last executing test programs: 9.226543284s ago: executing program 2 (id=1129): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xfffffffffffffee2, 0x407006}, 0x104) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10) 8.862174071s ago: executing program 5 (id=1134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 7.543898213s ago: executing program 5 (id=1140): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(0x0, 0x64842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) 6.878084747s ago: executing program 0 (id=1150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="080002002e0400001ccc9cedd6eb77a9ebdfa01061708758053114f37df2052ee1620a9a08c582a8"], 0x24}, 0x1, 0x6c00}, 0x0) 6.10273783s ago: executing program 0 (id=1152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 6.082569216s ago: executing program 5 (id=1153): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) 5.874681022s ago: executing program 2 (id=1154): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) 4.997228766s ago: executing program 1 (id=1157): sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00', @ANYRES16=0x0, @ANYBLOB="00003f0000000c009900000000000000000040005e8008000500000000000800000008000900000034441000010000000000000000000000000008005ee42e2fc50700000000000401f8a60f09b95d9ee43dd04f56"], 0x60}}, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x45}], 0x2, 0x0, 0x0) 4.880595816s ago: executing program 0 (id=1159): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) read(r2, &(0x7f00000000c0)=""/22, 0x16) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 4.670508686s ago: executing program 1 (id=1162): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x44, 0xa6, 0x58, 0x8, 0x84f, 0x1, 0xe943, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x4, 0x10, 0x2, [{{0x9, 0x4, 0xec, 0x9, 0x0, 0x87, 0x1d, 0x55}}]}}]}}, 0x0) 4.512477171s ago: executing program 3 (id=1164): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000100), 0x3c) 4.176836307s ago: executing program 3 (id=1165): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(0x0, 0x64842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) 4.176591653s ago: executing program 5 (id=1166): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x5, 0x6235, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0xd000000}) 3.860459153s ago: executing program 0 (id=1167): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000001200)={'bridge0\x00', {0x2, 0x0, @broadcast}}) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x2f, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x18, &(0x7f0000000f80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000e40)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x9aa) write(r5, &(0x7f0000000040)="1300000032001f00030300f9002304000a04", 0x12) 3.643490549s ago: executing program 2 (id=1168): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x470, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x9}}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x7, 0xfff1}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @filter_kind_options=@f_route={{0xa}, {0x400, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xc1}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x31}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_ACT={0x3dc, 0x6, [@m_sample={0x48, 0x6, 0x0, 0x0, {{0xb}, {0x4}, {0x19, 0x6, "e382c42e549444c2186d03b98ef64207bd85b3baf2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x140, 0x10, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x200}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x12c, 0xf, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x103}, @TCA_CT_LABELS_MASK={0x14, 0x8, "c30604ab3100a6de878355a1bfb0f58b"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea4ceb0a2367847922314f8aa6c591ae"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "58f25e882ecebd3017a6274441c51594"}]}, {0xa1, 0x6, "f84ebe84c2d9809d98cb12f2274b5e21a4b137a60d915bfb42d02d4976ad358f638df8594bc932b13ff21d61be8614c3e0d017d21773d441648e714188ceca643a7f306544ce1be061d95d94f171717e049609b7d2b065d9b018db93c08d3479edf5f057f3b5d682c142a7be2a698456dbb28b7070774e11cf4125dc778036c189ec187ceb923d94a23e0d32f0cda5d880fc5a368aae1f7da8ca75bbda"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0xf4, 0x17, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x4, 0x3, 0x2, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x10001, 0x10000000, 0x8000, 0x1000}, @multicast1, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x8, 0x20000000, 0x1, 0x6f4f}, @remote, @private=0xa010101, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x45df, 0x7ff, 0x20000000, 0x4, 0x107}, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x80007, 0xffffffffffffffff, 0x6, 0xfffefffd}, @broadcast, @loopback, 0xff000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r0 = socket(0x10, 0x803, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.22278636s ago: executing program 0 (id=1169): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) 3.164487721s ago: executing program 4 (id=1170): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f00000001c0)) 2.926652009s ago: executing program 2 (id=1171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2.842678104s ago: executing program 1 (id=1172): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00'], 0x54}}, 0x0) 2.807505265s ago: executing program 3 (id=1173): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000300), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.804371656s ago: executing program 1 (id=1174): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000210000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.739132439s ago: executing program 2 (id=1175): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x9) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="05", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000f80)="b9740219f22df489aea7495b1e1d6d1752ecd1ed6cb5374ca2509b082cca263d99e372b9916b850337ac15f33823c1ddb06c1b393916b06012a317d9df6811b676cce47f6cb2dcc00e7badb6ee1c602cff63b5e66892aa6611774a92571a1df802785e4b91d86a87fb7b72e2f814c6bb634ca227c043e192dfe6f135a1d91d466b2d5d970e6076f2b3ba3a7734f3f527d70175810b6f4601e4687ac7567ebccb53cd9e47f2c1ddae15551375adf6bb092d49100e483c836e50501751d4b05d55e483ea0fcf0c1c8e7bc12676a4b490b99301726f", 0xd4}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000840)=[{&(0x7f00000003c0)="4008948f56ea578201dba6241b53d7a82968313b9df616ff", 0x18}, {&(0x7f0000000540)="201011838657fd7fabfd270aabe0819be8d38eb86291d93b805f1afdb5aec67b39aeb0b13d035ec670def49b96340e4d5c2e8dccc35073720b4e91046f092b1d12757e432ddc8bf163ef90f123c4e8e5cb77e0eb8ef0a08d6922ae8250013c9ea17c089710dbb20694c16ed890e3e024a66399dca4313ec82d1db58cc3ea5da3ee92483b5e2897e070eb828dee5b7bea45a53937a905", 0x96}, {&(0x7f0000000400)="eb0b03bc0c455159b031d07795a63dae223e40682cf982d3060aed", 0x1b}, {&(0x7f00000004c0)="a84a5727807388a92ea4d22e0d365c", 0xf}, {&(0x7f0000000600)="f86dec7a076a93d117f5ddda4d18fd349390899a4dcfc059097ff4b1b59e9ad6520a7d5e60647f4cd445c128d9f95ec9f0e081008973d6914e74e72c86afa121dac721403aa8c8c0400e4c95e7d6e43fbd2af97d564e032f14d08f696348533d", 0x60}, {&(0x7f00000020c0)="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", 0x1000}, {&(0x7f0000000680)="d19ae3eba9d9fe6ce1908aacd6b07dfc2804af786b77aae91c2f589edbab551363", 0x21}, {&(0x7f0000000800)="b2cd82cc08af8a534693416066ff8a22fb0c590a1afc9bd490b4326bbc02fbe6d11115778ddb4d360b", 0x29}], 0x8, &(0x7f0000000f00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x68}}, {{&(0x7f0000000940)={0x2, 0x4e20, @rand_addr=0x64810102}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000bc0)="0c21d1fa61b2de50a4382b031293f538ff47e53608509f9142d76e71212f78c4bac8104bffccd3aec984e2bd966070faaaff90cb8ad2495dedce3cfb05e8b7f4e0d57fd3", 0x44}, {&(0x7f0000000980)="ded47d6d370bc92e5de4730b562b423c68cb099a3bcdb6a8ad874b03e41f6a8c17ff70b6c07fd0e00a6ef1ab1bc6b6b1ad46b1ef7090e967", 0x38}, {&(0x7f0000000c40)="4531a3abe4df096bac994a260a889556125eab24cb23bbeb8ba71610d4e0423c75c475183417e7acea5d73841fac2d4126c72134d8c59ee6081d6d88986146d138a00736261c070972b44ad739ec91e9a3df52aed15ede185ffd28ec31294cbe4074e7768731b122e5e16921d02cf9b46cc47b3625441848df65c6502a1851d238705d49b82db6dbcf7def6d2fc32e9ffd23dc6c25b7e9da7482f8beb324c2295447fb07e8fab0ec5d6da52839af0734dc7937e3300661285391ff2a30f99f2c86ef57e585f148724a3e30e55989156abe9d6cdf7380468dde61", 0xda}, {&(0x7f0000000d40)="8040e442b237ab3d805b3458e7733b3e249cb9b6e698a99f931046761bab59619d41ba4014df93d8fd36342661d6d094d4f47795382b590a560d57a2bdfd182565a39e29e3f721673028b608827d481618337b396d3e234bf1991b2249f596cfe107c009bdf243446a8f4a7e68b6cddf699fe96d7822aaad520b5b506fca4b0073ffd10a757935997b38dc85418db39908d9c9ba697896eff2a95b0b0111c1c0abd74fc7cfccb95fd7129b15e71550a470ab92329f70e76cb33910e5e97a8b41c077600bba25d852f7c9ff52025d46f4beb422aa6f771b3e30d8fe1c0a92da4b2317e61bf87735f8a2d4f773767bb466e782cef3", 0xf4}], 0x4, &(0x7f00000011c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x78}}], 0x4, 0x0) 1.681309442s ago: executing program 4 (id=1176): sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00', @ANYRES16=0x0, @ANYBLOB="00003f0000000c009900000000000000000040005e8008000500000000000800000008000900000034441000010000000000000000000000000008005ee42e2fc50700000000000401f8a60f09b95d9ee43dd04f56"], 0x60}}, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x45}], 0x2, 0x0, 0x0) 1.61480195s ago: executing program 5 (id=1177): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x20000020) 1.42461902s ago: executing program 4 (id=1178): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) 1.23904155s ago: executing program 4 (id=1179): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[], 0x2c}}, 0x0) 1.053376139s ago: executing program 4 (id=1180): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x325) 1.00199784s ago: executing program 0 (id=1181): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x442a, &(0x7f0000008940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a0500000000000000d300e6d602000000000000000000000001"}) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='i', 0x1}]) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) 850.72172ms ago: executing program 3 (id=1182): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e06, 0x0, @private0}, 0x1c) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x4) 712.230075ms ago: executing program 2 (id=1183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)={@val={0x6}, @void, @eth={@multicast, @random="d26b98d19dd8", @val={@void}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x2, 0x24, 0x67, 0x0, 0x0, 0x21, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "20e856", 0x0, "fb148f"}}}}}}}, 0x3a) 663.132887ms ago: executing program 1 (id=1184): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000002c0)="3f030e00031b1200000000fcf0ad0000000000120f00810000008100642c4a1b78610000a8d9", 0x26, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 522.6234ms ago: executing program 4 (id=1185): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(0x0, 0x64842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) 417.220607ms ago: executing program 3 (id=1186): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x20, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0x0) 351.009154ms ago: executing program 1 (id=1187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 486.767µs ago: executing program 3 (id=1188): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f00000001c0)) 0s ago: executing program 5 (id=1189): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x280, 0x31) kernel console output (not intermixed with test programs): ing later): interface not active [ 109.759467][ T5760] team0: Port device team_slave_0 added [ 109.808292][ T5760] team0: Port device team_slave_1 added [ 110.408266][ T5823] hsr_slave_0: entered promiscuous mode [ 110.872865][ T5823] hsr_slave_1: entered promiscuous mode [ 111.091379][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.354851][ T5823] Cannot create hsr debugfs directory [ 111.408189][ T81] bridge_slave_1: left allmulticast mode [ 111.458628][ T81] bridge_slave_1: left promiscuous mode [ 111.530465][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.626393][ T81] bridge_slave_0: left allmulticast mode [ 111.669525][ T81] bridge_slave_0: left promiscuous mode [ 111.941174][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.206571][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.240915][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.259673][ T81] bond0 (unregistering): Released all slaves [ 113.312308][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.349973][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.443951][ T5760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.513601][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 113.637845][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.680146][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.901232][ T5760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.800269][ T47] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.027016][ T47] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.061022][ T47] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 115.103933][ T5760] hsr_slave_0: entered promiscuous mode [ 115.109006][ T47] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.120136][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.165860][ T6016] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 115.203809][ T47] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 115.220556][ T5760] hsr_slave_1: entered promiscuous mode [ 115.293613][ T5760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.333825][ T5760] Cannot create hsr debugfs directory [ 115.502206][ T6037] loop0: detected capacity change from 0 to 128 [ 115.621592][ T47] usb 4-1: USB disconnect, device number 5 [ 116.632403][ T81] hsr_slave_0: left promiscuous mode [ 116.677269][ T81] hsr_slave_1: left promiscuous mode [ 116.731576][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.739119][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.785355][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.798056][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.892560][ T81] veth1_macvtap: left promiscuous mode [ 116.911612][ T81] veth0_macvtap: left promiscuous mode [ 116.923548][ T81] veth1_vlan: left promiscuous mode [ 116.935757][ T81] veth0_vlan: left promiscuous mode [ 117.975135][ T6084] loop3: detected capacity change from 0 to 128 [ 118.406323][ T5652] Allocator stuck? Waited for 30 seconds [ 118.406403][ T5652] Allocator debug: [ 118.406444][ T5652] capacity1536 [ 118.406485][ T5652] reserved 31232 [ 118.406528][ T5652] hidden 0 [ 118.406570][ T5652] btree 0 [ 118.406584][ T5652] data 0 [ 118.406596][ T5652] cached 0 [ 118.406640][ T5652] reserved 0 [ 118.406681][ T5652] online_reserved 768 [ 118.406723][ T5652] nr_inodes 0 [ 118.406764][ T5652] [ 118.406804][ T5652] freelist_wait waiting [ 118.406853][ T5652] open buckets allocated1 [ 118.406992][ T5652] open buckets total 1024 [ 118.407034][ T5652] open_buckets_wait empty [ 118.407076][ T5652] open_buckets_btree 0 [ 118.407118][ T5652] open_buckets_user 0 [ 118.407159][ T5652] btree reserve cache 0 [ 118.407235][ T5652] [ 118.407276][ T5652] Dev 0: [ 118.407318][ T5652] buckets sectors fragmented [ 118.407334][ T5652] free 0 0 0 [ 118.407349][ T5652] sb 0 0 0 [ 118.407364][ T5652] journal 0 0 0 [ 118.407380][ T5652] btree 0 0 0 [ 118.407395][ T5652] user 0 0 0 [ 118.407410][ T5652] cached 0 0 0 [ 118.407425][ T5652] parity 0 0 0 [ 118.407441][ T5652] stripe 0 