udevd[13136]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 908.513635][T14783] loop3: detected capacity change from 0 to 256 [ 908.561693][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 908.561806][ T29] audit: type=1804 audit(1725712611.681:602): pid=14783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2214" name="/newroot/144/file1/file0" dev="loop3" ino=1048783 res=1 errno=0 [ 908.570677][T14160] veth1_vlan: entered promiscuous mode [ 908.671298][T14376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.880605][T14376] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.047871][ T6866] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.055351][ T6866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.584915][ T741] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.592123][ T741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.607395][T14802] loop1: detected capacity change from 0 to 1024 [ 909.614122][ T5312] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 909.817043][T14802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 909.833824][ T5312] usb 5-1: Using ep0 maxpacket: 16 [ 909.872724][ T5312] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 909.886122][ T5312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.908402][ T5312] usb 5-1: Product: syz [ 909.912174][T14491] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 909.913642][ T5312] usb 5-1: Manufacturer: syz [ 909.925747][ T5312] usb 5-1: SerialNumber: syz [ 909.936194][ T5312] usb 5-1: config 0 descriptor?? [ 909.957318][ T5312] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 909.976722][T14491] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 910.034856][T14491] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 910.148869][T11037] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 910.179777][T11037] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 910.202801][T11037] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 910.236020][T11037] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 910.245986][T14491] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 910.265486][T11037] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 910.278690][T11037] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 910.695270][ T29] audit: type=1326 audit(1725712613.801:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14812 comm="syz.3.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 910.787162][ T29] audit: type=1326 audit(1725712613.811:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14812 comm="syz.3.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 910.790581][ T5312] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 910.824632][ T29] audit: type=1326 audit(1725712613.851:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14812 comm="syz.3.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 910.852505][ T5312] usb 5-1: USB disconnect, device number 21 [ 910.890143][ T29] audit: type=1326 audit(1725712613.851:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14812 comm="syz.3.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 910.938617][ T29] audit: type=1326 audit(1725712613.851:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14812 comm="syz.3.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 910.991608][ T29] audit: type=1326 audit(1725712613.851:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14812 comm="syz.3.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 911.023849][ T29] audit: type=1326 audit(1725712613.851:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14812 comm="syz.3.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 911.168293][T14823] tls_set_device_offload: netdev not found [ 911.203514][T14820] Cannot find add_set index 0 as target [ 911.232803][ T29] audit: type=1326 audit(1725712613.861:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14812 comm="syz.3.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 911.312122][ T29] audit: type=1326 audit(1725712613.861:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14812 comm="syz.3.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a077cef9 code=0x7ffc0000 [ 911.735671][T12889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.820343][T14840] 9pnet_fd: Insufficient options for proto=fd [ 911.930449][T14848] syz.1.2223[14848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 911.930649][T14848] syz.1.2223[14848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 912.025516][T14844] netlink: 'syz.3.2224': attribute type 10 has an invalid length. [ 912.046417][T14844] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.054245][T14844] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.076321][T14844] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.083512][T14844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.091112][T14844] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.098343][T14844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.129602][T14844] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 912.274579][T14376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 912.311542][T14491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.317064][T14850] mmap: syz.3.2225 (14850) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 912.333510][T11034] Bluetooth: hci4: command tx timeout [ 912.567849][T14491] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.682132][ T5365] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.689429][ T5365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.792188][ T1115] bridge_slave_1: left allmulticast mode [ 912.812870][ T1115] bridge_slave_1: left promiscuous mode [ 912.820206][ T1115] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.838219][ T1115] bridge_slave_0: left allmulticast mode [ 912.844298][ T1115] bridge_slave_0: left promiscuous mode [ 912.850097][ T1115] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.761632][ T1115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 913.778982][ T1115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 913.790573][ T1115] bond0 (unregistering): Released all slaves [ 913.808662][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.815866][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.978836][T14809] chnl_net:caif_netlink_parms(): no params data found [ 914.018373][ T1115] hsr_slave_0: left promiscuous mode [ 914.029350][ T1115] hsr_slave_1: left promiscuous mode [ 914.060545][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 914.088951][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.108015][T14874] loop1: detected capacity change from 0 to 256 [ 914.115615][T14874] vfat: Bad value for 'dmask' [ 914.141751][ T1115] veth1_vlan: left promiscuous mode [ 914.163089][ T1115] veth0_vlan: left promiscuous mode [ 914.412838][T11034] Bluetooth: hci4: command tx timeout [ 914.419634][ T7533] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 914.618916][ T7533] usb 2-1: config index 0 descriptor too short (expected 58783, got 160) [ 914.628166][ T7533] usb 2-1: config 58 has too many interfaces: 215, using maximum allowed: 32 [ 914.639546][ T7533] usb 2-1: config 58 has an invalid descriptor of length 166, skipping remainder of the config [ 914.660102][ T7533] usb 2-1: config 58 has 0 interfaces, different from the descriptor's value: 215 [ 914.673100][ T7533] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 914.682347][ T7533] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.690585][ T7533] usb 2-1: Product: syz [ 914.695086][ T7533] usb 2-1: Manufacturer: syz [ 914.699736][ T7533] usb 2-1: SerialNumber: syz [ 914.910938][ T1115] team0 (unregistering): Port