last executing test programs: 13.411240263s ago: executing program 2 (id=2352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x20, r1, 0xab2bf658e72548f3, 0x0, 0x0, {0x3}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 12.434057019s ago: executing program 1 (id=2362): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000640), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) 12.284176779s ago: executing program 2 (id=2364): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) 12.173818737s ago: executing program 1 (id=2367): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@private=0xa010100, @multicast1, 0x0, "ea0f38d1a15892def51090fffff3cd08000000e4353d68bcfa00", 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @local}, 0x10) r1 = accept4(r0, &(0x7f0000000240)=@pppol2tpv3, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000003380)) r4 = eventfd2(0x3, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r6, &(0x7f0000004380)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000180)='4', 0x1}, {&(0x7f0000000040)="d09754", 0x3}], 0x2, 0x0, 0x0, 0x24000800}}], 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x3, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0xffffffffffffffa4, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES8=r3, @ANYRES16=r5, @ANYRES32, @ANYRESHEX=r2, @ANYRESHEX=r5], 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x4010) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x50}) ioctl$UI_DEV_CREATE(r7, 0x5501) readv(r7, &(0x7f0000000080)=[{&(0x7f0000000040)=""/56, 0x38}], 0x1) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) 11.919483772s ago: executing program 2 (id=2368): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000400)=0x88) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000000c0)={0x5, {{0x2, 0xfffe, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000005c0)=ANY=[@ANYRES16=r0, @ANYRESOCT, @ANYRES16, @ANYBLOB="1ea5779b286b9379e109ecd7810fd9fbb5d4614e10cfcbe15418b7e7686d9e11fe76b19e48375a727568cbae537b0f665e5ae741143f8ff0a27042f9700748e123e9e520bb93b46a42af23f1dcc157e342f214b352f680a869ddd4526a5275ad40f7ff32c6ea", @ANYRESHEX], 0x210) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x3, &(0x7f0000000500)=[{0x80, 0x3, 0x0, 0x2}, {0x35, 0x0, 0x0, 0xe12b}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x33}, {0x7fff, 0x9, 0x80, 0x10d83f}, {0x4, 0x2f, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000540)={0x0}) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={r2}) io_submit(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = memfd_create(&(0x7f0000000000)='\x107', 0x0) finit_module(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffffffffffe9b}, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r6, 0x3, r1, 0x5}) openat$cgroup_ro(r0, &(0x7f0000000440)='memory.swap.events\x00', 0x275a, 0x2000000) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000003c0)={'#! ', '', [], 0xa, "420cc61326a1f170cd9c4d0947e73c5e0d92637848c7fc7a5d55095d0eb672756a0f528e747c9d9620e80cab7817914a9a346b1c70"}, 0x39) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x4}, &(0x7f0000000080), &(0x7f0000000140)) 9.932625141s ago: executing program 1 (id=2371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000040)) 9.838775317s ago: executing program 2 (id=2373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x0, 0x4800003e, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYRESOCT, @ANYRES32=r1, @ANYBLOB="0800050003000000"], 0x24}}, 0x4008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg0\x00'}) sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x34, r6, 0xab2bf658e72548f3, 0x0, 0x0, {0x3}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x470, 0xf0, 0xf0, 0xffffffff, 0x2d0, 0xf0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'dvmrp0\x00', 'pimreg1\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @icmp_id, @icmp_id}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@local}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@private0, @private2, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) syslog(0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8], &(0x7f0000001f40)=""/4089, 0x86, 0xff9, 0xfffffffd}, 0x20) 8.683360954s ago: executing program 2 (id=2380): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x89, 0xf6, 0x57, 0x40, 0x403, 0xbcd9, 0x9433, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7d, 0x0, 0x0, 0xd9, 0x22, 0x99}}]}}]}}, 0x0) r4 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0x7005, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x16, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @generic={0x8, 0x2, 0x0, 0x9, 0x7}, @generic={0xa5, 0x5, 0x9, 0x2, 0x87}, @ldst={0x3, 0x1, 0x2, 0xb, 0x2, 0xffffffffffffffe0}, @jmp={0x5, 0x1, 0x9, 0x5, 0xa, 0x100, 0x7fffffffffffffe9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0x5, 0x0, 0x8, 0xfffffffffffffff4}]}, &(0x7f00000001c0)='GPL\x00', 0xe, 0x58, &(0x7f0000000280)=""/88, 0x41100, 0x0, '\x00', r1, 0x0, r5, 0x8, &(0x7f0000000200)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xf, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0xffffffffffffffff, r2, r2, 0xffffffffffffffff], &(0x7f0000000400)=[{0x2, 0x0, 0x8000, 0x6}], 0x10, 0x9}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x0, 0x2, 0x1000}, 0x48) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@broadcast, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x500, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x9d, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @val={@val={0x88a8, 0x4, 0x1, 0x2}, {0x8100, 0x2, 0x1, 0x4}}, {@ipv4={0x800, @tipc={{0x18, 0x4, 0x3, 0x9, 0x87, 0x66, 0x0, 0x80, 0x6, 0x0, @private=0xa010101, @loopback, {[@generic={0x7, 0x8, "2f2518ce19ec"}, @generic={0x0, 0x6, "1ba989df"}, @generic={0x89, 0x2}, @timestamp_addr={0x44, 0x3c, 0xf, 0x1, 0x7, [{@empty, 0x5}, {@loopback, 0x1}, {@loopback, 0x100}, {@local, 0x6}, {@local, 0x71}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa}, {@loopback, 0xc6000000}]}]}}, @payload_direct={{{{0x27, 0x0, 0x1, 0x1, 0x1, 0x8, 0x1, 0x2, 0x6, 0x0, 0x1, 0x5, 0x5, 0x3, 0x800, 0x4, 0x4, 0x4e20, 0x4e24}, 0x2, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, &(0x7f0000000180)={0x0, 0x2, [0x4bd, 0xf5e, 0xd68, 0x8c1]}) 8.493258954s ago: executing program 0 (id=2383): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) open$dir(&(0x7f0000000180)='.\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc0105303, &(0x7f0000000500)={{0x0, 0x2}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x401, @none, 0xffff, 0x1}, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3f00, 0x3, 0x2b0, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@common=@ipv6header={{0x28}, {0x0, 0x0, 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, 0x0, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0) 8.447483911s ago: executing program 5 (id=2384): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@private=0xa010100, @multicast1, 0x0, "ea0f38d1a15892def51090fffff3cd08000000e4353d68bcfa00", 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @local}, 0x10) r1 = accept4(r0, &(0x7f0000000240)=@pppol2tpv3, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000003380)) r4 = eventfd2(0x3, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r6, &(0x7f0000004380)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000180)='4', 0x1}, {&(0x7f0000000040)="d09754", 0x3}], 0x2, 0x0, 0x0, 0x24000800}}], 0x1, 0x814) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x3, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0xffffffffffffffa4, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES8=r3, @ANYRES16=r5, @ANYRES32, @ANYRESHEX=r2, @ANYRESHEX=r5], 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x4010) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x50}) ioctl$UI_DEV_CREATE(r7, 0x5501) readv(r7, &(0x7f0000000080)=[{&(0x7f0000000040)=""/56, 0x38}], 0x1) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) 5.919938948s ago: executing program 5 (id=2387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x69) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) 5.600421657s ago: executing program 5 (id=2389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.480878811s ago: executing program 3 (id=2391): r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @private=0xa010102}, 0x10) rt_sigreturn() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340), 0xffffff46) 5.134930706s ago: executing program 0 (id=2393): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSUSAGES(r1, 0x5452, &(0x7f0000000ac0)={{0x1}}) 5.043716792s ago: executing program 3 (id=2394): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) socket$kcm(0x10, 0x2, 0x4) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0xf0ffffffffffff}, 0x0) 4.857554365s ago: executing program 2 (id=2396): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78) write$cgroup_devices(r2, &(0x7f0000000380)=ANY=[@ANYBLOB='b *:\n'], 0x8) close(r2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5421, 0x0) 3.567973057s ago: executing program 3 (id=2398): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) fcntl$lock(r1, 0x26, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000680)={0x2, &(0x7f0000000240)=[{0x5, 0x7f, 0xc}, {0x0, 0x9, 0x80}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000180)={r6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ftruncate(0xffffffffffffffff, 0xc17a) socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x55, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24004000200010002d08000000dbdf250214801980f9ff051200000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000004) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r7, 0x3, r5, 0x5}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x100010, r0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 2.965566073s ago: executing program 4 (id=2399): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@private=0xa010100, @multicast1, 0x0, "ea0f38d1a15892def51090fffff3cd08000000e4353d68bcfa00", 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @local}, 0x10) r1 = accept4(r0, &(0x7f0000000240)=@pppol2tpv3, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000003380)) r4 = eventfd2(0x3, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r6, &(0x7f0000004380)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000180)='4', 0x1}, {&(0x7f0000000040)="d09754", 0x3}], 0x2, 0x0, 0x0, 0x24000800}}], 0x1, 0x814) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x3, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0xffffffffffffffa4, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES8=r3, @ANYRES16=r5, @ANYRES32, @ANYRESHEX=r2, @ANYRESHEX=r5], 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x4010) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x50}) ioctl$UI_DEV_CREATE(r7, 0x5501) readv(r7, &(0x7f0000000080)=[{&(0x7f0000000040)=""/56, 0x38}], 0x1) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) 2.96107497s ago: executing program 1 (id=2400): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[], 0x10}], 0x1}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_ENTRY(r2, &(0x7f0000001400)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xfff6) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, 0x0, 0x22) 2.81949813s ago: executing program 5 (id=2401): socket$kcm(0x10, 0x0, 0x10) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r2 = socket(0x2b, 0x1, 0x0) listen(r2, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r5, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) 2.581377378s ago: executing program 5 (id=2402): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x69) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) 2.471068167s ago: executing program 3 (id=2403): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000400)=0x88) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000000c0)={0x5, {{0x2, 0xfffe, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000005c0)=ANY=[@ANYRES16=r0, @ANYRESOCT, @ANYRES16, @ANYBLOB="1ea5779b286b9379e109ecd7810fd9fbb5d4614e10cfcbe15418b7e7686d9e11fe76b19e48375a727568cbae537b0f665e5ae741143f8ff0a27042f9700748e123e9e520bb93b46a42af23f1dcc157e342f214b352f680a869ddd4526a5275ad40f7ff32c6ea", @ANYRESHEX], 0x210) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00') syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x3, &(0x7f0000000500)=[{0x80, 0x3, 0x0, 0x2}, {0x35, 0x0, 0x0, 0xe12b}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x33}, {0x7fff, 0x9, 0x80, 0x10d83f}, {0x4, 0x2f, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000540)={0x0}) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={r2}) io_submit(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = memfd_create(&(0x7f0000000000)='\x107', 0x0) finit_module(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffffffffffe9b}, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r6, 0x3, r1, 0x5}) openat$cgroup_ro(r0, &(0x7f0000000440)='memory.swap.events\x00', 0x275a, 0x2000000) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000003c0)={'#! ', '', [], 0xa, "420cc61326a1f170cd9c4d0947e73c5e0d92637848c7fc7a5d55095d0eb672756a0f528e747c9d9620e80cab7817914a9a346b1c70"}, 0x39) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x4}, &(0x7f0000000080), &(0x7f0000000140)) 2.368535498s ago: executing program 4 (id=2404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3000000000380004"], 0x60}}, 0x0) 2.254671221s ago: executing program 4 (id=2405): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 2.249836994s ago: executing program 5 (id=2406): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) open$dir(&(0x7f0000000180)='.