0 0 [ 118.407733][ T5652] need_gc_gens 0 0 0 [ 118.407778][ T5652] need_discard 0 0 0 [ 118.407827][ T5652] unstriped 0 0 0 [ 118.407871][ T5652] capacity 128 [ 118.407912][ T5652] [ 118.407952][ T5652] reserves: [ 118.408850][ T5652] stripe 60 [ 118.409219][ T5652] normal 58 [ 118.409484][ T5652] copygc 56 [ 118.409823][ T5652] btree 28 [ 118.414354][ T5652] btree_copygc 0 [ 118.414731][ T5652] reclaim 0 [ 118.415533][ T5652] interior_updates 0 [ 118.415952][ T5652] [ 118.416533][ T5652] open buckets 0 [ 118.417276][ T5652] buckets to invalidate 0 [ 118.418236][ T5652] [ 118.420420][ T5652] Copygc debug: [ 118.420941][ T5652] running: 1 [ 118.421615][ T5652] copygc_wait:0 [ 118.421983][ T5652] copygc_wait_at:0 [ 118.422328][ T5652] Currently waiting for:0 B [ 118.422687][ T5652] Currently waiting since:640 KiB [ 118.423012][ T5652] Currently calculated wait:0 B [ 118.423167][ T5652] [ 118.423208][ T5652] Journal debug: [ 118.423404][ T5652] flags: running,may_skip_flush [ 118.423448][ T5652] dirty journal entries: 2/32768 [ 118.423775][ T5652] seq: 10 [ 118.424689][ T5652] seq_ondisk: 9 [ 118.424981][ T5652] last_seq: 9 [ 118.425881][ T5652] last_seq_ondisk: 9 [ 118.426173][ T5652] flushed_seq_ondisk: 9 [ 118.426422][ T5652] watermark: stripe [ 118.426892][ T5652] each entry reserved: 321 [ 118.427199][ T5652] nr flush writes: 2 [ 118.427473][ T5652] nr noflush writes: 0 [ 118.427956][ T5652] average write size: 1.66 KiB [ 118.428358][ T5652] nr direct reclaim: 0 [ 118.428705][ T5652] nr background reclaim: 4 [ 118.430875][ T5652] reclaim kicked: 0 [ 118.432389][ T5652] reclaim runs in: 0 ms [ 118.432736][ T5652] blocked: 0 [ 118.433047][ T5652] current entry sectors: 256 [ 118.452844][ T5652] current entry error: ok [ 118.452927][ T5652] current entry: 19/7864 [ 118.452969][ T5652] unwritten entries: [ 118.453010][ T5652] seq: 10 [ 118.453052][ T5652] refcount: 1 [ 118.453094][ T5652] size: 56.0 B [ 118.453207][ T5652] expires: 31 jiffies [ 118.453283][ T5652] flags: need_flush_to_write_buffer [ 118.453326][ T5652] last buf open [ 118.453367][ T5652] space: [ 118.453626][ T5652] discarded 256:1536 [ 118.453669][ T5652] clean ondisk 256:1536 [ 118.453925][ T5652] clean 256:1536 [ 118.453968][ T5652] total 256:2048 [ 118.454010][ T5652] dev 0: [ 118.454084][ T5652] nr 8 [ 118.454126][ T5652] bucket size 256 [ 118.454167][ T5652] available 6:240 [ 118.454210][ T5652] discard_idx 0 [ 118.454580][ T5652] dirty_ondisk 0 (seq 9) [ 118.454643][ T5652] dirty_idx 0 (seq 9) [ 118.454685][ T5652] cur_idx 0 (seq 9) [ 118.454760][ T5652] [ 119.595505][ T81] team0 (unregistering): Port device team_slave_1 removed [ 119.841170][ T5607] Allocator stuck? Waited for 30 seconds [ 119.841233][ T5607] Allocator debug: [ 119.841247][ T5607] capacity1536 [ 119.841260][ T5607] reserved 31232 [ 119.841274][ T5607] hidden 0 [ 119.841288][ T5607] btree 0 [ 119.841302][ T5607] data 0 [ 119.841316][ T5607] cached 0 [ 119.841330][ T5607] reserved 0 [ 119.841343][ T5607] online_reserved 768 [ 119.841358][ T5607] nr_inodes 0 [ 119.841371][ T5607] [ 119.841384][ T5607] freelist_wait waiting [ 119.841398][ T5607] open buckets allocated1 [ 119.841412][ T5607] open buckets total 1024 [ 119.841425][ T5607] open_buckets_wait empty [ 119.841440][ T5607] open_buckets_btree 0 [ 119.841453][ T5607] open_buckets_user 0 [ 119.841467][ T5607] btree reserve cache 0 [ 119.841481][ T5607] [ 119.841493][ T5607] Dev 0: [ 119.841505][ T5607] buckets sectors fragmented [ 119.841521][ T5607] free 0 0 0 [ 119.841538][ T5607] sb 0 0 0 [ 119.841554][ T5607] journal 0 0 0 [ 119.841570][ T5607] btree 0 0 0 [ 119.841586][ T5607] user 0 0 0 [ 119.841602][ T5607] cached 0 0 0 [ 119.841618][ T5607] parity 0 0 0 [ 119.841634][ T5607] stripe 0 0 0 [ 119.841650][ T5607] need_gc_gens 0 0 0 [ 119.841666][ T5607] need_discard 0 0 0 [ 119.841682][ T5607] unstriped 0 0 0 [ 119.841698][ T5607] capacity 128 [ 119.841712][ T5607] [ 119.841724][ T5607] reserves: [ 119.841737][ T5607] stripe 60 [ 119.841751][ T5607] normal 58 [ 119.841764][ T5607] copygc 56 [ 119.841778][ T5607] btree 28 [ 119.841792][ T5607] btree_copygc 0 [ 119.841812][ T5607] reclaim 0 [ 119.841826][ T5607] interior_updates 0 [ 119.841840][ T5607] [ 119.841852][ T5607] open buckets 0 [ 119.841866][ T5607] buckets to invalidate 0 [ 119.841880][ T5607] [ 119.841892][ T5607] Copygc debug: [ 119.841905][ T5607] running: 1 [ 119.841917][ T5607] copygc_wait:0 [ 119.841930][ T5607] copygc_wait_at:0 [ 119.841944][ T5607] Currently waiting for:0 B [ 119.841958][ T5607] Currently waiting since:640 KiB [ 119.841972][ T5607] Currently calculated wait:0 B [ 119.841986][ T5607] [ 119.841998][ T5607] Journal debug: [ 119.842011][ T5607] flags: running,may_skip_flush [ 119.842026][ T5607] dirty journal entries: 2/32768 [ 119.842040][ T5607] seq: 10 [ 119.842054][ T5607] seq_ondisk: 9 [ 119.842068][ T5607] last_seq: 9 [ 119.842082][ T5607] last_seq_ondisk: 9 [ 119.842095][ T5607] flushed_seq_ondisk: 9 [ 119.842109][ T5607] watermark: stripe [ 119.842124][ T5607] each entry reserved: 321 [ 119.842138][ T5607] nr flush writes: 2 [ 119.842152][ T5607] nr noflush writes: 0 [ 119.842166][ T5607] average write size: 1.66 KiB [ 119.842180][ T5607] nr direct reclaim: 0 [ 119.842194][ T5607] nr background reclaim: 4 [ 119.842208][ T5607] reclaim kicked: 0 [ 119.842222][ T5607] reclaim runs in: 0 ms [ 119.842236][ T5607] blocked: 0 [ 119.842250][ T5607] current entry sectors: 256 [ 119.842264][ T5607] current entry error: ok [ 119.842278][ T5607] current entry: 19/7864 [ 119.842292][ T5607] unwritten entries: [ 119.842306][ T5607] seq: 10 [ 119.842320][ T5607] refcount: 1 [ 119.842334][ T5607] size: 56.0 B [ 119.842348][ T5607] expires: 16 jiffies [ 119.842363][ T5607] flags: need_flush_to_write_buffer [ 119.842378][ T5607] last buf open [ 119.842392][ T5607] space: [ 119.842404][ T5607] discarded 256:1536 [ 119.842419][ T5607] clean ondisk 256:1536 [ 119.842439][ T5607] clean 256:1536 [ 119.842454][ T5607] total 256:2048 [ 119.842468][ T5607] dev 0: [ 119.842481][ T5607] nr 8 [ 119.842495][ T5607] bucket size 256 [ 119.842509][ T5607] available 6:240 [ 119.842523][ T5607] discard_idx 0 [ 119.842537][ T5607] dirty_ondisk 0 (seq 9) [ 119.842552][ T5607] dirty_idx 0 (seq 9) [ 119.842567][ T5607] cur_idx 0 (seq 9) [ 119.842581][ T5607] [ 120.097388][ T81] team0 (unregistering): Port device team_slave_0 removed [ 122.560054][ T6159] loop3: detected capacity change from 0 to 512 [ 122.573948][ T6161] binder: 6160:6161 ioctl 4018620d 0 returned -22 [ 122.593988][ T6159] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.630005][ T6161] binder: 6160:6161 ioctl c0306201 20000880 returned -14 [ 122.711849][ T6159] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.285: bg 0: block 64: padding at end of block bitmap is not set [ 122.822981][ T6159] Quota error (device loop3): write_blk: dquota write failed [ 122.840471][ T6159] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 122.870249][ T6159] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.285: Failed to acquire dquot type 0 [ 122.944104][ T6159] EXT4-fs (loop3): 1 truncate cleaned up [ 122.951138][ T6159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.124837][ T5223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.144425][ T5760] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.236101][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 123.427966][ T5760] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.519140][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 123.574505][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 123.626055][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 123.733121][ T5760] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.004723][ T5760] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.411901][ T6185] ALSA: mixer_oss: invalid OSS volume 'verification' [ 124.447523][ T6185] ALSA: mixer_oss: invalid OSS volume 'stack' [ 124.485792][ T6185] ALSA: mixer_oss: invalid OSS volume '' [ 124.575442][ T5760] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 124.670882][ T5760] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 124.699359][ T5760] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 124.969004][ T5760] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.015685][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.268235][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.334869][ T6224] netlink: 48 bytes leftover after parsing attributes in process `syz.2.305'. [ 125.451591][ T1058] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.458764][ T1058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.555390][ T1058] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.562654][ T1058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.583384][ T6229] binder: 6225:6229 ioctl 4018620d 0 returned -22 [ 125.624376][ T6229] binder: 6225:6229 ioctl c0306201 20000880 returned -14 [ 125.966797][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.074947][ T5760] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.108715][ T5823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.135016][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.166019][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.173201][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.493399][ T1058] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.500728][ T1058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.093696][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.164361][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'. [ 127.412791][ T5823] veth0_vlan: entered promiscuous mode [ 127.496637][ T5823] veth1_vlan: entered promiscuous mode [ 127.598591][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.667790][ T5823] veth0_macvtap: entered promiscuous mode [ 127.738053][ T5823] veth1_macvtap: entered promiscuous mode [ 127.787162][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.850630][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.900329][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.938025][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.960456][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.990349][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.010155][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.050354][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.068119][ T6256] ALSA: mixer_oss: invalid OSS volume 'verification' [ 128.070517][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.097588][ T6256] ALSA: mixer_oss: invalid OSS volume 'stack' [ 128.117507][ T6256] ALSA: mixer_oss: invalid OSS volume '' [ 128.137100][ T6256] ALSA: mixer_oss: invalid OSS volume '' [ 128.140139][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.192263][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.435253][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.470703][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.509193][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.530192][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.579675][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.632334][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.670296][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.720191][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.730087][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.800187][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.800882][ T6301] netlink: 48 bytes leftover after parsing attributes in process `syz.2.317'. [ 128.839924][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.856686][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 129.063572][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.086517][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.087425][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.127959][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.173286][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.182454][ T8] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 129.222628][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.240306][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.287187][ T8] usb 4-1: config 0 descriptor?? [ 129.480955][ T5760] veth0_vlan: entered promiscuous mode [ 129.548484][ T6297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.574883][ T5760] veth1_vlan: entered promiscuous mode [ 129.613320][ T6297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.647321][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.657955][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.705786][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.715990][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.843725][ T6328] bond_slave_0: entered promiscuous mode [ 129.849583][ T6328] bond_slave_1: entered promiscuous mode [ 129.855469][ T6328] syz_tun: entered promiscuous mode [ 129.925591][ T6328] vlan0: entered promiscuous mode [ 129.955677][ T6328] bond0: entered promiscuous mode [ 130.000946][ T6328] vlan0: entered allmulticast mode [ 130.049354][ T6328] bond0: entered allmulticast mode [ 130.097154][ T6328] bond_slave_0: entered allmulticast mode [ 130.111979][ T6328] bond_slave_1: entered allmulticast mode [ 130.117745][ T6328] syz_tun: entered allmulticast mode [ 130.231517][ T6328] bond0: left allmulticast mode [ 130.236463][ T6328] bond_slave_0: left allmulticast mode [ 130.271246][ T6328] bond_slave_1: left allmulticast mode [ 130.276793][ T6328] syz_tun: left allmulticast mode [ 130.304063][ T6328] bond0: left promiscuous mode [ 130.329035][ T6328] bond_slave_0: left promiscuous mode [ 130.334711][ T6328] bond_slave_1: left promiscuous mode [ 130.340186][ T6328] syz_tun: left promiscuous mode [ 130.434729][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.324'. [ 130.461199][ T6333] netlink: 20 bytes leftover after parsing attributes in process `syz.5.324'. [ 130.482560][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 130.494093][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 130.514534][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'. [ 130.538403][ T8] usb 4-1: USB disconnect, device number 6 [ 130.557488][ T5760] veth0_macvtap: entered promiscuous mode [ 130.676682][ T5760] veth1_macvtap: entered promiscuous mode [ 130.771529][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.805703][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.810062][ T6356] netlink: 48 bytes leftover after parsing attributes in process `syz.5.330'. [ 130.836275][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.879674][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.902191][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.924468][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.947505][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.979802][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.018653][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.054614][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.085574][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.122210][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.171554][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.232449][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.246581][ T6366] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.297171][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.355929][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.419962][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.442619][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.497051][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.551504][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.585813][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.631517][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.650556][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.681743][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.696876][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.732893][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.813355][ T5760] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.860453][ T5760] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.890540][ T5760] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.899289][ T5760] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.055725][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 132.076163][ T6402] binder: 6400:6402 ioctl c0306201 0 returned -14 [ 132.103363][ T6402] binder: 6400:6402 ioctl c0306201 20000880 returned -14 [ 132.218660][ T1058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.274701][ T1058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.408574][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.433754][ T1257] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.442687][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.447494][ T1257] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.546238][ T6416] netlink: 'syz.1.347': attribute type 27 has an invalid length. [ 132.980241][ T938] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 133.150237][ T938] usb 6-1: device descriptor read/64, error -71 [ 133.221220][ T6435] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 133.239003][ T6441] binder: 6440:6441 ioctl c0306201 0 returned -14 [ 133.275367][ T6441] binder: 6440:6441 ioctl c0306201 20000880 returned -14 [ 133.401658][ T938] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 133.545430][ T6447] loop1: detected capacity change from 0 to 256 [ 133.560403][ T938] usb 6-1: device descriptor read/64, error -71 [ 133.575559][ T6447] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.629662][ T6420] loop3: detected capacity change from 0 to 32768 [ 133.649716][ T6447] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.681565][ T938] usb usb6-port1: attempt power cycle [ 133.738069][ T6420] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): filesystem UUID already open [ 133.748857][ T6420] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 133.842509][ T5238] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 134.010424][ T5238] usb 3-1: Using ep0 maxpacket: 16 [ 134.047701][ T5238] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 134.057303][ T938] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 134.071781][ T6420] bcachefs: bch2_fs_get_tree() error: EINVAL [ 134.112056][ T5238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.130340][ T938] usb 6-1: device descriptor read/8, error -71 [ 134.198782][ T5238] usb 3-1: config 0 descriptor?? [ 135.010531][ T5238] usb 3-1: interface 1 not found [ 135.081636][ T6420] binder: Bad value for 'stats' [ 135.090943][ T6420] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 135.140196][ T938] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 135.173971][ T29] audit: type=1326 audit(1726782249.702:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.4.363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x0 [ 135.193411][ T938] usb 6-1: device descriptor read/8, error -71 [ 135.239175][ T6420] loop3: detected capacity change from 0 to 2048 [ 135.268750][ T8] usb 3-1: USB disconnect, device number 3 [ 135.286115][ T6469] netlink: 'syz.1.364': attribute type 27 has an invalid length. [ 135.323440][ T6420] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.361617][ T938] usb usb6-port1: unable to enumerate USB device [ 135.777177][ T6477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.367'. [ 136.800462][ T938] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 136.990423][ T938] usb 1-1: Using ep0 maxpacket: 32 [ 137.017616][ T938] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 137.036823][ T938] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 137.065672][ T6499] loop3: detected capacity change from 0 to 256 [ 137.090729][ T938] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 137.099782][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.167804][ T6499] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.196391][ T938] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 137.273218][ T938] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 137.327533][ T6499] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.976585][ T6506] netlink: 'syz.1.378': attribute type 27 has an invalid length. [ 138.145274][ T938] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 138.154527][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.199626][ T938] usb 1-1: config 0 descriptor?? [ 138.677309][ T938] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 138.692431][ T938] usb 1-1: USB disconnect, device number 2 [ 138.704593][ T938] usblp0: removed [ 139.330215][ T29] audit: type=1326 audit(1726782253.842:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.2.384" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb573f7def9 code=0x0 [ 139.580422][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.810172][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 139.832673][ T8] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 139.875628][ T8] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 139.930179][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 139.980778][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 140.023030][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 140.091049][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 140.123571][ T8] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 140.134336][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.175513][ T8] usb 1-1: config 0 descriptor?? [ 141.277372][ T8] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 141.295688][ T8] usb 1-1: USB disconnect, device number 3 [ 141.304850][ T8] usblp0: removed [ 142.742391][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'. [ 142.775368][ T6594] bridge_slave_1: left allmulticast mode [ 142.803508][ T6594] bridge_slave_1: left promiscuous mode [ 142.871954][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.995733][ T6594] bridge_slave_0: left allmulticast mode [ 143.046207][ T6594] bridge_slave_0: left promiscuous mode [ 143.083214][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.076972][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.421'. [ 144.091075][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 144.196046][ T29] audit: type=1326 audit(1726782258.722:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.5.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765557def9 code=0x7ffc0000 [ 144.218247][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.247393][ T6619] loop2: detected capacity change from 0 to 512 [ 144.310644][ T6619] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.338587][ T29] audit: type=1326 audit(1726782258.722:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.5.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765557def9 code=0x7ffc0000 [ 144.426036][ T6619] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.423: bg 0: block 64: padding at end of block bitmap is not set [ 144.428848][ T29] audit: type=1326 audit(1726782258.722:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.5.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f765557def9 code=0x7ffc0000 [ 144.464320][ T29] audit: type=1326 audit(1726782258.722:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.5.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765557def9 code=0x7ffc0000 [ 144.486477][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.496250][ T29] audit: type=1326 audit(1726782258.762:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.5.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f765557def9 code=0x7ffc0000 [ 144.504153][ T6619] Quota error (device loop2): write_blk: dquota write failed [ 144.518485][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.519338][ T29] audit: type=1326 audit(1726782258.762:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.5.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765557def9 code=0x7ffc0000 [ 144.554718][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.564425][ T29] audit: type=1326 audit(1726782258.762:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.5.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f765557def9 code=0x7ffc0000 [ 144.586580][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.603027][ T6619] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 144.652318][ T29] audit: type=1326 audit(1726782258.762:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.5.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765557def9 code=0x7ffc0000 [ 144.686333][ T6619] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.423: Failed to acquire dquot type 0 [ 144.761521][ T6619] EXT4-fs (loop2): 1 truncate cleaned up [ 144.776460][ T6619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.810607][ T6636] loop0: detected capacity change from 0 to 256 [ 144.828594][ T6636] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.888564][ T6636] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.978608][ T5224] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.990486][ T47] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 145.162879][ T47] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 145.184698][ T47] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 145.219572][ T47] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.463159][ T47] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 145.473278][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.496042][ T47] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 145.510827][ T47] usb 4-1: invalid MIDI out EP 0 [ 146.384925][ T47] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 146.471637][ T47] usb 4-1: USB disconnect, device number 7 [ 147.040301][ T47] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 147.079148][ T6682] fuse: Bad value for 'fd' [ 147.220174][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 147.250303][ T47] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.288385][ T47] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.533160][ T6692] loop2: detected capacity change from 0 to 256 [ 147.567185][ T6692] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.590263][ T47] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.599357][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.614278][ T47] usb 5-1: Product: syz [ 147.618599][ T47] usb 5-1: Manufacturer: syz [ 147.640809][ T47] usb 5-1: SerialNumber: syz [ 147.802495][ T6694] binder: 6693:6694 ioctl c0306201 20000880 returned -14 [ 148.191804][ T6692] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.250996][ T47] usb 5-1: skipping empty audio interface (v1) [ 148.359778][ T47] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 148.472680][ T47] usb 5-1: USB disconnect, device number 2 [ 148.561625][ T5243] udevd[5243]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.271843][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 149.271865][ T29] audit: type=1326 audit(1726782263.802:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6726 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 149.409528][ T29] audit: type=1326 audit(1726782263.802:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6726 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 149.529474][ T6732] binder: 6731:6732 ioctl c0306201 20000880 returned -14 [ 149.536696][ T29] audit: type=1326 audit(1726782263.802:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6726 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 149.558534][ T6735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.466'. [ 149.605073][ T6735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.466'. [ 149.640954][ T29] audit: type=1326 audit(1726782263.832:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6726 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 149.749074][ T29] audit: type=1326 audit(1726782263.832:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6726 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 149.843135][ T29] audit: type=1326 audit(1726782263.832:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6726 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 149.949137][ T29] audit: type=1326 audit(1726782263.832:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6726 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 150.034759][ T29] audit: type=1326 audit(1726782263.832:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6726 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 150.060806][ T5313] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 150.084794][ T29] audit: type=1326 audit(1726782263.832:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6726 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 150.143565][ T6753] loop3: detected capacity change from 0 to 256 [ 150.148262][ T29] audit: type=1326 audit(1726782263.842:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6726 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 150.182887][ T6753] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.247577][ T6753] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.280206][ T5313] usb 6-1: Using ep0 maxpacket: 16 [ 150.300273][ T5313] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 150.329435][ T5313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.392829][ T5313] usb 6-1: config 0 descriptor?? [ 150.444934][ T5313] usb 6-1: interface 1 not found [ 150.633752][ T5313] usb 6-1: USB disconnect, device number 6 [ 150.857525][ T6774] binder: 6773:6774 ioctl c0306201 20000880 returned -14 [ 150.992676][ T6778] loop0: detected capacity change from 0 to 2048 [ 151.061211][ T6778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.088582][ T6785] netlink: 16 bytes leftover after parsing attributes in process `syz.4.484'. [ 151.124410][ T6785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.484'. [ 151.761010][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 151.824471][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.491'. [ 152.044508][ T5238] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 152.273527][ T5238] usb 2-1: Using ep0 maxpacket: 32 [ 152.311086][ T5238] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 152.340767][ T5238] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 152.377060][ T5238] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 152.434189][ T5238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.455033][ T5238] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 152.510517][ T5238] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 152.556649][ T5238] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 152.656071][ T6824] loop2: detected capacity change from 0 to 256 [ 152.715052][ T6824] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.805846][ T5238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.821593][ T5238] usb 2-1: config 0 descriptor?? [ 152.829889][ T6824] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.930391][ T938] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 153.046102][ T5238] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 153.099132][ T5238] usb 2-1: USB disconnect, device number 3 [ 153.110214][ T938] usb 4-1: Using ep0 