device team_slave_1 removed [ 914.930214][ T7533] usb 2-1: USB disconnect, device number 23 [ 915.000836][ T1115] team0 (unregistering): Port device team_slave_0 removed [ 916.203033][T14885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2239'. [ 916.286285][T14894] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 916.488376][T11034] Bluetooth: hci4: command tx timeout [ 916.530741][T14809] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.541494][T14809] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.549948][T14809] bridge_slave_0: entered allmulticast mode [ 916.557931][T14809] bridge_slave_0: entered promiscuous mode [ 916.602993][T14809] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.610180][T14809] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.647631][T14809] bridge_slave_1: entered allmulticast mode [ 916.664483][T14809] bridge_slave_1: entered promiscuous mode [ 916.861594][T14909] loop1: detected capacity change from 0 to 2048 [ 916.938439][T14909] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 916.986155][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 916.986179][ T29] audit: type=1800 audit(1725712620.111:631): pid=14909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2242" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 916.986907][T14809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.074618][T14376] veth0_vlan: entered promiscuous mode [ 917.114479][T14809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.360867][T14809] team0: Port device team_slave_0 added [ 917.411906][T14809] team0: Port device team_slave_1 added [ 917.520150][T14376] veth1_vlan: entered promiscuous mode [ 917.605930][T14904] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 917.656322][T14809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.693613][T14809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.760956][T14809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.844512][T14917] loop3: detected capacity change from 0 to 256 [ 917.875347][T14809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.882429][T14809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.933708][T14917] vfat: Bad value for 'dmask' [ 917.994014][T14809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.146629][T14923] Cannot find set identified by id 0 to match [ 918.252659][ T7545] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 918.307070][T14809] hsr_slave_0: entered promiscuous mode [ 918.352359][T14809] hsr_slave_1: entered promiscuous mode [ 918.393374][T14809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 918.401271][T14809] Cannot create hsr debugfs directory [ 918.445905][ T7545] usb 4-1: config index 0 descriptor too short (expected 58783, got 160) [ 918.455134][ T7545] usb 4-1: config 58 has too many interfaces: 215, using maximum allowed: 32 [ 918.464387][ T7545] usb 4-1: config 58 has an invalid descriptor of length 166, skipping remainder of the config [ 918.475427][ T7545] usb 4-1: config 58 has 0 interfaces, different from the descriptor's value: 215 [ 918.488431][ T7545] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 918.500790][ T7545] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.509102][ T7545] usb 4-1: Product: syz [ 918.513573][ T7545] usb 4-1: Manufacturer: syz [ 918.518195][ T7545] usb 4-1: SerialNumber: syz [ 918.567325][T11034] Bluetooth: hci4: command tx timeout [ 918.593299][T14932] loop1: detected capacity change from 0 to 256 [ 918.673397][ T7540] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 918.777266][ T7545] usb 4-1: USB disconnect, device number 20 [ 918.921148][T14376] veth0_macvtap: entered promiscuous mode [ 918.933457][ T7540] usb 5-1: Using ep0 maxpacket: 32 [ 918.959943][ T7540] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 919.483861][T14376] veth1_macvtap: entered promiscuous mode [ 919.584679][T14491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.773158][ T7540] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 919.789751][ T7540] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 919.803089][ T7540] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 919.812175][ T7540] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.820263][ T7540] usb 5-1: Product: syz [ 919.825325][ T7540] usb 5-1: Manufacturer: syz [ 919.829963][ T7540] usb 5-1: SerialNumber: syz [ 919.940671][T14944] loop3: detected capacity change from 0 to 512 [ 920.050922][T14929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.096265][T14944] EXT4-fs (loop3): 1 truncate cleaned up [ 920.115261][T14944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 920.133067][T14929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.234812][T14376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.274003][T14376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.311610][T14376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.338834][T14929] loop4: detected capacity change from 0 to 2048 [ 920.357686][T14376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.383369][T14944] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.2251: Directory hole found for htree leaf block 0 [ 920.405823][T14376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.460713][T14376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.477067][T14376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.492475][T14376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.503406][T14376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.506194][T14929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 920.513396][T14376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.513460][T14376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.546432][T14376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.557053][T14376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.570534][T14376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 920.589030][T14929] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 920.941415][T14376] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.982610][T14376] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.028223][T14376] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.054238][T14376] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.707405][ T6870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.773673][ T6870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.802322][T14491] veth0_vlan: entered promiscuous mode [ 921.820058][T14972] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.2251: Directory hole found for htree leaf block 0 [ 921.841170][T14941] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.2251: Directory hole found for htree leaf block 0 [ 921.918214][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.930318][T14491] veth1_vlan: entered promiscuous mode [ 921.960793][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.097476][ T7540] usb 5-1: 0:2 : does not exist [ 922.175173][ T7540] usb 5-1: USB disconnect, device number 22 [ 922.275732][T12831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.437129][T14809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 922.515028][T12602] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.555456][T14809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 922.616091][T14964] loop1: detected capacity change from 0 to 40427 [ 922.627906][T14809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 922.692640][T14964] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 922.700450][T14964] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 922.769444][T14964] F2FS-fs (loop1): invalid crc value [ 922.801636][T14491] veth0_macvtap: entered promiscuous