last executing test programs: 18.808996042s ago: executing program 3 (id=2127): socket$inet_tcp(0x2, 0x1, 0x0) r0 = memfd_create(&(0x7f0000000300)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5451, 0x0) fallocate(r0, 0x0, 0x0, 0x8000007) getsockname(r1, 0x0, &(0x7f0000000280)) 16.653128904s ago: executing program 3 (id=2146): r0 = io_uring_setup(0x4b6d, &(0x7f00000002c0)) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x6000001f}) read$char_usb(r2, &(0x7f0000000100)=""/169, 0xa9) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.961059407s ago: executing program 3 (id=2155): r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14.804514165s ago: executing program 3 (id=2159): syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xab, 0xbe, 0x67, 0x40, 0x17e9, 0x8b4e, 0x9c08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socket(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000000)='ro\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000a80)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0x0, @in6=@empty}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendto(r0, &(0x7f0000000400)="ffd939898a4520b7a62c04ba32e6281450735c0fd83b2fbb75e3070f38292f09e9a9e3e0e80e5c088aafcadc4241467fe93bb86bfe92cbc03214ad4b5c75c1c63fc8758f926fd42ab5ad42a653e3bdc8fef61c3ccb7d9e94c779d146d6030b4efb349b986503c4f17c25cf4e352aea873b7f44521d6734d632f1224ac0d811340041e9043b36b7562c546798d28f1c41cb22d30501b5966e9032", 0x9a, 0x40000000, &(0x7f0000000300)=@hci={0x1f, 0x0, 0x4}, 0x80) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)='o', 0x1}], 0x1}}], 0x3, 0x0) 12.993186357s ago: executing program 3 (id=2175): r0 = syz_open_dev$sndctrl(&(0x7f0000001680), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000016c0)={0x0, 0x8, [0x0, 0x0]}) 12.603002753s ago: executing program 3 (id=2178): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x33fe0}}, 0x0) 6.028379384s ago: executing program 4 (id=2218): openat$vcsa(0xffffffffffffff9c, &(0x7f0000001180), 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 5.844462225s ago: executing program 1 (id=2219): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000f0a9c80850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FIONCLEX(r0, 0x5450) 5.730001567s ago: executing program 4 (id=2220): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x20008000, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) write$hidraw(r1, &(0x7f0000001400)='C', 0x1) 5.597305394s ago: executing program 1 (id=2222): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a', @ANYRES16], 0xd) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002740)=0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@private}}, &(0x7f0000000140)=0xe8) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000180)={0x3, @default, r3}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000380)={0x1f, 0x0, 0x2}, 0x6) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000200)=0xffffffff, 0x4) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000006001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)=[{{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000002780)="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", 0xfc0}, {&(0x7f0000000540)="ca9f01d211b1d5aba66909cd8665828ae2c634dec7d4c7f9b100926fca49a0ad22a1ae8f82f04aff5c833463924b1598ce1a9a23960c0391698a81fdb9d4fe217a4989680e8e26808b0b4607c1dfeecaf8eb045c5a20d237716fb0c5adbafb5e1ca1cac640e4f1f61c2e7661155d339a3952ced7e133660718232e206320d1ff3da53e62c9b3995d592109909ddd7ea4a9d3d4f47266fb4e3ac69082a7e7b94c6f6707a3cdbb430f7014e46d10ec7b949c6add9e2a67880f0cad02179055ee996a8c83382dbfe4dfbdd3a7bd628dda9c18bfe8b49db1535aa72f22", 0xdb}, {&(0x7f0000000640)="5062d3e5eb8b75cd04f5ed19aa07500c5754b8d297ba3e806abb256f99096ab73ee673d63aac820995d7320b901b5a328cc7ad62b318219114a6c50bfe6fc67d6b83043c212eb40ea59191dd785e6e19ae4931cae300962779e0af0c460bf7bcb86694735d74d6ac07b25a2b73d8aaf2aa126222afc23734e9ca", 0x7a}, {0x0}, {&(0x7f00000002c0)="f2c02c1fe2443b83f08e26cde68d5757738eeb238c9c1fda0cdf25f003308634136679beec1c3e", 0x27}, {&(0x7f0000000800)="76e9ec58a48cc456cf19583eb135d131e0074e43aae31b56e5f1c40ef70779d92a190330bd8872ccf5bcd758d877ba082d3caefca55c8c6a95a1d20385a240621c55b2852be5497ca02b4bb7d72a07a9175a22d8ce244d258519ccabc770a05f9ae047a60e4aca0fb6b341731f280e1a9dcc27ea4e369aeb7aa00f594d77f0c51fef855e5dbe772f6d9fa8b5e296f0691acd67d45ef77b3e0fb4327b5ee79b9db2ac7f79ab023b7d986926b77c0a0832bbf8847f1946d958b1e1640c6aa6967a5ba382abcfe87061efba98ba1bb3797ad7657c", 0xd3}, {&(0x7f0000000900)}, {&(0x7f0000000a40)="00e333bcb3998e23e656d8c684faf09c8abadd22be111186f82e8592ee047df2b83e1d6fa0a80c9e1a05e09a72ee0614da67d14a803d99eb88995418e2da7698803590d449b604881495e9cf4f1a", 0x4e}, {&(0x7f0000000b00)}], 0x9, 0x0, 0x0, 0x20000040}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x2, 0x40) r6 = getuid() socket(0x10, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002780)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000002880)=0xe8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x2000}, 0xc, &(0x7f00000018c0)=[{&(0x7f0000000780)={0x68, 0x3e, 0x20, 0x70bd24, 0x25dfdbff, "", [@generic, @generic="07b84898e7eed7273e54fdace29229c18f4aa83bef93a7570649fcc6613255fe69edfeef20c757d0f0bd3f631d0694a39cee7951b54ca280f63b873fef28d4d021a146c961f07f4085f5b5a61b30ba7342e9781da42af0ba"]}, 0x68}, {&(0x7f0000000340)={0x1b0, 0x21, 0x8, 0x70bd26, 0x25dfdbfc, "", [@typed={0x14, 0x16, 0x0, 0x0, @ipv6=@empty}, @nested={0x124, 0x13, 0x0, 0x1, [@generic="0416a41f6837cb9e9e1ca83a39250f8e27ff78090cb12cae7ef183176a2faba96062f8a95b7c85f8d43067b3a0ca9827dd7199fae56626f33266b74ad1ed2d0473412b2049a804af5bdf", @generic="627c8e3a33f0cb3981fe992d4a9cf47a583b83ac931c7154613016eb92e91cc60dc07e3f4753b431132bbc08412f95110f8ed3b840ad522f3265908fc075108294a84fab2c883227e323bd3582fbf862105a75daf35ff9d522914925343805f3dece78fc3a08136e3b7b4c8351d32b429040220ad58459a9eff023dd87bdb8418ca688f08de1f1b4aec5825cff26823683ba", @generic="dd5a1a843e3c607de1464e719f176f54278011c62b34d35f0d9a415197e54b1dcad6b09dc25d791f526e1a540ce9fd2c28281d75ede43cf012fb6a765ef982ff1a4e8d11"]}, @typed={0x8, 0x3e, 0x0, 0x0, @pid}, @typed={0x8, 0x45, 0x0, 0x0, @pid}, @typed={0x8, 0xd5, 0x0, 0x0, @fd=r0}, @generic="8fc98e391dc8bbb228a72d8c2bdc588b74da772ffa3113d95756d1834c9e1707607d7c392f48932aee7a10f8d85b69148025a38283f43845a4d94efdd0df8476a111fa010b09009a5649ef3742218098"]}, 0x1b0}, {&(0x7f0000000200)={0x10, 0x2c, 0x20, 0x0, 0x25dfdbfb, "", [@generic]}, 0x10}, {0x0, 0x14}, {0x0}, {&(0x7f0000000640)={0x14, 0x10, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x4, 0x7}]}, 0x14}, {&(0x7f0000003780)={0x14c, 0x22, 0x400, 0x70bd27, 0x25dfdbfe, "", [@nested={0x13b, 0xad, 0x0, 0x1, [@generic="d4a6b315cd4af92b5629c7ddf89aeb5588e29a1f9a4def67f29389066712539419a6", @generic="b4eef4a01c9212514548aa3cc150ebc9b8130d2a7c1c2267b2e81f9410dbed16ecd319647811cf6c731ba360f45bead895c2f9ecdd8f6186fd971d29bc1430e5eb32438552c03d5efedddf191361b6a2a3fc7c93495c1b6335ef180ee7c747bee1b2bace208cae5b61d2d29d1d6134d711100358df909845cc5d19eb297ffbacf5c04f43dcc43e378a8f1a87c4a97088c2a0bc92df4872e4f1370fe4d4dd8cae52b4193d23c70af74aca424a4506cdf3788fabc74b503582d74ecf7d1b331ec9e1dcdd7706a43626090e592bec12027e798b1913d8daa02c8b3ee5ed", @generic="fd1af1495fdc85ccbc3ccb12e7f8701c67018822eb", @typed={0x8, 0x10c, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0xc, 0x83, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x10b, 0x0, 0x0, @fd=r0}]}]}, 0x14c}], 0x7, &(0x7f00000028c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r3}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7}}}], 0x130, 0x20000004}, 0x40051) 5.513708837s ago: executing program 4 (id=2223): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) lseek(r0, 0xfffffbb1, 0x0) lseek(r0, 0x4b, 0x1) 5.196099311s ago: executing program 2 (id=2227): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)={0x14, r0, 0x1}, 0x14}}, 0x0) 5.160039723s ago: executing program 4 (id=2228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000000)={0xc}) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, 0x0, 0x81) syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, '`'}, @feature_unit={0xb, 0x24, 0x6, 0x0, 0x5, 0x2, [0x9, 0xa]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0xffd0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "", "8e89d0"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x80}}}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 4.835364096s ago: executing program 2 (id=2230): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x5451, 0x0) 4.798266354s ago: executing program 5 (id=2231): r0 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@ceph_nfs_confh={0x10}, 0x0) 4.568060965s ago: executing program 2 (id=2232): ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000080)) 4.538163475s ago: executing program 1 (id=2233): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$proc_mixer(r0, 0x0, 0x0) 4.525923804s ago: executing program 5 (id=2234): r0 = socket(0x1d, 0x2, 0x6) r1 = dup(r0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, 0x0, 0x0) 4.26485044s ago: executing program 2 (id=2235): r0 = epoll_create1(0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20002) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)) 4.214780212s ago: executing program 5 (id=2236): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dummy0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) io_uring_setup(0x31d3, &(0x7f00000000c0)) r2 = socket$caif_stream(0x25, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x120, 0x0) shutdown(0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400210100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200", @ANYRES32=r7, @ANYBLOB='-'], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000015", @ANYRES32=r7, @ANYBLOB="000100ac0100ee"], 0x20}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000004060000000000000000fb0000000007"], 0x1c}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x2) ioctl$TCFLSH(r8, 0x40087101, 0x80000024001100) 4.165017607s ago: executing program 1 (id=2237): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r2) quotactl_fd$Q_GETNEXTQUOTA(r0, 0x0, 0x0, 0x0) 3.92782s ago: executing program 1 (id=2238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x98, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}]}]}, 0x98}}, 0x0) r4 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, &(0x7f00000002c0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000480)={r5, 0x0, &(0x7f0000000400)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000001040)={{r6}}) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x10040, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc}]}}]}, 0xac}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa0, 0xb7, 0x89, 0x8, 0x584, 0x8, 0x102, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x16, 0xe1}}]}}]}}, 0x0) 3.880102453s ago: executing program 2 (id=2239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_b={0x4}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x4}}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)=@newlink={0x38, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0xc2, 0xfff, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x8000, 0x9, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @local}, 0x10) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'gretap0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000080005000400000008000500", @ANYRES32=r9, @ANYBLOB="080003"], 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000680)={@rand_addr, @empty}, &(0x7f00000006c0)=0xc) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r11, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r11, &(0x7f00000000c0)="3f03583a260712002c3a1e4189e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0xa, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x1, 0x6, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x7}}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x800) 3.315763728s ago: executing program 0 (id=2240): mount$bpf(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) 3.069859469s ago: executing program 0 (id=2241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) 2.843096063s ago: executing program 0 (id=2242): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x6}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8100, 0x2}, 0x10, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001900)={0x54, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x35, 0x33, @beacon={{{}, {}, @broadcast}, 0x0, @default, 0x0, @void, @val={0x1, 0x1, [{0xc}]}, @void, @void, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @void}}]}, 0x54}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000080), 0x51) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x5c, r7, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a7fd4531296b6353d1f3e08847"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_MODE={0x5}]}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='<'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x10}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x1b}}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x21}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) landlock_restrict_self(r1, 0x0) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, r10) ptrace(0x11, r0) ptrace(0xffffffffffffffff, r10) r11 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x10, 0x0) landlock_restrict_self(r11, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r10) ptrace(0x11, r10) ptrace(0xffffffffffffffff, 0x0) 885.363606ms ago: executing program 4 (id=2243): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x80c4) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xcc, r2, 0x220, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9d}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4010}, 0x814) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x44, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x24, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x60050}, 0x8044) keyctl$search(0xa, 0x0, &(0x7f0000001bc0)='cifs.spnego\x00', &(0x7f0000001c00)={'syz', 0x1}, 0x0) 825.870485ms ago: executing program 5 (id=2244): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setown(r0, 0x4, 0x0) 806.752708ms ago: executing program 2 (id=2245): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a', @ANYRES16], 0xd) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002740)=0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@private}}, &(0x7f0000000140)=0xe8) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000180)={0x3, @default, r3}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000380)={0x1f, 0x0, 0x2}, 0x6) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000200)=0xffffffff, 0x4) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000006001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)=[{{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000002780)="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", 0xfc0}, {&(0x7f0000000540)="ca9f01d211b1d5aba66909cd8665828ae2c634dec7d4c7f9b100926fca49a0ad22a1ae8f82f04aff5c833463924b1598ce1a9a23960c0391698a81fdb9d4fe217a4989680e8e26808b0b4607c1dfeecaf8eb045c5a20d237716fb0c5adbafb5e1ca1cac640e4f1f61c2e7661155d339a3952ced7e133660718232e206320d1ff3da53e62c9b3995d592109909ddd7ea4a9d3d4f47266fb4e3ac69082a7e7b94c6f6707a3cdbb430f7014e46d10ec7b949c6add9e2a67880f0cad02179055ee996a8c83382dbfe4dfbdd3a7bd628dda9c18bfe8b49db1535aa72f22", 0xdb}, {&(0x7f0000000640)="5062d3e5eb8b75cd04f5ed19aa07500c5754b8d297ba3e806abb256f99096ab73ee673d63aac820995d7320b901b5a328cc7ad62b318219114a6c50bfe6fc67d6b83043c212eb40ea59191dd785e6e19ae4931cae300962779e0af0c460bf7bcb86694735d74d6ac07b25a2b73d8aaf2aa126222afc23734e9ca", 0x7a}, {0x0}, {&(0x7f00000002c0)="f2c02c1fe2443b83f08e26cde68d5757738eeb238c9c1fda0cdf25f003308634136679beec1c3e", 0x27}, {&(0x7f0000000800)="76e9ec58a48cc456cf19583eb135d131e0074e43aae31b56e5f1c40ef70779d92a190330bd8872ccf5bcd758d877ba082d3caefca55c8c6a95a1d20385a240621c55b2852be5497ca02b4bb7d72a07a9175a22d8ce244d258519ccabc770a05f9ae047a60e4aca0fb6b341731f280e1a9dcc27ea4e369aeb7aa00f594d77f0c51fef855e5dbe772f6d9fa8b5e296f0691acd67d45ef77b3e0fb4327b5ee79b9db2ac7f79ab023b7d986926b77c0a0832bbf8847f1946d958b1e1640c6aa6967a5ba382abcfe87061efba98ba1bb3797ad7657c", 0xd3}, {&(0x7f0000000900)}, {&(0x7f0000000a40)="00e333bcb3998e23e656d8c684faf09c8abadd22be111186f82e8592ee047df2b83e1d6fa0a80c9e1a05e09a72ee0614da67d14a803d99eb88995418e2da7698803590d449b604881495e9cf4f1a", 0x4e}, {&(0x7f0000000b00)}], 0x9, 0x0, 0x0, 0x20000040}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x2, 0x40) r6 = getuid() socket(0x10, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002780)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000002880)=0xe8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x2000}, 0xc, &(0x7f00000018c0)=[{&(0x7f0000000780)={0x68, 0x3e, 0x20, 0x70bd24, 0x25dfdbff, "", [@generic, @generic="07b84898e7eed7273e54fdace29229c18f4aa83bef93a7570649fcc6613255fe69edfeef20c757d0f0bd3f631d0694a39cee7951b54ca280f63b873fef28d4d021a146c961f07f4085f5b5a61b30ba7342e9781da42af0ba"]}, 