maxpacket: 16 [ 153.130734][ T938] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 153.147692][ T5238] usblp0: removed [ 153.169494][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.207569][ T938] usb 4-1: config 0 descriptor?? [ 153.246166][ T938] usb 4-1: interface 1 not found [ 153.445314][ T8] usb 4-1: USB disconnect, device number 8 [ 153.590187][ T5238] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 153.770227][ T5238] usb 2-1: Using ep0 maxpacket: 32 [ 153.783358][ T5238] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 153.812652][ T5238] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 153.867683][ T5238] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 153.892898][ T5238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.930159][ T5238] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 153.970162][ T5238] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 154.020241][ T5238] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 154.069290][ T5238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.109092][ T5238] usb 2-1: config 0 descriptor?? [ 154.330454][ T5238] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 154.367706][ T5225] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.386017][ T6788] coredump: 224(syz.5.485): interrupted: fatal signal pending [ 154.420434][ T6788] coredump: 224(syz.5.485): written to core: VMAs: 34, size 80642048; core: 36825738 bytes, pos 57536512 [ 154.751370][ T5325] usb 2-1: USB disconnect, device number 4 [ 155.604238][ T5325] usblp0: removed [ 155.867899][ T6868] loop2: detected capacity change from 0 to 256 [ 155.901006][ T6868] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.022873][ T6868] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.068730][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 156.068752][ T29] audit: type=1326 audit(1726782270.592:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 156.150505][ T29] audit: type=1326 audit(1726782270.592:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 156.230374][ T29] audit: type=1326 audit(1726782270.622:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 156.376660][ T29] audit: type=1326 audit(1726782270.642:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 156.481016][ T29] audit: type=1326 audit(1726782270.642:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 156.555394][ T29] audit: type=1326 audit(1726782270.642:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5e7b3affe5 code=0x7ffc0000 [ 156.632317][ T29] audit: type=1326 audit(1726782270.642:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 156.711115][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 156.720587][ T5325] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 156.743237][ T29] audit: type=1326 audit(1726782270.642:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 156.811275][ T29] audit: type=1326 audit(1726782270.642:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 156.836549][ T29] audit: type=1326 audit(1726782270.642:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 156.890272][ T5325] usb 4-1: Using ep0 maxpacket: 16 [ 156.890315][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 156.897439][ T5325] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 156.911871][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.939039][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.959311][ T5325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.996386][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.001666][ T5325] usb 4-1: config 0 descriptor?? [ 157.014874][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.051058][ T8] usb 2-1: Product: syz [ 157.056753][ T8] usb 2-1: Manufacturer: syz [ 157.070212][ T8] usb 2-1: SerialNumber: syz [ 157.079672][ T5325] usb 4-1: interface 1 not found [ 157.254263][ T5325] usb 4-1: USB disconnect, device number 9 [ 157.330461][ T8] usb 2-1: skipping empty audio interface (v1) [ 157.397178][ T8] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 157.431848][ T8] usb 2-1: USB disconnect, device number 5 [ 157.443426][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.524'. [ 157.492511][ T6898] netlink: 36 bytes leftover after parsing attributes in process `syz.4.524'. [ 157.533781][ T5243] udevd[5243]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 157.535671][ T6898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.823704][ T6898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.855770][ T6914] input: syz1 as /devices/virtual/input/input6 [ 158.937551][ T6918] netlink: 'syz.0.529': attribute type 10 has an invalid length. [ 159.014402][ T6918] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 159.132989][ T6921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'. [ 159.540219][ T5313] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 159.700737][ T5313] usb 3-1: Using ep0 maxpacket: 32 [ 159.739307][ T5313] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 159.788933][ T5313] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 159.822688][ T6936] loop1: detected capacity change from 0 to 256 [ 159.838994][ T6935] loop5: detected capacity change from 0 to 512 [ 159.857124][ T5313] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 159.889944][ T6936] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 159.914257][ T6935] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.938305][ T5313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.948892][ T6936] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.823559][ T6935] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.536: bg 0: block 64: padding at end of block bitmap is not set [ 160.959661][ T6935] EXT4-fs error (device loop5): ext4_acquire_dquot:6848: comm syz.5.536: Failed to acquire dquot type 0 [ 160.968702][ T5313] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 160.981197][ T5313] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 160.995222][ T5313] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 161.006937][ T5313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.017109][ T5313] usb 3-1: config 0 descriptor?? [ 161.030424][ T6935] EXT4-fs (loop5): 1 truncate cleaned up [ 161.173320][ T6935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.358788][ T5313] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 161.561325][ T5313] usb 3-1: USB disconnect, device number 4 [ 162.086509][ T5313] usblp0: removed [ 162.231094][ T5228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.451054][ T5313] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 162.651594][ T5313] usb 3-1: Using ep0 maxpacket: 32 [ 162.689737][ T5313] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 162.722232][ T5313] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 162.764484][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 162.787690][ T5313] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 162.823034][ T5313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.864701][ T5313] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 162.894869][ T5313] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 162.968894][ T5313] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 162.998934][ T6980] fuse: Bad value for 'fd' [ 163.020249][ T5313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.061511][ T5313] usb 3-1: config 0 descriptor?? [ 163.206181][ T5313] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 163.219964][ T5313] usb 3-1: USB disconnect, device number 5 [ 163.228061][ T5313] usblp0: removed [ 164.808709][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 164.808732][ T29] audit: type=1326 audit(1726782279.332:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.0.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ee17def9 code=0x7ffc0000 [ 164.869742][ T29] audit: type=1326 audit(1726782279.332:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.0.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ee17def9 code=0x7ffc0000 [ 164.932003][ T29] audit: type=1326 audit(1726782279.332:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.0.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f63ee17def9 code=0x7ffc0000 [ 165.038906][ T29] audit: type=1326 audit(1726782279.352:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.0.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ee17def9 code=0x7ffc0000 [ 165.156340][ T29] audit: type=1326 audit(1726782279.352:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.0.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ee17def9 code=0x7ffc0000 [ 165.174507][ T7025] IPv6: NLM_F_REPLACE set, but no existing node found! [ 165.255622][ T29] audit: type=1326 audit(1726782279.372:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.0.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f63ee1affe5 code=0x7ffc0000 [ 165.330698][ T29] audit: type=1326 audit(1726782279.372:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.0.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63ee17def9 code=0x7ffc0000 [ 165.380892][ T7029] fuse: Bad value for 'fd' [ 165.471783][ T29] audit: type=1326 audit(1726782279.372:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.0.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ee17def9 code=0x7ffc0000 [ 165.560322][ T29] audit: type=1326 audit(1726782279.372:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.0.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ee17def9 code=0x7ffc0000 [ 165.659261][ T29] audit: type=1326 audit(1726782279.372:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.0.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63ee17def9 code=0x7ffc0000 [ 165.848241][ T7041] binder: 7040:7041 ioctl c0306201 20000880 returned -14 [ 165.927500][ T7047] loop1: detected capacity change from 0 to 512 [ 166.007408][ T7047] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 166.099514][ T7047] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.574: bg 0: block 64: padding at end of block bitmap is not set [ 166.186118][ T7047] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.574: Failed to acquire dquot type 0 [ 166.283530][ T7047] EXT4-fs (loop1): 1 truncate cleaned up [ 166.317492][ T7047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.128002][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.433196][ T7072] fuse: Bad value for 'fd' [ 167.609127][ T7078] warning: `syz.1.581' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 167.928841][ T7088] binder: 7087:7088 ioctl c0306201 20000880 returned -14 [ 168.239008][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 168.245773][ T5290] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 168.450271][ T5290] usb 1-1: Using ep0 maxpacket: 32 [ 168.463418][ T5290] usb 1-1: no configurations [ 168.468047][ T5290] usb 1-1: can't read configurations, error -22 [ 168.650871][ T5290] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 168.840243][ T5290] usb 1-1: Using ep0 maxpacket: 32 [ 168.896705][ T5290] usb 1-1: no configurations [ 169.142624][ T5290] usb 1-1: can't read configurations, error -22 [ 169.149701][ T5290] usb usb1-port1: attempt power cycle [ 169.500821][ T5290] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 169.820059][ T5290] usb 1-1: Using ep0 maxpacket: 32 [ 169.868426][ T5290] usb 1-1: no configurations [ 169.915794][ T5290] usb 1-1: can't read configurations, error -22 [ 170.032118][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 170.051075][ T7122] netlink: 36 bytes leftover after parsing attributes in process `syz.1.601'. [ 170.122589][ T5290] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 170.142899][ T7127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.202051][ T5290] usb 1-1: Using ep0 maxpacket: 32 [ 170.240719][ T5290] usb 1-1: no configurations [ 170.245376][ T5290] usb 1-1: can't read configurations, error -22 [ 170.285300][ T5290] usb usb1-port1: unable to enumerate USB device [ 170.352976][ T7127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.365268][ T7131] fuse: Unknown parameter '0x0000000000000003' [ 170.587352][ T7139] loop3: detected capacity change from 0 to 512 [ 170.783953][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 170.784004][ T29] audit: type=1326 audit(1726782285.182:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb573f7def9 code=0x7ffc0000 [ 171.126917][ T8] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 171.281628][ T7139] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.303932][ T29] audit: type=1326 audit(1726782285.182:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb573f7def9 code=0x7ffc0000 [ 171.375646][ T29] audit: type=1326 audit(1726782285.182:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb573f7def9 code=0x7ffc0000 [ 171.452135][ T29] audit: type=1326 audit(1726782285.262:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb573f7def9 code=0x7ffc0000 [ 171.472189][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 171.540548][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 171.552969][ T29] audit: type=1326 audit(1726782285.262:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb573f7def9 code=0x7ffc0000 [ 171.575618][ T7139] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.608: bg 0: block 64: padding at end of block bitmap is not set [ 171.615393][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 171.643689][ T7139] Quota error (device loop3): write_blk: dquota write failed [ 171.671988][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 171.690319][ T7139] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 171.708224][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.612'. [ 171.718158][ T29] audit: type=1326 audit(1726782285.292:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7144 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb573faffe5 code=0x7ffc0000 [ 171.758396][ T7139] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.608: Failed to acquire dquot type 0 [ 171.763984][ T8] usb 6-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 171.779295][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.787775][ T29] audit: type=1326 audit(1726782285.292:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb573f7def9 code=0x7ffc0000 [ 171.827572][ T8] usb 6-1: Product: syz [ 171.828470][ T7139] EXT4-fs (loop3): 1 truncate cleaned up [ 171.840196][ T8] usb 6-1: Manufacturer: syz [ 171.850212][ T8] usb 6-1: SerialNumber: syz [ 171.862357][ T8] usb 6-1: config 0 descriptor?? [ 171.867453][ T29] audit: type=1326 audit(1726782285.302:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb573f7def9 code=0x7ffc0000 [ 171.867922][ T7139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.895810][ T8] cypress_m8 6-1:0.0: HID->COM RS232 Adapter converter detected [ 171.940751][ T8] cyphidcom ttyUSB0: required endpoint is missing [ 171.990526][ T5407] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 172.032597][ T5223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.161424][ T5407] usb 3-1: Using ep0 maxpacket: 32 [ 172.184244][ T5407] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 172.205472][ T5407] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 172.236806][ T5407] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 172.272321][ T5407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 172.301136][ T5407] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 172.332229][ T5407] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 172.381127][ T5407] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 172.411330][ T5407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.432647][ T5407] usb 3-1: config 