mode [ 922.813481][T14964] F2FS-fs (loop1): Found nat_bits in checkpoint [ 922.869752][T14809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 922.985331][T14491] veth1_macvtap: entered promiscuous mode [ 923.048748][T14989] loop4: detected capacity change from 0 to 2048 [ 923.060005][T14992] loop2: detected capacity change from 0 to 128 [ 923.090600][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.101180][T14992] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ4/vÊå|ª×' [ 923.130950][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.145904][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.157004][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.162210][T14989] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 923.205253][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.205851][T14964] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 923.259520][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.268065][T14964] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 923.300764][ T29] audit: type=1800 audit(1725712626.421:632): pid=14989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2257" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 923.322635][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.338148][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.405143][T14491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.538872][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.580835][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.622161][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.653737][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.686757][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.727329][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.754151][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.794942][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.826168][T14491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.986679][T14491] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.031750][T14491] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.062675][T14491] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.103932][T14491] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.418419][T14809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.553890][ T5295] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 924.609171][T14809] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.646226][ T6870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.681894][ T6870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.804206][ T5295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.832893][ T5295] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 924.842006][ T5295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.902399][ T6870] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.906213][ T5295] usb 3-1: config 0 descriptor?? [ 924.909659][ T6870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.998733][ T6870] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.006133][ T6870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.055790][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.074042][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.290693][T14809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 925.388697][ T5295] lenovo 0003:17EF:6047.000B: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 925.619021][T15005] loop3: detected capacity change from 0 to 32768 [ 925.680354][T15005] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2260 (15005) [ 925.786822][T14992] 9pnet_fd: Insufficient options for proto=fd [ 925.802872][T15005] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 925.859047][T15005] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 925.904856][T15005] BTRFS info (device loop3): using free-space-tree [ 926.003951][T15038] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2264'. [ 926.118805][T15038] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.486938][ T8044] usb 3-1: USB disconnect, device number 13 [ 926.539472][T14809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 926.612268][T15062] loop1: detected capacity change from 0 to 1024 [ 926.770187][ T29] audit: type=1800 audit(1725712629.881:633): pid=15062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2261" name="bus" dev="loop1" ino=25 res=0 errno=0 [ 926.915463][T14809] veth0_vlan: entered promiscuous mode [ 926.996294][T14809] veth1_vlan: entered promiscuous mode [ 927.981779][T12602] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 928.022978][T14809] veth0_macvtap: entered promiscuous mode [ 928.152221][T14809] veth1_macvtap: entered promiscuous mode [ 928.420498][T14809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.456169][T14809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.495181][T14809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.544889][T14809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.596375][T14809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.662579][T14809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.672496][T14809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.727408][T14809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.745196][T14809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.755853][T14809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.784566][T14809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.229400][T14809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.676973][T14809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.825811][T14809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.879569][T14809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.956723][T14809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.021293][T14809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.072726][T14809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.126400][T14809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.171433][T14809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.231544][T14809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.348675][T14809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.598818][T14809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.631122][T14809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.652121][T14809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.666885][T14809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.917931][T15114] loop1: detected capacity change from 0 to 8192 [ 931.033010][T15114] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 931.064484][T15114] loop1: partition table partially beyond EOD, truncated [ 931.074449][T15114] loop1: p1 start 277760 is beyond EOD, truncated [ 931.081196][T15114] loop1: p2 start 6684676 is beyond EOD, truncated [ 931.189107][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.196301][T15114] loop1: p5 start 6684676 is beyond EOD, truncated [ 931.206064][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.619778][ T4679] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 931.648187][ T4679] loop1: partition table partially beyond EOD, truncated [ 931.691287][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.700614][ T4679] loop1: p1 start 277760 is beyond EOD, truncated [ 931.718885][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.731374][ T4679] loop1: p2 start 6684676 is beyond EOD, truncated [ 931.782043][ T4679] loop1: p5 start 6684676 is beyond EOD, truncated [ 932.198016][T14433] udevd[14433]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 932.205894][T13137] udevd[13137]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 932.213840][T13615] udevd[13615]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 932.356631][T13136] udevd[13136]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 932.382413][T14433] udevd[14433]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 932.420137][T13615] udevd[13615]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 934.019653][T15165] loop1: detected capacity change from 0 to 1024 [ 934.028553][T15165] EXT4-fs: Ignoring removed oldalloc option [ 934.069814][T15165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 934.326692][T12889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.594365][ T29] audit: type=1326 audit(1725712637.721:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15174 comm="syz.1.