\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc0105303, &(0x7f0000000500)={{0x0, 0x2}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x401, @none, 0xffff, 0x1}, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r4, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0) 2.163700106s ago: executing program 0 (id=2407): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '#! '}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {}], 0xa, "8855d1bef46f70e481dbdabbfc3bcc3f005c1079e7344e4392717247b88b05708cd1663511237737ac00004c03fa9d00005380"}, 0xfffffe59) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)='D', 0x1}], 0x1}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x541b, &(0x7f0000000080)={@dev, @local, @private0}) r2 = eventfd(0x0) close(r2) timer_create(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x81, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() recvmmsg(r3, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) getsockname$inet6(r2, 0x0, 0x0) 2.105978122s ago: executing program 4 (id=2408): bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) 1.953955923s ago: executing program 4 (id=2409): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000640), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) 1.891739205s ago: executing program 1 (id=2410): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) socket$kcm(0x10, 0x2, 0x4) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0xf0ffffffffffff}, 0x0) 1.891396206s ago: executing program 0 (id=2411): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 632.804539ms ago: executing program 4 (id=2412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000040)) 575.450089ms ago: executing program 3 (id=2413): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r1, &(0x7f0000004940)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000009040)="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", 0xfd72, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r2, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 534.397967ms ago: executing program 0 (id=2414): socket$kcm(0x10, 0x0, 0x10) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r2 = socket(0x2b, 0x1, 0x0) listen(r2, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r5, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) 314.308649ms ago: executing program 1 (id=2415): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x40) syz_emit_ethernet(0xe80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x0, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000280)="0c78bca32c37898d78318e236899", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 237.325112ms ago: executing program 0 (id=2416): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@private=0xa010100, @multicast1, 0x0, "ea0f38d1a15892def51090fffff3cd08000000e4353d68bcfa00", 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @local}, 0x10) r1 = accept4(r0, &(0x7f0000000240)=@pppol2tpv3, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000003380)) r4 = eventfd2(0x3, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r6, &(0x7f0000004380)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000180)='4', 0x1}, {&(0x7f0000000040)="d09754", 0x3}], 0x2, 0x0, 0x0, 0x24000800}}], 0x1, 0x814) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x3, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0xffffffffffffffa4, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES8=r3, @ANYRES16=r5, @ANYRES32, @ANYRESHEX=r2, @ANYRESHEX=r5], 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x4010) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x50}) ioctl$UI_DEV_CREATE(r7, 0x5501) readv(r7, &(0x7f0000000080)=[{&(0x7f0000000040)=""/56, 0x38}], 0x1) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) 0s ago: executing program 3 (id=2417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3000000000380004"], 0x60}}, 0x0) kernel console output (not intermixed with test programs): capacity change from 0 to 2048 [ 623.079623][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 623.128583][T11123] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 623.153441][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 623.178945][T11015] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.217328][T11015] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.227012][ T46] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 623.254107][T11015] bridge_slave_0: entered allmulticast mode [ 623.274046][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.276117][T11127] loop0: detected capacity change from 0 to 1024 [ 623.302130][T11015] bridge_slave_0: entered promiscuous mode [ 623.308917][T11127] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 623.335586][T11127] JBD2: no valid journal superblock found [ 623.346116][ T46] usb 2-1: config 0 descriptor?? [ 623.353559][T11115] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 623.364756][T10962] hsr_slave_0: entered promiscuous mode [ 623.364947][T11127] EXT4-fs (loop0): Could not load journal inode [ 623.384734][T10962] hsr_slave_1: entered promiscuous mode [ 623.406890][T10962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 623.419885][T10962] Cannot create hsr debugfs directory [ 623.506339][T11131] loop0: detected capacity change from 0 to 512 [ 623.547017][T11131] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent [ 623.656704][ T6217] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.811318][T11015] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.821759][ T46] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 623.831386][T11015] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.834510][ T46] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 624.130332][T11015] bridge_slave_1: entered allmulticast mode [ 624.144830][ T46] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 624.174769][T11015] bridge_slave_1: entered promiscuous mode [ 624.206740][T11127] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 624.249386][ T46] usb 2-1: USB disconnect, device number 19 [ 624.599995][ T6217] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.779901][T11015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.904633][ T6217] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.955409][ T5113] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 624.985640][T11015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.154905][ T5113] usb 5-1: Using ep0 maxpacket: 32 [ 625.179990][ T5113] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 625.190566][T11015] team0: Port device team_slave_0 added [ 625.197366][ T5113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.219711][T11015] team0: Port device team_slave_1 added [ 625.230222][ T5113] usb 5-1: config 0 descriptor?? [ 625.247096][ T46] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 625.274703][ T5113] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 625.434518][ T46] usb 2-1: device descriptor read/64, error -71 [ 625.464918][ T5113] usb 5-1: USB disconnect, device number 11 [ 625.467578][ T63] usb 5-1: Failed to submit usb control message: -71 [ 625.499583][ T63] usb 5-1: unable to send the bmi data to the device: -71 [ 625.512100][ T63] usb 5-1: unable to get target info from device [ 625.523017][ T63] usb 5-1: could not get target info (-71) [ 625.534747][ T63] usb 5-1: could not probe fw (-71) [ 625.569789][T11015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.594119][T11015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.678997][T11015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.701117][T11015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.714929][T11015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.745070][ T46] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 625.756410][T11015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.234690][ T46] usb 2-1: device descriptor read/64, error -71 [ 626.421091][ T46] usb usb2-port1: attempt power cycle [ 627.295527][ T46] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 627.344878][ T46] usb 2-1: device descriptor read/8, error -71 [ 627.425411][T11015] hsr_slave_0: entered promiscuous mode [ 627.447605][T11015] hsr_slave_1: entered promiscuous mode [ 627.504912][T11015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 627.512605][T11015] Cannot create hsr debugfs directory [ 627.599755][ T6217] bridge_slave_1: left allmulticast mode [ 627.644169][ T6217] bridge_slave_1: left promiscuous mode [ 627.655167][ T46] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 627.663343][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.718061][ T6217] bridge_slave_0: left allmulticast mode [ 627.726886][ T46] usb 2-1: device descriptor read/8, error -71 [ 627.749840][ T6217] bridge_slave_0: left promiscuous mode [ 627.779804][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.860678][ T46] usb usb2-port1: unable to enumerate USB device [ 627.883718][T11170] loop3: detected capacity change from 0 to 1024 [ 627.908218][T11170] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 628.214483][T11170] JBD2: no valid journal superblock found [ 628.233100][T11170] EXT4-fs (loop3): Could not load journal inode [ 628.408074][ T6217] ip6gretap0 (unregistering): left allmulticast mode [ 628.420523][T11175] loop3: detected capacity change from 0 to 512 [ 628.464581][T11175] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 628.532021][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'. [ 628.916698][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 629.114655][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 629.127893][ T9] usb 2-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 629.157982][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.196396][ T9] usb 2-1: config 0 descriptor?? [ 629.228253][ T9] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 629.572091][ T6217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.598426][ T6217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.614753][ T6217] bond0 (unregistering): Released all slaves [ 629.809730][T11170] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 629.868100][ T922] usb 2-1: USB disconnect, device number 24 [ 631.473464][ T29] audit: type=1326 audit(1721386411.086:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11206 comm="syz.1.1678" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad57f75b59 code=0x0 [ 631.770040][T11212] syz.4.1679: attempt to access beyond end of device [ 631.770040][T11212] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 631.783153][T11212] efs: cannot read volume header [ 632.501711][ T6217] hsr_slave_0: left promiscuous mode [ 632.529793][ T6217] hsr_slave_1: left promiscuous mode [ 632.584875][ T6217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.615963][ T6217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.646233][ T6217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.672983][ T6217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.734260][ T6217] veth1_macvtap: left promiscuous mode [ 632.740219][ T6217] veth0_macvtap: left promiscuous mode [ 632.746146][ T6217] veth1_vlan: left promiscuous mode [ 632.751612][ T6217] veth0_vlan: left promiscuous mode [ 633.139299][T11221] loop4: detected capacity change from 0 to 1024 [ 633.163159][T11221] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 633.188721][T11221] JBD2: no valid journal superblock found [ 633.201150][T11221] EXT4-fs (loop4): Could not load journal inode [ 633.363775][T11225] loop4: detected capacity change from 0 to 512 [ 633.391088][T11225] EXT4-fs (loop4): blocks per group (71) and clusters per group (32768) inconsistent [ 634.523192][ T6217] team0 (unregistering): Port device team_slave_1 removed [ 634.617410][ T6217] team0 (unregistering): Port device team_slave_0 removed [ 635.492889][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 635.499366][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.622783][T11221] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 635.828019][T10962] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 635.994583][T10962] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 637.165702][ T5105] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 637.179156][ T5105] Bluetooth: hci6: Injecting HCI hardware error event [ 637.189831][ T5105] Bluetooth: hci6: hardware error 0x00 [ 637.289165][T10962] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 637.565151][T10962] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 638.351368][ T29] audit: type=1326 audit(1721386417.956:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11278 comm="syz.3.1702" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x0 [ 638.466795][T10962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.746319][T11015] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 638.819511][T10962] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.854494][T11015] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 638.908463][T11015] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 638.967353][T11015] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 639.043685][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.051019][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.233990][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.241362][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.326084][ T5105] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 640.669083][T10962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 640.714463][T10962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 641.121561][T11015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.272121][T11015] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.358211][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.365684][ T5113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.431518][ T29] audit: type=1326 audit(1721386421.045:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.1.1717" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad57f75b59 code=0x0 [ 641.469903][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.477235][ T5113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.639586][T10962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.132196][T10962] veth0_vlan: entered promiscuous mode [ 643.193493][T10962] veth1_vlan: entered promiscuous mode [ 643.350288][T11361] syz.3.1726: attempt to access beyond end of device [ 643.350288][T11361] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 643.363690][T11361] efs: cannot read volume header [ 644.339552][T10962] veth0_macvtap: entered promiscuous mode [ 644.418465][T10962] veth1_macvtap: entered promiscuous mode [ 644.525016][T11367] loop0: detected capacity change from 0 to 1024 [ 644.572755][T11015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.574737][T11367] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 644.587139][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.621946][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.655575][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.660884][T11367] JBD2: no valid journal superblock found [ 644.699073][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.704423][T11367] EXT4-fs (loop0): Could not load journal inode [ 644.729730][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.770218][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.805594][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.838473][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.891140][T10962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.892468][T11373] loop0: detected capacity change from 0 to 512 [ 644.952445][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.985075][T11373] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent [ 644.995023][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.028748][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.049678][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.073264][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.101815][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.122629][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.147136][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.172097][T10962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.313645][T10962] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.369102][T10962] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.422535][T10962] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.465634][T10962] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.083929][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.126365][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.185762][ T29] audit: type=1326 audit(1721386425.785:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11389 comm="syz.0.1734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f806f775b59 code=0x0 [ 646.361409][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.426635][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.538568][T11015] veth0_vlan: entered promiscuous mode [ 647.607249][T11400] loop2: detected capacity change from 0 to 512 [ 647.701186][T11015] veth1_vlan: entered promiscuous mode [ 647.881026][T11400] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.1428: casefold flag without casefold feature [ 647.981458][T11400] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1428: couldn't read orphan inode 15 (err -117) [ 648.038256][T11400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.050782][T11015] veth0_macvtap: entered promiscuous mode [ 648.128372][T11015] veth1_macvtap: entered promiscuous mode [ 648.851979][T11015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.955765][T11015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.995687][T11015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.038961][T11015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.082692][T11015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.123607][T11015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.186039][T11015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.215688][T11015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.246658][ T29] audit: type=1326 audit(1721386428.865:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 