0x68}, {&(0x7f0000000340)={0x1b0, 0x21, 0x8, 0x70bd26, 0x25dfdbfc, "", [@typed={0x14, 0x16, 0x0, 0x0, @ipv6=@empty}, @nested={0x124, 0x13, 0x0, 0x1, [@generic="0416a41f6837cb9e9e1ca83a39250f8e27ff78090cb12cae7ef183176a2faba96062f8a95b7c85f8d43067b3a0ca9827dd7199fae56626f33266b74ad1ed2d0473412b2049a804af5bdf", @generic="627c8e3a33f0cb3981fe992d4a9cf47a583b83ac931c7154613016eb92e91cc60dc07e3f4753b431132bbc08412f95110f8ed3b840ad522f3265908fc075108294a84fab2c883227e323bd3582fbf862105a75daf35ff9d522914925343805f3dece78fc3a08136e3b7b4c8351d32b429040220ad58459a9eff023dd87bdb8418ca688f08de1f1b4aec5825cff26823683ba", @generic="dd5a1a843e3c607de1464e719f176f54278011c62b34d35f0d9a415197e54b1dcad6b09dc25d791f526e1a540ce9fd2c28281d75ede43cf012fb6a765ef982ff1a4e8d11"]}, @typed={0x8, 0x3e, 0x0, 0x0, @pid}, @typed={0x8, 0x45, 0x0, 0x0, @pid}, @typed={0x8, 0xd5, 0x0, 0x0, @fd=r0}, @generic="8fc98e391dc8bbb228a72d8c2bdc588b74da772ffa3113d95756d1834c9e1707607d7c392f48932aee7a10f8d85b69148025a38283f43845a4d94efdd0df8476a111fa010b09009a5649ef3742218098"]}, 0x1b0}, {&(0x7f0000002580)=ANY=[], 0x14}, {0x0}, {&(0x7f0000000640)={0x14, 0x10, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x4, 0x7}]}, 0x14}, {&(0x7f0000003780)={0x14c, 0x22, 0x400, 0x70bd27, 0x25dfdbfe, "", [@nested={0x13b, 0xad, 0x0, 0x1, [@generic="d4a6b315cd4af92b5629c7ddf89aeb5588e29a1f9a4def67f29389066712539419a6", @generic="b4eef4a01c9212514548aa3cc150ebc9b8130d2a7c1c2267b2e81f9410dbed16ecd319647811cf6c731ba360f45bead895c2f9ecdd8f6186fd971d29bc1430e5eb32438552c03d5efedddf191361b6a2a3fc7c93495c1b6335ef180ee7c747bee1b2bace208cae5b61d2d29d1d6134d711100358df909845cc5d19eb297ffbacf5c04f43dcc43e378a8f1a87c4a97088c2a0bc92df4872e4f1370fe4d4dd8cae52b4193d23c70af74aca424a4506cdf3788fabc74b503582d74ecf7d1b331ec9e1dcdd7706a43626090e592bec12027e798b1913d8daa02c8b3ee5ed", @generic="fd1af1495fdc85ccbc3ccb12e7f8701c67018822eb", @typed={0x8, 0x10c, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0xc, 0x83, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x10b, 0x0, 0x0, @fd=r0}]}]}, 0x14c}], 0x6, &(0x7f00000028c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r3}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7}}}], 0x130, 0x20000004}, 0x40051) 666.99966ms ago: executing program 0 (id=2246): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="c3", 0x1, 0x0, 0x0, 0x0) 519.833564ms ago: executing program 5 (id=2247): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'ip6gre0\x00', {0x4}, 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfbd, '\x00', r2, 0xffffffffffffffff, 0x4, 0x5}, 0x48) 309.985918ms ago: executing program 0 (id=2248): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 171.852355ms ago: executing program 1 (id=2249): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8, @local, 0x4}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)}}], 0x1, 0x40000062, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) r5 = syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0xec4, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x2, 0x60b}]}, 0x78) timer_create(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f00000007c0)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x10041, 0x0) r9 = fanotify_init(0x0, 0x0) fanotify_mark(r9, 0x1, 0x4800003e, r8, 0x0) lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000140)=@v3={0x3000000, [{0x1, 0x1}, {0xfffffffa, 0x6}]}, 0x18, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xfecc) 138.737254ms ago: executing program 4 (id=2250): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000026c0)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000002700)) 12.91671ms ago: executing program 5 (id=2251): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup2(r0, r0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x3, 0x6, 0x3}, 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0, 0x0) ioctl$FIONCLEX(r2, 0x5450) 0s ago: executing program 0 (id=2252): name_to_handle_at(0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', &(0x7f0000001040)=@shmem={0xc, 0x1, {0xff, 0x7}}, &(0x7f0000001080), 0x600) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000010c0)=0x8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'wlan0\x00'}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001140), 0x2002) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000001180)={0x2, 0x4, 0x101, {0xfffffffb, 0x3}, 0x5, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000001200)={0x5, 0x8}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001280)={'wlan1\x00'}) r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000012c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x62a, 0x7100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x0, 0x20, [{{0x9, 0x4, 0x0, 0xa8, 0x1, 0x3, 0x1, 0x0, 0xfa, {0x9, 0x21, 0x800, 0x60, 0x1, {0x22, 0x554}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3f, 0x25, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0x7, 0x7f}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000001a40)={0x2c, &(0x7f00000017c0)={0x0, 0x14, 0xa1, "ae9f4e54cbcd66daf937bb00f71dbed033061dedb0f3e4c940b3b0959cb7ed0ab301bf55dbf970a94a6589bc24d843238c0fd036b1ddc765e3bce90a7beb3e4894dfba9c6100b1f4b96dcbc7f0ac10e4eb9efb6e402c7ffceca6e7f6bfff492fef012b1bb8f2034df3ff7733f9504305eddf5c1a0ff8c41211ab011a9eb1fff10ad40c71708ecf71000788ebaa9909f78a884bb9717b6ca8ef36f91e02262f7be1"}, &(0x7f0000001880)={0x0, 0xa, 0x1, 0xf9}, &(0x7f00000018c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001900)={0x20, 0x1, 0xe5, "f32394fe80103ecb93baff431e117471186d309c7211813d3117c78488d7088b40267d50990dcef43beca4f8771b2a51958e696c66f7427c193c2ac5ca901196a93fb1758d69104f16ff8ba59f8a66cfe0c5097eccdc88204186154b0e4e755abe7c9b116298ad157792424792cb46bbf29505b592203f118e8fbc56acb6e7825ce81a79da757cfbd90e18a395519905e7b394c7acb2341669f15d2e5b2973a671775c4220abc23b404c0309ce863eedcc562b423f46bdbf6e717a85f868b55ae5e70f1a94052e8af6ae9a9edb079ef2ef866e47a23620f17146ca7d5770195fc64620a98e"}, &(0x7f0000001a00)={0x20, 0x3, 0x1, 0xff}}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000001a80)={0x0, 0x0, 0x5a3b77be, 0x3, 0x6, 0x9}) syz_open_dev$usbmon(&(0x7f0000001b00), 0x5, 0x4000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000001b80)=0xfffffffffffffffe, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001dc0)={&(0x7f0000001bc0), 0xc, &(0x7f0000001d80)={0x0}}, 0x639eb2463c7fee03) fcntl$getownex(r0, 0x10, &(0x7f0000001e00)={0x0, 0x0}) tkill(r5, 0x39) tkill(r5, 0x19) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001f00)={{{@in6=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in6=@dev}}, &(0x7f0000002000)=0xe8) r8 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002040)={{{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000002140)=0xe8) mount$fuse(0x0, &(0x7f0000001e40)='./file1\x00', &(0x7f0000001e80), 0x200000, &(0x7f0000002180)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@allow_other}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other}, {@default_permissions}, {@default_permissions}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0xde}}, {@uid_gt}]}}) r10 = msgget$private(0x0, 0x80) msgctl$IPC_SET(r10, 0x1, &(0x7f0000002300)={{0x0, r9, r8, r7, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0x20, 0x10001, 0x4, 0x200000, 0x9, 0x7, 0x7, 0x4, r5, r5}) kernel console output (not intermixed with test programs): [ 339.315882][ T5198] usbhid 4-1:1.0: can't add hid device: -71 [ 339.322016][ T5198] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 339.397082][ T5198] usb 4-1: USB disconnect, device number 31 [ 339.438562][ T5105] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 339.463203][ T5105] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.521677][ T5105] usb 2-1: config 0 descriptor?? [ 339.546046][ T9510] gretap0: entered promiscuous mode [ 340.107686][ T5105] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 340.122618][ T5105] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 340.143877][ T5105] [drm:udl_init] *ERROR* Selecting channel failed [ 340.221968][ T5105] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 340.273710][ T5105] [drm] Initialized udl on minor 2 [ 340.304348][ T5105] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 340.341493][ T2872] hsr_slave_0: left promiscuous mode [ 340.344939][ T5105] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 340.385342][ T2872] hsr_slave_1: left promiscuous mode [ 340.403792][ T57] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 340.411974][ T57] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 340.429533][ T5105] usb 2-1: USB disconnect, device number 27 [ 340.493992][ T2872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.501477][ T2872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.572595][ T9532] loop0: detected capacity change from 0 to 512 [ 340.581336][ T2872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.619089][ T9533] loop5: detected capacity change from 0 to 1024 [ 340.627279][ T9532] EXT4-fs: Ignoring removed mblk_io_submit option [ 340.635836][ T2872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.683450][ T9532] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 340.712715][ T9533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 340.781843][ T9532] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 340.826611][ T9532] System zones: 1-12 [ 340.835189][ T5097] Bluetooth: hci4: command tx timeout [ 340.848030][ T9533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.853727][ T2872] veth1_macvtap: left promiscuous mode [ 340.870998][ T9532] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz.0.1535: corrupted in-inode xattr: e_value size too large [ 340.910620][ T2872] veth0_macvtap: left promiscuous mode [ 340.919114][ T5157] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 340.937401][ T2872] veth1_vlan: left promiscuous mode [ 340.942874][ T2872] veth0_vlan: left promiscuous mode [ 340.973807][ T9532] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1535: couldn't read orphan inode 15 (err -117) [ 341.032760][ T9532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.064125][ T5096] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.178630][ T5157] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 341.200156][ T5157] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.251190][ T5157] usb 4-1: config 0 descriptor?? [ 341.319660][ T7246] EXT4-fs error (device loop0): ext4_readdir:258: inode #11: block 18: comm syz-executor: path /root/syzkaller.ci9JE5/84/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 341.410416][ T7246] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 341.476723][ T7246] EXT4-fs error (device loop0): ext4_readdir:258: inode #11: block 18: comm syz-executor: path /root/syzkaller.ci9JE5/84/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 341.597727][ T7246] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 341.650189][ T5157] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 341.677210][ T7246] EXT4-fs error (device loop0): ext4_readdir:258: inode #11: block 18: comm syz-executor: path /root/syzkaller.ci9JE5/84/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 341.706867][ T5157] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 341.726207][ T29] audit: type=1326 audit(1719295786.940:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9553 comm="syz.2.1539" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc165175d39 code=0x0 [ 341.755900][ T5157] [drm:udl_init] *ERROR* Selecting channel failed [ 341.767318][ T7246] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 341.806494][ T7246] EXT4-fs error (device loop0): ext4_readdir:258: inode #11: block 18: comm syz-executor: path /root/syzkaller.ci9JE5/84/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 341.836370][ T5157] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 341.845858][ T5157] [drm] Initialized udl on minor 2 [ 341.881437][ T5157] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 341.894392][ T7246] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 341.915293][ T5157] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 341.923345][ T5164] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 341.933894][ T5164] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 341.952575][ T5157] usb 4-1: USB disconnect, device number 32 [ 341.959946][ T7246] EXT4-fs error (device loop0): ext4_readdir:258: inode #11: block 18: comm syz-executor: path /root/syzkaller.ci9JE5/84/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 341.984368][ T5164] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 342.011818][ T7246] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 342.153962][ T5164] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 342.344348][ T5164] usb 3-1: device descriptor read/64, error -71 [ 342.644520][ T5164] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 342.824276][ T5164] usb 3-1: device descriptor read/64, error -71 [ 342.908820][ T5097] Bluetooth: hci4: command tx timeout [ 342.952878][ T5164] usb usb3-port1: attempt power cycle [ 343.032048][ T2872] team0 (unregistering): Port device team_slave_1 removed [ 343.080983][ T2872] team0 (unregistering): Port device team_slave_0 removed [ 343.392409][ T5164] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 343.437410][ T5164] usb 3-1: device descriptor read/8, error -71 [ 343.664955][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1536'. [ 343.725623][ T5164] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 343.786298][ T5164] usb 3-1: device descriptor read/8, error -71 [ 343.914950][ T5164] usb usb3-port1: unable to enumerate USB device [ 344.055234][ T7246] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.436817][ T9480] chnl_net:caif_netlink_parms(): no params data found [ 344.744019][ T5157] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 344.984845][ T5097] Bluetooth: hci4: command tx timeout [ 345.018570][ T5157] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 345.027892][ T5157] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.040247][ T5157] usb 6-1: config 0 descriptor?? [ 345.134573][ T9480] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.152324][ T9480] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.205583][ T9480] bridge_slave_0: entered allmulticast mode [ 345.234733][ T9480] bridge_slave_0: entered promiscuous mode [ 345.299920][ T9480] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.333561][ T9480] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.341319][ T9480] bridge_slave_1: entered allmulticast mode [ 345.426574][ T9480] bridge_slave_1: entered promiscuous mode [ 345.611814][ T5157] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 345.666783][ T5157] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 345.707977][ T5157] [drm:udl_init] *ERROR* Selecting channel failed [ 345.812650][ T5157] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 345.870479][ T5157] [drm] Initialized udl on minor 2 [ 345.890025][ T9480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.910292][ T5157] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 345.940268][ T9480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.951350][ T5157] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 345.960803][ T5164] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 345.994422][ T5164] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 346.013440][ T5157] usb 6-1: USB disconnect, device number 24 [ 346.027805][ T57] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 346.043336][ T5164] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 346.106096][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 346.267577][ T57] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 346.277304][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.329761][ T57] usb 3-1: config 0 descriptor?? [ 346.344254][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 346.375812][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 346.393892][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 346.419202][ T2872] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.434203][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 346.470854][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.495048][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.543665][ T9] usb 4-1: Product:  [ 346.547899][ T9] usb 4-1: Manufacturer: 뫹ꈮ벂脦篕槉⬐঻⥆훺沫粌ᘕ㒸寪쭢䐞撚괄툽ꚱ擅⻞邙孒둒銈瓳鄠ఄ྽ꠒᝋ濇ְ诳㲛쟿틁⍯溞衮䯞蕎쪗埼㣜郛貤擃ҩⲇ⼬颓혆㝟篧 [ 346.643512][ T9] usb 4-1: SerialNumber: syz [ 346.692330][ T9480] team0: Port device team_slave_0 added [ 346.774657][ T57] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 346.821210][ T57] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 346.859335][ T57] [drm:udl_init] *ERROR* Selecting channel failed [ 346.887849][ T2872] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.958564][ T9480] team0: Port device team_slave_1 added [ 346.963445][ T57] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 346.993787][ T57] [drm] Initialized udl on minor 2 [ 347.024016][ T57] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 347.045488][ T57] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 347.112631][ T9603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.125995][ T5161] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 347.145102][ T57] usb 3-1: USB disconnect, device number 46 [ 347.164075][ T5161] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 347.181994][ T9603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.250458][ T9] cdc_ncm 4-1:1.0: bind() failure [ 347.334210][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 347.345166][ T5106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.359881][ T9] cdc_ncm 4-1:1.1: bind() failure [ 347.370213][ T5106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 347.380549][ T5106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 347.398518][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 347.406275][ T9617] loop5: detected capacity change from 0 to 1024 [ 347.407694][ T9] usb 4-1: USB disconnect, device number 33 [ 347.413161][ T2872] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.418971][ T5106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 347.444552][ T5106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 347.481231][ T9617] EXT4-fs: Ignoring removed orlov option [ 347.494183][ T9617] EXT4-fs (loop5): Test dummy encryption mode enabled [ 347.504495][ T9617] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 347.576620][ T9617] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.648807][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.693863][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.797155][ T9480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.956570][ T2872] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.994772][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.023805][ T5159] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 348.036664][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.071771][ T9480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.277434][ T5159] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.294708][ T29] audit: type=1326 audit(1719295793.510:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.1.1561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc9bd75d39 code=0x0 [ 348.322470][ T5159] usb 6-1: config 0 has no interfaces? [ 348.335661][ T5159] usb 6-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 348.349035][ T5159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.361617][ T5159] usb 6-1: config 0 descriptor?? [ 348.596495][ T9480] hsr_slave_0: entered promiscuous mode [ 348.671074][ T9480] hsr_slave_1: entered promiscuous mode [ 348.746235][ T9480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.785038][ T9480] Cannot create hsr debugfs directory [ 349.143224][ T9] usb 6-1: USB disconnect, device number 25 [ 349.206032][ T9644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.272044][ T5078] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 349.406023][ T2872] bridge_slave_1: left allmulticast mode [ 349.411873][ T2872] bridge_slave_1: left promiscuous mode [ 349.433263][ T2872] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.457487][ T2872] bridge_slave_0: left allmulticast mode [ 349.463302][ T2872] bridge_slave_0: left promiscuous mode [ 349.470158][ T2872] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.496924][ T5078] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 349.509635][ T5078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.544422][ T5106] Bluetooth: hci1: command tx timeout [ 349.552450][ T5078] usb 3-1: config 0 descriptor?? [ 349.606180][ T5157] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 349.840984][ T5096] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.864555][ T5157] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.921976][ T5157] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 349.960667][ T5157] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 350.006790][ T5078] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 350.041531][ T5157] usb 4-1: string descriptor 0 read error: -22 [ 350.053614][ T5078] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 350.062048][ T5157] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.40 [ 350.097828][ T5078] [drm:udl_init] *ERROR* Selecting channel failed [ 350.108359][ T5157] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.222392][ T5078] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 350.254220][ T5078] [drm] Initialized udl on minor 2 [ 350.275587][ T5078] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 350.287314][ T5078] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 350.298696][ T5159] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 350.315094][ T5159] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 350.330013][ T5078] usb 3-1: USB disconnect, device number 47 [ 350.358455][ T5159] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 351.075468][ T2872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.111468][ T2872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.131541][ T2872] bond0 (unregistering): Released all slaves [ 351.262419][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1569'. [ 351.287960][ T5157] usbhid 4-1:1.0: can't add hid device: -71 [ 351.311160][ T5157] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 351.367307][ T5157] usb 4-1: USB disconnect, device number 34 [ 351.627869][ T5106] Bluetooth: hci1: command tx timeout [ 352.585717][ T57] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 352.633544][ T9720] fuse: Unknown parameter 'group_id00000000000000000000' [ 352.686047][ T29] audit: type=1804 audit(1719295797.890:27): pid=9720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1582" name="/root/syzkaller.cb3qFv/313/file0" dev="sda1" ino=1941 res=1 errno=0 [ 352.710825][ T2872] hsr_slave_0: left promiscuous mode [ 352.732653][ T2872] hsr_slave_1: left promiscuous mode [ 352.807593][ T2872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.816513][ T2872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.836367][ T2872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.859824][ T57] usb 4-1: Using ep0 maxpacket: 8 [ 352.863733][ T2872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.877856][ T57] usb 4-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 352.911107][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.970980][ T57] usb 4-1: config 0 descriptor?? [ 352.991035][ T57] ums-alauda 4-1:0.0: USB Mass Storage device detected [ 353.047474][ T2872] veth1_macvtap: left promiscuous mode [ 353.053322][ T2872] veth0_macvtap: left promiscuous mode [ 353.100830][ T2872] veth1_vlan: left promiscuous mode [ 353.106596][ T2872] veth0_vlan: left promiscuous mode [ 353.225105][ T57] usb 4-1: USB disconnect, device number 35 [ 353.714235][ T5106] Bluetooth: hci1: command tx timeout [ 354.284855][ T2872] team0 (unregistering): Port device team_slave_1 removed [ 354.326753][ T5198] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 354.339672][ T2872] team0 (unregistering): Port device team_slave_0 removed [ 354.552603][ T5198] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.576156][ T5198] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 354.590035][ T5198] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 354.631124][ T5198] usb 4-1: string descriptor 0 read error: -22 [ 354.645659][ T5198] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.40 [ 354.655601][ T5198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.011423][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'. [ 355.095751][ T9616] chnl_net:caif_netlink_parms(): no params data found [ 355.568994][ T5198] usbhid 4-1:1.0: can't add hid device: -71 [ 355.604386][ T5198] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 355.669261][ T5198] usb 4-1: USB disconnect, device number 36 [ 355.793893][ T5106] Bluetooth: hci1: command tx timeout [ 356.491772][ T9780] fuse: Unknown parameter 'group_id00000000000000000000' [ 356.565838][ T29] audit: type=1804 audit(1719295801.770:28): pid=9780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1595" name="/root/syzkaller.QEaCJh/192/file0" dev="sda1" ino=1963 res=1 errno=0 [ 357.040850][ T9616] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.069820][ T9616] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.105842][ T9616] bridge_slave_0: entered allmulticast mode [ 357.146514][ T9616] bridge_slave_0: entered promiscuous mode [ 357.585037][ T9616] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.592411][ T9616] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.646296][ T9616] bridge_slave_1: entered allmulticast mode [ 357.674593][ T9616] bridge_slave_1: entered promiscuous mode [ 357.743756][ T5198] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 357.813526][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1602'. [ 357.955595][ T9616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.990589][ T5198] usb 3-1: Using ep0 maxpacket: 8 [ 358.027486][ T5198] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 358.048432][ T9616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.063869][ T5198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.097945][ T5198] usb 3-1: config 0 descriptor?? [ 358.126915][ T5198] ums-alauda 3-1:0.0: USB Mass Storage device detected [ 358.297807][ T9616] team0: Port device team_slave_0 added [ 358.341982][ T9] usb 3-1: USB disconnect, device number 48 [ 358.388478][ T9616] team0: Port device team_slave_1 added [ 358.607452][ T5198] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 358.657979][ T9616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.676071][ T9616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.708556][ T9616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.764978][ T9616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.792099][ T9616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.826907][ T5198] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.831628][ T9616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.848209][ T5198] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 358.883735][ T5198] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 358.916873][ T9480] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 358.954158][ T5198] usb 6-1: string descriptor 0 read error: -22 [ 358.964234][ T5198] usb 6-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.40 [ 358.983654][ T5198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.097448][ T9480] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 359.446211][ T9480] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 359.488807][ T9480] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 359.635555][ T9616] hsr_slave_0: entered promiscuous mode [ 359.652028][ T9840] fuse: Unknown parameter 'group_id00000000000000000000' [ 359.670849][ T9616] hsr_slave_1: entered promiscuous mode [ 359.690687][ T29] audit: type=1804 audit(1719295804.900:29): pid=9840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1611" name="/root/syzkaller.cb3qFv/321/file0" dev="sda1" ino=1961 res=1 errno=0 [ 359.737469][ T9616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.767456][ T9616] Cannot create hsr debugfs directory [ 359.812831][ T5198] usbhid 6-1:1.0: can't add hid device: -71 [ 359.843462][ T5198] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 359.879469][ T5198] usb 6-1: USB disconnect, device number 26 [ 360.522474][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 360.757372][ T29] audit: type=1326 audit(1719295805.960:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.2.1618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc165175d39 code=0x0 [ 360.894570][ T5198] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 361.107160][ T5198] usb 6-1: config 1 interface 0 altsetting 168 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 361.149038][ T5198] usb 6-1: config 1 interface 0 altsetting 168 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 361.165024][ T5161] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 361.203913][ T5198] usb 6-1: config 1 interface 0 has no altsetting 0 [ 361.228150][ T5198] usb 6-1: New USB device found, idVendor=062a, idProduct=7100, bcdDevice= 0.40 [ 361.260364][ T5198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.278706][ T5198] usb 6-1: Product: syz [ 361.299234][ T5198] usb 6-1: Manufacturer: syz [ 361.324983][ T5198] usb 6-1: SerialNumber: syz [ 361.347786][ T9856] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 361.356519][ T5161] usb 3-1: device descriptor read/64, error -71 [ 361.672814][ T5161] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 361.709347][ T9480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.725233][ T5198] usbhid 6-1:1.0: can't add hid device: -71 [ 361.808626][ T5198] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 361.884093][ T5161] usb 3-1: device descriptor read/64, error -71 [ 362.147032][ T5161] usb usb3-port1: attempt power cycle [ 362.213307][ T5198] usb 6-1: USB disconnect, device number 27 [ 362.681126][ T9480] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.831443][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.838815][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.951842][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.959324][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.103712][ T5161] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 363.172640][ T5161] usb 3-1: device descriptor read/8, error -71 [ 363.257728][ T9616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 363.359469][ T9616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 363.441607][ T9616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 363.453773][ T5159] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 363.464759][ T5161] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 363.528153][ T5161] usb 3-1: device descriptor read/8, error -71 [ 363.535912][ T9616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 363.633987][ T5159] usb 6-1: device descriptor read/64, error -71 [ 363.682153][ T5161] usb usb3-port1: unable to enumerate USB device [ 363.946463][ T5159] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 364.145327][ T5159] usb 6-1: device descriptor read/64, error -71 [ 364.264794][ T5159] usb usb6-port1: attempt power cycle [ 364.342892][ T9616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.499122][ T9616] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.616975][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.624378][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.680114][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.687479][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.763659][ T5159] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 364.765186][ T9480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.812737][ T5159] usb 6-1: device descriptor read/8, error -71 [ 365.133866][ T5159] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 365.214708][ T5159] usb 6-1: device descriptor read/8, error -71 [ 365.368027][ T5159] usb usb6-port1: unable to enumerate USB device [ 366.382292][ T9616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.719838][ T9480] veth0_vlan: entered promiscuous mode [ 366.895800][ T29] audit: type=1326 audit(1719295812.110:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.2.1638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc165175d39 code=0x0 [ 366.940153][ T9480] veth1_vlan: entered promiscuous mode [ 367.139524][ T9616] veth0_vlan: entered promiscuous mode [ 367.265315][ T9616] veth1_vlan: entered promiscuous mode [ 367.386323][ T9480] veth0_macvtap: entered promiscuous mode [ 367.486384][ T9480] veth1_macvtap: entered promiscuous mode [ 367.538422][ T9966] fuse: Bad value for 'user_id' [ 367.627339][ T29] audit: type=1804 audit(1719295812.810:32): pid=9966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1641" name="/root/syzkaller.cb3qFv/331/file0" dev="sda1" ino=1964 res=1 errno=0 [ 367.665088][ T9616] veth0_macvtap: entered promiscuous mode [ 367.731071][ T9616] veth1_macvtap: entered promiscuous mode [ 367.778341][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.832798][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.845949][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.856656][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.870198][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.881340][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.905233][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.940452][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.056589][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.161808][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.177558][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.201238][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.263612][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.273490][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.403734][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.437649][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.505307][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.546972][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.689382][ T9480] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.772194][ T9480] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.855256][ T9480] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.031713][ T9480] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.811100][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.884236][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.933722][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.966943][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.967113][ T9997] serio: Serial port pts0 [ 369.999265][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.023660][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.048154][ T29] audit: type=1326 audit(1719295815.260:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9995 comm="syz.1.1651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc9bd75d39 code=0x0 [ 370.054047][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.090009][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.118860][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.136539][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.158373][ T9616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.264056][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.284864][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.302698][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.322937][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.339246][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.362706][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.393767][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.411913][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.425224][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.444314][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.453758][ T57] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 370.493528][ T9616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.605346][ T9616] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.634527][ T57] usb 2-1: device descriptor read/64, error -71 [ 370.646992][ T9616] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.668463][ T9616] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.685905][ T9616] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.936693][ T57] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 371.042124][ T1058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.083647][ T1058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.116697][ T57] usb 2-1: device descriptor read/64, error -71 [ 371.234352][ T57] usb usb2-port1: attempt power cycle [ 371.334329][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.380132][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.391676][ T1058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.434977][ T1058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.639647][ T2872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.665740][ T57] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 371.684994][ T2872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.728581][ T57] usb 2-1: device descriptor read/8, error -71 [ 372.034502][ T57] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 372.125123][ T57] usb 2-1: device descriptor read/8, error -71 [ 372.201261][T10037] loop0: detected capacity change from 0 to 1024 [ 372.245330][ T57] usb usb2-port1: unable to enumerate USB device [ 372.283046][T10037] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 372.396336][T10037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.698202][ T9616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.043718][ T57] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 373.292609][T10071] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1667'. [ 373.313825][ T57] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 373.362223][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.387239][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1667'. [ 373.426295][ T57] usb 6-1: config 0 descriptor?? [ 374.013763][ T57] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 374.022423][ T57] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 374.104684][ T57] [drm:udl_init] *ERROR* Selecting channel failed [ 374.250451][ T57] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 374.294775][T10079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.332087][ T57] [drm] Initialized udl on minor 2 [ 374.352733][ T57] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 374.390447][ T57] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 374.422335][ T5161] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 374.503435][ T5161] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 374.512471][ T57] usb 6-1: USB disconnect, device number 32 [ 374.550834][ T5161] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 375.543155][T10127] loop0: detected capacity change from 0 to 1024 [ 375.600455][T10127] EXT4-fs: Ignoring removed orlov option [ 375.638144][T10127] EXT4-fs (loop0): Test dummy encryption mode enabled [ 375.746547][T10127] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 376.416194][T10127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.984386][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 377.015107][ T25] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 377.046359][ T5164] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 377.057854][ T5097] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 377.079628][ T5097] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 377.095482][ T5097] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.128891][ T5097] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.155843][ T5097] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 377.164271][ T5097] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.246570][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.274632][ T25] usb 1-1: config 0 has no interfaces? [ 377.280319][ T25] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 377.294553][ T5164] usb 3-1: Using ep0 maxpacket: 8 [ 377.303929][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.335766][ T5164] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 377.337583][ T25] usb 1-1: config 0 descriptor?? [ 377.390927][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.404153][ T5164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.443193][ T5164] usb 3-1: config 0 descriptor?? [ 377.492863][ T5164] ums-alauda 3-1:0.0: USB Mass Storage device detected [ 377.732902][ T5078] usb 3-1: USB disconnect, device number 53 [ 377.911745][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.190327][ T5078] usb 1-1: USB disconnect, device number 34 [ 378.230395][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.269814][ T5161] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 378.500657][ T5161] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 378.523880][ T5161] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.561365][ T5161] usb 6-1: config 0 descriptor?? [ 378.639137][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.937200][ T9616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.273364][ T5106] Bluetooth: hci5: command tx timeout [ 379.761523][ T5161] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 379.982718][ T5161] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 379.996014][ T5161] [drm:udl_init] *ERROR* Selecting channel failed [ 380.162679][ T5161] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 380.248053][ T5161] [drm] Initialized udl on minor 2 [ 380.269143][ T5161] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 380.324435][ T5161] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 380.333813][ T45] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 380.426828][ T25] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 380.454155][ T5161] usb 6-1: USB disconnect, device number 33 [ 380.487575][ T45] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 380.534007][ T45] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 380.690194][ T25] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 380.712805][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.776191][ T25] usb 1-1: config 0 descriptor?? [ 381.105268][T10203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.194349][ T64] bridge_slave_1: left allmulticast mode [ 381.233529][ T25] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 381.243191][ T64] bridge_slave_1: left promiscuous mode [ 381.274773][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.286830][ T25] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 381.310670][ T5106] Bluetooth: hci5: command tx timeout [ 381.315892][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 381.382851][ T64] bridge_slave_0: left allmulticast mode [ 381.439703][ T64] bridge_slave_0: left promiscuous mode [ 381.474301][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.492383][ T25] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 381.528560][ T25] [drm] Initialized udl on minor 2 [ 381.551132][ T25] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 381.562294][ T25] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 381.583285][ T57] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 381.616871][ T57] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 381.645817][ T25] usb 1-1: USB disconnect, device number 35 [ 382.216581][T10238] loop0: detected capacity change from 0 to 1024 [ 382.279332][T10238] EXT4-fs: Ignoring removed orlov option [ 382.327129][T10238] EXT4-fs (loop0): Test dummy encryption mode enabled [ 382.370006][T10238] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 382.490521][T10238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.869323][ T5159] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 383.124036][ T5159] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.149478][ T5159] usb 1-1: config 0 has no interfaces? [ 383.168634][ T5159] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 383.187997][ T5159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.227739][ T5159] usb 1-1: config 0 descriptor?? [ 383.324364][ T25] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 383.384653][ T5106] Bluetooth: hci5: command tx timeout [ 383.532597][ T25] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 383.555651][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.595492][ T25] usb 3-1: config 0 descriptor?? [ 383.931893][ T5078] usb 1-1: USB disconnect, device number 36 [ 384.008802][ T25] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 384.044303][ T25] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 384.085442][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 384.106193][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.145130][ T25] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 384.152661][ T25] [drm] Initialized udl on minor 2 [ 384.159378][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.172467][ T25] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 384.191429][ T25] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 384.202582][ T64] bond0 (unregistering): Released all slaves [ 384.213962][ T5198] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 384.240668][ T25] usb 3-1: USB disconnect, device number 54 [ 384.253345][ T5198] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 384.325338][T10149] chnl_net:caif_netlink_parms(): no params data found [ 384.555149][ T9616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.786573][ T5157] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 384.869265][ T29] audit: type=1800 audit(1719295830.080:34): pid=10289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1719" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 384.966783][T10289] process 'syz.2.1719' launched './file1' with NULL argv: empty string added [ 385.018539][ T5157] usb 6-1: Using ep0 maxpacket: 8 [ 385.041379][ T5157] usb 6-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 385.064328][ T5157] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.099070][ T5157] usb 6-1: config 0 descriptor?? [ 385.140372][ T5157] ums-alauda 6-1:0.0: USB Mass Storage device detected [ 385.348287][ T5157] usb 6-1: USB disconnect, device number 34 [ 385.380837][T10305] loop2: detected capacity change from 0 to 512 [ 385.442711][T10305] EXT4-fs: Ignoring removed mblk_io_submit option [ 385.445592][ T5159] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 385.464488][ T5106] Bluetooth: hci5: command tx timeout [ 385.491748][T10305] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 385.562771][T10305] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 385.641362][T10305] EXT4-fs (loop2): 1 truncate cleaned up [ 385.650370][T10305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.677810][ T5159] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 385.692500][ T5159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.749316][ T5159] usb 1-1: config 0 descriptor?? [ 385.776744][T10305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.135990][T10317] gretap0: entered promiscuous mode [ 386.212428][ T5159] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 386.269317][ T5159] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 386.286558][ T5159] [drm:udl_init] *ERROR* Selecting channel failed [ 386.318234][T10149] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.366410][T10149] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.380774][ T5159] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 386.404083][T10149] bridge_slave_0: entered allmulticast mode [ 386.427787][T10149] bridge_slave_0: entered promiscuous mode [ 386.438873][ T5159] [drm] Initialized udl on minor 2 [ 386.468892][ T5159] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 386.509645][ T5159] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 386.517745][ T5164] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 386.543293][ T5164] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 386.571320][ T5159] usb 1-1: USB disconnect, device number 37 [ 386.601991][ T5164] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 386.634125][ T64] hsr_slave_0: left promiscuous mode [ 386.696115][ T64] hsr_slave_1: left promiscuous mode [ 386.773880][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.835565][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.881567][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.972741][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.085996][T10339] loop5: detected capacity change from 0 to 1024 [ 387.106835][T10339] EXT4-fs: Ignoring removed orlov option [ 387.168343][T10339] EXT4-fs (loop5): Test dummy encryption mode enabled [ 387.196038][T10339] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 387.277573][ T64] veth1_macvtap: left promiscuous mode [ 387.326807][T10339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.328188][ T64] veth0_macvtap: left promiscuous mode [ 387.431922][ T64] veth1_vlan: left promiscuous mode [ 387.454373][ T64] veth0_vlan: left promiscuous mode [ 387.494675][ T25] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 387.713806][ T5159] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 387.734836][ T25] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 387.771045][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.800710][ T25] usb 5-1: config 0 descriptor?? [ 387.917390][ T5159] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.951872][ T5159] usb 6-1: config 0 has no interfaces? [ 387.968453][ T5159] usb 6-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 388.011387][ T5159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.060109][ T5159] usb 6-1: config 0 descriptor?? [ 388.296673][ T25] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 388.338748][ T25] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 388.396124][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 388.471996][ T25] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 388.511580][ T25] [drm] Initialized udl on minor 2 [ 388.552937][ T25] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 388.575625][ T25] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 388.603943][ T57] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 388.614706][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.626960][ T57] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 388.651149][ T57] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 388.660669][ T25] usb 5-1: USB disconnect, device number 25 [ 388.755686][ T57] usb 