0 descriptor?? [ 172.642783][ T5407] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 172.706583][ T5407] usb 3-1: USB disconnect, device number 6 [ 172.750461][ T938] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 172.810606][ T5407] usblp0: removed [ 172.910634][ T938] usb 4-1: Using ep0 maxpacket: 8 [ 172.932195][ T938] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.960306][ T938] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.983475][ T938] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.000167][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.030410][ T938] usb 4-1: Product: syz [ 173.034640][ T938] usb 4-1: Manufacturer: syz [ 173.062340][ T938] usb 4-1: SerialNumber: syz [ 173.150297][ T5407] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 173.301504][ T5238] usb 6-1: USB disconnect, device number 7 [ 173.311820][ T938] usb 4-1: skipping empty audio interface (v1) [ 173.330243][ T5407] usb 3-1: Using ep0 maxpacket: 32 [ 173.346704][ T5238] cypress_m8 6-1:0.0: device disconnected [ 173.360467][ T5313] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 173.365245][ T5407] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 173.402761][ T5407] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 173.430334][ T5407] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 173.463800][ T5407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 173.533567][ T938] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 173.550203][ T5407] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 173.636155][ T5407] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 173.671878][ T938] usb 4-1: USB disconnect, device number 10 [ 173.702479][ T5313] usb 1-1: Using ep0 maxpacket: 32 [ 173.857473][ T5313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.211278][ T5313] usb 1-1: config 0 has no interfaces? [ 174.238954][ T5313] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 174.249390][ T5313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.267432][ T5313] usb 1-1: Product: syz [ 174.272190][ T5313] usb 1-1: Manufacturer: syz [ 174.277146][ T5313] usb 1-1: SerialNumber: syz [ 174.377915][ T5407] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 174.387866][ T5407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.405257][ T5243] udevd[5243]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.405558][ T5313] usb 1-1: config 0 descriptor?? [ 174.446360][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.626'. [ 174.463831][ T5407] usb 3-1: config 0 descriptor?? [ 174.501565][ T7191] netlink: 36 bytes leftover after parsing attributes in process `syz.5.626'. [ 174.637726][ T7191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.763403][ T5407] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 174.810017][ T7193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.835994][ T5407] usb 3-1: USB disconnect, device number 7 [ 174.873504][ T5407] usblp0: removed [ 175.018472][ T7198] loop2: detected capacity change from 0 to 512 [ 175.029581][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 175.092092][ T7198] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.211151][ T7198] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.629: bg 0: block 64: padding at end of block bitmap is not set [ 175.238266][ T7198] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.629: Failed to acquire dquot type 0 [ 175.287150][ T7198] EXT4-fs (loop2): 1 truncate cleaned up [ 175.320661][ T7198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.473694][ T5224] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.707461][ T7217] Bluetooth: MGMT ver 1.23 [ 176.133065][ T7226] input: syz1 as /devices/virtual/input/input7 [ 176.173583][ T5290] usb 1-1: USB disconnect, device number 8 [ 176.242260][ T7226] netlink: 'syz.1.640': attribute type 10 has an invalid length. [ 176.380881][ T7226] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 176.427341][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 176.552885][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'. [ 176.929252][ T7248] loop1: detected capacity change from 0 to 512 [ 176.968512][ T7248] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.053104][ T7248] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.648: bg 0: block 64: padding at end of block bitmap is not set [ 177.158645][ T7248] __quota_error: 26 callbacks suppressed [ 177.158671][ T7248] Quota error (device loop1): write_blk: dquota write failed [ 177.173436][ T7265] netlink: 168 bytes leftover after parsing attributes in process `syz.5.655'. [ 177.240452][ T5313] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 177.290360][ T7248] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 177.342663][ T7248] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.648: Failed to acquire dquot type 0 [ 177.380541][ T7248] EXT4-fs (loop1): 1 truncate cleaned up [ 177.395346][ T7248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.433271][ T5313] usb 5-1: Using ep0 maxpacket: 8 [ 177.447271][ T5313] usb 5-1: unable to get BOS descriptor or descriptor too short [ 177.465619][ T5313] usb 5-1: config 8 has an invalid interface number: 165 but max is 0 [ 177.488141][ T5313] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 177.513374][ T5313] usb 5-1: config 8 has no interface number 0 [ 177.526921][ T5313] usb 5-1: config 8 interface 165 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 177.558698][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.576778][ T5313] usb 5-1: config 8 interface 165 has no altsetting 0 [ 177.604433][ T5313] usb 5-1: string descriptor 0 read error: -22 [ 177.622223][ T5313] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=32.e3 [ 177.655884][ T5313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.660264][ T5407] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 177.742547][ T5313] ir_toy 5-1:8.165: required endpoints not found [ 177.752951][ T7278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.660'. [ 177.860297][ T5407] usb 6-1: Using ep0 maxpacket: 32 [ 177.872310][ T5407] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.900073][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 177.910624][ T5407] usb 6-1: config 0 has no interfaces? [ 177.924132][ T5313] usb 5-1: USB disconnect, device number 3 [ 177.949681][ T5407] usb 6-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 177.990434][ T5407] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.010000][ T5407] usb 6-1: Product: syz [ 178.030291][ T5407] usb 6-1: Manufacturer: syz [ 178.034969][ T5407] usb 6-1: SerialNumber: syz [ 178.056002][ T5407] usb 6-1: config 0 descriptor?? [ 178.186450][ T7290] binder: 7289:7290 ioctl c0306201 0 returned -14 [ 178.205895][ T7290] binder: 7289:7290 ioctl c0306201 20000880 returned -14 [ 178.904229][ T935] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 179.100313][ T935] usb 5-1: Using ep0 maxpacket: 16 [ 179.127587][ T935] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 179.169440][ T935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.212147][ T935] usb 5-1: config 0 descriptor?? [ 179.227692][ T935] usb 5-1: interface 1 not found [ 179.261135][ T7318] fuse: Unknown parameter '0x0000000000000003' [ 179.420277][ T5407] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.427685][ T935] usb 5-1: USB disconnect, device number 4 [ 179.547978][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 179.581463][ T5407] usb 3-1: Using ep0 maxpacket: 16 [ 179.588339][ T5407] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 179.610203][ T5407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.629561][ T5407] usb 3-1: config 0 descriptor?? [ 179.637851][ T938] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 179.670727][ T5407] usb 3-1: interface 1 not found [ 179.740984][ T7325] binder: 7324:7325 ioctl c0306201 0 returned -14 [ 179.755470][ T7325] binder: 7324:7325 ioctl c0306201 20000880 returned -14 [ 179.812059][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 179.830191][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 179.840071][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 179.880790][ T8] usb 3-1: USB disconnect, device number 8 [ 179.900223][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 179.923145][ T938] usb 4-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 179.940252][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.971198][ T938] usb 4-1: Product: syz [ 179.975529][ T938] usb 4-1: Manufacturer: syz [ 180.000464][ T938] usb 4-1: SerialNumber: syz [ 180.021186][ T938] usb 4-1: config 0 descriptor?? [ 180.033925][ T938] cypress_m8 4-1:0.0: HID->COM RS232 Adapter converter detected [ 180.087557][ T938] cyphidcom ttyUSB0: required endpoint is missing [ 180.487553][ T938] usb 6-1: USB disconnect, device number 8 [ 180.843146][ T7358] binder: 7357:7358 ioctl c0306201 0 returned -14 [ 180.872965][ T7358] binder: 7357:7358 ioctl c0306201 20000880 returned -14 [ 180.921690][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.694'. [ 181.139618][ T7365] loop2: detected capacity change from 0 to 512 [ 181.163846][ T7367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.696'. [ 181.177222][ T7365] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.272615][ T7365] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.695: bg 0: block 64: padding at end of block bitmap is not set [ 181.306139][ T7365] Quota error (device loop2): write_blk: dquota write failed [ 181.439430][ T7365] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 181.469180][ T7365] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.695: Failed to acquire dquot type 0 [ 181.513536][ T7365] EXT4-fs (loop2): 1 truncate cleaned up [ 181.528489][ T7365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.644365][ T5224] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.281521][ T935] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 182.291418][ T938] usb 4-1: USB disconnect, device number 11 [ 182.329215][ T938] cypress_m8 4-1:0.0: device disconnected [ 182.509195][ T935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.547144][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.5.710'. [ 182.558609][ T935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.581798][ T935] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 182.640185][ T935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.686940][ T935] usb 3-1: config 0 descriptor?? [ 182.948067][ T7389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.010989][ T7389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.172563][ T7420] vcan0: entered promiscuous mode [ 183.172765][ T7420] vlan2: entered promiscuous mode [ 183.172884][ T7420] vlan2: entered allmulticast mode [ 183.172903][ T7420] vcan0: entered allmulticast mode [ 183.200617][ T7420] vcan0: left allmulticast mode [ 183.200756][ T7420] vcan0: left promiscuous mode [ 183.232590][ T7426] fuse: Unknown parameter '0x0000000000000003' [ 183.333398][ T7427] loop0: detected capacity change from 0 to 2048 [ 183.379826][ T7427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.475696][ T29] audit: type=1800 audit(1726782298.002:514): pid=7427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.721" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 183.650610][ T938] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 183.816029][ T938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 183.816077][ T938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 183.816107][ T938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 183.816141][ T938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 183.818078][ T938] usb 6-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 183.818116][ T938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.818144][ T938] usb 6-1: Product: syz [ 183.818164][ T938] usb 6-1: Manufacturer: syz [ 183.818185][ T938] usb 6-1: SerialNumber: syz [ 184.020306][ T5242] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 184.020588][ T5242] Bluetooth: hci2: Injecting HCI hardware error event [ 184.023911][ T5249] Bluetooth: hci2: hardware error 0x00 [ 184.341512][ T938] usb 6-1: config 0 descriptor?? [ 184.345720][ T938] cypress_m8 6-1:0.0: HID->COM RS232 Adapter converter detected [ 184.365476][ T938] cyphidcom ttyUSB0: required endpoint is missing [ 184.368829][ T5225] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.860506][ T935] usbhid 3-1:0.0: can't add hid device: -71 [ 184.889476][ T935] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 184.902442][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 184.923209][ T935] usb 3-1: USB disconnect, device number 9 [ 184.963163][ T7466] netlink: 36 bytes leftover after parsing attributes in process `syz.4.733'. [ 185.016273][ T7463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.161292][ T7462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.570423][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'. [ 185.784664][ T7480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.740'. [ 186.060193][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 186.170200][ T5249] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 186.240517][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 186.290223][ T8] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 186.300219][ T5290] usb 6-1: USB disconnect, device number 9 [ 186.319433][ T8] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 186.359411][ T5290] cypress_m8 6-1:0.0: device disconnected [ 186.395808][ T7489] 9pnet_fd: Insufficient options for proto=fd [ 186.779169][ T7468] loop1: detected capacity change from 0 to 32768 [ 186.821931][ T7491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.744'. [ 186.975948][ T7468] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): filesystem UUID already open [ 187.042177][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 187.051406][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 187.064034][ T7468] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 187.080388][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 187.142020][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 187.215366][ T8] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 187.264208][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.321388][ T8] usb 4-1: config 0 descriptor?? [ 187.452885][ T7468] bcachefs: bch2_fs_get_tree() error: EINVAL [ 187.549047][ T8] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 187.632235][ T8] usb 4-1: USB disconnect, device number 12 [ 187.678482][ T8] usblp0: removed [ 187.955130][ T7468] binder: Bad value for 'stats' [ 188.000653][ T7468] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 188.069942][ T7468] loop1: detected capacity change from 0 to 2048 [ 188.103557][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 188.145341][ T7468] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.300364][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 188.332257][ T8] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 188.350291][ T8] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 188.375861][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 188.420248][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 188.450504][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 188.480380][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 188.503057][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 188.529496][ T8] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 188.553190][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.562222][ T7523] netlink: 36 bytes leftover