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9cd7cef9 code=0x7ffc0000 [ 934.642313][ T29] audit: type=1326 audit(1725712637.721:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15174 comm="syz.1.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9cd7cef9 code=0x7ffc0000 [ 934.667953][ T29] audit: type=1326 audit(1725712637.751:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15174 comm="syz.1.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fec9cd7cef9 code=0x7ffc0000 [ 934.700777][ T29] audit: type=1326 audit(1725712637.751:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15174 comm="syz.1.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9cd7cef9 code=0x7ffc0000 [ 934.726405][ T29] audit: type=1326 audit(1725712637.751:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15174 comm="syz.1.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9cd7cef9 code=0x7ffc0000 [ 934.750975][ T29] audit: type=1326 audit(1725712637.751:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15174 comm="syz.1.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fec9cd7cef9 code=0x7ffc0000 [ 934.774115][ T29] audit: type=1326 audit(1725712637.751:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15174 comm="syz.1.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9cd7cef9 code=0x7ffc0000 [ 934.813855][ T29] audit: type=1326 audit(1725712637.761:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15174 comm="syz.1.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fec9cd7cef9 code=0x7ffc0000 [ 934.841504][ T29] audit: type=1326 audit(1725712637.821:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15174 comm="syz.1.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9cd7cef9 code=0x7ffc0000 [ 934.871097][ T29] audit: type=1326 audit(1725712637.821:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15174 comm="syz.1.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9cd7cef9 code=0x7ffc0000 [ 935.479765][T15178] loop1: detected capacity change from 0 to 32768 [ 935.835740][T15180] ialloc: diAlloc returned -28! [ 936.592800][ T7533] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 936.831545][ T7533] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 936.848121][ T7533] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.857761][ T7533] usb 2-1: Product: syz [ 936.861991][ T7533] usb 2-1: Manufacturer: syz [ 936.868937][ T7533] usb 2-1: SerialNumber: syz [ 936.892443][ T7533] r8152-cfgselector 2-1: Unknown version 0x0000 [ 936.900609][ T7533] r8152-cfgselector 2-1: config 0 descriptor?? [ 937.697058][ T6870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.737786][ T6870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.198588][ T5297] r8152-cfgselector 2-1: USB disconnect, device number 24 [ 942.182336][T15236] syz_tun: entered promiscuous mode [ 942.265452][T15236] batadv_slave_0: entered promiscuous mode [ 942.662946][ T7533] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 943.159982][ T7533] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 943.256299][ T7533] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 943.304838][ T7533] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 943.402710][ T7533] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 943.525114][ T7533] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.591897][ T7533] usb 2-1: config 0 descriptor?? [ 943.621689][T15231] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 944.336064][ T7533] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 944.350141][ T7533] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 944.449430][T15270] loop3: detected capacity change from 0 to 2048 [ 945.183573][ T7533] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 945.321718][ T7533] usb 2-1: USB disconnect, device number 25 [ 945.910066][T15288] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 945.984952][ T8044] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 946.197787][ T8044] usb 5-1: unable to get BOS descriptor or descriptor too short [ 946.229282][ T8044] usb 5-1: not running at top speed; connect to a high speed hub [ 946.256435][ T8044] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 946.275125][ T8044] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 946.316014][ T8044] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 946.334316][ T8044] usb 5-1: config 1 has no interface number 1 [ 946.361973][ T8044] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 946.404262][T15297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2337'. [ 946.431736][ T8044] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 946.441572][ T8044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.451320][ T8044] usb 5-1: Product: syz [ 946.456185][ T8044] usb 5-1: Manufacturer: syz [ 946.460877][ T8044] usb 5-1: SerialNumber: syz [ 947.018677][T15302] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2339'. [ 947.092277][T15309] Device name cannot be null; rc = [-22] [ 947.859241][ T8044] usb 5-1: USB disconnect, device number 23 [ 948.012193][T13136] udevd[13136]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 948.590342][T15331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 948.843997][T15340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2352'. [ 949.359884][T15349] Device name cannot be null; rc = [-22] [ 950.569366][T15348] loop2: detected capacity change from 0 to 2048 [ 950.827417][ T29] audit: type=1800 audit(1725712653.941:644): pid=15348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2353" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 951.332767][ T8044] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 951.553102][ T8044] usb 6-1: Using ep0 maxpacket: 16 [ 951.575029][ T8044] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.622734][ T8044] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.670429][ T8044] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 951.749896][ T8044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.778138][ T8044] usb 6-1: config 0 descriptor?? [ 951.883246][ T7540] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 952.112666][ T7540] usb 2-1: Using ep0 maxpacket: 8 [ 952.175677][T15384] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 952.176646][ T7540] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 952.217291][ T7540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.217369][T15382] program syz.0.2365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 952.245180][ T7540] usb 2-1: Product: syz [ 952.250069][ T7540] usb 2-1: Manufacturer: syz [ 952.255100][ T7540] usb 2-1: SerialNumber: syz [ 952.274048][ T8044] corsair 0003:1B1C:1B02.000D: unbalanced collection at end of report description [ 952.300426][ T7540] usb 2-1: config 0 descriptor?? [ 952.302239][ T8044] corsair 0003:1B1C:1B02.000D: parse failed [ 952.342900][ T8044] corsair 0003:1B1C:1B02.000D: probe with driver corsair failed with error -22 [ 952.809286][ T8044] usb 