6-1: USB disconnect, device number 35 [ 388.834406][ T5159] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 389.035450][ T5159] usb 2-1: Using ep0 maxpacket: 8 [ 389.054962][ T5159] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 389.081199][ T5159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.142841][ T5159] usb 2-1: config 0 descriptor?? [ 389.154663][ T5159] ums-alauda 2-1:0.0: USB Mass Storage device detected [ 389.432838][ T5096] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.774846][ T57] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 389.987641][ T57] usb 5-1: unable to get BOS descriptor or descriptor too short [ 390.030417][ T57] usb 5-1: not running at top speed; connect to a high speed hub [ 390.142726][ T57] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.270896][ T57] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 390.410572][ T57] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 390.669391][ T57] usb 5-1: string descriptor 0 read error: -22 [ 390.738539][ T57] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.40 [ 390.796904][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.118328][ T64] team0 (unregistering): Port device team_slave_1 removed [ 391.158503][T10410] loop5: detected capacity change from 0 to 1024 [ 391.192287][T10410] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 391.221203][ T64] team0 (unregistering): Port device team_slave_0 removed [ 391.279422][T10410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.374577][ T5096] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.073862][ T5159] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 392.252542][T10149] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.272131][T10149] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.282537][T10149] bridge_slave_1: entered allmulticast mode [ 392.283858][ T5159] usb 6-1: Using ep0 maxpacket: 16 [ 392.302532][ T5159] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 392.306813][T10149] bridge_slave_1: entered promiscuous mode [ 392.327148][ T5159] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 392.363676][ T5159] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 392.404571][ T5159] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.434277][ T5159] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.442322][ T5159] usb 6-1: Product:  [ 392.451843][ T5159] usb 6-1: Manufacturer: 뫹ꈮ벂脦篕槉⬐঻⥆훺沫粌ᘕ㒸寪쭢䐞撚괄툽ꚱ擅⻞邙孒둒銈瓳鄠ఄ྽ꠒᝋ濇ְ诳㲛쟿틁⍯溞衮䯞蕎쪗埼㣜郛貤擃ҩⲇ⼬颓혆㝟篧 [ 392.473702][ T5159] usb 6-1: SerialNumber: syz [ 392.539927][ T57] usbhid 5-1:1.0: can't add hid device: -71 [ 392.571174][ T57] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 392.631115][ T45] usb 2-1: USB disconnect, device number 32 [ 392.651236][ T57] usb 5-1: USB disconnect, device number 26 [ 392.866878][T10149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.895427][T10419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.935262][T10419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.962665][T10149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.992807][ T5159] cdc_ncm 6-1:1.0: bind() failure [ 393.054921][ T5159] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 393.072098][ T5159] cdc_ncm 6-1:1.1: bind() failure [ 393.110736][ T5159] usb 6-1: USB disconnect, device number 36 [ 393.346501][ T45] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 393.397162][T10149] team0: Port device team_slave_0 added [ 393.450236][T10149] team0: Port device team_slave_1 added [ 393.568938][ T45] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 393.604832][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.673378][ T45] usb 2-1: config 0 descriptor?? [ 393.830766][T10149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.873596][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.921196][T10149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.977889][T10149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.003627][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.156990][T10149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.365967][ T45] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 394.406820][ T45] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 394.453179][ T45] [drm:udl_init] *ERROR* Selecting channel failed [ 394.549817][ T45] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 394.580914][ T45] [drm] Initialized udl on minor 2 [ 394.610716][ T45] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 394.642218][ T45] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 394.644805][ T5078] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 394.673183][ T57] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 394.717838][T10149] hsr_slave_0: entered promiscuous mode [ 394.738235][ T45] usb 2-1: USB disconnect, device number 33 [ 394.745354][ T57] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 394.770499][T10149] hsr_slave_1: entered promiscuous mode [ 394.817340][T10149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.847360][T10149] Cannot create hsr debugfs directory [ 394.892389][ T5078] usb 3-1: unable to get BOS descriptor or descriptor too short [ 394.924955][ T5078] usb 3-1: not running at top speed; connect to a high speed hub [ 394.967999][ T5078] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.031644][ T5078] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 395.077366][ T5078] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 395.152867][ T5078] usb 3-1: string descriptor 0 read error: -22 [ 395.166135][ T5078] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.40 [ 395.241520][ T5078] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.264593][ T57] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 395.464312][ T57] usb 6-1: Using ep0 maxpacket: 8 [ 395.482843][ T57] usb 6-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 395.519235][T10476] gretap0: entered promiscuous mode [ 395.524687][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.593992][ T57] usb 6-1: config 0 descriptor?? [ 395.649970][ T57] ums-alauda 6-1:0.0: USB Mass Storage device detected [ 395.816202][ T5078] usbhid 3-1:1.0: can't add hid device: -71 [ 395.822321][ T5078] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 395.912297][ T5198] usb 6-1: USB disconnect, device number 37 [ 395.915320][ T5078] usb 3-1: USB disconnect, device number 55 [ 397.833272][T10528] fuse: Unknown parameter 'use00000000000000000000' [ 397.884702][ T29] audit: type=1804 audit(1719295843.100:35): pid=10528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1775" name="/root/syzkaller.odcpdH/28/file0" dev="sda1" ino=1967 res=1 errno=0 [ 398.427139][T10149] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 398.522051][T10149] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 398.582779][T10149] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 398.631669][T10149] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 398.731092][T10543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1779'. [ 398.874694][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1779'. [ 399.325774][T10547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.444730][ T5198] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 399.669948][ T5198] usb 6-1: unable to get BOS descriptor or descriptor too short [ 399.705911][ T5198] usb 6-1: not running at top speed; connect to a high speed hub [ 399.711303][T10149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.759422][ T5198] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.804145][ T5198] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 399.847088][ T5198] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 399.900654][T10149] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.914394][ T5198] usb 6-1: string descriptor 0 read error: -22 [ 399.938952][T10563] loop1: detected capacity change from 0 to 1024 [ 399.964804][ T5198] usb 6-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.40 [ 399.988783][T10563] EXT4-fs: Ignoring removed orlov option [ 399.997474][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.003720][ T5198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.004772][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.080384][T10563] EXT4-fs (loop1): Test dummy encryption mode enabled [ 400.189642][T10563] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 400.237122][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.244477][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.386249][T10563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.629247][ T5198] usbhid 6-1:1.0: can't add hid device: -71 [ 400.653184][ T5198] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 400.723748][ T5198] usb 6-1: USB disconnect, device number 38 [ 400.803773][ T57] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 401.020253][ T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.053787][ T57] usb 2-1: config 0 has no interfaces? [ 401.059359][ T57] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 401.100538][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.142151][ T57] usb 2-1: config 0 descriptor?? [ 401.193963][ T5161] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 401.423518][ T5161] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 401.455160][ T5161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.512179][ T5161] usb 1-1: config 0 descriptor?? [ 402.099352][T10149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.112266][ T5157] usb 2-1: USB disconnect, device number 34 [ 402.151871][ T5161] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 402.202104][ T5161] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 402.261014][ T5161] [drm:udl_init] *ERROR* Selecting channel failed [ 402.380484][ T5161] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 402.424529][ T5161] [drm] Initialized udl on minor 2 [ 402.449805][ T5161] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 402.495816][ T5161] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 402.505495][ T57] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 402.582144][ T57] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 402.592633][ T5161] usb 1-1: USB disconnect, device number 38 [ 402.599879][T10149] veth0_vlan: entered promiscuous mode [ 402.619304][ T57] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 402.699163][T10149] veth1_vlan: entered promiscuous mode [ 403.108381][ T6231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.222636][T10149] veth0_macvtap: entered promiscuous mode [ 403.330335][T10149] veth1_macvtap: entered promiscuous mode [ 403.540641][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.594058][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.637392][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.685656][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.733659][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.753968][ T5198] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 403.790220][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.841208][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.904868][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.952992][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.003745][ T5198] usb 5-1: Using ep0 maxpacket: 16 [ 404.007915][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.047198][T10149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.077771][ T5198] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 404.091181][T10648] fuse: Unknown parameter 'user_i00000000000000000000' [ 404.114366][ T5198] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 404.163069][ T5198] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 404.177945][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.188935][ T29] audit: type=1804 audit(1719295849.390:36): pid=10648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1807" name="/root/syzkaller.cb3qFv/374/file0" dev="sda1" ino=1967 res=1 errno=0 [ 404.243589][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.285689][ T5198] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 404.301704][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.312827][ T5198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.348875][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.366807][ T5198] usb 5-1: Product: syz [ 404.371049][ T5198] usb 5-1: Manufacturer: syz [ 404.378465][ T5198] usb 5-1: SerialNumber: syz [ 404.416149][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.473609][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.527599][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.567828][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.623692][T10149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.674208][T10149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.761950][T10149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.034445][ T5198] usb 5-1: 0:2 : does not exist [ 405.040344][T10149] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.117193][T10149] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.155841][T10149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.181395][T10149] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.186484][ T5198] usb 5-1: USB disconnect, device number 27 [ 405.577472][ T5240] udevd[5240]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.625832][ T5161] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 405.827173][ T5161] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 405.873670][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.960791][ T1058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.990717][ T5161] usb 2-1: config 0 descriptor?? [ 405.999454][ T1058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.298376][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.337950][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.530426][ T5161] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 406.594335][ T5161] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 406.653979][ T5161] [drm:udl_init] *ERROR* Selecting channel failed [ 406.754577][ T5161] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 406.794358][ T5161] [drm] Initialized udl on minor 2 [ 406.832265][T10704] fuse: Unknown parameter 'user_id00000000000000000000' [ 406.836182][ T5161] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 406.862781][ T29] audit: type=1804 audit(1719295852.070:37): pid=10704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1822" name="/root/syzkaller.cb3qFv/379/file0" dev="sda1" ino=1976 res=1 errno=0 [ 406.868751][T10698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1823'. [ 406.916979][ T5161] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 406.947148][ T45] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 406.978800][ T45] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 407.003729][ T5161] usb 2-1: USB disconnect, device number 35 [ 407.019599][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1823'. [ 407.044880][ T45] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 407.113683][ T57] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 407.361281][ T57] usb 4-1: config 1 interface 0 altsetting 168 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 407.414232][ T57] usb 4-1: config 1 interface 0 altsetting 168 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 407.479251][ T57] usb 4-1: config 1 interface 0 has no altsetting 0 [ 407.529023][ T57] usb 4-1: New USB device found, idVendor=062a, idProduct=7100, bcdDevice= 0.40 [ 407.558209][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.613827][ T57] usb 4-1: Product: syz [ 407.633642][ T57] usb 4-1: Manufacturer: syz [ 407.663961][ T57] usb 4-1: SerialNumber: syz [ 407.703184][T10701] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 408.050840][ T57] usbhid 4-1:1.0: can't add hid device: -71 [ 408.074401][ T57] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 408.124402][ T57] usb 4-1: USB disconnect, device number 37 [ 408.135924][ T5078] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 408.356089][ T5078] usb 3-1: Using ep0 maxpacket: 16 [ 408.373733][ T5078] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 408.399783][ T5078] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.446797][ T5078] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 408.493457][ T5078] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.517345][ T5078] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.526266][ T5078] usb 3-1: Product: syz [ 408.530637][ T5078] usb 3-1: Manufacturer: syz [ 408.533820][ T5161] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 408.546231][ T5078] usb 3-1: SerialNumber: syz [ 408.744631][ T5159] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 408.795301][ T5078] usb 3-1: 0:2 : does not exist [ 408.890982][ T5078] usb 3-1: USB disconnect, device number 56 [ 408.959498][ T5159] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 409.021504][ T5159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.073808][ T5161] usb 5-1: unable to get BOS descriptor or descriptor too short [ 409.094482][ T5161] usb 5-1: not running at top speed; connect to a high speed hub [ 409.095050][ T5159] usb 6-1: config 0 descriptor?? [ 409.104713][ T5161] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.136062][ T5161] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 409.187854][ T5161] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 409.233503][ T5161] usb 5-1: string descriptor 0 read error: -22 [ 409.270596][ T5240] udevd[5240]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.290544][ T5161] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.40 [ 409.320399][ T5161] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.752870][ T5159] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 409.784683][ T5159] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 409.803287][ T5161] usbhid 5-1:1.0: can't add hid device: -71 [ 409.839066][ T5159] [drm:udl_init] *ERROR* Selecting channel failed [ 409.843866][ T5161] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 409.922833][ T5159] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 409.928029][ T5161] usb 5-1: USB disconnect, device number 28 [ 409.969324][ T5159] [drm] Initialized udl on minor 2 [ 409.996869][ T5159] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 410.030195][ T5159] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 410.043744][ T5078] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 410.079403][ T5078] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 410.104489][ T5159] usb 6-1: USB disconnect, device number 39 [ 410.127428][ T5078] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 410.923871][ T5078] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 411.070758][T10780] gretap0: entered promiscuous mode [ 411.081955][ T29] audit: type=1326 audit(1719295856.270:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe1c775d39 code=0x0 [ 411.154485][ T5078] usb 5-1: Using ep0 maxpacket: 16 [ 411.179336][ T5078] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 411.197414][ T5078] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 411.261865][ T5078] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 411.320561][ T5078] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.332268][ T5164] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 411.362437][ T5078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.395086][ T5078] usb 5-1: Product:  [ 411.399390][ T5078] usb 5-1: Manufacturer: 뫹ꈮ벂脦篕槉⬐঻⥆훺沫粌ᘕ㒸寪쭢䐞撚괄툽ꚱ擅⻞邙孒둒銈瓳鄠ఄ྽ꠒᝋ濇ְ诳㲛쟿틁⍯溞衮䯞蕎쪗埼㣜郛貤擃ҩⲇ⼬颓혆㝟篧 [ 411.440051][ T5078] usb 5-1: SerialNumber: syz [ 411.563840][ T5164] usb 6-1: Using ep0 maxpacket: 16 [ 411.572056][ T5164] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 411.610207][ T5164] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 411.635411][ T5164] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 411.668841][ T5164] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 411.691581][ T5164] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.709638][ T5164] usb 6-1: Product: syz [ 411.725166][ T5164] usb 6-1: Manufacturer: syz [ 411.743416][ T5164] usb 6-1: SerialNumber: syz [ 411.948089][T10769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.980656][T10769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.040790][ T5078] cdc_ncm 5-1:1.0: bind() failure [ 412.107429][ T5164] usb 6-1: 0:2 : does not exist [ 412.139301][ T5078] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 412.169221][ T5078] cdc_ncm 5-1:1.1: bind() failure [ 412.215464][ T5164] usb 6-1: USB disconnect, device number 40 [ 412.249711][ T5078] usb 5-1: USB disconnect, device number 29 [ 412.485050][ T57] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 412.587570][ T8269] udevd[8269]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.736784][ T57] usb 3-1: unable to get BOS descriptor or descriptor too short [ 412.771814][ T57] usb 3-1: not running at top speed; connect to a high speed hub [ 412.824429][ T57] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.861135][ T57] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 412.915148][ T57] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 412.958691][ T57] usb 3-1: string descriptor 0 read error: -22 [ 412.973952][ T57] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.40 [ 413.012641][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.535229][ T57] usbhid 3-1:1.0: can't add hid device: -71 [ 413.541353][ T57] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 413.621412][ T57] usb 3-1: USB disconnect, device number 57 [ 413.925111][ T5161] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 414.166410][ T5161] usb 1-1: Using ep0 maxpacket: 16 [ 414.197525][ T5161] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 414.232881][ T5161] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 414.270595][ T5161] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 414.330544][ T5161] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 414.350038][ T5161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.380391][ T5161] usb 1-1: Product:  [ 414.384461][ T5078] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 414.398421][ T5161] usb 1-1: Manufacturer: 뫹ꈮ벂脦篕槉⬐঻⥆훺沫粌ᘕ㒸寪쭢䐞撚괄툽ꚱ擅⻞邙孒둒銈瓳鄠ఄ྽ꠒᝋ濇ְ诳㲛쟿틁⍯溞衮䯞蕎쪗埼㣜郛貤擃ҩⲇ⼬颓혆㝟篧 [ 414.452938][ T5161] usb 1-1: SerialNumber: syz [ 414.583967][ T5078] usb 2-1: Using ep0 maxpacket: 16 [ 414.603759][ T5078] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 414.628909][ T5078] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.650322][ T5078] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 414.694488][ T5078] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.738770][ T5078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.761348][ T5078] usb 2-1: Product: syz [ 414.773206][ T5078] usb 2-1: Manufacturer: syz [ 414.782807][ T5078] usb 2-1: SerialNumber: syz [ 414.894953][T10839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.925711][T10839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.024861][ T5078] usb 2-1: 0:2 : does not exist [ 415.048432][ T5161] cdc_ncm 1-1:1.0: bind() failure [ 415.091276][ T5161] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 415.133956][ T5161] cdc_ncm 1-1:1.1: bind() failure [ 415.149349][ T5078] usb 2-1: USB disconnect, device number 36 [ 415.187560][ T5161] usb 1-1: USB disconnect, device number 39 [ 415.488843][ T5215] udevd[5215]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.045359][T10882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.268738][T10899] loop1: detected capacity change from 0 to 1024 [ 416.317547][T10899] EXT4-fs: Ignoring removed orlov option [ 416.357888][T10899] EXT4-fs (loop1): Test dummy encryption mode enabled [ 416.394650][T10899] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 416.541252][T10899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.003767][ T5164] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 417.186221][ T5078] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 417.227242][ T5164] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.262073][ T5164] usb 2-1: config 0 has no interfaces? [ 417.279233][ T5164] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 417.307360][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.365958][ T5164] usb 2-1: config 0 descriptor?? [ 417.437463][ T5078] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 417.447294][ T5078] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.555974][ T5078] usb 6-1: config 0 descriptor?? [ 417.881490][ T5078] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 417.924808][ T5078] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 417.970708][ T5078] [drm:udl_init] *ERROR* Selecting channel failed [ 418.061338][ T5078] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 418.132741][ T5078] [drm] Initialized udl on minor 2 [ 418.155704][ T5078] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 418.199284][ T5078] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 418.217201][T10943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.225021][ T5159] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 418.247306][ T5078] usb 6-1: USB disconnect, device number 41 [ 418.269680][ T5159] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 418.270317][ T5161] usb 2-1: USB disconnect, device number 37 [ 418.933241][ T5161] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 419.028231][ T6231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.062200][T10974] fuse: Bad value for 'fd' [ 419.106344][ T29] audit: type=1804 audit(1719295864.310:39): pid=10974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1936" name="/root/syzkaller.g8StAy/328/file0" dev="sda1" ino=1968 res=1 errno=0 [ 419.163739][ T5161] usb 4-1: Using ep0 maxpacket: 8 [ 419.202949][ T5161] usb 4-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 419.234518][ T5161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.287841][ T5161] usb 4-1: config 0 descriptor?? [ 419.317779][ T5161] ums-alauda 4-1:0.0: USB Mass Storage device detected [ 419.520001][ T57] usb 4-1: USB disconnect, device number 38 [ 419.826365][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1943'. [ 420.153831][ T1145] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 420.367923][ T1145] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 420.400895][ T1145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.417093][T11007] loop3: detected capacity change from 0 to 1024 [ 420.457927][ T1145] usb 1-1: config 0 descriptor?? [ 420.465997][T11007] EXT4-fs: Ignoring removed orlov option [ 420.499741][T11007] EXT4-fs (loop3): Test dummy encryption mode enabled [ 420.531820][T11007] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 420.644477][ T5078] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 420.654723][T11007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.736542][ T1145] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 420.749862][ T1145] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 420.759161][ T1145] [drm:udl_init] *ERROR* Selecting channel failed [ 420.812959][ T1145] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 420.831554][ T1145] [drm] Initialized udl on minor 2 [ 420.841024][ T1145] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 420.850505][ T5078] usb 2-1: Using ep0 maxpacket: 16 [ 420.861370][ T5078] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 420.874030][ T1145] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 420.886619][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 420.903636][ T5159] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 420.922513][ T5078] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 420.935240][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 420.955096][ T1145] usb 1-1: USB disconnect, device number 40 [ 420.961894][ T5078] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 420.971988][ T5164] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 420.980104][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 421.017250][ T5078] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 421.027458][ T5078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.042581][ T5078] usb 2-1: Product:  [ 421.047493][ T5078] usb 2-1: Manufacturer: 뫹ꈮ벂脦篕槉⬐঻⥆훺沫粌ᘕ㒸寪쭢䐞撚괄툽ꚱ擅⻞邙孒둒銈瓳鄠ఄ྽ꠒᝋ濇ְ诳㲛쟿틁⍯溞衮䯞蕎쪗埼㣜郛貤擃ҩⲇ⼬颓혆㝟篧 [ 421.110751][ T5078] usb 2-1: SerialNumber: syz [ 421.157901][ T5159] usb 5-1: config 1 interface 0 altsetting 168 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 421.183920][ T5159] usb 5-1: config 1 interface 0 altsetting 168 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 421.219819][ T5164] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.244192][ T5164] usb 4-1: config 0 has no interfaces? [ 421.255311][ T5159] usb 5-1: config 1 interface 0 has no altsetting 0 [ 421.270753][ T5164] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 421.295293][ T5164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.306319][ T5159] usb 5-1: New USB device found, idVendor=062a, idProduct=7100, bcdDevice= 0.40 [ 421.324445][ T5159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.332555][ T5159] usb 5-1: Product: syz [ 421.367035][ T5159] usb 5-1: Manufacturer: syz [ 421.373320][ T5164] usb 4-1: config 0 descriptor?? [ 421.380786][ T5159] usb 5-1: SerialNumber: syz [ 421.440537][T11011] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 421.572394][T11005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.604458][T11005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.654437][ T5078] cdc_ncm 2-1:1.0: bind() failure [ 421.726909][ T5078] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 421.736413][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1959'. [ 421.782760][ T5078] cdc_ncm 2-1:1.1: bind() failure [ 421.823191][ T5159] usbhid 5-1:1.0: can't add hid device: -71 [ 421.849410][ T5078] usb 2-1: USB disconnect, device number 38 [ 421.855622][ T5159] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 421.949245][ T5159] usb 5-1: USB disconnect, device number 30 [ 423.018247][ T57] usb 4-1: USB disconnect, device number 39 [ 423.561657][ T45] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 423.677185][T10149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.764329][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 423.779955][ T45] usb 1-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 423.802425][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.834381][ T45] usb 1-1: config 0 descriptor?? [ 423.860356][ T45] ums-alauda 1-1:0.0: USB Mass Storage device detected [ 423.897539][ T5164] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 423.927403][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1974'. [ 424.061848][ T45] usb 1-1: USB disconnect, device number 41 [ 424.184847][ T5164] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 424.220076][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.265325][ T5164] usb 2-1: config 0 descriptor?? [ 424.483938][ T57] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 424.674535][ T57] usb 3-1: Using ep0 maxpacket: 16 [ 424.711831][ T57] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 424.753699][ T57] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 424.769643][ T5164] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 424.779489][ T57] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 424.802196][ T5164] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 424.836101][ T57] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 424.847024][ T5164] [drm:udl_init] *ERROR* Selecting channel failed [ 424.873642][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.906843][ T57] usb 3-1: Product:  [ 424.930368][ T57] usb 3-1: Manufacturer: 뫹ꈮ벂脦篕槉⬐঻⥆훺沫粌ᘕ㒸寪쭢䐞撚괄툽ꚱ擅⻞邙孒둒銈瓳鄠ఄ྽ꠒᝋ濇ְ诳㲛쟿틁⍯溞衮䯞蕎쪗埼㣜郛貤擃ҩⲇ⼬颓혆㝟篧 [ 424.973088][ T5164] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 424.975979][ T57] usb 3-1: SerialNumber: syz [ 425.013223][ T5164] [drm] Initialized udl on minor 2 [ 425.027681][ T5164] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 425.054294][ T5164] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 425.103699][ T5078] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 425.118885][ T5164] usb 2-1: USB disconnect, device number 39 [ 425.153230][ T5078] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 425.472611][T11106] loop5: detected capacity change from 0 to 1024 [ 425.500797][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.515028][T11106] EXT4-fs: Ignoring removed orlov option [ 425.531656][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.568770][T11106] EXT4-fs (loop5): Test dummy encryption mode enabled [ 425.576178][ T57] cdc_ncm 3-1:1.0: bind() failure [ 425.609382][ T57] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 425.634172][T11106] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 425.650254][ T57] cdc_ncm 3-1:1.1: bind() failure [ 425.678166][T11111] fuse: Unknown parameter '0x0000000000000005' [ 425.708051][ T57] usb 3-1: USB disconnect, device number 58 [ 425.731773][ T29] audit: type=1804 audit(1719295870.940:40): pid=11111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1987" name="/root/syzkaller.odcpdH/70/file0" dev="sda1" ino=1957 res=1 errno=0 [ 425.736266][T11106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.164059][ T5198] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 426.194601][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1991'. [ 426.406985][ T5198] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.428854][ T5198] usb 6-1: config 0 has no interfaces? [ 426.452890][ T5198] usb 6-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 426.493308][ T5198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.545390][ T5198] usb 6-1: config 0 descriptor?? [ 426.668115][ T5078] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 426.905778][ T5078] usb 4-1: Using ep0 maxpacket: 8 [ 427.012398][ T5078] usb 4-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 