after parsing attributes in process `syz.4.754'. [ 188.624182][ T8] usb 4-1: config 0 descriptor?? [ 188.669779][ T7526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.746440][ T7529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.758'. [ 188.906584][ T7532] loop5: detected capacity change from 0 to 2048 [ 188.989519][ T7532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.011999][ T8] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 189.061654][ T29] audit: type=1800 audit(1726782303.592:515): pid=7532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.759" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 189.110332][ T5407] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 189.193840][ T7543] netlink: 'syz.0.761': attribute type 10 has an invalid length. [ 189.255483][ T7541] input: syz1 as /devices/virtual/input/input8 [ 189.270309][ T5407] usb 2-1: Using ep0 maxpacket: 16 [ 189.280693][ T8] usb 4-1: USB disconnect, device number 13 [ 189.320581][ T5407] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 189.348960][ T8] usblp0: removed [ 189.378517][ T5407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.034005][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 190.051336][ T5407] usb 2-1: config 0 descriptor?? [ 190.061526][ T5407] usb 2-1: interface 1 not found [ 190.122441][ T5228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.303302][ T8] usb 2-1: USB disconnect, device number 6 [ 190.603322][ T7571] netlink: 24 bytes leftover after parsing attributes in process `syz.5.773'. [ 190.824661][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.775'. [ 190.845994][ T5230] Bluetooth: hci5: command 0x0406 tx timeout [ 190.852154][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 191.064315][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 191.113318][ T7580] netlink: 36 bytes leftover after parsing attributes in process `syz.3.777'. [ 191.170256][ T47] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 191.178317][ T7580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.316548][ T7561] loop0: detected capacity change from 0 to 32768 [ 191.364613][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 191.382716][ T47] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 191.384085][ T7588] loop5: detected capacity change from 0 to 2048 [ 191.398783][ T47] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 191.441050][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 191.475514][ T7588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.500303][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 191.508947][ T7561] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): filesystem UUID already open [ 191.521836][ T47] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 191.532089][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 191.546236][ T47] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 191.559362][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.567372][ T7561] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 191.613947][ T47] usb 3-1: config 0 descriptor?? [ 191.660260][ T29] audit: type=1800 audit(1726782306.182:516): pid=7588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.779" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 191.925425][ T47] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 191.939469][ T47] usb 3-1: USB disconnect, device number 10 [ 191.958294][ T7561] bcachefs: bch2_fs_get_tree() error: EINVAL [ 191.972017][ T47] usblp0: removed [ 192.422795][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 192.570261][ T47] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 192.663398][ T5228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.810329][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 192.837448][ T47] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 192.870601][ T47] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 192.879217][ T7561] binder: Bad value for 'stats' [ 192.886061][ T7561] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 192.897522][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 192.933540][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 192.960788][ T47] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 192.995788][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 193.016454][ T47] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 193.027472][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.032367][ T7618] loop0: detected capacity change from 0 to 2048 [ 193.040072][ T47] usb 3-1: config 0 descriptor?? [ 193.126411][ T7618] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.290836][ T47] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 193.560525][ T47] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 193.753107][ T47] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 193.806281][ T47] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 193.819078][ T935] usb 3-1: USB disconnect, device number 11 [ 193.855029][ T935] usblp0: removed [ 193.862702][ T47] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 193.877005][ T1257] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.884178][ T1257] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.941302][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.975219][ T7620] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 193.995983][ T47] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 194.115055][ T7640] loop1: detected capacity change from 0 to 2048 [ 194.173716][ T7640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.212099][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 194.253156][ T8] usb 4-1: USB disconnect, device number 14 [ 194.321360][ T29] audit: type=1800 audit(1726782308.852:517): pid=7640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.797" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 194.434798][ T5249] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 194.444388][ T5249] Bluetooth: hci7: Injecting HCI hardware error event [ 194.453590][ T5242] Bluetooth: hci7: hardware error 0x00 [ 195.299356][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.300077][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 195.900317][ T5290] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 195.920985][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.812'. [ 196.010603][ T7678] syz.3.813 uses obsolete (PF_INET,SOCK_PACKET) [ 196.012804][ T7680] netlink: 92 bytes leftover after parsing attributes in process `syz.1.814'. [ 196.087794][ T5290] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.130306][ T5290] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.174715][ T5290] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 196.190638][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 196.204648][ T5290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.232037][ T5290] usb 6-1: config 0 descriptor?? [ 196.370265][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 196.394603][ T8] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 196.414900][ T8] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 196.444034][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 196.454216][ T5238] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 196.456444][ T7668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.473291][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 196.484486][ T7668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.526084][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 196.554727][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 196.590646][ T8] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 196.590687][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.618876][ T8] usb 3-1: config 0 descriptor?? [ 196.627237][ T5238] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 196.627311][ T5238] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 196.627356][ T5238] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 196.627388][ T5238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.634008][ T7682] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 196.663997][ T5238] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.707742][ T7687] bridge0: entered promiscuous mode [ 196.708045][ T7687] vlan2: entered promiscuous mode [ 196.708246][ T7687] vlan2: entered allmulticast mode [ 196.708266][ T7687] bridge0: entered allmulticast mode [ 196.755048][ T7687] bridge0: left allmulticast mode [ 196.755265][ T7687] bridge0: left promiscuous mode [ 196.833461][ T5242] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 196.850515][ T8] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 196.866491][ T8] usb 3-1: USB disconnect, device number 12 [ 196.873852][ T5238] usb 2-1: USB disconnect, device number 7 [ 196.985510][ T8] usblp0: removed [ 197.203580][ T7663] binder: Bad value for 'stats' [ 197.281387][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'. [ 197.380325][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 197.481847][ T5290] usbhid 6-1:0.0: can't add hid device: -71 [ 197.506487][ T5290] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 197.530187][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 197.544729][ T8] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 197.551177][ T5290] usb 6-1: USB disconnect, device number 10 [ 197.586801][ T8] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 197.642689][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 197.680175][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 197.760676][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 197.800165][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 197.844093][ T8] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 197.873668][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.921211][ T8] usb 3-1: config 0 descriptor?? [ 198.136918][ T8] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 198.197474][ C1] Unknown status report in ack skb [ 198.689710][ T8] usb 3-1: USB disconnect, device number 13 [ 198.760695][ T8] usblp0: removed [ 199.271781][ T7751] netlink: 44 bytes leftover after parsing attributes in process `syz.3.844'. [ 199.300373][ T7752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.362226][ T7753] netlink: 44 bytes leftover after parsing attributes in process `syz.3.844'. [ 199.490249][ T935] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 199.663926][ T935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.702043][ T935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.744841][ T935] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 199.775849][ T935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.813638][ T935] usb 2-1: config 0 descriptor?? [ 200.153964][ T7763] vcan0: entered promiscuous mode [ 200.154037][ T7763] vlan2: entered promiscuous mode [ 200.154156][ T7763] vlan2: entered allmulticast mode [ 200.154175][ T7763] vcan0: entered allmulticast mode [ 200.178256][ T7763] vcan0: left allmulticast mode [ 200.178424][ T7763] vcan0: left promiscuous mode [ 200.664765][ T935] usbhid 2-1:0.0: can't add hid device: -71 [ 200.687429][ T935] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 200.724001][ T935] usb 2-1: USB disconnect, device number 8 [ 201.180576][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.859'. [ 201.238204][ T7793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.863'. [ 201.358846][ T7793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.863'. [ 201.406263][ T7799] netlink: 52 bytes leftover after parsing attributes in process `syz.3.864'. [ 201.450527][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 201.640175][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 201.685650][ T8] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 201.720328][ T8] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 201.729002][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 201.816455][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.919960][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 201.965301][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 202.663368][ T7816] loop1: detected capacity change from 0 to 2048 [ 202.769299][ T8] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 202.778880][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.821340][ T8] usb 5-1: config 0 descriptor?? [ 202.822613][ T7816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.908906][ T7821] binder: 7820:7821 ioctl c0306201 20000880 returned -14 [ 203.102594][ T8] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 203.242815][ T8] usb 5-1: USB disconnect, device number 5 [ 203.870283][ T5313] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 203.893990][ T7834] netlink: 'syz.2.876': attribute type 10 has an invalid length. [ 203.895809][ T8] usblp0: removed [ 203.904752][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.993299][ T7834] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 204.038680][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 204.048352][ T5313] usb 4-1: Using ep0 maxpacket: 16 [ 204.072111][ T5313] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 204.090881][ T5313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.147409][ T5313] usb 4-1: config 0 descriptor?? [ 204.165769][ T5313] usb 4-1: interface 1 not found [ 204.202360][ T7840] netlink: 52 bytes leftover after parsing attributes in process `syz.5.880'. [ 204.221599][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 204.375409][ T5313] usb 4-1: USB disconnect, device number 15 [ 204.400313][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 204.431272][ T8] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 204.450179][ T8] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 204.458927][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 204.530306][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 204.580357][ T7849] netlink: 28 bytes leftover after parsing attributes in process `syz.5.884'. [ 204.584458][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 204.654222][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 204.690402][ T8] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 204.707896][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.729849][ T7855] netlink: 28 bytes leftover after parsing attributes in process `syz.5.884'. [ 204.775719][ T8] usb 5-1: config 0 descriptor?? [ 204.811178][ T8] usb 5-1: can't set config #0, error -71 [ 204.856499][ T8] usb 5-1: USB disconnect, device number 6 [ 205.671387][ T5238] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 205.890404][ T7869] Cannot find set identified by id 0 to match [ 205.890754][ T5238] usb 3-1: Using ep0 maxpacket: 8 [ 205.953370][ T5238] usb 3-1: unable to get BOS descriptor or descriptor too short [ 205.988122][ T5238] usb 3-1: config 8 has an invalid interface number: 165 but max is 0 [ 206.017426][ T5238] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 206.066636][ T5238] usb 3-1: config 8 has no interface number 0 [ 206.090041][ T7871] loop5: detected capacity change from 0 to 2048 [ 206.093247][ T5238] usb 3-1: config 8 interface 165 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 206.160296][ T5238] usb 3-1: config 8 interface 165 has no altsetting 0 [ 206.189755][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'. [ 206.191024][ T5238] usb 3-1: string descriptor 0 read error: -22 [ 206.208145][ T7871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.230856][ T5238] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=32.e3 [ 206.250175][ T5238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.260248][ T7882] netlink: 36 bytes leftover after parsing attributes in process `syz.3.893'. [ 206.273946][ T5238] ir_toy 3-1:8.165: required endpoints not found [ 206.314450][ T7881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.485299][ T5238] usb 3-1: USB disconnect, device number 14 [ 207.302925][ T5228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.019195][ T7905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.903'. [ 208.180643][ T7911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.903'. [ 208.381819][ T29] audit: type=1326 audit(1726782322.782:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.5.