6-1: USB disconnect, device number 15 [ 952.899907][T15394] loop3: detected capacity change from 0 to 2048 [ 955.353940][ T29] audit: type=1800 audit(1725712658.471:645): pid=15392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2370" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 955.692638][ T7533] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 955.771171][ T7540] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 955.794513][ T7540] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 955.869560][ T7540] usb 2-1: USB disconnect, device number 26 [ 955.907240][ T7533] usb 3-1: Using ep0 maxpacket: 16 [ 955.946118][ T7533] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 955.984102][ T7533] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.031986][ T7533] usb 3-1: Product: syz [ 956.067754][ T7533] usb 3-1: Manufacturer: syz [ 956.105840][ T7533] usb 3-1: SerialNumber: syz [ 956.148529][ T7533] usb 3-1: config 0 descriptor?? [ 956.176297][ T7533] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 956.477812][ T7533] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 956.548595][ T7533] usb 3-1: USB disconnect, device number 14 [ 956.861612][T15423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 957.473984][ T7533] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 957.781998][ T7533] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 957.863421][ T7533] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 957.918141][ T7533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.965724][ T7533] usb 3-1: config 0 descriptor?? [ 958.010326][ T7533] pwc: Askey VC010 type 2 USB webcam detected. [ 958.057213][T15440] program syz.5.2386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 958.512162][T15448] loop0: detected capacity change from 0 to 2048 [ 960.883368][ T29] audit: type=1800 audit(1725712663.971:646): pid=15448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2384" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 961.292795][ T7533] pwc: recv_control_msg error -71 req 02 val 2b00 [ 961.482723][ T7533] pwc: recv_control_msg error -71 req 02 val 2700 [ 961.520919][ T7533] pwc: recv_control_msg error -71 req 02 val 2c00 [ 961.563320][ T7533] pwc: recv_control_msg error -71 req 04 val 1000 [ 961.590256][ T7533] pwc: recv_control_msg error -71 req 04 val 1300 [ 961.608532][ T7533] pwc: recv_control_msg error -71 req 04 val 1400 [ 961.632729][ T7533] pwc: recv_control_msg error -71 req 02 val 2000 [ 961.666828][ T7533] pwc: recv_control_msg error -71 req 02 val 2100 [ 961.698019][ T7533] pwc: recv_control_msg error -71 req 04 val 1500 [ 961.720367][ T7533] pwc: recv_control_msg error -71 req 02 val 2500 [ 961.747171][ T7533] pwc: recv_control_msg error -71 req 02 val 2400 [ 961.773822][ T7533] pwc: recv_control_msg error -71 req 02 val 2600 [ 961.801006][ T7533] pwc: recv_control_msg error -71 req 02 val 2900 [ 961.838648][ T7533] pwc: recv_control_msg error -71 req 02 val 2800 [ 961.869375][ T7533] pwc: recv_control_msg error -71 req 04 val 1100 [ 961.889222][ T7533] pwc: recv_control_msg error -71 req 04 val 1200 [ 961.983601][ T7533] pwc: Registered as video71. [ 962.011367][ T7533] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 962.076368][ T7533] usb 3-1: USB disconnect, device number 15 [ 962.259603][T15472] Cannot find add_set index 0 as target [ 962.349385][T15472] usb usb8: usbfs: process 15472 (syz.0.2397) did not claim interface 0 before use [ 962.447603][ T29] audit: type=1326 audit(1725712665.571:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15468 comm="syz.0.2397" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f721b37cef9 code=0x0 [ 962.573222][ T7540] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 962.642742][ T7533] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 962.797954][ T7540] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 962.830638][ T7540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.845084][ T7540] usb 2-1: Product: syz [ 962.845230][ T7533] usb 3-1: Using ep0 maxpacket: 16 [ 962.849411][ T7540] usb 2-1: Manufacturer: syz [ 962.859227][ T7540] usb 2-1: SerialNumber: syz [ 962.884058][ T7533] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 962.896699][ T7540] r8152-cfgselector 2-1: Unknown version 0x0000 [ 962.922695][ T7533] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.952674][ T7533] usb 3-1: Product: syz [ 962.982841][ T7533] usb 3-1: Manufacturer: syz [ 962.987483][ T7533] usb 3-1: SerialNumber: syz [ 963.058793][ T7533] usb 3-1: config 0 descriptor?? [ 963.135616][ T7533] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 963.174691][ T7540] r8152-cfgselector 2-1: config 0 descriptor?? [ 963.454171][T15489] loop0: detected capacity change from 0 to 2048 [ 963.864306][ T29] audit: type=1800 audit(1725712666.911:648): pid=15489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2403" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 964.144046][ T7540] r8152-cfgselector 2-1: USB disconnect, device number 27 [ 964.191088][ T7533] ssu100 3-1:0.0: probe with driver ssu100 failed with error -32 [ 965.015860][T15508] loop1: detected capacity change from 0 to 1024 [ 965.055488][T15508] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 965.117592][T15508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 965.342696][T12889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.397081][T15522] loop4: detected capacity change from 0 to 2048 [ 965.911738][T15522] loop4: unable to read partition table [ 965.918188][T15522] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 965.984172][ T4679] Alternate GPT is invalid, using primary GPT. [ 966.011798][ T4679] loop4: p1 p2 p3 [ 966.051070][ T5232] usb 3-1: USB disconnect, device number 16 [ 967.150439][T15510] loop3: detected capacity change from 0 to 32768 [ 967.600529][T15543] usb usb9: usbfs: process 15543 (syz.1.2423) did not claim interface 0 before use [ 967.654372][T15543] usb usb9: selecting invalid altsetting 21783 [ 968.046157][T15555] loop5: detected capacity change from 0 to 1024 [ 968.124447][T15555] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 968.329424][T15555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 968.886734][T14491] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.793183][T15570] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 970.393027][T15573] loop3: detected capacity change from 0 to 2048 [ 970.467526][T15573] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 971.267902][T15587] Cannot find add_set index 0 as target [ 974.440397][ T29] audit: type=1326 audit(1725712677.561:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382e97cef9 code=0x7ffc0000 [ 974.508615][ T29] audit: type=1326 audit(1725712677.561:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382e97cef9 code=0x7ffc0000 [ 974.592906][ T29] audit: type=1326 audit(1725712677.601:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f382e97cef9 code=0x7ffc0000 [ 974.740261][ T29] audit: type=1326 audit(1725712677.601:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382e97cef9 code=0x7ffc0000 [ 974.846583][ T29] audit: type=1326 audit(1725712677.631:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f382e97cef9 code=0x7ffc0000 [ 974.901983][ T29] audit: type=1326 audit(1725712677.631:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382e97cef9 code=0x7ffc0000 [ 974.977926][ T29] audit: type=1326 audit(1725712677.631:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382e97cef9 code=0x7ffc0000 [ 975.033113][ T7533] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 975.077577][ T29] audit: type=1326 audit(1725712677.631:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f382e97cef9 