427.033502][ T5078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.098042][ T5078] usb 4-1: config 0 descriptor?? [ 427.116531][ T5078] ums-alauda 4-1:0.0: USB Mass Storage device detected [ 427.322578][ T5078] usb 4-1: USB disconnect, device number 40 [ 427.403426][ T5198] usb 6-1: USB disconnect, device number 42 [ 427.584904][T11162] loop2: detected capacity change from 0 to 512 [ 427.676704][T11162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.695461][T11162] ext4 filesystem being mounted at /root/syzkaller.cb3qFv/412/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.874196][ T5078] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 427.886109][ T5091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.100327][ T5096] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.137882][ T5078] usb 1-1: config 1 interface 0 altsetting 168 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 428.193709][ T5078] usb 1-1: config 1 interface 0 altsetting 168 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 428.247409][ T5078] usb 1-1: config 1 interface 0 has no altsetting 0 [ 428.304693][ T5078] usb 1-1: New USB device found, idVendor=062a, idProduct=7100, bcdDevice= 0.40 [ 428.383714][ T5078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.391787][ T5078] usb 1-1: Product: syz [ 428.414388][ T5078] usb 1-1: Manufacturer: syz [ 428.429280][ T5078] usb 1-1: SerialNumber: syz [ 428.462537][T11165] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 428.771570][ T5078] usbhid 1-1:1.0: can't add hid device: -71 [ 428.791827][ T5078] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 428.832021][ T5078] usb 1-1: USB disconnect, device number 42 [ 429.063386][T11207] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2025'. [ 429.085236][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2025'. [ 429.282748][T11214] loop3: detected capacity change from 0 to 1024 [ 429.310731][T11214] EXT4-fs: Ignoring removed orlov option [ 429.353770][T11214] EXT4-fs (loop3): Test dummy encryption mode enabled [ 429.386466][T11214] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 429.562408][T11214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.582203][ T5164] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 429.803921][ T5164] usb 3-1: Using ep0 maxpacket: 8 [ 429.852235][ T5164] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 429.898103][ T5157] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 429.933828][ T5159] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 429.981317][ T5164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.259004][ T5157] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 430.302995][T11233] fuse: Unknown parameter '0x0000000000000005' [ 430.388182][ T5159] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.431579][ T5164] usb 3-1: config 0 descriptor?? [ 430.485340][ T29] audit: type=1804 audit(1719295875.700:41): pid=11233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2034" name="/root/syzkaller.odcpdH/83/file0" dev="sda1" ino=1947 res=1 errno=0 [ 430.509631][ T5157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.536856][ T5164] ums-alauda 3-1:0.0: USB Mass Storage device detected [ 430.564844][ T5159] usb 4-1: config 0 has no interfaces? [ 430.570409][ T5159] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 430.607386][ T5157] usb 2-1: config 0 descriptor?? [ 430.695179][ T5159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.747657][ T5159] usb 4-1: config 0 descriptor?? [ 430.808161][ T5164] usb 3-1: USB disconnect, device number 59 [ 431.219288][ T5157] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 431.255997][ T5157] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 431.314606][ T5157] [drm:udl_init] *ERROR* Selecting channel failed [ 431.471652][ T5157] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 431.518908][ T5157] [drm] Initialized udl on minor 2 [ 431.540207][ T5157] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 431.563288][ T5157] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 431.572772][ T5164] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 431.638534][ T57] usb 4-1: USB disconnect, device number 41 [ 431.645523][ T5164] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 431.663936][ T5157] usb 2-1: USB disconnect, device number 40 [ 431.680919][T11256] block nbd2: NBD_DISCONNECT [ 431.690697][ T5164] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 431.970243][T11262] loop5: detected capacity change from 0 to 1024 [ 432.031856][T11262] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 432.091904][T11262] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 432.107543][T11262] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 432.110827][T11262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 432.137105][T11262] EXT4-fs error (device loop5): ext4_lookup:1854: inode #13: comm syz.5.2043: iget: bad extended attribute block 8589934592 [ 432.151599][ T29] audit: type=1326 audit(1719295877.360:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.1.2047" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc9bd75d39 code=0x0 [ 432.197784][ T5096] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.334741][ T5192] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 432.408271][T10149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.493725][ T1145] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 432.623697][ T5198] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 432.694076][ T1145] usb 3-1: Using ep0 maxpacket: 16 [ 432.727055][ T1145] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 432.774399][ T1145] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 432.815979][ T5198] usb 2-1: device descriptor read/64, error -71 [ 432.838025][ T1145] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 432.881225][ T1145] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 432.908622][T11281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.924090][ T1145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.941105][ T1145] usb 3-1: Product:  [ 432.946113][ T1145] usb 3-1: Manufacturer: 뫹ꈮ벂脦篕槉⬐঻⥆훺沫粌ᘕ㒸寪쭢䐞撚괄툽ꚱ擅⻞邙孒둒銈瓳鄠ఄ྽ꠒᝋ濇ְ诳㲛쟿틁⍯溞衮䯞蕎쪗埼㣜郛貤擃ҩⲇ⼬颓혆㝟篧 [ 432.981914][ T1145] usb 3-1: SerialNumber: syz [ 433.113901][ T5198] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 433.144500][ T5164] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 433.349761][ T5164] usb 1-1: unable to get BOS descriptor or descriptor too short [ 433.370434][ T5164] usb 1-1: not running at top speed; connect to a high speed hub [ 433.407684][ T5164] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.435603][T11266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.476212][ T5164] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 433.496896][T11266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.511720][ T1145] cdc_ncm 3-1:1.0: bind() failure [ 433.526479][ T5164] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 433.547454][ T1145] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 433.563952][ T5198] usb 2-1: device descriptor read/64, error -71 [ 433.752016][ T5198] usb usb2-port1: attempt power cycle [ 434.323776][ T5198] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 434.403173][ T5198] usb 2-1: device descriptor read/8, error -71 [ 434.461108][ T5164] usb 1-1: string descriptor 0 read error: -22 [ 434.470249][ T1145] cdc_ncm 3-1:1.1: bind() failure [ 434.475708][ T5164] usb 1-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.40 [ 434.485771][ T5164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.499286][ T1145] usb 3-1: USB disconnect, device number 60 [ 434.694397][ T5198] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 434.764024][ T5198] usb 2-1: device descriptor read/8, error -71 [ 434.883987][T11309] loop3: detected capacity change from 0 to 1024 [ 434.894552][ T5198] usb usb2-port1: unable to enumerate USB device [ 434.934672][T11309] EXT4-fs: Ignoring removed orlov option [ 434.962083][T11309] EXT4-fs (loop3): Test dummy encryption mode enabled [ 434.996840][ T5164] usbhid 1-1:1.0: can't add hid device: -71 [ 434.998261][T11309] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 435.003029][ T5164] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 435.048958][ T1145] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 435.095047][ T5164] usb 1-1: USB disconnect, device number 43 [ 435.148391][T11309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.310073][ T1145] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 435.554034][ T5198] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 435.941742][ T5198] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.156378][ T5198] usb 4-1: config 0 has no interfaces? [ 436.162004][ T5198] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 436.263727][ T5198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.339400][ T1145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.352303][ T1145] usb 3-1: config 0 descriptor?? [ 436.373849][ T5198] usb 4-1: config 0 descriptor?? [ 436.787746][ T5198] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 436.930821][ T1145] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 436.974965][ T1145] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 437.034356][ T5198] usb 6-1: Using ep0 maxpacket: 16 [ 437.037513][ T1145] [drm:udl_init] *ERROR* Selecting channel failed [ 437.086083][ T5198] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 437.143403][ T5198] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 437.184276][ T1145] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 437.196549][ T5198] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 437.225140][ T1145] [drm] Initialized udl on minor 2 [ 437.230833][ T5198] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 437.252854][ T1145] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 437.253091][ T5198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.280541][ T25] usb 4-1: USB disconnect, device number 42 [ 437.285560][ T1145] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 437.313712][ T5159] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 437.341077][ T5198] usb 6-1: Product:  [ 437.354025][ T5198] usb 6-1: Manufacturer: 뫹ꈮ벂脦篕槉⬐঻⥆훺沫粌ᘕ㒸寪쭢䐞撚괄툽ꚱ擅⻞邙孒둒銈瓳鄠ఄ྽ꠒᝋ濇ְ诳㲛쟿틁⍯溞衮䯞蕎쪗埼㣜郛貤擃ҩⲇ⼬颓혆㝟篧 [ 437.385327][ T5159] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 437.413503][ T1145] usb 3-1: USB disconnect, device number 61 [ 437.434050][ T5159] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 437.455535][ T5198] usb 6-1: SerialNumber: syz [ 437.944604][T11334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.985166][T11334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.042556][T10149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.066535][ T5198] cdc_ncm 6-1:1.0: bind() failure [ 438.095602][ T5198] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 438.131292][ T5198] cdc_ncm 6-1:1.1: bind() failure [ 438.191181][ T5198] usb 6-1: USB disconnect, device number 43 [ 439.965185][T11386] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2090'. [ 440.028529][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2090'. [ 440.863886][ T5164] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 441.220677][ T5164] usb 5-1: Using ep0 maxpacket: 16 [ 441.411965][ T5164] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 441.536327][ T5164] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 441.646277][ T5164] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 441.715591][ T5164] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 441.778473][ T5164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.831901][ T5164] usb 5-1: Product:  [ 441.843580][ T5164] usb 5-1: Manufacturer: 뫹ꈮ벂脦篕槉⬐঻⥆훺沫粌ᘕ㒸寪쭢䐞撚괄툽ꚱ擅⻞邙孒둒銈瓳鄠ఄ྽ꠒᝋ濇ְ诳㲛쟿틁⍯溞衮䯞蕎쪗埼㣜郛貤擃ҩⲇ⼬颓혆㝟篧 [ 441.899734][ T5164] usb 5-1: SerialNumber: syz [ 442.054368][ T25] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 442.252359][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 442.287874][ T25] usb 1-1: not running at top speed; connect to a high speed hub [ 442.342856][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.356876][T11413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.374649][T11413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.384047][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 442.405558][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 442.421355][ T25] usb 1-1: string descriptor 0 read error: -22 [ 442.434016][ T25] usb 1-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.40 [ 442.443107][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.458399][ T5164] cdc_ncm 5-1:1.0: bind() failure [ 442.514978][ T5164] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 442.553730][ T5164] cdc_ncm 5-1:1.1: bind() failure [ 442.589754][ T5164] usb 5-1: USB disconnect, device number 31 [ 443.883861][ T25] usbhid 1-1:1.0: can't add hid device: -71 [ 443.902084][ T25] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 443.916847][ T25] usb 1-1: USB disconnect, device number 44 [ 446.183383][T11515] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2140'. [ 446.242205][T11515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2140'. [ 448.714626][ T5159] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 448.928443][ T5159] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 448.953877][ T5159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.969856][ T5159] usb 4-1: config 0 descriptor?? [ 449.054133][ T5164] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 449.144693][ T1145] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 449.264595][ T5159] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 449.279285][ T5164] usb 5-1: Using ep0 maxpacket: 8 [ 449.299613][ T5159] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 449.311201][ T5164] usb 5-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 449.322090][ T5164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.345277][ T5159] [drm:udl_init] *ERROR* Selecting channel failed [ 449.365176][ T5164] usb 5-1: config 0 descriptor?? [ 449.388986][ T1145] usb 2-1: unable to get BOS descriptor or descriptor too short [ 449.398348][ T5164] ums-alauda 5-1:0.0: USB Mass Storage device detected [ 449.420557][ T1145] usb 2-1: not running at top speed; connect to a high speed hub [ 449.428490][ T5157] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 449.443489][ T5159] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 449.460000][ T1145] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.484656][ T5159] [drm] Initialized udl on minor 2 [ 449.498845][ T5159] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 449.528886][ T1145] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 449.540914][ T5159] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 449.554899][ T5164] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 449.571407][ T5164] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 449.594094][ T1145] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 449.610413][ T5159] usb 4-1: USB disconnect, device number 43 [ 449.619667][ T5164] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 449.631838][ T5078] usb 5-1: USB disconnect, device number 32 [ 449.644347][ T1145] usb 2-1: string descriptor 0 read error: -22 [ 449.659971][ T1145] usb 2-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.40 [ 449.683856][ T5157] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 449.692946][ T5157] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.708934][T11597] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2174'. [ 449.721605][ T1145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.736539][ T5157] usb 6-1: config 0 descriptor?? [ 449.757267][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 450.035050][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.241132][ T29] audit: type=1326 audit(1719295895.450:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11602 comm="syz.2.2176" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc165175d39 code=0x0 [ 450.301580][ T1145] usbhid 2-1:1.0: can't add hid device: -71 [ 450.350635][ T1145] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 450.406680][ T5157] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 450.417095][ T1145] usb 2-1: USB disconnect, device number 45 [ 450.462283][ T5157] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 450.477682][ T5157] [drm:udl_init] *ERROR* Selecting channel failed [ 450.552229][ T5157] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 450.588579][ T5157] [drm] Initialized udl on minor 2 [ 450.598971][ T5157] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 450.614121][ T5157] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 450.614847][ T5161] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 450.633096][ T5159] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 450.655763][ T5157] usb 6-1: USB disconnect, device number 44 [ 450.667144][ T5159] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 