649.253490][T11015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.344001][ T29] audit: type=1326 audit(1721386428.885:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 649.349751][T11015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.431518][T11015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.480728][ T29] audit: type=1326 audit(1721386429.095:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 649.530925][T10962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.565061][ T29] audit: type=1326 audit(1721386429.095:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 649.631716][ T29] audit: type=1326 audit(1721386429.095:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 649.729950][ T29] audit: type=1326 audit(1721386429.095:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 649.822115][ T29] audit: type=1326 audit(1721386429.095:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 649.896146][T11015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.943908][ T29] audit: type=1326 audit(1721386429.095:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 649.955796][T11427] loop2: detected capacity change from 0 to 1024 [ 649.972849][T11015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.026127][T11427] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 650.033892][ T29] audit: type=1326 audit(1721386429.095:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 650.045818][T11015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.095087][T11427] JBD2: no valid journal superblock found [ 650.105241][T11427] EXT4-fs (loop2): Could not load journal inode [ 650.151436][T11015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.183976][T11015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.204776][T11015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.215851][T11015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.245221][T11015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.265985][T11015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.279734][T11438] loop2: detected capacity change from 0 to 512 [ 650.298134][T11015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.313239][T11438] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent [ 650.353589][T11015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.458668][T11015] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.302619][T11015] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.383950][T11015] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.432862][T11015] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.355735][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.387901][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.431295][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 652.431322][ T29] audit: type=1326 audit(1721386432.045:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f9f75b59 code=0x7fc00000 [ 652.526125][ T29] audit: type=1326 audit(1721386432.075:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f98f9f75b59 code=0x7fc00000 [ 652.543142][T11473] loop2: detected capacity change from 0 to 512 [ 652.573097][T11473] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 652.627211][T11473] EXT4-fs (loop2): orphan cleanup on readonly fs [ 652.635443][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.651804][T11473] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.1758: bg 0: block 248: padding at end of block bitmap is not set [ 652.659327][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.669832][T11473] Quota error (device loop2): write_blk: dquota write failed [ 652.683144][T11473] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 652.695340][T11473] EXT4-fs error (device loop2): ext4_acquire_dquot:6842: comm syz.2.1758: Failed to acquire dquot type 1 [ 652.720540][T11473] EXT4-fs (loop2): 1 truncate cleaned up [ 652.755422][T11473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 652.802971][T11473] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 652.832266][T11473] EXT4-fs error (device loop2): __ext4_remount:6487: comm syz.2.1758: Abort forced by user [ 652.854536][T11473] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 652.923430][T11473] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 652.947586][T11473] ext4 filesystem being remounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.008340][T11473] Quota error (device loop2): write_blk: dquota write failed [ 653.029532][ T29] audit: type=1326 audit(1721386432.635:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f9f75b59 code=0x7fc00000 [ 653.046112][T11473] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 653.126373][T11473] EXT4-fs error (device loop2): ext4_acquire_dquot:6842: comm syz.2.1758: Failed to acquire dquot type 1 [ 653.136113][ T29] audit: type=1326 audit(1721386432.635:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f98f9f75b59 code=0x7fc00000 [ 653.165433][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1619'. [ 653.225937][T11482] gre0: entered promiscuous mode [ 653.230950][T11482] gre0: entered allmulticast mode [ 653.256036][ T29] audit: type=1326 audit(1721386432.635:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f9f75b59 code=0x7fc00000 [ 653.283239][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1619'. [ 653.346118][ T29] audit: type=1326 audit(1721386432.635:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f9f75b59 code=0x7fc00000 [ 653.388638][T11485] gre0: left promiscuous mode [ 653.392052][T10962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.396052][T11485] gre0: left allmulticast mode [ 653.887194][ T5105] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 653.897278][ T5105] Bluetooth: hci3: Injecting HCI hardware error event [ 653.905681][T11494] loop2: detected capacity change from 0 to 1024 [ 653.907123][ T5101] Bluetooth: hci3: hardware error 0x00 [ 653.945397][T11494] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 653.964338][T11494] JBD2: no valid journal superblock found [ 653.972285][T11494] EXT4-fs (loop2): Could not load journal inode [ 654.126499][T11494] loop2: detected capacity change from 0 to 512 [ 654.148464][T11494] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent [ 655.992263][ T5101] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 656.541787][T11539] loop4: detected capacity change from 0 to 512 [ 656.590390][T11539] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 656.627305][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1777'. [ 656.664821][T11539] EXT4-fs (loop4): orphan cleanup on readonly fs [ 656.713576][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1777'. [ 656.756413][T11539] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.1776: bg 0: block 248: padding at end of block bitmap is not set [ 656.826920][T11541] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.847177][T11539] EXT4-fs error (device loop4): ext4_acquire_dquot:6842: comm syz.4.1776: Failed to acquire dquot type 1 [ 656.876889][T11539] EXT4-fs (loop4): 1 truncate cleaned up [ 656.904299][T11539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 656.971878][T11539] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 657.009278][T11539] EXT4-fs error (device loop4): __ext4_remount:6487: comm syz.4.1776: Abort forced by user [ 657.076266][T11539] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 657.173872][T11539] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 657.238835][T11539] ext4 filesystem being remounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 657.327638][T11539] EXT4-fs error (device loop4): ext4_acquire_dquot:6842: comm syz.4.1776: Failed to acquire dquot type 1 [ 657.514380][T11549] loop1: detected capacity change from 0 to 1024 [ 657.548970][T10593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.570287][T11549] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 657.662283][T11549] JBD2: no valid journal superblock found [ 657.686299][T11549] EXT4-fs (loop1): Could not load journal inode [ 658.002360][T11549] loop1: detected capacity change from 0 to 512 [ 658.059301][T11549] EXT4-fs (loop1): blocks per group (71) and clusters per group (32768) inconsistent [ 658.261676][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 658.261702][ T29] audit: type=1326 audit(1721386437.874:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.4.1783" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98f9f75b59 code=0x0 [ 659.217264][T11571] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 659.355817][T11571] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 659.774652][ T5105] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 659.793654][ T5105] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 659.805618][ T5105] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 659.846639][ T5105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 659.863523][ T5105] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 659.872477][ T5105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 660.094855][T11571] siw: device registration error -19 [ 660.495186][ T6217] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.661818][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1792'. [ 660.780520][ T6217] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.061058][ T29] audit: type=1326 audit(1721386440.674:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57f75b59 code=0x7fc00000 [ 661.107961][ T29] audit: type=1326 audit(1721386440.674:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fad57f75b59 code=0x7fc00000 [ 661.151087][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1792'. [ 661.384121][ T29] audit: type=1326 audit(1721386440.994:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57f75b59 code=0x7fc00000 [ 661.475251][ T29] audit: type=1326 audit(1721386440.994:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fad57f75b59 code=0x7fc00000 [ 661.554300][ T29] audit: type=1326 audit(1721386440.994:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57f75b59 code=0x7fc00000 [ 661.821949][ T29] audit: type=1326 audit(1721386440.994:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57f75b59 code=0x7fc00000 [ 661.868470][ T6217] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.977283][ T5105] Bluetooth: hci2: command tx timeout [ 662.122654][ T29] audit: type=1326 audit(1721386440.994:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57f75b59 code=0x7fc00000 [ 662.288834][ T29] audit: type=1326 audit(1721386440.994:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57f75b59 code=0x7fc00000 [ 662.315678][ T29] audit: type=1326 audit(1721386440.994:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57f75b59 code=0x7fc00000 [ 662.649910][ T6217] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.868351][T11609] overlayfs: missing 'lowerdir' [ 663.465916][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 663.465942][ T29] audit: type=1326 audit(1721386443.074:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11617 comm="syz.3.1800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x0 [ 664.056977][ T5105] Bluetooth: hci2: command tx timeout [ 664.200055][ T6217] bridge_slave_1: left allmulticast mode [ 664.205780][ T6217] bridge_slave_1: left promiscuous mode [ 664.248008][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.330764][ T6217] bridge_slave_0: left allmulticast mode [ 664.336457][ T6217] bridge_slave_0: left promiscuous mode [ 664.395309][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.582177][ T29] audit: type=1326 audit(1721386445.194:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11646 comm="syz.5.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce51f75b59 code=0x7fc00000 [ 665.658700][ T29] audit: type=1326 audit(1721386445.194:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11646 comm="syz.5.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fce51f75b59 code=0x7fc00000 [ 666.031773][ T6217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.064539][ T6217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.091847][ T6217] bond0 (unregistering): Released all slaves [ 666.127455][ T5105] Bluetooth: hci2: command tx timeout [ 666.231147][ T29] audit: type=1326 audit(1721386445.844:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11646 comm="syz.5.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce51f75b59 code=0x7fc00000 [ 666.431637][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1809'. [ 666.448482][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1809'. [ 666.488059][T11570] chnl_net:caif_netlink_parms(): no params data found [ 666.546450][T11654] overlayfs: missing 'lowerdir' [ 667.208718][ T29] audit: type=1326 audit(1721386446.814:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11670 comm="syz.3.1816" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x0 [ 668.351378][ T5105] Bluetooth: hci2: command tx timeout [ 668.587671][ T6217] hsr_slave_0: left promiscuous mode [ 668.614978][ T29] audit: type=1326 audit(1721386448.224:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57f75b59 code=0x7fc00000 [ 668.667110][ T6217] hsr_slave_1: left promiscuous mode [ 668.680543][ T6217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.698926][ T6217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.715964][ T29] audit: type=1326 audit(1721386448.264:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fad57f75b59 code=0x7fc00000 [ 668.748380][ T6217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.755816][ T6217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.080945][ T6217] veth1_macvtap: left promiscuous mode [ 669.126576][ T6217] veth0_macvtap: left promiscuous mode [ 669.154100][ T6217] veth1_vlan: left promiscuous mode [ 669.159802][ T6217] veth0_vlan: left promiscuous mode [ 669.297912][ T29] audit: type=1326 audit(1721386448.914:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57f75b59 code=0x7fc00000 [ 670.160383][T11714] overlayfs: missing 'lowerdir' [ 671.326338][ T6217] team0 (unregistering): Port device team_slave_1 removed [ 671.432041][ T6217] team0 (unregistering): Port device team_slave_0 removed [ 672.724576][ T29] audit: type=1326 audit(1721386452.333:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11732 comm="syz.4.1833" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98f9f75b59 code=0x0 [ 673.410347][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1824'. [ 673.427584][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1824'. [ 673.790432][T11570] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.817772][T11570] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.825073][T11570] bridge_slave_0: entered allmulticast mode [ 673.848835][T11570] bridge_slave_0: entered promiscuous mode [ 673.889040][T11570] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.971240][T11570] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.046595][T11570] bridge_slave_1: entered allmulticast mode [ 674.103822][ T29] audit: type=1326 audit(1721386453.673:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11743 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 674.189726][T11570] bridge_slave_1: entered promiscuous mode [ 674.298750][ T29] audit: type=1326 audit(1721386453.673:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11743 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 674.579701][ T29] audit: type=1326 audit(1721386454.193:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11743 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 674.651043][ T29] audit: type=1326 audit(1721386454.193:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11743 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 674.722981][T11570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.804112][ T29] audit: type=1326 audit(1721386454.193:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11743 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 674.829444][T11570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.942594][ T29] audit: type=1326 audit(1721386454.193:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11743 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 675.110207][ T29] audit: type=1326 audit(1721386454.193:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11743 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 675.266940][ T29] audit: type=1326 audit(1721386454.193:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11743 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 675.359657][ T29] audit: type=1326 audit(1721386454.193:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11743 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 675.383849][ T29] audit: type=1326 audit(1721386454.193:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11743 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 675.979356][T11570] team0: Port device team_slave_0 added [ 676.023136][T11570] team0: Port device team_slave_1 added [ 676.487387][ T5160] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 676.516863][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1846'. [ 676.586989][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1846'. [ 676.618952][T11570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.626039][T11570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.697622][ T5160] usb 1-1: Using ep0 maxpacket: 16 [ 676.703447][T11570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.724482][ T5160] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 676.734525][ T5160] usb 1-1: config 0 has no interface number 0 [ 676.759259][ T5160] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 676.798617][T11570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.818590][T11570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.881756][ T5160] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 676.897382][ T5160] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 676.914048][ T5160] usb 1-1: Product: syz [ 676.927241][ T5160] usb 1-1: SerialNumber: syz [ 676.933002][T11570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.963582][ T5160] usb 1-1: config 0 descriptor?? [ 676.988463][T11770] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 677.260788][T11783] pim6reg1: entered promiscuous mode [ 677.270540][T11783] pim6reg1: entered allmulticast mode [ 677.296219][ T5160] usb 1-1: invalid MIDI in EP 0 [ 677.345288][T11570] hsr_slave_0: entered promiscuous mode [ 677.387202][T11570] hsr_slave_1: entered promiscuous mode [ 677.402778][T11570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 677.437441][T11570] Cannot create hsr debugfs directory [ 677.592814][ T5160] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 677.627931][ T5160] usb 1-1: USB disconnect, device number 12 [ 678.819612][T11810] pimreg: entered allmulticast mode [ 678.908567][T11810] input: syz1 as /devices/virtual/input/input30 [ 679.055373][T11809] pimreg: left allmulticast mode [ 679.125800][T11817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1859'. [ 679.145732][T11818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'. [ 679.181250][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 679.181272][ T29] audit: type=1326 audit(1721386458.793:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11801 comm="syz.0.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806f775b59 code=0x7fc00000 [ 679.448217][T11570] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 679.470516][T11824] loop5: detected capacity change from 0 to 512 [ 679.486478][T11570] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 679.526429][T11570] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 679.541034][T11824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.569927][T11824] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 679.604052][T11570] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 679.723445][T11831] loop0: detected capacity change from 0 to 512 [ 679.820808][T11831] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 679.934544][T11831] EXT4-fs (loop0): orphan cleanup on readonly fs [ 679.991407][T11831] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.1864: bg 0: block 248: padding at end of block bitmap is not set [ 680.034127][T11570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.078609][T11831] Quota error (device loop0): write_blk: dquota write failed [ 680.105052][T11831] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 680.156440][T11831] EXT4-fs error (device loop0): ext4_acquire_dquot:6842: comm syz.0.1864: Failed to acquire dquot type 1 [ 680.185964][T11570] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.230890][T11831] EXT4-fs (loop0): 1 truncate cleaned up [ 680.257193][T11831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 680.278304][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.285624][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.323648][T11831] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 680.378777][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.386147][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.403046][T11831] EXT4-fs error (device loop0): __ext4_remount:6487: comm syz.0.1864: Abort forced by user [ 680.436024][T11015] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.038192][T11831] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 681.318045][T11831] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 681.369488][T11831] ext4 filesystem being remounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 681.440898][T11831] Quota error (device loop0): write_blk: dquota write failed [ 681.503942][T11831] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 681.577715][T11831] EXT4-fs error (device loop0): ext4_acquire_dquot:6842: comm syz.0.1864: Failed to acquire dquot type 1 [ 681.900697][ T8054] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.931151][T11861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1872'. [ 682.025358][T11863] pimreg: entered allmulticast mode [ 682.048377][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1872'. [ 682.122064][T11863] input: syz1 as /devices/virtual/input/input31 [ 682.243193][ T29] audit: type=1326 audit(1721386461.853:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11864 comm="syz.4.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f9f75b59 code=0x7fc00000 [ 682.319309][T11862] pimreg: left allmulticast mode [ 682.341686][ T29] audit: type=1326 audit(1721386461.853:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11864 comm="syz.4.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f98f9f75b59 code=0x7fc00000 [ 682.861596][ T29] audit: type=1326 audit(1721386462.463:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11864 comm="syz.4.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f9f75b59 code=0x7fc00000 [ 683.134760][T11570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.420301][T11570] veth0_vlan: entered promiscuous mode [ 683.504568][T11570] veth1_vlan: entered promiscuous mode [ 684.722831][T11570] veth0_macvtap: entered promiscuous mode [ 684.743823][T11903] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 684.811976][T11903] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 684.813502][T11906] loop5: detected capacity change from 0 to 512 [ 684.853398][T11570] veth1_macvtap: entered promiscuous mode [ 684.863669][T11906] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 684.903760][T11906] EXT4-fs (loop5): orphan cleanup on readonly fs [ 684.914105][T11906] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.1885: bg 0: block 248: padding at end of block bitmap is not set [ 684.937565][T11906] Quota error (device loop5): write_blk: dquota write failed [ 684.948400][T11906] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 684.985796][T11906] EXT4-fs error (device loop5): ext4_acquire_dquot:6842: comm syz.5.1885: Failed to acquire dquot type 1 [ 685.044453][T11906] EXT4-fs (loop5): 1 truncate cleaned up [ 685.100883][T11906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 685.124334][T11906] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 685.142505][T11906] EXT4-fs error (device loop5): __ext4_remount:6487: comm syz.5.1885: Abort forced by user [ 685.154692][T11570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.187352][T11570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.208178][T11906] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 685.227819][T11570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.260863][T11570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.288192][T11906] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 685.291683][T11570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.327861][T11906] ext4 filesystem being remounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.345601][T11570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.375135][T11906] Quota error (device loop5): write_blk: dquota write failed [ 685.382975][T11570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.411571][T11906] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 685.423882][T11570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.434704][T11906] EXT4-fs error (device loop5): ext4_acquire_dquot:6842: comm syz.5.1885: Failed to acquire dquot type 1 [ 685.446635][T11570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.460580][T11570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.478198][T11570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.486066][T11911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1886'. [ 685.508877][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1886'. [ 685.553790][T11570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.607018][T11570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.630636][T11570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.650405][T11570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.677980][T11570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.698853][T11570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.715927][T11570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.728484][T11570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.757394][T11570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.778144][T11570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.797165][T11921] loop3: detected capacity change from 0 to 1024 [ 685.800450][T11570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.822918][T11921] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 685.823106][T11015] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.847656][T11570] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.857419][T11570] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.873184][T11570] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.911814][T11921] JBD2: no valid journal superblock found [ 685.924608][T11921] EXT4-fs (loop3): Could not load journal inode [ 685.932001][T11570] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.145412][T11921] loop3: detected capacity change from 0 to 512 [ 686.161705][T11923] pimreg: entered allmulticast mode [ 686.226065][T11921] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 686.294469][T11923] input: syz1 as /devices/virtual/input/input32 [ 686.485172][T11922] pimreg: left allmulticast mode [ 686.578533][ T29] audit: type=1326 audit(1721386466.183:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11928 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f9f75b59 code=0x7fc00000 [ 686.657453][ T29] audit: type=1326 audit(1721386466.213:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11928 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f9f75b59 code=0x7fc00000 [ 686.753322][ T29] audit: type=1326 audit(1721386466.243:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11928 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f9f75b59 code=0x7fc00000 [ 686.799454][ T2461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.857683][ T2461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.010628][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.058109][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.260778][ T29] audit: type=1326 audit(1721386466.873:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11940 comm="syz.5.1896" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce51f75b59 code=0x0 [ 687.336806][T11945] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 687.424194][T11945] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 688.775799][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1904'. [ 688.899888][T11970] loop4: detected capacity change from 0 to 512 [ 688.989163][T11970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.002286][T11970] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.183319][T11965] loop0: detected capacity change from 0 to 1024 [ 689.264450][T11965] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 689.387355][T11976] pimreg: entered allmulticast mode [ 689.515386][T11965] JBD2: no valid journal superblock found [ 689.540765][T11965] EXT4-fs (loop0): Could not load journal inode [ 689.657568][T11976] input: syz1 as /devices/virtual/input/input33 [ 689.956580][T11975] pimreg: left allmulticast mode [ 690.059477][ T46] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 690.092879][T11989] loop0: detected capacity change from 0 to 512 [ 690.144979][T11989] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent [ 690.288242][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.313990][T10593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.325668][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.348950][ T46] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 690.379946][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.448518][ T46] usb 4-1: config 0 descriptor?? [ 690.847789][ T29] audit: type=1326 audit(1721386470.452:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11997 comm="syz.5.1914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce51f75b59 code=0x0 [ 690.863521][T11998] loop0: detected capacity change from 0 to 512 [ 690.886434][T11998] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 690.923629][T11998] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent [ 691.009623][T12004] pim6reg1: entered promiscuous mode [ 691.015041][T12004] pim6reg1: entered allmulticast mode [ 691.044796][T12006] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 691.108620][T12006] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 691.424978][ T46] uclogic 0003:256C:006D.000A: failed retrieving Huion firmware version: -71 [ 691.444169][ T46] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 691.458434][ T46] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 691.504488][ T46] usb 4-1: USB disconnect, device number 12 [ 692.844725][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1920'. [ 693.385452][T12037] pimreg: entered allmulticast mode [ 693.847355][T12037] input: syz1 as /devices/virtual/input/input35 [ 694.525525][T12047] overlayfs: missing 'lowerdir' [ 694.616232][T12036] pimreg: left allmulticast mode [ 695.824014][ T29] audit: type=1326 audit(1721386475.432:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.1.1931" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad57f75b59 code=0x0 [ 695.863168][ T5081] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 696.137961][ T5081] usb 5-1: config 0 has an invalid interface number: 125 but max is 0 [ 696.508238][ T5081] usb 5-1: config 0 has no interface number 0 [ 696.521136][ T5081] usb 5-1: New USB device found, idVendor=0403, idProduct=bcd9, bcdDevice=94.33 [ 696.530635][ T5081] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.562912][ T5081] usb 5-1: config 0 descriptor?? [ 696.582676][ T5081] ftdi_sio 5-1:0.125: FTDI USB Serial Device converter detected [ 697.097069][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 697.104014][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.122820][ T5081] ftdi_sio