code=0x7ffc0000 [ 975.139846][ T29] audit: type=1326 audit(1725712677.631:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382e97cef9 code=0x7ffc0000 [ 975.458020][ T29] audit: type=1326 audit(1725712677.631:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382e97cef9 code=0x7ffc0000 [ 975.462833][ T7533] usb 3-1: Using ep0 maxpacket: 16 [ 975.488582][T15619] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 975.683812][ T7533] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.738235][ T7533] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 975.793604][ T7533] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 976.134412][ T7533] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 976.152773][ T7533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 976.182866][ T7533] usb 3-1: SerialNumber: syz [ 976.775381][T15608] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 976.885402][ T7533] cdc_acm 3-1:1.0: skipping garbage [ 976.962366][T15633] fuse: Bad value for 'group_id' [ 977.013725][T15633] fuse: Bad value for 'group_id' [ 977.170648][T15642] tipc: Enabling of bearer rejected, failed to enable media [ 977.249850][T15643] loop4: detected capacity change from 0 to 2048 [ 977.694289][ T7545] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 977.695802][ T4679] Alternate GPT is invalid, using primary GPT. [ 977.758310][ T4679] loop4: p1 p2 p3 [ 977.766169][T15645] Invalid option length (158) for dns_resolver key [ 977.773378][ T7540] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 977.930021][ T7545] usb 6-1: config 0 has an invalid interface number: 213 but max is 0 [ 977.953043][ T7545] usb 6-1: config 0 has no interface number 0 [ 977.980293][ T7545] usb 6-1: config 0 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 977.998636][ T7545] usb 6-1: config 0 interface 213 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 978.019857][ T7540] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 978.064702][ T7540] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 978.083545][ T7545] usb 6-1: config 0 interface 213 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 978.150357][ T7540] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 978.161593][ T7545] usb 6-1: config 0 interface 213 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 978.450702][ T7540] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.464742][ T7545] usb 6-1: New USB device found, idVendor=1199, idProduct=6802, bcdDevice=76.85 [ 978.475517][ T7540] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 978.486333][ T7545] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.497844][ T7540] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 978.501897][ T7533] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 978.514401][ T7545] usb 6-1: Product: syz [ 978.520044][ T7545] usb 6-1: Manufacturer: syz [ 978.524954][ T7540] usb 2-1: Product: syz [ 978.529139][ T7540] usb 2-1: Manufacturer: syz [ 978.556989][ T7545] usb 6-1: SerialNumber: syz [ 978.561565][ T7533] usb 3-1: USB disconnect, device number 17 [ 978.601282][ T7545] usb 6-1: config 0 descriptor?? [ 978.625305][T15637] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 978.688990][ T7540] cdc_wdm 2-1:1.0: skipping garbage [ 978.695888][ T7545] sierra 6-1:0.213: Sierra USB modem converter detected [ 978.744567][ T7540] cdc_wdm 2-1:1.0: skipping garbage [ 978.792065][ T7540] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 978.843227][T15656] loop4: detected capacity change from 0 to 256 [ 978.902827][ T7540] usb 2-1: USB disconnect, device number 28 [ 978.993494][T15656] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 979.033275][ T7545] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 979.071649][ T7545] usb 6-1: USB disconnect, device number 16 [ 979.125141][ T7545] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 979.186188][ T7545] sierra 6-1:0.213: device disconnected [ 979.683266][ T7540] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 980.075348][ T7540] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 980.097118][ T7540] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 980.108050][T15671] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 980.234417][ T7540] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 980.302673][ T7540] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.379604][ T7540] usb 2-1: string descriptor 0 read error: -71 [ 980.419397][ T7540] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 980.486259][ T7540] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 980.520798][T15674] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2464'. [ 980.569763][ T7540] usb 2-1: can't set config #1, error -71 [ 980.694364][ T7540] usb 2-1: USB disconnect, device number 29 [ 980.716770][T15674] bond0: entered promiscuous mode [ 980.748146][T15674] bond_slave_0: entered promiscuous mode [ 980.782974][T15674] bond_slave_1: entered promiscuous mode [ 980.823368][T15674] bond0: entered allmulticast mode [ 980.842097][T15674] bond_slave_0: entered allmulticast mode [ 980.863208][T15674] bond_slave_1: entered allmulticast mode [ 980.902896][T15677] netlink: 'syz.5.2464': attribute type 10 has an invalid length. [ 981.046693][T15677] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 981.124926][T15677] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 981.163337][T15677] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 982.833174][T15705] loop1: detected capacity change from 0 to 2048 [ 983.088800][ T25] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 983.646719][ T4679] Alternate GPT is invalid, using primary GPT. [ 983.646955][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 983.676778][ T4679] loop1: p1 p2 p3 [ 983.729350][ T25] usb 4-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 983.759115][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 984.073895][ T25] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 984.086369][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.108685][ T25] usb 4-1: config 0 descriptor?? [ 984.159102][T13136] udevd[13136]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 984.160177][T14324] udevd[14324]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 984.188809][T13137] udevd[13137]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 984.398714][T15718] loop1: detected capacity change from 0 to 256 [ 984.561401][T15718] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 984.601708][T15721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 985.030423][T15726] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 987.293273][ T25] usb 4-1: string descriptor 0 read error: -71 [ 987.328482][ T25] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 987.338977][ T25] usb 4-1: USB disconnect, device number 21 [ 988.359156][T15751] loop1: detected capacity change from 0 to 2048 [ 988.533267][ T5312] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 988.984130][ T4679] Alternate GPT is invalid, using primary GPT. [ 989.007831][ T5312] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 989.022742][ T4679] loop1: p1 p2 p3 [ 989.027368][ T5312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.050214][ T5312] usb 3-1: Product: syz [ 989.067958][ T5312] usb 3-1: Manufacturer: syz [ 989.084437][ T5312] usb 3-1: SerialNumber: syz [ 989.111059][ T5312] r8152-cfgselector 3-1: Unknown version 0x0000 [ 989.127767][ T5312] r8152-cfgselector 3-1: config 0 descriptor?? [ 989.249257][T13136] udevd[13136]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 989.276406][T13137] udevd[13137]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 