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765557def9 code=0x7ffc0000 [ 208.901221][ T29] audit: type=1326 audit(1726782322.782:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.5.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765557def9 code=0x7ffc0000 [ 208.926816][ T29] audit: type=1326 audit(1726782322.782:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.5.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f765557def9 code=0x7ffc0000 [ 209.037277][ T29] audit: type=1326 audit(1726782322.852:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.5.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765557def9 code=0x7ffc0000 [ 209.105259][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 209.176209][ T29] audit: type=1326 audit(1726782322.862:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.5.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765557def9 code=0x7ffc0000 [ 209.328271][ T7924] loop3: detected capacity change from 0 to 2048 [ 209.347303][ T29] audit: type=1326 audit(1726782322.882:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.5.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76555affe5 code=0x7ffc0000 [ 209.375335][ T29] audit: type=1326 audit(1726782322.882:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.5.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f765557def9 code=0x7ffc0000 [ 209.398848][ T29] audit: type=1326 audit(1726782322.882:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.5.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765557def9 code=0x7ffc0000 [ 209.422211][ T29] audit: type=1326 audit(1726782322.882:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.5.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765557def9 code=0x7ffc0000 [ 209.451605][ T29] audit: type=1326 audit(1726782322.882:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.5.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f765557def9 code=0x7ffc0000 [ 209.498558][ T7924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.657265][ T7936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.509241][ T5223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.624844][ T5407] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 210.690947][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.918'. [ 210.840175][ T5407] usb 6-1: Using ep0 maxpacket: 8 [ 210.853751][ T5407] usb 6-1: unable to get BOS descriptor or descriptor too short [ 210.895035][ T5407] usb 6-1: config 8 has an invalid interface number: 165 but max is 0 [ 210.926134][ T5407] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 210.927959][ T7960] syzkaller1: entered promiscuous mode [ 210.984168][ T5407] usb 6-1: config 8 has no interface number 0 [ 210.990256][ T7960] syzkaller1: entered allmulticast mode [ 211.006553][ T5407] usb 6-1: config 8 interface 165 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 211.062745][ T5407] usb 6-1: config 8 interface 165 has no altsetting 0 [ 211.091959][ T5407] usb 6-1: string descriptor 0 read error: -22 [ 211.101804][ T5407] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=32.e3 [ 211.111337][ T5407] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.127581][ T5407] ir_toy 6-1:8.165: required endpoints not found [ 211.224454][ T7973] fuse: Unknown parameter '0x0000000000000003' [ 211.352476][ T5407] usb 6-1: USB disconnect, device number 11 [ 211.640471][ T9] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 211.719910][ T7987] loop3: detected capacity change from 0 to 2048 [ 211.786918][ T7987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.822763][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 211.841395][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 211.855246][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 211.866334][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 211.878772][ T9] usb 3-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 211.890141][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.913932][ T9] usb 3-1: Product: syz [ 211.954793][ T9] usb 3-1: Manufacturer: syz [ 211.959821][ T9] usb 3-1: SerialNumber: syz [ 212.009602][ T9] usb 3-1: config 0 descriptor?? [ 212.088600][ T9] cypress_m8 3-1:0.0: HID->COM RS232 Adapter converter detected [ 212.866394][ T9] cyphidcom ttyUSB0: required endpoint is missing [ 212.887309][ T5223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.667800][ T8024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.945'. [ 213.700899][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 213.738478][ T8028] bond0: (slave bond_slave_0): Releasing backup interface [ 213.985545][ T8034] loop3: detected capacity change from 0 to 2048 [ 214.051664][ T8034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.130761][ T5407] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 214.157782][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 214.157801][ T29] audit: type=1800 audit(1726782328.682:535): pid=8034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.949" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 214.250899][ T8039] binder: 8038:8039 ioctl c0306201 0 returned -14 [ 214.290228][ T5407] usb 1-1: Using ep0 maxpacket: 8 [ 214.312430][ T5407] usb 1-1: unable to get BOS descriptor or descriptor too short [ 214.369805][ T9] usb 3-1: USB disconnect, device number 15 [ 214.376089][ T5407] usb 1-1: config 8 has an invalid interface number: 165 but max is 0 [ 214.442594][ T9] cypress_m8 3-1:0.0: device disconnected [ 214.459395][ T5407] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 215.158647][ T5407] usb 1-1: config 8 has no interface number 0 [ 215.164969][ T5407] usb 1-1: config 8 interface 165 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 215.178800][ T5407] usb 1-1: config 8 interface 165 has no altsetting 0 [ 215.201857][ T5407] usb 1-1: string descriptor 0 read error: -22 [ 215.208854][ T5407] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=32.e3 [ 215.230197][ T5407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.259930][ T5407] ir_toy 1-1:8.165: required endpoints not found [ 215.262439][ T5223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.316507][ T8050] netlink: 52 bytes leftover after parsing attributes in process `syz.4.954'. [ 215.467057][ T9] usb 1-1: USB disconnect, device number 9 [ 216.320347][ T8069] netlink: 'syz.1.962': attribute type 10 has an invalid length. [ 216.470317][ T5407] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 216.805651][ T8059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.922102][ T8059] batadv_slave_0: entered promiscuous mode [ 216.932645][ T5407] usb 1-1: Using ep0 maxpacket: 8 [ 216.953438][ T5407] usb 1-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 216.970256][ T5407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.978331][ T5407] usb 1-1: Product: syz [ 216.990798][ T5407] usb 1-1: Manufacturer: syz [ 216.995572][ T5407] usb 1-1: SerialNumber: syz [ 217.038690][ T5407] usb 1-1: config 0 descriptor?? [ 217.055609][ T5407] gspca_main: spca500-2.14.0 probing 046d:0900 [ 217.447408][ T8093] netlink: 52 bytes leftover after parsing attributes in process `syz.2.970'. [ 217.824962][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 219.257447][ T8147] netlink: 52 bytes leftover after parsing attributes in process `syz.5.985'. [ 219.620776][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.989'. [ 219.993212][ T5407] gspca_spca500: reg write: error -71 [ 220.041162][ T5407] gspca_spca500: reg write: error -71 [ 220.153122][ T5407] usb 1-1: USB disconnect, device number 10 [ 220.410806][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 220.718513][ T8186] xt_nat: multiple ranges no longer supported [ 221.550826][ T5230] Bluetooth: hci6: command 0x0406 tx timeout [ 222.392471][ T8203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.417885][ T8203] batadv_slave_0: entered promiscuous mode [ 222.552001][ T8238] 9pnet_fd: Insufficient options for proto=fd [ 223.364182][ T8240] fuse: Bad value for 'fd' [ 224.118434][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1035'. [ 224.145078][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1035'. [ 224.179610][ T8270] netlink: 'syz.3.1035': attribute type 1 has an invalid length. [ 224.210988][ T8270] nbd: error processing sock list [ 224.664084][ T8283] fuse: Bad value for 'fd' [ 224.781207][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1039'. [ 224.915921][ T8289] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1043'. [ 225.021463][ T8294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1043'. [ 225.321392][ T8304] netlink: 'syz.3.1049': attribute type 1 has an invalid length. [ 225.497745][ T8304] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 225.627866][ T8304] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 225.689884][ T8304] bond1 (unregistering): Released all slaves [ 225.691555][ T8315] fuse: Bad value for 'fd' [ 227.099095][ T8367] fuse: Bad value for 'fd' [ 227.901211][ T29] audit: type=1326 audit(1726782342.282:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 228.499308][ T29] audit: type=1326 audit(1726782342.282:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 228.542345][ T29] audit: type=1326 audit(1726782342.282:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 228.650255][ T29] audit: type=1326 audit(1726782342.352:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 228.782589][ T29] audit: type=1326 audit(1726782342.352:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 228.882374][ T29] audit: type=1326 audit(1726782342.382:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8388 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5e7b3affe5 code=0x7ffc0000 [ 228.980229][ T29] audit: type=1326 audit(1726782342.382:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 229.030500][ T29] audit: type=1326 audit(1726782342.382:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 229.100234][ T29] audit: type=1326 audit(1726782342.382:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 229.150168][ T29] audit: type=1326 audit(1726782342.382:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 229.717856][ T8433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.797412][ T8433] batadv_slave_0: entered promiscuous mode [ 230.590682][ T8439] fuse: Unknown parameter '0x0000000000000003' [ 231.041108][ T9] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 231.278434][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 231.324800][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 231.359403][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 231.410792][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 231.451628][ T9] usb 6-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 231.467272][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.520347][ T9] usb 6-1: Product: syz [ 231.539111][ T9] usb 6-1: Manufacturer: syz [ 231.557096][ T9] usb 6-1: SerialNumber: syz [ 231.586299][ T9] usb 6-1: config 0 descriptor?? [ 231.618101][ T9] cypress_m8 6-1:0.0: HID->COM RS232 Adapter converter detected [ 231.647118][ T9] cyphidcom ttyUSB0: required endpoint is missing [ 233.764773][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 233.764825][ T29] audit: type=1326 audit(1726782347.572:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.4.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 234.078240][ T53] wlan1: Trigger new scan to find an IBSS to join [ 234.218544][ T29] audit: type=1326 audit(1726782347.572:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.4.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 234.241322][ T935] usb 6-1: USB disconnect, device number 12 [ 234.242679][ T29] audit: type=1326 audit(1726782347.672:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.4.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 234.272219][ T935] cypress_m8 6-1:0.0: device disconnected [ 234.363203][ T29] audit: type=1326 audit(1726782347.712:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.4.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 234.500185][ T29] audit: type=1326 audit(1726782347.712:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.4.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 234.610701][ T29] audit: type=1326 audit(1726782347.812:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8496 comm="syz.4.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5e7b3affe5 code=0x7ffc0000 [ 234.646598][ T29] audit: type=1326 audit(1726782347.812:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.4.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 234.676373][ T29] audit: type=1326 audit(1726782347.812:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.4.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 234.709328][ T29] audit: type=1326 audit(1726782347.812:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.4.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 234.757072][ T29] audit: type=1326 audit(1726782347.912:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.4.