ttyUSB0: unknown device type: 0x9433 [ 698.892328][T12091] overlayfs: missing 'lowerdir' [ 699.437397][ T5166] usb 5-1: USB disconnect, device number 12 [ 699.483244][T12099] pimreg: entered allmulticast mode [ 699.505890][ T5166] ftdi_sio 5-1:0.125: device disconnected [ 700.637456][T12099] input: syz1 as /devices/virtual/input/input36 [ 700.693149][ T29] audit: type=1326 audit(1721386480.282:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12112 comm="syz.1.1947" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad57f75b59 code=0x0 [ 700.865235][T12094] pimreg: left allmulticast mode [ 701.925226][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1955'. [ 702.374277][T12148] overlayfs: missing 'lowerdir' [ 703.622823][ T5105] Bluetooth: Frame is too long (len 5, expected len 4) [ 703.736590][T12161] loop2: detected capacity change from 0 to 1024 [ 703.827851][T12161] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 703.908905][ T29] audit: type=1326 audit(1721386483.512:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12168 comm="syz.0.1969" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f806f775b59 code=0x0 [ 703.916995][T12161] JBD2: no valid journal superblock found [ 703.981080][T12161] EXT4-fs (loop2): Could not load journal inode [ 704.062720][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1972'. [ 704.226901][T12161] loop2: detected capacity change from 0 to 512 [ 704.266464][T12161] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent [ 705.434597][T12198] overlayfs: missing 'workdir' [ 706.256113][T12222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1988'. [ 706.454624][ T29] audit: type=1326 audit(1721386486.052:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12228 comm="syz.4.1991" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98f9f75b59 code=0x0 [ 706.707732][T12237] loop3: detected capacity change from 0 to 1024 [ 706.769473][T12237] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 706.797405][T12237] JBD2: no valid journal superblock found [ 706.838995][T12237] EXT4-fs (loop3): Could not load journal inode [ 707.031904][T12237] loop3: detected capacity change from 0 to 512 [ 707.078580][T12237] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 707.355556][T12259] overlayfs: missing 'workdir' [ 707.768213][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2005'. [ 707.777403][ T5177] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 708.016758][ T5177] usb 1-1: config 0 has an invalid interface number: 125 but max is 0 [ 708.039028][ T5177] usb 1-1: config 0 has no interface number 0 [ 708.045355][ T5177] usb 1-1: New USB device found, idVendor=0403, idProduct=bcd9, bcdDevice=94.33 [ 708.119212][ T5177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.179990][ T5177] usb 1-1: config 0 descriptor?? [ 708.196355][ T5177] ftdi_sio 1-1:0.125: FTDI USB Serial Device converter detected [ 708.251345][ T5177] ftdi_sio ttyUSB0: unknown device type: 0x9433 [ 710.269166][ T5166] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 710.408277][T12305] overlayfs: missing 'workdir' [ 710.483574][ T5166] usb 5-1: Using ep0 maxpacket: 32 [ 710.514210][ T5166] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 710.573645][ T5166] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 710.603476][ T5166] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.634780][ T5166] usb 5-1: Product: syz [ 710.661555][ T5166] usb 5-1: Manufacturer: syz [ 710.685537][ T5166] usb 5-1: SerialNumber: syz [ 710.729933][T12295] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 710.966144][ T5166] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 711.015617][ T5166] usb 5-1: USB disconnect, device number 13 [ 711.393623][T12323] loop5: detected capacity change from 0 to 256 [ 711.840217][ T5113] usb 1-1: USB disconnect, device number 13 [ 711.848424][ T5113] ftdi_sio 1-1:0.125: device disconnected [ 714.009359][ T5113] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 714.047129][T12370] pim6reg1: entered promiscuous mode [ 714.057935][T12370] pim6reg1: entered allmulticast mode [ 714.227907][ T5113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.281722][ T5113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.323659][ T5113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 714.344263][ T5113] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 714.354491][ T5113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.367961][ T5113] usb 3-1: config 0 descriptor?? [ 714.449664][ T5166] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 714.625673][T12374] pimreg: entered allmulticast mode [ 714.650162][ T5166] usb 1-1: Using ep0 maxpacket: 32 [ 714.675675][ T5166] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 714.698304][T12374] input: syz1 as /devices/virtual/input/input37 [ 714.754306][ T5166] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 714.775432][ T5166] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.788844][ T5166] usb 1-1: Product: syz [ 714.793286][ T5166] usb 1-1: Manufacturer: syz [ 714.797997][ T5166] usb 1-1: SerialNumber: syz [ 714.812704][T12372] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 714.871659][T12362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.899762][T12362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.926458][T12373] pimreg: left allmulticast mode [ 715.033672][ T5113] acrux 0003:1A34:0802.000B: item fetching failed at offset 3/5 [ 715.084252][ T5113] acrux 0003:1A34:0802.000B: parse failed [ 715.112318][ T5166] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 715.123184][ T5113] acrux 0003:1A34:0802.000B: probe with driver acrux failed with error -22 [ 715.150454][ T5166] usb 1-1: USB disconnect, device number 14 [ 715.275111][ T5113] usb 3-1: USB disconnect, device number 13 [ 715.731012][T12383] loop4: detected capacity change from 0 to 1024 [ 715.776853][T12383] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 715.824202][T12383] JBD2: no valid journal superblock found [ 715.855514][T12383] EXT4-fs (loop4): Could not load journal inode [ 715.920484][T12390] loop1: detected capacity change from 0 to 256 [ 716.025989][T12383] loop4: detected capacity change from 0 to 512 [ 716.061572][T12383] EXT4-fs (loop4): blocks per group (71) and clusters per group (32768) inconsistent [ 717.762889][T12418] pimreg: entered allmulticast mode [ 717.861612][T12418] input: syz1 as /devices/virtual/input/input38 [ 717.989061][ T29] audit: type=1326 audit(1721386497.591:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.5.2059" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce51f75b59 code=0x0 [ 718.030290][T12415] pimreg: left allmulticast mode [ 718.139550][ T5081] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 718.358259][ T5081] usb 5-1: Using ep0 maxpacket: 32 [ 718.371069][ T5081] usb 5-1: unable to get BOS descriptor or descriptor too short [ 718.401907][ T5081] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 4533, setting to 1024 [ 718.432724][ T5081] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 718.463447][ T5081] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 718.503114][ T5081] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 718.522837][ T5081] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.539015][ T5081] usb 5-1: Product: 㣵됂妠⽪➴ꦠ腟ꛘ㖿퓸萮⬻㺫긚뼥䷵ঊမଗꦴ둀羵秸鷺ףḃ쭐崏퓁ꁄ鉝涏㮥㶾筎㕠࠵⼞䥪湭䁖孼搤䞈ဖ픨鲣⃑莅룵ﻱꮉ쪿៰䐪燶塴붿ᒲ嘃䢆膗酩斢ﶦ퍣뒦胅턔▴峣媓辚拨侙᠒雪킻퓇突ꧨ祅㩊嵚嵤瓦౯楏৯䇏 [ 718.570388][ T5081] usb 5-1: Manufacturer: Ц [ 718.859560][ T5159] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 718.979305][T12439] loop1: detected capacity change from 0 to 1024 [ 718.995862][T12439] EXT4-fs: Ignoring removed nomblk_io_submit option [ 719.048440][ T5081] cdc_ncm 5-1:1.0: bind() failure [ 719.071303][T12439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.078578][ T5081] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 719.109664][ T5159] usb 3-1: config 17 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 719.156540][ T5159] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 719.167462][ T5081] cdc_ncm 5-1:1.1: bind() failure [ 719.219793][ T5159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.236277][ T5081] usb 5-1: USB disconnect, device number 14 [ 719.636233][ T5159] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 719.719603][T12450] syz.5.2064[12450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 719.721191][T12450] syz.5.2064[12450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 720.155966][ T5159] usb 3-1: USB disconnect, device number 14 [ 720.781964][ T5465] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.557861][T12464] loop0: detected capacity change from 0 to 1024 [ 721.661090][T12464] ext4: Unknown parameter 'nouser_xattr' [ 721.841356][T12460] 9pnet: Could not find request transport: fd0x0000000000000003 [ 721.886248][T12468] pim6reg1: entered promiscuous mode [ 721.924490][T12468] pim6reg1: entered allmulticast mode [ 722.021346][ T29] audit: type=1326 audit(1721386501.611:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.1.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57f75b59 code=0x7fc00000 [ 722.085461][T12478] loop3: detected capacity change from 0 to 128 [ 722.087406][ T29] audit: type=1326 audit(1721386501.621:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.1.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fad57f75b59 code=0x7fc00000 [ 722.123965][ T29] audit: type=1326 audit(1721386501.731:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12480 comm="syz.4.2075" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98f9f75b59 code=0x0 [ 722.546947][ T29] audit: type=1326 audit(1721386502.151:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.1.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57f75b59 code=0x7fc00000 [ 722.742059][ T29] audit: type=1326 audit(1721386502.151:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.1.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad57f75b59 code=0x7fc00000 [ 722.869828][ T5159] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 723.073928][ T5160] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 723.320033][ T5159] usb 3-1: Using ep0 maxpacket: 32 [ 723.341507][ T29] audit: type=1326 audit(1721386502.151:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.1.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad57f75b59 code=0x7fc00000 [ 723.409868][ T5159] usb 3-1: unable to get BOS descriptor or descriptor too short [ 723.430722][ T5159] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 4533, setting to 1024 [ 723.473915][ T5159] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 723.495046][ T5159] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 723.513753][T12493] loop1: detected capacity change from 0 to 1024 [ 723.524049][ T5160] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 723.545978][T12493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 723.559220][ T5160] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 723.568467][ T5159] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 723.589388][ T5160] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 723.602528][ T5159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.618548][ T5159] usb 3-1: Product: 㣵됂妠⽪➴ꦠ腟ꛘ㖿퓸萮⬻㺫긚뼥䷵ঊမଗꦴ둀羵秸鷺ףḃ쭐崏퓁ꁄ鉝涏㮥㶾筎㕠࠵⼞䥪湭䁖孼搤䞈ဖ픨鲣⃑莅룵ﻱꮉ쪿៰䐪燶塴붿ᒲ嘃䢆膗酩斢ﶦ퍣뒦胅턔▴峣媓辚拨侙᠒雪킻퓇突ꧨ祅㩊嵚嵤瓦౯楏৯䇏 [ 723.642210][T12498] loop5: detected capacity change from 0 to 256 [ 723.674307][ T5160] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 723.689162][T12498] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 723.693462][ T5160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.710778][ T5159] usb 3-1: Manufacturer: Ц [ 723.715541][ T5160] usb 4-1: Product: syz [ 723.728033][ T5160] usb 4-1: Manufacturer: syz [ 723.732116][T12493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.736136][ T5160] usb 4-1: SerialNumber: syz [ 724.217272][ T5160] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 724.230940][ T5160] cdc_ncm 4-1:1.0: bind() failure [ 724.350790][T12507] syz.0.2080[12507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 724.352993][T12507] syz.0.2080[12507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 725.259910][T11490] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 725.339464][ T5159] cdc_ncm 3-1:1.0: bind() failure [ 725.355859][ T5159] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 725.363762][ T5159] cdc_ncm 3-1:1.1: bind() failure [ 725.381242][ T5159] usb 3-1: USB disconnect, device number 15 [ 725.454221][ T5465] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.493322][T11490] usb 6-1: config 17 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 725.510653][T11490] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 725.520051][T11490] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.545048][T11490] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 725.670407][T12509] loop0: detected capacity change from 0 to 1024 [ 725.697488][T12509] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 725.755817][T12509] JBD2: no valid journal superblock found [ 725.783662][T12509] EXT4-fs (loop0): Could not load journal inode [ 725.855324][ T5159] usb 6-1: USB disconnect, device number 12 [ 725.939109][T12515] loop0: detected capacity change from 0 to 512 [ 725.951519][T12515] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent [ 726.124401][T12513] pim6reg1: entered promiscuous mode [ 726.160169][ T5160] usb 4-1: USB disconnect, device number 13 [ 726.178587][T12513] pim6reg1: entered allmulticast mode [ 726.959525][ T5159] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 727.381037][ T5159] usb 1-1: Using ep0 maxpacket: 32 [ 727.418705][ T5159] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 727.515324][ T5159] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 727.575403][ T5159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.627694][ T5159] usb 1-1: Product: syz [ 727.666967][ T5159] usb 1-1: Manufacturer: syz [ 727.706544][ T5159] usb 1-1: SerialNumber: syz [ 727.794530][T12519] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 727.981445][ T29] audit: type=1326 audit(1721386507.591:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12538 comm="syz.3.2093" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x0 [ 728.088041][ T5159] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 728.123120][ T5159] usb 1-1: USB disconnect, device number 15 [ 728.199422][T12542] loop4: detected capacity change from 0 to 512 [ 728.224618][T12542] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 728.258605][T12542] EXT4-fs (loop4): orphan cleanup on readonly fs [ 728.277591][T12542] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.2095: bg 0: block 248: padding at end of block bitmap is not set [ 728.308316][T12545] loop2: detected capacity change from 0 to 1024 [ 728.335587][T12545] EXT4-fs: Ignoring removed nomblk_io_submit option [ 728.337476][T12542] Quota error (device loop4): write_blk: dquota write failed [ 728.379502][T12542] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 728.411548][T12545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.441760][T12542] EXT4-fs error (device loop4): ext4_acquire_dquot:6842: comm syz.4.2095: Failed to acquire dquot type 1 [ 728.494056][T12542] EXT4-fs (loop4): 1 truncate cleaned up [ 728.528801][T12542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 728.719616][T10593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.043109][T12554] loop5: detected capacity change from 0 to 1024 [ 729.074416][T12554] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 729.088951][T12560] loop3: detected capacity change from 0 to 128 [ 729.133520][T12554] JBD2: no valid journal superblock found [ 729.167304][T12554] EXT4-fs (loop5): Could not load journal inode [ 729.277115][T11570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.686616][ T5159] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 729.974984][ T5159] usb 1-1: Using ep0 maxpacket: 32 [ 730.026474][ T5160] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 730.367783][ T5159] usb 1-1: unable to get BOS descriptor or descriptor too short [ 730.466704][ T5159] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 4533, setting to 1024 [ 730.493472][T12568] loop5: detected capacity change from 0 to 512 [ 730.546467][ T5159] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 730.561846][ T5160] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.582508][T12568] EXT4-fs (loop5): blocks per group (71) and clusters per group (32768) inconsistent [ 730.605378][ T5160] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 730.621727][ T5159] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 730.653147][ T5160] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 730.685764][ T5159] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 730.709044][ T5159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.737830][ T5160] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 730.754380][ T5160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.766220][ T5159] usb 1-1: Product: 㣵됂妠⽪➴ꦠ腟ꛘ㖿퓸萮⬻㺫긚뼥䷵ঊမଗꦴ둀羵秸鷺ףḃ쭐崏퓁ꁄ鉝涏㮥㶾筎㕠࠵⼞䥪湭䁖孼搤䞈ဖ픨鲣⃑莅룵ﻱꮉ쪿៰䐪燶塴붿ᒲ嘃䢆膗酩斢ﶦ퍣뒦胅턔▴峣媓辚拨侙᠒雪킻퓇突ꧨ祅㩊嵚嵤瓦౯楏৯䇏 [ 730.805642][ T5160] usb 4-1: Product: syz [ 730.829671][ T5160] usb 4-1: Manufacturer: syz [ 730.859908][ T5160] usb 4-1: SerialNumber: syz [ 730.932315][ T5160] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 730.962261][ T5159] usb 1-1: Manufacturer: Ц [ 730.975858][ T5160] cdc_ncm 4-1:1.0: bind() failure [ 731.495828][T12584] loop4: detected capacity change from 0 to 512 [ 731.590551][T12584] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.2106: casefold flag without casefold feature [ 731.633849][T12584] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2106: couldn't read orphan inode 15 (err -117) [ 731.706157][ T5159] cdc_ncm 1-1:1.0: bind() failure [ 731.717922][T12584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.722442][ T5159] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 731.737629][ T5159] cdc_ncm 1-1:1.1: bind() failure [ 731.755490][ T5159] usb 1-1: USB disconnect, device number 16 [ 732.511828][ T5081] usb 4-1: USB disconnect, device number 14 [ 733.090738][T12590] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 733.101341][T12590] Bluetooth: hci5: Injecting HCI hardware error event [ 733.729294][T10593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.963539][ T29] audit: type=1326 audit(1721386513.560:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12604 comm="syz.0.2113" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f806f775b59 code=0x0 [ 734.135544][ T29] audit: type=1326 audit(1721386513.740:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.5.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce51f75b59 code=0x7fc00000 [ 734.196505][ T29] audit: type=1326 audit(1721386513.750:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.5.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fce51f75b59 code=0x7fc00000 [ 734.240269][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 734.345493][T12616] pim6reg1: entered promiscuous mode [ 734.356309][T12616] pim6reg1: entered allmulticast mode [ 734.444506][ T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 734.460025][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 734.480651][ T25] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 734.491085][ T25] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 734.499362][ T25] usb 5-1: Manufacturer: syz [ 734.533368][ T25] usb 5-1: config 0 descriptor?? [ 734.564247][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 734.789097][ T29] audit: type=1326 audit(1721386514.360:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.5.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce51f75b59 code=0x7fc00000 [ 734.804653][T12625] loop3: detected capacity change from 0 to 128 [ 734.860814][T12590] Bluetooth: hci5: command 0x0406 tx timeout [ 734.874133][ T5105] Bluetooth: hci5: hardware error 0x00 [ 734.874825][ T29] audit: type=1326 audit(1721386514.360:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.5.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fce51f75b59 code=0x7fc00000 [ 735.062459][ T29] audit: type=1326 audit(1721386514.360:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.5.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce51f75b59 code=0x7fc00000 [ 735.202534][ T29] audit: type=1326 audit(1721386514.360:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.5.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce51f75b59 code=0x7fc00000 [ 735.310452][ T29] audit: type=1326 audit(1721386514.360:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.5.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce51f75b59 code=0x7fc00000 [ 735.368009][ T29] audit: type=1326 audit(1721386514.360:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.5.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce51f75b59 code=0x7fc00000 [ 735.912277][ T29] audit: type=1326 audit(1721386514.360:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.5.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce51f75b59 code=0x7fc00000 [ 736.162009][T12639] pim6reg1: entered promiscuous mode [ 736.186313][T12639] pim6reg1: entered allmulticast mode [ 736.320355][T11490] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 736.520551][T11490] usb 1-1: Using ep0 maxpacket: 32 [ 736.539931][T11490] usb 1-1: unable to get BOS descriptor or descriptor too short [ 736.595803][T11490] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 4533, setting to 1024 [ 736.671283][T11490] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 736.728451][T11490] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 737.353547][ T5105] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 738.829447][ T5159] usb 5-1: USB disconnect, device number 15 [ 738.843432][T11490] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 738.871448][T12653] loop2: detected capacity change from 0 to 512 [ 738.916091][T11490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.934841][T12653] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.2129: casefold flag without casefold feature [ 738.947751][T11490] usb 1-1: Product: 㣵됂妠⽪➴ꦠ腟ꛘ㖿퓸萮⬻㺫긚뼥䷵ঊမଗꦴ둀羵秸鷺ףḃ쭐崏퓁ꁄ鉝涏㮥㶾筎㕠࠵⼞䥪湭䁖孼搤䞈ဖ픨鲣⃑莅룵ﻱꮉ쪿៰䐪燶塴붿ᒲ嘃䢆膗酩斢ﶦ퍣뒦胅턔▴峣媓辚拨侙᠒雪킻퓇突ꧨ祅㩊嵚嵤瓦౯楏৯䇏 [ 738.961608][T12645] loop1: detected capacity change from 0 to 4096 [ 738.995592][T11490] usb 1-1: Manufacturer: Ц [ 739.033944][T12653] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2129: couldn't read orphan inode 15 (err -117) [ 739.056344][T12645] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 739.065643][ T5166] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 739.089035][T11490] usb 1-1: can't set config #1, error -71 [ 739.139603][T11490] usb 1-1: USB disconnect, device number 17 [ 739.181247][T12653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.343039][T12645] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 739.434439][T12653] EXT4-fs error (device loop2): ext4_empty_dir:3038: inode #2: comm syz.2.2129: invalid size [ 739.542902][T12645] ntfs3: loop1: Failed to load $Extend (-22). [ 739.753505][T12645] ntfs3: loop1: Failed to initialize $Extend. [ 742.593909][T12672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2135'. [ 742.615147][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 742.615173][ T29] audit: type=1326 audit(1721386522.220:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12668 comm="syz.1.2134" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad57f75b59 code=0x0 [ 742.645388][T11570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.574218][T12689] loop3: detected capacity change from 0 to 256 [ 744.989210][T12699] loop2: detected capacity change from 0 to 1024 [ 745.022191][T12699] EXT4-fs: Ignoring removed nomblk_io_submit option [ 745.120924][T11490] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 745.155484][T12699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.261613][ T5160] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 745.630066][ T5160] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 745.903406][ T5160] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 745.983788][ T5160] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 746.033341][ T5160] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 746.076059][ T5160] usb 6-1: Manufacturer: syz [ 746.132044][ T5160] usb 6-1: config 0 descriptor?? [ 746.165965][ T5160] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 746.250490][T11490] usb 1-1: Using ep0 maxpacket: 32 [ 746.287271][T11490] usb 1-1: unable to get BOS descriptor or descriptor too short [ 746.303360][T11490] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 4533, setting to 1024 [ 746.316412][T11490] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 746.326532][T11490] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 746.345135][T11490] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 746.354659][T11490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.392791][T11490] usb 1-1: Product: 㣵됂妠⽪➴ꦠ腟ꛘ㖿퓸萮⬻㺫긚뼥䷵ঊမଗꦴ둀羵秸鷺ףḃ쭐崏퓁ꁄ鉝涏㮥㶾筎㕠࠵⼞䥪湭䁖孼搤䞈ဖ픨鲣⃑莅룵ﻱꮉ쪿៰䐪燶塴붿ᒲ嘃䢆膗酩斢ﶦ퍣뒦胅턔▴峣媓辚拨侙᠒雪킻퓇突ꧨ祅㩊嵚嵤瓦౯楏৯䇏 [ 746.450734][T11490] usb 1-1: Manufacturer: Ц [ 746.577774][T11570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.977257][T12715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2150'. [ 747.021734][T11490] cdc_ncm 1-1:1.0: bind() failure [ 747.067267][T11490] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 747.145856][T11490] cdc_ncm 1-1:1.1: bind() failure [ 747.216373][T11490] usb 1-1: USB disconnect, device number 18 [ 748.238498][T12709] loop1: detected capacity change from 0 to 32768 [ 748.272281][T12709] XFS: ikeep mount option is deprecated. [ 748.311514][ T46] usb 6-1: USB disconnect, device number 13 [ 748.344504][T12709] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 748.517532][T12724] loop2: detected capacity change from 0 to 4096 [ 748.548347][T12724] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 748.575583][ T29] audit: type=1326 audit(1721386528.170:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12725 comm="syz.0.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806f775b59 code=0x7fc00000 [ 748.670516][T12709] XFS (loop1): Ending clean mount [ 748.670914][ T29] audit: type=1326 audit(1721386528.170:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12725 comm="syz.0.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f806f775b59 code=0x7fc00000 [ 748.681158][T12724] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 748.702026][ T29] audit: type=1326 audit(1721386528.230:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12736 comm="syz.5.2154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce51f75b59 code=0x0 [ 748.719570][T12709] XFS (loop1): Quotacheck needed: Please wait. [ 748.900548][T12709] XFS (loop1): Quotacheck: Done. [ 749.201117][ T2461] ntfs3: loop2: ino=5, ntfs3_write_inode failed, -22. [ 749.213986][ T29] audit: type=1326 audit(1721386528.770:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12725 comm="syz.0.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806f775b59 code=0x7fc00000 [ 752.066540][ T5465] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 752.106876][T12767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2163'. [ 753.771508][ T5159] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 754.062629][ T5159] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 754.081622][T12778] loop5: detected capacity change from 0 to 4096 [ 754.097192][ T5159] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 754.135460][T12778] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 754.167988][ T5159] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 754.222691][ T5159] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 754.281254][ T5159] usb 4-1: Manufacturer: syz [ 754.289196][T12778] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 754.318897][ T5159] usb 4-1: config 0 descriptor?? [ 754.363901][ T5159] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 754.598154][ T29] audit: type=1326 audit(1721386534.199:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12786 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806f775b59 code=0x7fc00000 [ 754.663720][ T29] audit: type=1326 audit(1721386534.209:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12786 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f806f775b59 code=0x7fc00000 [ 754.704048][ T5113] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 754.711483][ T52] ntfs3: loop5: ino=5, ntfs3_write_inode failed, -22. [ 754.903998][ T5113] usb 2-1: config 17 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 754.928225][ T5113] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 754.957878][ T5113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.996628][ T5113] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 755.225055][ T29] audit: type=1326 audit(1721386534.829:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12786 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806f775b59 code=0x7fc00000 [ 755.285810][ T5113] usb 2-1: USB disconnect, device number 25 [ 755.328288][ T29] audit: type=1326 audit(1721386534.829:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12786 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f806f775b59 code=0x7fc00000 [ 755.399434][ T29] audit: type=1326 audit(1721386534.829:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12786 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806f775b59 code=0x7fc00000 [ 755.471281][ T29] audit: type=1326 audit(1721386534.829:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12786 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806f775b59 code=0x7fc00000 [ 755.584074][ T29] audit: type=1326 audit(1721386535.179:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12796 comm="syz.0.2173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f806f775b59 code=0x0 [ 756.440297][ T5159] usb 4-1: USB disconnect, device number 16 [ 758.480981][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.511312][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 761.673545][T12836] loop0: detected capacity change from 0 to 64 [ 761.762357][T12838] pimreg: entered allmulticast mode [ 762.123853][T12838] input: syz1 as /devices/virtual/input/input42 [ 762.368362][T12837] pimreg: left allmulticast mode [ 762.723482][ T5113] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 762.970943][ T5113] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 763.021492][ T5113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.031339][ T5113] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 763.094553][ T5113] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 763.369745][ T25] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 763.847206][ T25] usb 4-1: config 0 has an invalid interface number: 125 but max is 0 [ 763.884812][ T25] usb 4-1: config 0 has no interface number 0 [ 763.920289][ T25] usb 4-1: New USB device found, idVendor=0403, idProduct=bcd9, bcdDevice=94.33 [ 763.968268][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.036788][ T25] usb 4-1: config 0 descriptor?? [ 764.041726][ T5113] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 764.041773][ T5113] usb 5-1: Manufacturer: syz [ 764.056443][ T5113] usb 5-1: config 0 descriptor?? [ 764.080861][ T5113] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 764.148401][ T25] ftdi_sio 4-1:0.125: FTDI USB Serial Device converter detected [ 764.189337][ T25] ftdi_sio ttyUSB0: unknown device type: 0x9433 [ 764.495655][T12861] loop1: detected capacity change from 0 to 1024 [ 766.469322][ T5113] usb 4-1: USB disconnect, device number 17 [ 766.523642][ T5113] ftdi_sio 4-1:0.125: device disconnected [ 766.627999][ T5166] usb 5-1: USB disconnect, device number 16 [ 769.505232][T12902] pimreg: entered allmulticast mode [ 769.764600][T12902] input: syz1 as /devices/virtual/input/input43 [ 771.132232][ T5166] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 771.211460][T12898] pimreg: left allmulticast mode [ 771.392437][ T5166] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 771.418646][ T5166] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.453501][ T5166] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 771.499447][ T5166] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 771.511457][ T5166] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 771.523096][T12917] veth0_vlan: entered allmulticast mode [ 771.547844][ T5166] usb 1-1: Manufacturer: syz [ 771.587105][ T5166] usb 1-1: config 0 descriptor?? [ 771.615826][ T5166] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 771.719963][T12917] : renamed from vlan0 [ 771.953758][T12927] loop3: detected capacity change from 0 to 64 [ 773.597864][T12945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2215'. [ 773.666715][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2215'. [ 773.870553][ T922] usb 1-1: USB disconnect, device number 19 [ 774.447657][T12952] loop2: detected capacity change from 0 to 256 [ 774.772288][T12952] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006005) [ 774.780985][T12952] FAT-fs (loop2): Filesystem has been set read-only [ 775.753572][T12972] loop3: detected capacity change from 0 to 512 [ 775.785313][T12972] ext4: Unknown parameter 'hash' [ 776.082233][ T5166] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 776.314918][ T5166] usb 6-1: config 0 has an invalid interface number: 125 but max is 0 [ 776.344153][ T5166] usb 6-1: config 0 has no interface number 0 [ 776.350403][ T5166] usb 6-1: New USB device found, idVendor=0403, idProduct=bcd9, bcdDevice=94.33 [ 776.395782][T12984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2230'. [ 776.409391][ T5166] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.476858][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2230'. [ 776.511194][ T5166] usb 6-1: config 0 descriptor?? [ 776.550266][ T5166] ftdi_sio 6-1:0.125: FTDI USB Serial Device converter detected [ 776.558511][ T5113] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 776.634111][ T5166] ftdi_sio ttyUSB0: unknown device type: 0x9433 [ 777.597476][T12961] loop4: detected capacity change from 0 to 32768 [ 777.606548][T12961] XFS: ikeep mount option is deprecated. [ 777.659828][ T5113] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 777.691780][ T5113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.712354][T12961] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 777.742190][ T5113] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 777.827402][ T5113] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 777.860538][ T5113] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 777.880140][ T5113] usb 2-1: Manufacturer: syz [ 777.899273][ T5113] usb 2-1: config 0 descriptor?? [ 777.934536][ T5113] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 778.273828][T12961] XFS (loop4): Ending clean mount [ 778.385403][T12961] XFS (loop4): Quotacheck needed: Please wait. [ 779.161185][T12961] XFS (loop4): Quotacheck: Done. [ 779.210555][ T46] usb 6-1: USB disconnect, device number 14 [ 779.226967][T13013] loop3: detected capacity change from 0 to 1024 [ 779.261040][ T46] ftdi_sio 6-1:0.125: device disconnected [ 779.314332][T13013] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 779.359357][T10593] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 779.396923][T13013] JBD2: no valid journal superblock found [ 779.418270][T13013] EXT4-fs (loop3): Could not load journal inode [ 779.638018][T13013] loop3: detected capacity change from 0 to 512 [ 779.702362][T13013] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 780.299956][ T46] usb 2-1: USB disconnect, device number 26 [ 780.436605][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2243'. [ 780.740676][T13037] ip6gretap0: entered promiscuous mode [ 780.746924][T13037] macvtap1: entered promiscuous mode [ 780.752556][T13037] macvtap1: entered allmulticast mode [ 780.757969][T13037] ip6gretap0: entered allmulticast mode [ 781.130151][T13023] loop2: detected capacity change from 0 to 32768 [ 781.138882][T13023] XFS: ikeep mount option is deprecated. [ 781.184054][T13023] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 781.467632][ T5166] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 781.493932][ T922] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 781.559844][T13023] XFS (loop2): Ending clean mount [ 781.633562][T13023] XFS (loop2): Quotacheck needed: Please wait. [ 781.766961][ T5166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.809304][ T922] usb 1-1: config 0 has an invalid interface number: 125 but max is 0 [ 781.850539][ T5166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.872496][ T922] usb 1-1: config 0 has no interface number 0 [ 781.907348][ T922] usb 1-1: New USB device found, idVendor=0403, idProduct=bcd9, bcdDevice=94.33 [ 781.951810][ T5166] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 781.996693][ T922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.036623][ T5166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.101897][ T922] usb 1-1: config 0 descriptor?? [ 782.107353][T13023] XFS (loop2): Quotacheck: Done. [ 782.124282][ T5166] usb 4-1: config 0 descriptor?? [ 782.165017][ T922] ftdi_sio 1-1:0.125: FTDI USB Serial Device converter detected [ 782.258868][ T922] ftdi_sio ttyUSB0: unknown device type: 0x9433 [ 782.376950][ T29] audit: type=1326 audit(1721386561.968:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13065 comm="syz.5.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce51f75b59 code=0x7fc00000 [ 782.519465][ T29] audit: type=1326 audit(1721386561.978:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13065 comm="syz.5.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fce51f75b59 code=0x7fc00000 [ 782.708267][T13052] xt_CT: You must specify a L4 protocol and not use inversions on it [ 782.789896][ T29] audit: type=1326 audit(1721386562.388:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13065 comm="syz.5.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce51f75b59 code=0x7fc00000 [ 782.873185][ T5166] usbhid 4-1:0.0: can't add hid device: -71 [ 782.909955][ T5166] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 782.983139][ T5166] usb 4-1: USB disconnect, device number 18 [ 783.132592][T11570] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 783.306091][T13082] loop4: detected capacity change from 0 to 1024 [ 783.331649][T13082] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 783.367003][T13082] JBD2: no valid journal superblock found [ 783.376198][T13082] EXT4-fs (loop4): Could not load journal inode [ 783.598511][T13085] loop4: detected capacity change from 0 to 512 [ 783.676752][T13085] EXT4-fs (loop4): blocks per group (71) and clusters per group (32768) inconsistent [ 784.126818][T13093] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2260'. [ 784.141231][ T5160] usb 1-1: USB disconnect, device number 20 [ 784.152538][T13093] tipc: Invalid UDP bearer configuration [ 784.152639][T13093] tipc: Enabling of bearer rejected, failed to enable media [ 784.183217][ T5160] ftdi_sio 1-1:0.125: device disconnected [ 784.391085][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2262'. [ 784.440684][T13101] macvtap2: entered promiscuous mode [ 784.476262][T13101] macvtap2: entered allmulticast mode [ 784.796229][T13113] loop2: detected capacity change from 0 to 512 [ 784.902542][T13113] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 785.064139][T13113] EXT4-fs (loop2): 1 truncate cleaned up [ 785.125150][T13113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.774863][ T29] audit: type=1326 audit(1721386565.378:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13114 comm="syz.3.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 786.021190][ T29] audit: type=1326 audit(1721386565.378:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13114 comm="syz.3.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 786.061227][ T5105] Bluetooth: hci2: command 0x0406 tx timeout [ 786.148271][ T29] audit: type=1326 audit(1721386565.538:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13114 comm="syz.3.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 786.250104][T11570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.404039][T13135] loop0: detected capacity change from 0 to 1024 [ 786.432516][ T922] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 786.439718][T13135] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 786.462945][T13137] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2275'. [ 786.471926][T13137] tipc: Invalid UDP bearer configuration [ 786.472022][T13137] tipc: Enabling of bearer rejected, failed to enable media [ 786.502743][T13135] JBD2: no valid journal superblock found [ 786.508562][T13135] EXT4-fs (loop0): Could not load journal inode [ 786.645415][ T922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.674729][ T922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.739449][ T922] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 786.747467][T13146] loop0: detected capacity change from 0 to 512 [ 786.774286][T13146] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent [ 786.841780][ T922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.593840][ T922] usb 2-1: config 0 descriptor?? [ 787.638888][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2280'. [ 787.706609][T13157] ip6gretap0: entered promiscuous mode [ 788.079824][T13157] macvtap1: entered promiscuous mode [ 788.103015][T13157] macvtap1: entered allmulticast mode [ 788.139736][T13157] ip6gretap0: entered allmulticast mode [ 788.343974][T13130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 788.472189][ T922] usbhid 2-1:0.0: can't add hid device: -71 [ 788.508710][ T922] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 788.546336][ T922] usb 2-1: USB disconnect, device number 27 [ 790.332912][T13183] netlink: 'syz.2.2286': attribute type 5 has an invalid length. [ 790.806623][T13193] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2289'. [ 790.828158][T13193] tipc: Invalid UDP bearer configuration [ 790.828264][T13193] tipc: Enabling of bearer rejected, failed to enable media [ 791.428377][T13212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2298'. [ 791.505632][ T29] audit: type=1326 audit(1721386571.108:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.5.2297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce51f75b59 code=0x0 [ 791.510958][T13212] ip6gretap0: entered promiscuous mode [ 791.565278][T13212] macvtap3: entered promiscuous mode [ 791.585314][T13212] macvtap3: entered allmulticast mode [ 791.590843][T13212] ip6gretap0: entered allmulticast mode [ 791.922755][ T5081] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 792.777628][ T5081] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.790173][ T5081] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.822729][ T5081] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 792.850348][ T5081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.884055][ T5081] usb 2-1: config 0 descriptor?? [ 793.327656][T13218] xt_CT: You must specify a L4 protocol and not use inversions on it [ 793.501460][T13256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2312'. [ 793.559498][ T5166] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 793.645548][T13256] macvtap2: entered promiscuous mode [ 793.671221][T13256] macvtap2: entered allmulticast mode [ 793.748554][ T5081] usbhid 2-1:0.0: can't add hid device: -71 [ 793.756008][ T5081] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 793.767476][ T5081] usb 2-1: USB disconnect, device number 28 [ 793.788486][ T5166] usb 4-1: config 0 has an invalid interface number: 125 but max is 0 [ 794.752447][ T5166] usb 4-1: config 0 has no interface number 0 [ 794.761737][ T5166] usb 4-1: New USB device found, idVendor=0403, idProduct=bcd9, bcdDevice=94.33 [ 794.783184][ T5166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.803905][ T5166] usb 4-1: config 0 descriptor?? [ 794.835661][ T5166] ftdi_sio 4-1:0.125: FTDI USB Serial Device converter detected [ 794.868368][ T5166] ftdi_sio ttyUSB0: unknown device type: 0x9433 [ 794.943668][ T29] audit: type=1326 audit(1721386574.558:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13271 comm="syz.0.2315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f806f775b59 code=0x0 [ 794.989871][T13278] pim6reg1: entered promiscuous mode [ 794.997453][ T5081] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 795.006233][T13278] pim6reg1: entered allmulticast mode [ 795.220069][ T5081] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 795.277951][ T5081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.312774][ T5081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.352641][ T5081] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 795.394910][ T5081] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 795.417039][ T5081] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 795.447622][ T5081] usb 3-1: Manufacturer: syz [ 795.802453][ T5081] usb 3-1: config 0 descriptor?? [ 796.278437][ T5081] usbhid 3-1:0.0: can't add hid device: -71 [ 796.318069][ T5081] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 796.421804][ T5081] usb 3-1: USB disconnect, device number 16 [ 796.575058][ T46] usb 4-1: USB disconnect, device number 19 [ 796.630056][ T46] ftdi_sio 4-1:0.125: device disconnected [ 797.208239][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2326'. [ 797.265781][T13306] ip6gretap0: entered promiscuous mode [ 797.299766][T13306] macvtap1: entered promiscuous mode [ 797.316825][T13306] macvtap1: entered allmulticast mode [ 797.336768][T13306] ip6gretap0: entered allmulticast mode [ 797.713031][ T5113] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 797.925527][ T5113] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.957047][ T5113] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.981126][ T29] audit: type=1326 audit(1721386577.587:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.0.2333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f806f775b59 code=0x0 [ 797.995035][T13320] pimreg: entered allmulticast mode [ 798.018122][ T5113] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 798.042911][ T5113] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.080318][ T5113] usb 4-1: config 0 descriptor?? [ 798.108637][T13320] input: syz1 as /devices/virtual/input/input44 [ 798.296517][T13317] pimreg: left allmulticast mode [ 798.584918][T13314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 798.628334][ T5113] usbhid 4-1:0.0: can't add hid device: -71 [ 798.644100][ T5113] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 798.681040][ T5113] usb 4-1: USB disconnect, device number 20 [ 798.870639][T13335] loop4: detected capacity change from 0 to 1024 [ 798.905506][T13335] hfsplus: umask requires a value [ 798.911564][T13335] hfsplus: unable to parse mount options [ 799.163132][ T46] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 799.387906][ T46] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 799.418123][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.453222][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.485000][ T46] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 799.495583][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2342'. [ 799.537344][ T46] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 799.563283][ T46] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 799.609279][ T46] usb 6-1: Manufacturer: syz [ 799.630326][T13349] macvtap2: entered promiscuous mode [ 799.632959][ T46] usb 6-1: config 0 descriptor?? [ 799.648955][T13349] macvtap2: entered allmulticast mode [ 799.936113][T13332] loop2: detected capacity change from 0 to 32768 [ 799.979382][T13332] XFS: ikeep mount option is deprecated. [ 800.062447][T13332] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 