989.326001][T14324] udevd[14324]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 989.653196][T15764] loop1: detected capacity change from 0 to 256 [ 989.712813][ T7545] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 989.758183][T15764] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 989.893313][ T7545] usb 6-1: Using ep0 maxpacket: 32 [ 989.914989][ T7545] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 989.943051][ T7545] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 989.963450][ T7545] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.998913][ T7545] usb 6-1: Product: syz [ 990.019696][ T5312] r8152-cfgselector 3-1: Unknown version 0x0000 [ 990.027312][ T7545] usb 6-1: Manufacturer: syz [ 990.042721][ T7545] usb 6-1: SerialNumber: syz [ 990.052305][ T5312] r8152-cfgselector 3-1: bad CDC descriptors [ 990.080067][ T7545] usb 6-1: config 0 descriptor?? [ 990.093231][ T5312] r8152-cfgselector 3-1: USB disconnect, device number 18 [ 990.119512][T15761] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 990.163626][ T7545] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 990.276305][T15774] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 990.282894][T15774] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 990.322318][T15774] vhci_hcd vhci_hcd.0: Device attached [ 990.365106][T15776] vhci_hcd: connection closed [ 990.365415][ T1115] vhci_hcd: stop threads [ 990.392232][ T1115] vhci_hcd: release socket [ 990.414406][ T1115] vhci_hcd: disconnect device [ 990.581177][T15780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.609836][T15780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.731860][ T5312] usb 6-1: USB disconnect, device number 17 [ 992.223410][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 992.223433][ T29] audit: type=1326 audit(1725712695.341:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15802 comm="syz.2.2507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f382e97cef9 code=0x0 [ 992.609469][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.616341][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.637359][ T7533] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 992.828044][ T7533] usb 3-1: device descriptor read/64, error -71 [ 993.452931][ T7545] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 993.495905][ T7533] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 993.879390][ T7533] usb 3-1: device descriptor read/64, error -71 [ 993.914445][ T7545] usb 4-1: not running at top speed; connect to a high speed hub [ 994.003493][T15828] Cannot find add_set index 0 as target [ 994.079781][ T7533] usb usb3-port1: attempt power cycle [ 994.892272][ T7545] usb 4-1: config 129 has an invalid interface number: 135 but max is 1 [ 994.933683][ T7545] usb 4-1: config 129 has an invalid interface number: 5 but max is 1 [ 994.942004][ T7545] usb 4-1: config 129 has no interface number 0 [ 994.972290][ T7545] usb 4-1: config 129 has no interface number 1 [ 994.992621][ T7545] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 995.052588][ T7545] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 995.085270][ T7545] usb 4-1: config 129 interface 5 altsetting 7 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 995.142693][ T7545] usb 4-1: config 129 interface 5 altsetting 7 has an endpoint descriptor with address 0x97, changing to 0x87 [ 995.175864][ T7545] usb 4-1: config 129 interface 5 altsetting 7 endpoint 0x87 has invalid maxpacket 29759, setting to 64 [ 995.237092][ T7545] usb 4-1: config 129 interface 5 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 37 [ 995.312593][ T7545] usb 4-1: config 129 interface 135 has no altsetting 0 [ 995.319604][ T7545] usb 4-1: config 129 interface 5 has no altsetting 0 [ 995.409153][ T7545] usb 4-1: string descriptor 0 read error: -71 [ 995.422747][ T7545] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 995.462981][ T7545] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.582981][ T7545] usb 4-1: can't set config #129, error -71 [ 995.688374][ T7545] usb 4-1: USB disconnect, device number 22 [ 996.622831][T11983] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 996.853366][T11983] usb 2-1: Using ep0 maxpacket: 32 [ 996.881847][T11983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 996.950513][T11983] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 996.984715][T11983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.050955][T11983] usb 2-1: Product: syz [ 997.059416][T11983] usb 2-1: Manufacturer: syz [ 997.072864][T11983] usb 2-1: SerialNumber: syz [ 997.119589][T11983] usb 2-1: config 0 descriptor?? [ 997.137940][T15846] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 997.171182][T11983] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 997.212781][ T5295] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 997.470952][ T5295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.511915][T15879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.541496][ T5295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.571448][ T5295] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 997.596725][T15879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.606801][T11983] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 997.624010][ T5295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.659860][ T5295] usb 3-1: config 0 descriptor?? [ 997.667504][ T7545] usb 2-1: USB disconnect, device number 30 [ 997.824519][T11983] usb 6-1: not running at top speed; connect to a high speed hub [ 997.874222][T11983] usb 6-1: config 129 has an invalid interface number: 135 but max is 1 [ 997.920816][T11983] usb 6-1: config 129 has an invalid interface number: 5 but max is 1 [ 997.970240][T11983] usb 6-1: config 129 has no interface number 0 [ 998.006200][T11983] usb 6-1: config 129 has no interface number 1 [ 998.037892][T11983] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 998.087947][T11983] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 998.123789][T11983] usb 6-1: config 129 interface 5 altsetting 7 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 998.183185][ T5295] appleir 0003:05AC:8241.000E: item fetching failed at offset 5/7 [ 998.194420][T11983] usb 6-1: config 129 interface 5 altsetting 7 has an endpoint descriptor with address 0x97, changing to 0x87 [ 998.233213][ T5295] appleir 0003:05AC:8241.000E: parse failed [ 998.239588][T11983] usb 6-1: config 129 interface 5 altsetting 7 endpoint 0x87 has invalid maxpacket 29759, setting to 64 [ 998.251640][ T5295] appleir 0003:05AC:8241.000E: probe with driver appleir failed with error -22 [ 998.280451][T11983] usb 6-1: config 129 interface 5 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 37 [ 998.532626][T11983] usb 6-1: config 129 interface 135 has no altsetting 0 [ 998.567162][T11983] usb 6-1: config 129 interface 5 has no altsetting 0 [ 998.603969][T11983] usb 6-1: language id specifier not provided by device, defaulting to English [ 998.680990][T11983] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 998.725001][T11983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.778365][T11983] usb 6-1: Product: à Š [ 998.819197][T11983] usb 6-1: Manufacturer: Ñ™ [ 998.861207][T11983] usb 6-1: SerialNumber: ж [ 999.184434][T15874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.244302][T15901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 999.262639][T15874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.320532][T11983] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 999.361231][T11983] usb 6-1: MIDIStreaming interface descriptor not found [ 999.503962][T11983] usb 6-1: USB disconnect, device number 18 [ 