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e7b37def9 code=0x7ffc0000 [ 235.959700][ T8543] netlink: 'syz.4.1136': attribute type 1 has an invalid length. [ 236.166926][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1137'. [ 236.310861][ T8546] bond1 (unregistering): Released all slaves [ 236.436905][ T8557] netlink: 'syz.1.1141': attribute type 5 has an invalid length. [ 236.501847][ T8556] loop5: detected capacity change from 0 to 2048 [ 236.601214][ T8556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.471745][ T6579] wlan1: Trigger new scan to find an IBSS to join [ 237.683882][ T5228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.595884][ T2992] wlan1: Creating new IBSS network, BSSID 12:51:c3:76:23:19 [ 238.704382][ T8604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1155'. [ 239.430588][ T935] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 239.650835][ T935] usb 2-1: Using ep0 maxpacket: 8 [ 239.669087][ T935] usb 2-1: config 1 has an invalid interface number: 236 but max is 0 [ 239.687775][ T935] usb 2-1: config 1 has no interface number 0 [ 239.716659][ T935] usb 2-1: config 1 interface 236 has no altsetting 0 [ 239.750662][ T935] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e9.43 [ 239.777891][ T8638] loop3: detected capacity change from 0 to 2048 [ 239.794484][ T935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.820759][ T935] usb 2-1: Product: syz [ 239.830893][ T935] usb 2-1: Manufacturer: syz [ 239.837465][ T935] usb 2-1: SerialNumber: syz [ 239.853540][ T8638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.240395][ T935] empeg 2-1:1.236: empeg converter detected [ 240.249133][ T935] empeg 2-1:1.236: probe with driver empeg failed with error -71 [ 240.260234][ T935] usb 2-1: USB disconnect, device number 9 [ 241.040258][ T8639] loop5: detected capacity change from 0 to 32768 [ 241.129102][ T5223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.268993][ T8659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1172'. [ 241.312358][ T8639] ERROR: (device loop5): dbAllocAG: Corrupt dmapctl page [ 241.312358][ T8639] [ 241.605849][ T8639] ERROR: (device loop5): remounting filesystem as read-only [ 241.826938][ T8639] ERROR: (device loop5): dbDiscardAG: -EIO [ 241.826938][ T8639] [ 242.136199][ T8666] netlink: 'syz.3.1173': attribute type 4 has an invalid length. [ 242.371006][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1174'. [ 243.492855][ T8703] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 243.702642][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 243.860711][ T8709] 9pnet_fd: Insufficient options for proto=fd [ 244.276575][ T8687] loop0: detected capacity change from 0 to 32768 [ 244.514468][ T30] INFO: task syz.4.112:5657 blocked for more than 143 seconds. [ 244.525667][ T30] Not tainted 6.11.0-syzkaller-05591-g2a17bb8c204f #0 [ 244.537834][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.546630][ T30] task:syz.4.112 state:D stack:27312 pid:5657 tgid:5606 ppid:5226 flags:0x00000004 [ 244.556921][ T30] Call Trace: [ 244.560296][ T30] [ 244.563257][ T30] __schedule+0x1800/0x4a60 [ 244.567996][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 244.573981][ T30] ? __pfx___schedule+0x10/0x10 [ 244.579222][ T30] ? __pfx_lock_release+0x10/0x10 [ 244.584456][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 244.591020][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.597727][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 244.603015][ T30] ? schedule+0x90/0x320 [ 244.608956][ T30] schedule+0x14b/0x320 [ 244.613541][ T30] schedule_preempt_disabled+0x13/0x30 [ 244.619159][ T30] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 244.674772][ T30] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 244.838200][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 244.878882][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 244.929101][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 244.970240][ T30] down_write+0x1d7/0x220 [ 245.011399][ T30] ? __pfx_down_write+0x10/0x10 [ 245.056150][ T30] ? cgroup_rstat_updated+0x13b/0xc60 [ 245.098232][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.147351][ T30] ? mark_lock+0x9a/0x360 [ 245.172303][ T30] bch2_write_iter+0x13a/0x2480 [ 245.192091][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.197863][ T30] ? __lock_acquire+0x1384/0x2050 [ 245.203124][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.208832][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.214770][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 245.228797][ T8687] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 245.234550][ T30] ? __pfx_bch2_write_iter+0x10/0x10 [ 245.266392][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.277071][ T30] ? rcu_read_lock_any_held+0xb7/0x160 [ 245.286671][ T30] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 245.305163][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.318377][ T30] vfs_write+0xa6f/0xc90 [ 245.338307][ T30] ? __pfx_bch2_write_iter+0x10/0x10 [ 245.351222][ T30] ? __pfx_vfs_write+0x10/0x10 [ 245.367693][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.390246][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.407907][ T30] ? __fdget_pos+0x24e/0x320 [ 245.416272][ T30] ksys_write+0x1a0/0x2c0 [ 245.427809][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.436490][ T30] ? __pfx_ksys_write+0x10/0x10 [ 245.446248][ T30] ? exc_page_fault+0x590/0x8c0 [ 245.455438][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.466023][ T30] ? do_syscall_64+0xb6/0x230 [ 245.476299][ T30] do_syscall_64+0xf3/0x230 [ 245.481770][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.488916][ T30] RIP: 0033:0x7f19c777def9 [ 245.499445][ T30] RSP: 002b:00007f19c85a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 245.514916][ T30] RAX: ffffffffffffffda RBX: 00007f19c7936058 RCX: 00007f19c777def9 [ 245.527341][ T30] RDX: 0000000000000060 RSI: 0000000020000300 RDI: 0000000000000004 [ 245.539872][ T30] RBP: 00007f19c77f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 245.548231][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.556735][ T30] R13: 0000000000000001 R14: 00007f19c7936058 R15: 00007ffeee788858 [ 245.565201][ T30] [ 245.573894][ T30] [ 245.573894][ T30] Showing all locks held in the system: [ 245.582967][ T30] 1 lock held by khungtaskd/30: [ 245.588596][ T30] #0: ffffffff8e938b60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 245.594053][ T8687] loop0: detected capacity change from 32768 to 64 [ 245.605349][ T30] 3 locks held by kworker/u8:4/62: [ 245.619277][ T30] #0: ffff8880b893e998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 245.636738][ T30] #1: ffffc900015dfd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 245.656721][ T8719] jbd2/loop0-75: attempt to access beyond end of device [ 245.656721][ T8719] loop0: rw=38913, sector=642, nr_sectors = 1 limit=64 [ 245.668759][ T30] #2: ffffffff9a62a7c0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x234/0x580 [ 245.683891][ T30] 2 locks held by getty/4988: [ 245.688682][ T30] #0: ffff88802e8690a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 245.698433][ T8719] jbd2/loop0-75: attempt to access beyond end of device [ 245.698433][ T8719] loop0: rw=38913, sector=643, nr_sectors = 1 limit=64 [ 245.699997][ T30] #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 245.734909][ T8719] jbd2/loop0-75: attempt to access beyond end of device [ 245.734909][ T8719] loop0: rw=38913, sector=644, nr_sectors = 1 limit=64 [ 245.741995][ T30] 1 lock held by syz-executor/5228: [ 245.761895][ T30] #0: ffffffff8e93dfc0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 245.769112][ T8719] jbd2/loop0-75: attempt to access beyond end of device [ 245.769112][ T8719] loop0: rw=38913, sector=645, nr_sectors = 1 limit=64 [ 245.777833][ T30] 5 locks held by syz.4.112/5607: [ 245.796072][ T8719] jbd2/loop0-75: attempt to access beyond end of device [ 245.796072][ T8719] loop0: rw=38913, sector=646, nr_sectors = 1 limit=64 [ 245.799564][ T30] #0: ffff88807cd76420 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 245.826540][ T30] #1: ffff88807a4a9768 (&sb->s_type->i_mutex_key#23){+.+.}-{3:3}, at: do_truncate+0x20c/0x310 [ 245.830374][ T8719] jbd2/loop0-75: attempt to access beyond end of device [ 245.830374][ T8719] loop0: rw=38913, sector=647, nr_sectors = 1 limit=64 [ 245.842396][ T30] #2: ffff888058d80a18 (&c->snapshot_create_lock){.+.+}-{3:3}, at: bch2_truncate+0x16c/0x2c0 [ 245.870781][ T8719] Aborting journal on device loop0-75. [ 245.878933][ T8719] jbd2/loop0-75: attempt to access beyond end of device [ 245.878933][ T8719] loop0: rw=38913, sector=640, nr_sectors = 1 limit=64 [ 245.883200][ T30] #3: ffff888058d842c0 (&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x7de/0xd20 [ 245.910494][ T8719] Buffer I/O error on dev loop0, logical block 640, lost sync page write [ 245.918806][ T30] #4: ffff888058da6690 (&c->gc_lock){.+.+}-{3:3}, at: bch2_btree_update_start+0x682/0x14e0 [ 245.934811][ T8719] JBD2: I/O error when updating journal superblock for loop0-75. [ 245.942560][ T30] 3 locks held by syz.4.112/5657: [ 245.942589][ T30] #0: ffff88807bd0c478 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x320 [ 245.942673][ T30] #1: ffff88807cd76420 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 245.942765][ T30] #2: ffff88807a4a9768 (&sb->s_type->i_mutex_key#23){+.+.}-{3:3}, at: bch2_write_iter+0x13a/0x2480 [ 245.942873][ T30] 2 locks held by bch-reclaim/loo/5647: [ 245.942898][ T30] 1 lock held by syz.0.1181/8720: [ 245.942915][ T30] #0: ffff88805c4809c0 (&sb->s_type->i_mutex_key#27){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x467/0x1f50 [ 245.943016][ T30] 3 locks held by syz.0.1181/8721: [ 245.943033][ T30] #0: ffff88807b450420 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 245.943128][ T30] #1: ffff88805c4889c0 (&type->i_mutex_dir_key#11/1){+.+.}-{3:3}, at: do_renameat2+0x62c/0x13f0 [ 245.943238][ T30] #2: ffff88805c4809c0 (&sb->s_type->i_mutex_key#27/4 [ 246.015948][ T8721] (syz.0.1181,8721,0):ocfs2_start_trans:357 ERROR: status = -30 [ 246.044082][ T8721] OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 246.058340][ T8721] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 246.079545][ T8721] OCFS2: File system is now read-only. [ 246.086714][ T8721] (syz.0.1181,8721,0):ocfs2_rename:1491 ERROR: status = -30 [ 246.100232][ T30] ){+.+.}-{3:3}, at: vfs_rename+0x6a2/0xf00 [ 246.102489][ T8721] (syz.0.1181,8721,0):ocfs2_rename:1698 ERROR: status = -30 [ 246.106229][ T30] 1 lock held by syz.2.1183/8697: [ 246.106250][ T30] #0: ffffffff8e93dfc0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 246.145354][ T30] [ 246.147933][ T30] ============================================= [ 246.147933][ T30] [ 246.157396][ T30] NMI backtrace for cpu 0 [ 246.161790][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-05591-g2a17bb8c204f #0 [ 246.171980][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 246.182075][ T30] Call Trace: [ 246.185365][ T30] [ 246.188301][ T30] dump_stack_lvl+0x241/0x360 [ 246.193015][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.198236][ T30] ? __pfx__printk+0x10/0x10 [ 246.202859][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 246.207851][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 246.213342][ T30] ? _printk+0xd5/0x120 [ 246.217521][ T30] ? __pfx__printk+0x10/0x10 [ 246.222131][ T30] ? __wake_up_klogd+0xcc/0x110 [ 246.226999][ T30] ? __pfx__printk+0x10/0x10 [ 246.231607][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.237260][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 246.242312][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 246.248353][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 246.254387][ T30] watchdog+0xff4/0x1040 [ 246.258657][ T30] ? watchdog+0x1ea/0x1040 [ 246.263102][ T30] ? __pfx_watchdog+0x10/0x10 [ 246.267796][ T30] kthread+0x2f2/0x390 [ 246.271879][ T30] ? __pfx_watchdog+0x10/0x10 [ 246.276568][ T30] ? __pfx_kthread+0x10/0x10 [ 246.281174][ T30] ret_from_fork+0x4d/0x80 [ 246.285615][ T30] ? __pfx_kthread+0x10/0x10 [ 246.290218][ T30] ret_from_fork_asm+0x1a/0x30 [ 246.295018][ T30] [ 246.299214][ T30] Sending NMI from CPU 0 to CPUs 1: [ 246.305074][ C1] NMI backtrace for cpu 1 [ 246.305092][ C1] CPU: 1 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted 6.11.0-syzkaller-05591-g2a17bb8c204f #0 [ 246.305118][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 246.305133][ C1] Workqueue: bat_events batadv_nc_worker [ 246.305166][ C1] RIP: 0010:lock_release+0x2ac/0xa30 [ 246.305204][ C1] Code: 31 4e 0a 89 5c 24 44 89 da 85 c0 0f 84 f0 01 00 00 4d 85 f6 0f 84 1b 03 00 00 49 8d 5e 24 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 0f 85 2a 05 00 00 83 3b 00 0f 85 2d 04 00 00 4d 8d 66 20 4c [ 246.305223][ C1] RSP: 0018:ffffc900015df9a0 EFLAGS: 00000017 [ 246.305242][ C1] RAX: 0000000000000000 RBX: ffff888022aee554 RCX: ffffc900015dfa03 [ 246.305258][ C1] RDX: 0000000000000002 RSI: ffffffff8e938b60 RDI: ffff888022aee530 [ 246.305275][ C1] RBP: ffffc900015dfad8 R08: ffffffff901c022f R09: 1ffffffff2038045 [ 246.305292][ C1] R10: dffffc0000000000 R11: fffffbfff2038046 R12: 000000000000000a [ 246.305308][ C1] R13: 0000000000000002 R14: ffff888022aee530 R15: dffffc0000000000 [ 246.305329][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 246.305348][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.305365][ C1] CR2: 000000110c356da6 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 246.305383][ C1] Call Trace: [ 246.305391][ C1] [ 246.305401][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 246.305427][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 246.305461][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 246.305493][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 246.305525][ C1] ? nmi_handle+0x151/0x5a0 [ 246.305549][ C1] ? nmi_handle+0x2a/0x5a0 [ 246.305571][ C1] ? lock_release+0x2ac/0xa30 [ 246.305602][ C1] ? default_do_nmi+0x63/0x160 [ 246.305629][ C1] ? exc_nmi+0x123/0x1f0 [ 246.305653][ C1] ? end_repeat_nmi+0xf/0x53 [ 246.305691][ C1] ? lock_release+0x2ac/0xa30 [ 246.305723][ C1] ? lock_release+0x2ac/0xa30 [ 246.305756][ C1] ? lock_release+0x2ac/0xa30 [ 246.305788][ C1] [ 246.305795][ C1] [ 246.305806][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 246.305846][ C1] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 246.305876][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 246.305907][ C1] ? __pfx_lock_release+0x10/0x10 [ 246.305938][ C1] ? batadv_nc_purge_paths+0x312/0x3b0 [ 246.305968][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.306005][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 246.306034][ C1] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 246.306069][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 246.306098][ C1] batadv_nc_process_nc_paths+0x2f0/0x3a0 [ 246.306131][ C1] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 246.306163][ C1] batadv_nc_worker+0x42a/0x610 [ 246.306192][ C1] ? process_scheduled_works+0x976/0x1850 [ 246.306225][ C1] process_scheduled_works+0xa65/0x1850 [ 246.306269][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 246.306305][ C1] ? assign_work+0x364/0x3d0 [ 246.306337][ C1] worker_thread+0x870/0xd30 [ 246.306376][ C1] ? __kthread_parkme+0x169/0x1d0 [ 246.306411][ C1] ? __pfx_worker_thread+0x10/0x10 [ 246.306443][ C1] kthread+0x2f2/0x390 [ 246.306464][ C1] ? __pfx_worker_thread+0x10/0x10 [ 246.306495][ C1] ? __pfx_kthread+0x10/0x10 [ 246.306517][ C1] ret_from_fork+0x4d/0x80 [ 246.306550][ C1] ? __pfx_kthread+0x10/0x10 [ 246.306571][ C1] ret_from_fork_asm+0x1a/0x30 [ 246.306611][ C1] [ 246.357062][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 246.357098][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-05591-g2a17bb8c204f #0 [ 246.357131][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 246.357148][ T30] Call Trace: [ 246.357160][ T30] [ 246.357173][ T30] dump_stack_lvl+0x241/0x360 [ 246.357222][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.357262][ T30] ? __pfx__printk+0x10/0x10 [ 246.357296][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 246.357343][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.357384][ T30] ? vscnprintf+0x5d/0x90 [ 246.357415][ T30] panic+0x349/0x870 [ 246.357450][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.357492][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 246.357524][ T30] ? __pfx_panic+0x10/0x10 [ 246.357557][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 246.357594][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.357632][ T30] ? __irq_work_queue_local+0x137/0x410 [ 246.357675][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.357714][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 246.357744][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 246.357773][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 246.357805][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.357844][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 246.357877][ T30] watchdog+0x1033/0x1040 [ 246.357907][ T30] ? watchdog+0x1ea/0x1040 [ 246.357940][ T30] ? __pfx_watchdog+0x10/0x10 [ 246.357967][ T30] kthread+0x2f2/0x390 [ 246.357994][ T30] ? __pfx_watchdog+0x10/0x10 [ 246.358020][ T30] ? __pfx_kthread+0x10/0x10 [ 246.358047][ T30] ret_from_fork+0x4d/0x80 [ 246.358090][ T30] ? __pfx_kthread+0x10/0x10 [ 246.358116][ T30] ret_from_fork_asm+0x1a/0x30 [ 246.358168][ T30] [ 246.820671][ T30] Kernel Offset: disabled [ 246.824992][ T30] Rebooting in 86400 seconds..