800.109621][ T46] usbhid 6-1:0.0: can't add hid device: -71 [ 800.122062][ T46] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 800.170306][ T46] usb 6-1: USB disconnect, device number 15 [ 800.186623][T13368] pimreg: entered allmulticast mode [ 800.226312][T13332] XFS (loop2): Ending clean mount [ 800.295756][T13332] XFS (loop2): Quotacheck needed: Please wait. [ 800.495432][T13368] input: syz1 as /devices/virtual/input/input45 [ 801.247576][T13332] XFS (loop2): Quotacheck: Done. [ 801.286286][T13364] pimreg: left allmulticast mode [ 801.342297][ T29] audit: type=1326 audit(1721386580.917:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13377 comm="syz.4.2350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98f9f75b59 code=0x0 [ 801.467880][T11570] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 801.732700][T13387] loop1: detected capacity change from 0 to 1024 [ 801.762618][T13387] hfsplus: umask requires a value [ 801.780967][T13387] hfsplus: unable to parse mount options [ 801.875908][ T5166] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 802.092077][ T5166] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.143700][ T5166] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.183267][ T5166] usb 6-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 802.192657][ T5166] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.256101][ T5166] usb 6-1: config 0 descriptor?? [ 802.279177][T13396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2358'. [ 802.369461][T13396] ip6gretap0: entered promiscuous mode [ 802.413771][T13396] macvtap1: entered promiscuous mode [ 802.443706][T13396] macvtap1: entered allmulticast mode [ 802.467941][T13396] ip6gretap0: entered allmulticast mode [ 802.724270][T13385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 802.911800][ T5166] usbhid 6-1:0.0: can't add hid device: -71 [ 802.972060][ T5166] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 802.986009][T13417] input: syz1 as /devices/virtual/input/input46 [ 803.018049][ T922] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 803.042754][ T5166] usb 6-1: USB disconnect, device number 16 [ 804.230397][ T29] audit: type=1326 audit(1721386583.837:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13423 comm="syz.2.2368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1fb175b59 code=0x0 [ 804.422027][ T922] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 804.730111][ T922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.823237][ T922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.856735][ T922] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 804.889183][ T922] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 804.906135][ T922] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 804.983184][ T922] usb 4-1: Manufacturer: syz [ 805.049887][ T922] usb 4-1: config 0 descriptor?? [ 805.220853][T13435] loop5: detected capacity change from 0 to 1024 [ 805.261685][T13435] hfsplus: umask requires a value [ 805.325404][T13435] hfsplus: unable to parse mount options [ 805.532347][ T922] usbhid 4-1:0.0: can't add hid device: -71 [ 805.687367][ T922] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 805.735513][ T922] usb 4-1: USB disconnect, device number 21 [ 806.058540][T13453] syz.5.2377[13453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 806.058812][T13453] syz.5.2377[13453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 806.156676][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2378'. [ 806.198223][T13455] macvtap3: entered promiscuous mode [ 806.203996][T13455] macvtap3: entered allmulticast mode [ 806.678038][T13465] pimreg: entered allmulticast mode [ 806.683586][ T46] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 807.254317][T13465] input: syz1 as /devices/virtual/input/input47 [ 807.617549][ T46] usb 3-1: config 0 has an invalid interface number: 125 but max is 0 [ 807.633424][ T46] usb 3-1: config 0 has no interface number 0 [ 807.639868][ T46] usb 3-1: New USB device found, idVendor=0403, idProduct=bcd9, bcdDevice=94.33 [ 807.663817][ T5162] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 807.683359][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.935979][ T5162] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.951373][ T46] usb 3-1: config 0 descriptor?? [ 807.989249][ T5162] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.024216][ T46] ftdi_sio 3-1:0.125: FTDI USB Serial Device converter detected [ 808.043690][ T5162] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 808.067525][ T5162] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.087083][ T46] ftdi_sio ttyUSB0: unknown device type: 0x9433 [ 808.168393][ T5162] usb 1-1: config 0 descriptor?? [ 808.426405][T13464] pimreg: left allmulticast mode [ 808.749195][ T29] audit: type=1326 audit(1721386588.357:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13479 comm="syz.3.2386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x0 [ 808.951064][T13469] xt_CT: You must specify a L4 protocol and not use inversions on it [ 809.065400][ T5162] usbhid 1-1:0.0: can't add hid device: -71 [ 809.088518][ T5162] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 809.117441][ T5162] usb 1-1: USB disconnect, device number 21 [ 809.957848][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2394'. [ 809.999938][ T922] usb 3-1: USB disconnect, device number 17 [ 810.011135][ T922] ftdi_sio 3-1:0.125: device disconnected [ 811.057240][T13500] macvtap4: entered promiscuous mode [ 811.062732][ T5162] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 811.091029][T13500] macvtap4: entered allmulticast mode [ 811.322436][ T5162] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 811.349308][ T5162] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.403465][ T5162] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.445472][ T5162] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 811.496186][ T5162] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 811.513488][ T5162] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 811.561855][ T5162] usb 1-1: Manufacturer: syz [ 811.598335][ T5162] usb 1-1: config 0 descriptor?? [ 811.630551][ T29] audit: type=1326 audit(1721386591.237:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13508 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 811.717309][ T29] audit: type=1326 audit(1721386591.237:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13508 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 812.060014][ T5162] usbhid 1-1:0.0: can't add hid device: -71 [ 812.076791][ T5162] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 812.094477][T13515] pimreg: entered allmulticast mode [ 812.105133][ T5162] usb 1-1: USB disconnect, device number 22 [ 812.165976][T13515] input: syz1 as /devices/virtual/input/input48 [ 812.281789][T13513] pimreg: left allmulticast mode [ 812.291085][ T29] audit: type=1326 audit(1721386591.897:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13508 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x7fc00000 [ 812.530690][ T29] audit: type=1326 audit(1721386592.137:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13524 comm="syz.3.2403" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1394b75b59 code=0x0 [ 812.996100][ T922] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 814.056740][ T922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.068688][ T922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.095309][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2410'. [ 814.117299][ T922] usb 6-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 814.196093][ T922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.269252][ T922] usb 6-1: config 0 descriptor?? [ 814.275185][T13543] ip6gretap0: entered promiscuous mode [ 814.366176][T13543] macvtap1: entered promiscuous mode [ 814.371888][T13543] macvtap1: entered allmulticast mode [ 814.415330][T13543] ip6gretap0: entered allmulticast mode [ 814.831703][ T922] usbhid 6-1:0.0: can't add hid device: -71 [ 814.842897][T13554] pimreg: entered allmulticast mode [ 814.844793][ T922] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 814.870889][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc00000002d4: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 814.883707][ C1] KASAN: probably user-memory-access in range [0x00000000000016a0-0x00000000000016a7] [ 814.893274][ C1] CPU: 1 PID: 13553 Comm: syz.1.2415 Not tainted 6.10.0-syzkaller-08280-g68b59730459e #0 [ 814.903121][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 814.913194][ C1] RIP: 0010:__cpu_map_flush+0x48/0x110 [ 814.918704][ C1] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 d1 00 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 26 49 8d 6c 24 c0 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 a1 00 00 00 49 8b 04 24 4d 39 e6 48 8d 58 c0 74 [ 814.938339][ C1] RSP: 0018:ffffc90000a18c88 EFLAGS: 00010216 [ 814.944445][ C1] RAX: dffffc0000000000 RBX: ffffc900033bfa18 RCX: ffffffff88d70d39 [ 814.952462][ C1] RDX: 00000000000002d4 RSI: ffffffff81b4ee34 RDI: ffffc900033bfa58 [ 814.960447][ C1] RBP: 0000000000001662 R08: 0000000000000005 R09: 0000000000000000 [ 814.968430][ C1] R10: 0000000000000000 R11: ffffffff8b2f43c0 R12: 00000000000016a2 [ 814.976447][ C1] R13: ffff8880226206c8 R14: ffffc900033bfa58 R15: ffffc90000a18dd8 [ 814.984440][ C1] FS: 00007fad58db86c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 814.993393][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 814.999992][ C1] CR2: 0000000000000000 CR3: 000000001ebf4000 CR4: 0000000000350ef0 [ 815.007979][ C1] Call Trace: [ 815.011260][ C1] [ 815.014109][ C1] ? show_regs+0x8c/0xa0 [ 815.018410][ C1] ? die_addr+0x4f/0xd0 [ 815.022601][ C1] ? exc_general_protection+0x155/0x230 [ 815.028204][ C1] ? asm_exc_general_protection+0x26/0x30 [ 815.033955][ C1] ? xdp_do_check_flushed+0xf9/0x4e0 [ 815.039266][ C1] ? __cpu_map_flush+0x14/0x110 [ 815.044151][ C1] ? __cpu_map_flush+0x48/0x110 [ 815.049038][ C1] ? __cpu_map_flush+0x14/0x110 [ 815.053927][ C1] xdp_do_check_flushed+0x308/0x4e0 [ 815.059149][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.064811][ C1] __napi_poll.constprop.0+0xd1/0x550 [ 815.070224][ C1] net_rx_action+0xa92/0x1010 [ 815.074945][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 815.080092][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.085751][ C1] ? sched_clock+0x38/0x60 [ 815.090197][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 815.095097][ C1] handle_softirqs+0x219/0x8f0 [ 815.099907][ C1] ? handle_edge_irq+0x40f/0xd10 [ 815.104893][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 815.110218][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.115877][ C1] irq_exit_rcu+0xbb/0x120 [ 815.120311][ C1] common_interrupt+0xb0/0xd0 [ 815.125031][ C1] [ 815.127965][ C1] [ 815.130901][ C1] asm_common_interrupt+0x26/0x40 [ 815.135945][ C1] RIP: 0010:do_user_addr_fault+0x282/0x13f0 [ 815.141878][ C1] Code: ff 48 25 00 f0 ff ff 48 89 04 24 41 83 e7 03 44 89 fe e8 41 4c 51 00 66 45 85 ff 0f 85 a5 01 00 00 e8 62 51 51 00 4c 8b 3c 24 <48> c7 c7 00 00 60 ff 4c 89 fe e8 7f 4c 51 00 49 81 ff 00 00 60 ff [ 815.161507][ C1] RSP: 0018:ffffc900033bf978 EFLAGS: 00000283 [ 815.167595][ C1] RAX: 00000000000016b5 RBX: 0000000000000000 RCX: ffffc900144df000 [ 815.175581][ C1] RDX: 0000000000040000 RSI: ffffffff813dbdae RDI: 0000000000000003 [ 815.183572][ C1] RBP: ffffc900033bfa08 R08: 0000000000000003 R09: 0000000000000000 [ 815.191555][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 815.199535][ C1] R13: 0000000000000214 R14: ffff888011ee4280 R15: 0000000000000000 [ 815.207531][ C1] ? do_user_addr_fault+0x27e/0x13f0 [ 815.212860][ C1] ? do_user_addr_fault+0x27e/0x13f0 [ 815.218184][ C1] exc_page_fault+0x5c/0xc0 [ 815.222716][ C1] asm_exc_page_fault+0x26/0x30 [ 815.227587][ C1] RIP: 0010:strncpy_from_user+0x23d/0x320 [ 815.233342][ C1] Code: 0f 84 8b 00 00 00 e8 22 d5 d9 fc 48 83 c3 01 48 83 ed 01 31 ff 48 89 ee e8 40 d0 d9 fc 48 85 ed 74 55 e8 06 d5 d9 fc 45 31 ff <41> 8a 04 1c 31 ff 44 89 fe 41 89 c6 e8 f2 cf d9 fc 45 85 ff 0f 84 [ 815.252971][ C1] RSP: 0018:ffffc900033bfab8 EFLAGS: 00050246 [ 815.259055][ C1] RAX: 00000000000016a2 RBX: 0000000000000000 RCX: ffffc900144df000 [ 815.267039][ C1] RDX: 0000000000040000 RSI: ffffffff84b53a0a RDI: 0000000000000007 [ 815.275023][ C1] RBP: 000000000000007f R08: 0000000000000007 R09: 0000000000000000 [ 815.283006][ C1] R10: 000000000000007f R11: 0000000000000000 R12: 0000000000000000 [ 815.290989][ C1] R13: ffffc900033bfbd0 R14: 0000000000000000 R15: 0000000000000000 [ 815.298982][ C1] ? strncpy_from_user+0x23a/0x320 [ 815.304138][ C1] ? strncpy_from_user+0x23a/0x320 [ 815.309296][ C1] bpf_prog_load+0x1c30/0x2660 [ 815.314107][ C1] ? __pfx_bpf_prog_load+0x10/0x10 [ 815.319257][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.324917][ C1] ? find_held_lock+0x2d/0x110 [ 815.329700][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.335370][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.341030][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.346685][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.352344][ C1] __sys_bpf+0x8e9/0x4a30 [ 815.356710][ C1] ? __pfx_futex_wake+0x10/0x10 [ 815.361595][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 815.366565][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.372222][ C1] ? vfs_write+0x14d/0x1140 [ 815.376776][ C1] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 815.382367][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.388030][ C1] ? do_futex+0x123/0x350 [ 815.392385][ C1] ? __pfx_do_futex+0x10/0x10 [ 815.397102][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.402847][ C1] ? xfd_validate_state+0x5d/0x180 [ 815.408008][ C1] __x64_sys_bpf+0x78/0xc0 [ 815.412457][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.418122][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 815.423351][ C1] do_syscall_64+0xcd/0x250 [ 815.427894][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.433833][ C1] RIP: 0033:0x7fad57f75b59 [ 815.438260][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.457996][ C1] RSP: 002b:00007fad58db8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 815.466445][ C1] RAX: ffffffffffffffda RBX: 00007fad58105f60 RCX: 00007fad57f75b59 [ 815.474431][ C1] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 815.482419][ C1] RBP: 00007fad57fe4e5d R08: 0000000000000000 R09: 0000000000000000 [ 815.490406][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.498399][ C1] R13: 000000000000000b R14: 00007fad58105f60 R15: 00007ffe64c68888 [ 815.506406][ C1] [ 815.509438][ C1] Modules linked in: [ 815.513490][ C1] ---[ end trace 0000000000000000 ]--- [ 815.518990][ C1] RIP: 0010:__cpu_map_flush+0x48/0x110 [ 815.524530][ C1] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 d1 00 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 26 49 8d 6c 24 c0 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 a1 00 00 00 49 8b 04 24 4d 39 e6 48 8d 58 c0 74 [ 815.544379][ C1] RSP: 0018:ffffc90000a18c88 EFLAGS: 00010216 [ 815.550487][ C1] RAX: dffffc0000000000 RBX: ffffc900033bfa18 RCX: ffffffff88d70d39 [ 815.558506][ C1] RDX: 00000000000002d4 RSI: ffffffff81b4ee34 RDI: ffffc900033bfa58 [ 815.565462][ T922] usb 6-1: USB disconnect, device number 17 [ 815.566535][ C1] RBP: 0000000000001662 R08: 0000000000000005 R09: 0000000000000000 [ 815.580451][ C1] R10: 0000000000000000 R11: ffffffff8b2f43c0 R12: 00000000000016a2 [ 815.588475][ C1] R13: ffff8880226206c8 R14: ffffc900033bfa58 R15: ffffc90000a18dd8 [ 815.596501][ C1] FS: 00007fad58db86c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 815.605702][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 815.612320][ C1] CR2: 0000000000000000 CR3: 000000001ebf4000 CR4: 0000000000350ef0 [ 815.620357][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 815.627821][ C1] Kernel Offset: disabled [ 815.632166][ C1] Rebooting in 86400 seconds..