450.833710][ T5161] usb 3-1: device descriptor read/64, error -71 [ 451.117865][ T5161] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 451.313680][ T5161] usb 3-1: device descriptor read/64, error -71 [ 451.446194][ T5161] usb usb3-port1: attempt power cycle [ 451.883686][ T5161] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 451.964924][ T5161] usb 3-1: device descriptor read/8, error -71 [ 452.243691][ T5161] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 452.284982][ T5097] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 452.306227][ T5097] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 452.314616][ T5161] usb 3-1: device descriptor read/8, error -71 [ 452.326712][ T5097] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 452.347722][ T5097] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 452.363945][ T5097] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 452.371857][ T5097] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 452.435515][ T5161] usb usb3-port1: unable to enumerate USB device [ 452.515388][ T2872] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.720040][T11635] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2188'. [ 452.867306][ T2872] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.933258][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2188'. [ 453.133882][ T2872] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.164260][ T5161] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 453.363730][ T5161] usb 2-1: Using ep0 maxpacket: 8 [ 453.375472][ T5161] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 453.394235][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.430204][ T2872] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.445485][ T5161] usb 2-1: config 0 descriptor?? [ 453.461716][ T5161] ums-alauda 2-1:0.0: USB Mass Storage device detected [ 453.661920][ T5161] usb 2-1: USB disconnect, device number 46 [ 454.434477][ T5097] Bluetooth: hci5: command tx timeout [ 454.504820][ T5198] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 454.730447][ T2872] bridge_slave_1: left allmulticast mode [ 454.736485][ T5198] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 454.775644][ T2872] bridge_slave_1: left promiscuous mode [ 454.781480][ T5198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.816976][ T2872] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.854657][ T5198] usb 5-1: config 0 descriptor?? [ 454.867093][ T2872] bridge_slave_0: left allmulticast mode [ 454.899224][ T2872] bridge_slave_0: left promiscuous mode [ 454.934179][ T2872] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.247496][ T5198] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 455.284581][ T5198] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 455.306628][ T5198] [drm:udl_init] *ERROR* Selecting channel failed [ 455.392744][ T5198] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 455.442166][ T5198] [drm] Initialized udl on minor 2 [ 455.471070][ T5198] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 455.504428][ T5198] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 455.514873][ T25] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 455.553035][ T25] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 455.562147][ T5198] usb 5-1: USB disconnect, device number 33 [ 455.578291][ T25] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 455.878775][ T5158] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 456.097358][ T5158] usb 1-1: Using ep0 maxpacket: 16 [ 456.116253][ T5158] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 456.145920][ T5158] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 456.177447][ T5158] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 456.196087][ T5158] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 456.205343][ T5158] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.213424][ T5158] usb 1-1: Product:  [ 456.219004][ T5158] usb 1-1: Manufacturer: 뫹ꈮ벂脦篕槉⬐঻⥆훺沫粌ᘕ㒸寪쭢䐞撚괄툽ꚱ擅⻞邙孒둒銈瓳鄠ఄ྽ꠒᝋ濇ְ诳㲛쟿틁⍯溞衮䯞蕎쪗埼㣜郛貤擃ҩⲇ⼬颓혆㝟篧 [ 456.253754][ T5158] usb 1-1: SerialNumber: syz [ 456.266393][ T5159] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 456.343040][T11717] loop5: detected capacity change from 0 to 128 [ 456.372352][T11717] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 456.507879][ T5159] usb 3-1: Using ep0 maxpacket: 8 [ 456.514412][ T5097] Bluetooth: hci5: command tx timeout [ 456.541671][ T5159] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 456.553419][ T5159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.586991][ T5159] usb 3-1: config 0 descriptor?? [ 456.601101][ T5159] ums-alauda 3-1:0.0: USB Mass Storage device detected [ 456.726453][ T2872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.741577][T11697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.751161][T11697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.764650][ T5158] cdc_ncm 1-1:1.0: bind() failure [ 456.780913][ T5158] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 456.781005][ T5158] cdc_ncm 1-1:1.1: bind() failure [ 456.810564][ T2872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.811701][ T5158] usb 1-1: USB disconnect, device number 45 [ 456.835268][ T2872] bond0 (unregistering): Released all slaves [ 457.040490][ T5161] usb 3-1: USB disconnect, device number 66 [ 457.060947][T11628] chnl_net:caif_netlink_parms(): no params data found [ 458.300115][ T2872] hsr_slave_0: left promiscuous mode [ 458.303648][ T1145] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 458.315773][ T5159] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 458.346817][ T2872] hsr_slave_1: left promiscuous mode [ 458.380654][ T2872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.403702][ T2872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.445850][ T2872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.453305][ T2872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.554105][ T5159] usb 5-1: Using ep0 maxpacket: 16 [ 458.562301][ T1145] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 458.573012][ T1145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.585270][ T5097] Bluetooth: hci5: command tx timeout [ 458.592726][ T5159] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 458.626448][ T1145] usb 1-1: config 0 descriptor?? [ 458.631480][ T5159] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 458.647534][ T5159] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 458.666953][ T5159] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 458.683595][ T5159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.694385][ T2872] veth1_macvtap: left promiscuous mode [ 458.702170][ T5159] usb 5-1: Product: syz [ 458.712046][ T5159] usb 5-1: Manufacturer: syz [ 458.719792][ T2872] veth0_macvtap: left promiscuous mode [ 458.744431][ T2872] veth1_vlan: left promiscuous mode [ 458.763829][ T5159] usb 5-1: SerialNumber: syz [ 458.767021][ T2872] veth0_vlan: left promiscuous mode [ 458.992871][ T1145] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 459.029436][ T1145] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 459.054815][ T1145] [drm:udl_init] *ERROR* Selecting channel failed [ 459.182143][ T1145] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 459.232206][ T1145] [drm] Initialized udl on minor 2 [ 459.264289][ T1145] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 459.280487][ T1145] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 459.314099][ T5078] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 459.322686][ T1145] usb 1-1: USB disconnect, device number 46 [ 459.355499][ T5078] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 459.756029][ T5161] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 459.966108][ T5161] usb 2-1: Using ep0 maxpacket: 8 [ 459.997949][ T5161] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 460.022187][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.077767][ T5161] usb 2-1: config 0 descriptor?? [ 460.099130][ T5161] ums-alauda 2-1:0.0: USB Mass Storage device detected [ 460.664112][ T5106] Bluetooth: hci5: command tx timeout [ 461.128903][ T2872] team0 (unregistering): Port device team_slave_1 removed [ 461.239834][ T2872] team0 (unregistering): Port device team_slave_0 removed [ 461.871516][T11774] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2236'. [ 461.963667][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2236'. [ 461.992346][ T5159] usb 5-1: 0:2 : does not exist [ 462.077892][ T5078] usb 2-1: USB disconnect, device number 47 [ 462.135240][ T5159] usb 5-1: USB disconnect, device number 34 [ 462.344095][ T5106] Bluetooth: hci4: command 0x0406 tx timeout [ 462.382040][T11628] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.426813][T11628] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.451762][T11628] bridge_slave_0: entered allmulticast mode [ 462.464533][T11628] bridge_slave_0: entered promiscuous mode [ 462.488846][ T5240] udevd[5240]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.490898][T11628] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.513972][T11628] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.522046][T11628] bridge_slave_1: entered allmulticast mode [ 462.540026][T11628] bridge_slave_1: entered promiscuous mode [ 462.845172][T11628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.919990][T11628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.020111][T11827] ------------[ cut here ]------------ [ 463.025728][T11827] strnlen: detected buffer overflow: 17 byte read of buffer size 16 [ 463.102244][T11827] WARNING: CPU: 1 PID: 11827 at lib/string_helpers.c:1029 __fortify_report+0x9c/0xd0 [ 463.112071][T11827] Modules linked in: [ 463.116107][T11827] CPU: 1 PID: 11827 Comm: syz.4.2250 Not tainted 6.10.0-rc5-syzkaller-00012-g626737a5791b #0 [ 463.126574][T11827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 463.137086][T11827] RIP: 0010:__fortify_report+0x9c/0xd0 [ 463.142785][T11827] Code: ed 48 c7 c0 20 c9 8f 8b 48 0f 44 d8 e8 8d 53 0b fd 4d 89 e0 48 89 ea 48 89 d9 4c 89 f6 48 c7 c7 a0 c9 8f 8b e8 e5 6e cd fc 90 <0f> 0b 90 90 5b 5d 41 5c 41 5d 41 5e e9 3e 67 8c 06 48 89 de 48 c7 [ 463.162684][T11827] RSP: 0018:ffffc90009667bf0 EFLAGS: 00010286 [ 463.169035][T11827] RAX: 0000000000000000 RBX: ffffffff8b8fc920 RCX: ffffc9000ef83000 [ 463.177103][T11827] RDX: 0000000000040000 RSI: ffffffff81514a46 RDI: 0000000000000001 [ 463.185147][T11827] RBP: 0000000000000011 R08: 0000000000000001 R09: 0000000000000000 [ 463.193139][T11827] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000010 [ 463.201377][T11827] R13: 0000000000000000 R14: ffffffff8b8fd2e0 R15: ffff88802fd0a060 [ 463.209416][T11827] FS: 00007f400d9476c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 463.218821][T11827] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.225501][T11827] CR2: 0000001b31f16ff8 CR3: 000000006eac2000 CR4: 0000000000350ef0 [ 463.233487][T11827] Call Trace: [ 463.236848][T11827] [ 463.239999][T11827] ? show_regs+0x8c/0xa0 [ 463.244339][T11827] ? __warn+0xe5/0x3c0 [ 463.248429][T11827] ? __fortify_report+0x9c/0xd0 [ 463.253480][T11827] ? report_bug+0x3c0/0x580 [ 463.258150][T11827] ? handle_bug+0x3d/0x70 [ 463.262515][T11827] ? exc_invalid_op+0x17/0x50 [ 463.267300][T11827] ? asm_exc_invalid_op+0x1a/0x20 [ 463.272368][T11827] ? __warn_printk+0x1a6/0x350 [ 463.277241][T11827] ? __fortify_report+0x9c/0xd0 [ 463.282116][T11827] __fortify_panic+0x23/0x30 [ 463.286995][T11827] __ext4_ioctl+0x404d/0x4580 [ 463.291697][T11827] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 463.297763][T11827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.303414][T11827] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 463.309406][T11827] ? __pfx___ext4_ioctl+0x10/0x10 [ 463.314530][T11827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.320180][T11827] ? do_vfs_ioctl+0x515/0x1ad0 [ 463.325029][T11827] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 463.330079][T11827] ? kasan_quarantine_put+0x10a/0x240 [ 463.335556][T11827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.341457][T11827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.347192][T11827] ? __pfx_do_sys_openat2+0x10/0x10 [ 463.352430][T11827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.358190][T11827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.363917][T11827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.369573][T11827] ? __pfx_ext4_ioctl+0x10/0x10 [ 463.374533][T11827] __x64_sys_ioctl+0x196/0x220 [ 463.379358][T11827] do_syscall_64+0xcd/0x250 [ 463.384253][T11827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.390188][T11827] RIP: 0033:0x7f400cb75d39 [ 463.394867][T11827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.414578][T11827] RSP: 002b:00007f400d947048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.423007][T11827] RAX: ffffffffffffffda RBX: 00007f400cd03fa0 RCX: 00007f400cb75d39 [ 463.431043][T11827] RDX: 0000000020002700 RSI: 0000000081009431 RDI: 0000000000000003 [ 463.439090][T11827] RBP: 00007f400cbf6766 R08: 0000000000000000 R09: 0000000000000000 [ 463.447349][T11827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.455403][T11827] R13: 000000000000000b R14: 00007f400cd03fa0 R15: 00007ffe3bf501b8 [ 463.463401][T11827] [ 463.466499][T11827] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 463.473791][T11827] CPU: 1 PID: 11827 Comm: syz.4.2250 Not tainted 6.10.0-rc5-syzkaller-00012-g626737a5791b #0 [ 463.483971][T11827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 463.494031][T11827] Call Trace: [ 463.497309][T11827] [ 463.500238][T11827] dump_stack_lvl+0x3d/0x1f0 [ 463.504850][T11827] panic+0x6f5/0x7a0 [ 463.508768][T11827] ? __pfx_panic+0x10/0x10 [ 463.513198][T11827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.518845][T11827] ? show_trace_log_lvl+0x363/0x500 [ 463.524091][T11827] ? __fortify_report+0x9c/0xd0 [ 463.528964][T11827] check_panic_on_warn+0xab/0xb0 [ 463.533956][T11827] __warn+0xf1/0x3c0 [ 463.537872][T11827] ? __fortify_report+0x9c/0xd0 [ 463.542735][T11827] report_bug+0x3c0/0x580 [ 463.547084][T11827] handle_bug+0x3d/0x70 [ 463.551264][T11827] exc_invalid_op+0x17/0x50 [ 463.555795][T11827] asm_exc_invalid_op+0x1a/0x20 [ 463.560675][T11827] RIP: 0010:__fortify_report+0x9c/0xd0 [ 463.566147][T11827] Code: ed 48 c7 c0 20 c9 8f 8b 48 0f 44 d8 e8 8d 53 0b fd 4d 89 e0 48 89 ea 48 89 d9 4c 89 f6 48 c7 c7 a0 c9 8f 8b e8 e5 6e cd fc 90 <0f> 0b 90 90 5b 5d 41 5c 41 5d 41 5e e9 3e 67 8c 06 48 89 de 48 c7 [ 463.585769][T11827] RSP: 0018:ffffc90009667bf0 EFLAGS: 00010286 [ 463.591844][T11827] RAX: 0000000000000000 RBX: ffffffff8b8fc920 RCX: ffffc9000ef83000 [ 463.599819][T11827] RDX: 0000000000040000 RSI: ffffffff81514a46 RDI: 0000000000000001 [ 463.607794][T11827] RBP: 0000000000000011 R08: 0000000000000001 R09: 0000000000000000 [ 463.615769][T11827] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000010 [ 463.623752][T11827] R13: 0000000000000000 R14: ffffffff8b8fd2e0 R15: ffff88802fd0a060 [ 463.631779][T11827] ? __warn_printk+0x1a6/0x350 [ 463.636575][T11827] __fortify_panic+0x23/0x30 [ 463.641182][T11827] __ext4_ioctl+0x404d/0x4580 [ 463.645881][T11827] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 463.651874][T11827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.657519][T11827] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 463.663431][T11827] ? __pfx___ext4_ioctl+0x10/0x10 [ 463.668468][T11827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.674115][T11827] ? do_vfs_ioctl+0x515/0x1ad0 [ 463.678903][T11827] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 463.683948][T11827] ? kasan_quarantine_put+0x10a/0x240 [ 463.689347][T11827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.695009][T11827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.700655][T11827] ? __pfx_do_sys_openat2+0x10/0x10 [ 463.705880][T11827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.711531][T11827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.717174][T11827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.722821][T11827] ? __pfx_ext4_ioctl+0x10/0x10 [ 463.727688][T11827] __x64_sys_ioctl+0x196/0x220 [ 463.732479][T11827] do_syscall_64+0xcd/0x250 [ 463.737009][T11827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.742929][T11827] RIP: 0033:0x7f400cb75d39 [ 463.747350][T11827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.766970][T11827] RSP: 002b:00007f400d947048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.775400][T11827] RAX: ffffffffffffffda RBX: 00007f400cd03fa0 RCX: 00007f400cb75d39 [ 463.783379][T11827] RDX: 0000000020002700 RSI: 0000000081009431 RDI: 0000000000000003 [ 463.791353][T11827] RBP: 00007f400cbf6766 R08: 0000000000000000 R09: 0000000000000000 [ 463.799328][T11827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.807304][T11827] R13: 000000000000000b R14: 00007f400cd03fa0 R15: 00007ffe3bf501b8 [ 463.815298][T11827] [ 463.818431][T11827] Kernel Offset: disabled [ 463.822802][T11827] Rebooting in 86400 seconds..