999.726706][T13140] udevd[13140]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 999.762714][T11034] Bluetooth: hci6: command 0x0406 tx timeout [ 1000.013147][ T5312] usb 3-1: USB disconnect, device number 22 [ 1000.483750][T15923] i2c i2c-0: Invalid block write size 34 [ 1000.725148][T12889] ================================================================== [ 1000.733284][T12889] BUG: KASAN: wild-memory-access in __lock_acquire+0xc8b/0x2040 [ 1000.740949][T12889] Read of size 8 at addr 1fffffff8dc93498 by task syz-executor/12889 [ 1000.749010][T12889] [ 1000.751326][T12889] CPU: 1 UID: 0 PID: 12889 Comm: syz-executor Not tainted 6.11.0-rc6-syzkaller-00308-gb31c44928842 #0 [ 1000.762365][T12889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1000.772564][T12889] Call Trace: [ 1000.775867][T12889] [ 1000.778824][T12889] dump_stack_lvl+0x241/0x360 [ 1000.783610][T12889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1000.788819][T12889] ? __pfx__printk+0x10/0x10 [ 1000.793419][T12889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.799092][T12889] ? _printk+0xd5/0x120 [ 1000.803298][T12889] print_report+0xe8/0x550 [ 1000.807755][T12889] ? __lock_acquire+0x137a/0x2040 [ 1000.812810][T12889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.818459][T12889] ? __virt_addr_valid+0x58/0x530 [ 1000.823495][T12889] ? __lock_acquire+0xc8b/0x2040 [ 1000.828447][T12889] kasan_report+0x143/0x180 [ 1000.832976][T12889] ? __lock_acquire+0xc8b/0x2040 [ 1000.837942][T12889] kasan_check_range+0x282/0x290 [ 1000.842936][T12889] __lock_acquire+0xc8b/0x2040 [ 1000.847728][T12889] lock_acquire+0x1ed/0x550 [ 1000.852332][T12889] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1000.857903][T12889] ? __pfx_lock_acquire+0x10/0x10 [ 1000.862940][T12889] ? rcu_note_context_switch+0xc7c/0xff0 [ 1000.868585][T12889] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1000.874940][T12889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.880587][T12889] ? remove_wait_queue+0x33/0x130 [ 1000.885624][T12889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.891273][T12889] _raw_spin_lock_nested+0x31/0x40 [ 1000.896387][T12889] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1000.901942][T12889] raw_spin_rq_lock_nested+0xb0/0x140 [ 1000.907324][T12889] __schedule+0x357/0x4a60 [ 1000.911755][T12889] ? __pfx_child_wait_callback+0x10/0x10 [ 1000.917393][T12889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.923047][T12889] ? hrtimer_nanosleep+0x387/0x470 [ 1000.928173][T12889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.933818][T12889] ? __pfx___schedule+0x10/0x10 [ 1000.938681][T12889] ? __pfx___x64_sys_wait4+0x10/0x10 [ 1000.943993][T12889] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1000.949984][T12889] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1000.956325][T12889] schedule+0x14b/0x320 [ 1000.960513][T12889] syscall_exit_to_user_mode+0x13e/0x370 [ 1000.966151][T12889] do_syscall_64+0x100/0x230 [ 1000.970835][T12889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.976739][T12889] RIP: 0033:0x7fec9cd73157 [ 1000.981154][T12889] Code: 89 7c 24 10 48 89 4c 24 18 e8 55 16 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 a5 16 03 00 8b 44 [ 1001.000766][T12889] RSP: 002b:00007ffdceb99560 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 1001.009217][T12889] RAX: 0000000000000000 RBX: 00000000000001d5 RCX: 00007fec9cd73157 [ 1001.017194][T12889] RDX: 0000000040000001 RSI: 00007ffdceb995bc RDI: 00000000ffffffff [ 1001.025375][T12889] RBP: 00007ffdceb995bc R08: 0000000000000000 R09: 7fffffffffffffff [ 1001.033350][T12889] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 1001.041316][T12889] R13: 00000000000f43ff R14: 00000000000f439a R15: 00007ffdceb99610 [ 1001.049298][T12889] [ 1001.052308][T12889] ================================================================== [ 1001.060361][T12889] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1001.067551][T12889] CPU: 1 UID: 0 PID: 12889 Comm: syz-executor Not tainted 6.11.0-rc6-syzkaller-00308-gb31c44928842 #0 [ 1001.078486][T12889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1001.088543][T12889] Call Trace: [ 1001.091819][T12889] [ 1001.094750][T12889] dump_stack_lvl+0x241/0x360 [ 1001.099438][T12889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1001.104637][T12889] ? __pfx__printk+0x10/0x10 [ 1001.109226][T12889] ? rcu_is_watching+0x15/0xb0 [ 1001.114003][T12889] ? lock_release+0xbf/0xa30 [ 1001.118604][T12889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.124251][T12889] ? vscnprintf+0x5d/0x90 [ 1001.128591][T12889] panic+0x349/0x860 [ 1001.132485][T12889] ? check_panic_on_warn+0x21/0xb0 [ 1001.137636][T12889] ? __pfx_panic+0x10/0x10 [ 1001.142050][T12889] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1001.147274][T12889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.152922][T12889] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1001.158829][T12889] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1001.165174][T12889] ? print_report+0xe8/0x550 [ 1001.169785][T12889] check_panic_on_warn+0x86/0xb0 [ 1001.174813][T12889] ? __lock_acquire+0xc8b/0x2040 [ 1001.179781][T12889] end_report+0x77/0x160 [ 1001.184047][T12889] kasan_report+0x154/0x180 [ 1001.188571][T12889] ? __lock_acquire+0xc8b/0x2040 [ 1001.193524][T12889] kasan_check_range+0x282/0x290 [ 1001.198478][T12889] __lock_acquire+0xc8b/0x2040 [ 1001.203265][T12889] lock_acquire+0x1ed/0x550 [ 1001.207779][T12889] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1001.213338][T12889] ? __pfx_lock_acquire+0x10/0x10 [ 1001.218372][T12889] ? rcu_note_context_switch+0xc7c/0xff0 [ 1001.224010][T12889] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1001.230359][T12889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.236003][T12889] ? remove_wait_queue+0x33/0x130 [ 1001.241041][T12889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.246695][T12889] _raw_spin_lock_nested+0x31/0x40 [ 1001.251841][T12889] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1001.257395][T12889] raw_spin_rq_lock_nested+0xb0/0x140 [ 1001.262782][T12889] __schedule+0x357/0x4a60 [ 1001.267228][T12889] ? __pfx_child_wait_callback+0x10/0x10 [ 1001.272873][T12889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.278522][T12889] ? hrtimer_nanosleep+0x387/0x470 [ 1001.283645][T12889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.289293][T12889] ? __pfx___schedule+0x10/0x10 [ 1001.294159][T12889] ? __pfx___x64_sys_wait4+0x10/0x10 [ 1001.299458][T12889] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1001.305454][T12889] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1001.311797][T12889] schedule+0x14b/0x320 [ 1001.315972][T12889] syscall_exit_to_user_mode+0x13e/0x370 [ 1001.321607][T12889] do_syscall_64+0x100/0x230 [ 1001.326203][T12889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.332108][T12889] RIP: 0033:0x7fec9cd73157 [ 1001.336519][T12889] Code: 89 7c 24 10 48 89 4c 24 18 e8 55 16 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 a5 16 03 00 8b 44 [ 1001.356129][T12889] RSP: 002b:00007ffdceb99560 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 1001.364550][T12889] RAX: 0000000000000000 RBX: 00000000000001d5 RCX: 00007fec9cd73157 [ 1001.372521][T12889] RDX: 0000000040000001 RSI: 00007ffdceb995bc RDI: 00000000ffffffff [ 1001.380503][T12889] RBP: 00007ffdceb995bc R08: 0000000000000000 R09: 7fffffffffffffff [ 1001.388479][T12889] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 1001.396448][T12889] R13: 00000000000f43ff R14: 00000000000f439a R15: 00007ffdceb99610 [ 1001.404455][T12889] [ 1001.407908][T12889] Kernel Offset: disabled [ 1001.412224][T12889] Rebooting in 86400 seconds..