last executing test programs: 2m1.322816241s ago: executing program 3 (id=4): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x2, 0x638, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x19, 0xd, "ef359f413bb9385d29c2ee5e0ff8ee09e737fffedf110ff4117639c3eb4778c63b00000000000000aafab4afaadccfa3f6a00400", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x10000000]}) 2m0.862827643s ago: executing program 3 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$binder(&(0x7f0000511000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xa00000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_usb_connect$uac3(0x5, 0xb1, &(0x7f0000000600)=ANY=[@ANYBLOB="c0010102000000401e04df3040000102030109029f0003017fc008080b0001010130630904000000010130000a2401083b00a6f00000092410020a"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 2m0.119730364s ago: executing program 3 (id=9): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x1537, &(0x7f0000001140)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x40004) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$eJzs3E9vVFUbAPDn3k5LS/vS8ubNqxATmxjUaBwKJZiwAtdGTXThktpOSdPhj21NbMOi4F5dGOOCxPARTNzLxpWJC1wofgJiJIboBliMufOnjEyn1DLtgfL7JWfuOXNm7vM8c2HuucncBvDUGi8e8ogDEXE6ixhtPp9HxEC9Nxix2njd3dsXp4uWRa327h9ZZBFx5/bF6da+suZ2uDkYjIjrb2Tx30864y4ur8xPVauVheb48NLZC4cXl1demzs7daZypnLu2OTrxyaPT072sNabFz746rmf3nrx8tVPJ97+ct8PWZyMkeZcex29Mh7ja59Ju1JETPU6WCJ9zXra68xKCRMCAGBDedsa7v8xGn1xf/E2Gt//nDQ5AAAAoCdqfRE1AAAAYJfLXP8DAADALtf6HcCd2xenWy3tLxJ21q1TETHWqL91f3NjphSr9e1g9EfE3j+zaL+tNWu87ZGNF5G+/bFStNim+5A3snopIp5d7/hn9frH6ndxd9afR8RED+KPPzB+kuo/2YP4qesH4Ol07VTjRNZ5/svX1j+xzvmvtM65aytSn/9a67+7Heu/+/X3dVn/vbPJGAfvvXK921z7+u/9z36dKeIX20cq6l+4dSniYGm9+rO1+rMu9Z/eZIzh6ZtXus0V9Rf1ttpO11+7GnGovprrrL8l2+jvEx2enatWJhqP6+x/+fjG8duPf9GK+K1rgZ1QHP+9sbXjf2GTMcae+f1At7mH15//NpC9V+8NNJ/5eGppaeFIxED2ZufzRzfOpfWa1j6K+l9+YeP//+vVX3wnrDY/h+Jfz6XmthhffiDm8KGj32y9/u1V1D+zxeP/+SZjfP3dlQ+7zaWuHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnQx4RI5Hl5bV+npfLEcMR8b/Ym1fPLy69Onv+o3MzxVzEWPTns3PVykREjDbGWTE+Uu/fHx99YDwZEfsj4ovRofq4PH2+OpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANYMR8RIZHk5IvKI+Gs0z8vl1FkBAAAAPTeWOgEAAABg27n+BwAAgN2v4/q/9I/R4E7mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK60//lrN7KIWD0xVG+FgeZcf9LMgO2Wp04ASKYvdQJAMqW2fq1WqyVMBdhhrvGB7CHzg11n9vQ8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeXy8duHYji4jVE0P1VhhozvUnzQzYbnnqBIBk+jaazHYuD2DnlVInACTjGh9oLPXv1Ro65we7vnPPdqYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGNmpN6yvBwReb2f5+VyxH8iYiz6s9m5amUiIvZFxC+j/XuK8ZHUSQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBzi8sr81PVamVBR0enh52heCzS2HIn9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLC6vzE9Vq5WFxdSZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKktLq/MT1WrlYVt7KSuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdP4OAAD//1rfDrQ=") r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000480)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x1, 0x3a, 'usr\x00qjota=S98[\x86\x86\xb2\xe0qo\x91%\x04\x8b\xa1\x8a\x0f\xc1\x0f\xddP\x84\xf5\x1a_\x00\\\x15\xa8\x17\xce\x84\x1d\x92\x13\xdd2\xfdL\xff\x9a\x9cF\b;JY\x0f\x0f\x7f\x9d\xad\xdb\x8d:\x15\x82\xdfr\xcf2\x04\xcf\xe5M{@\x93\xd5}\xc0,\xe9\x04\x83\x1eQ\xc0\x03=\xc2\x05y\xbf\x1dc\xbd\xeck\xde\xd5\xfa\x9dP2\xc7\x85\x87\x8a/\x1fI\x92\xb6\xc6\xfe\xad\xf9\xf9]DP\x9f\xfd\xa0\xd0\xc4\xfb\xbc\x94\xb8\xce\xb6\x0eb\x06)\xe9\xf1X\aE\xf1\x7fkp\xe5\xbc\xd6#\xbf\xab\x82\x99\xd2\xafC\xe2*\xda\xf8', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x3a, [0x46]}, 0x1e8) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 1m59.658514695s ago: executing program 32 (id=9): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x1537, &(0x7f0000001140)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x40004) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000480)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x1, 0x3a, 'usr\x00qjota=S98[\x86\x86\xb2\xe0qo\x91%\x04\x8b\xa1\x8a\x0f\xc1\x0f\xddP\x84\xf5\x1a_\x00\\\x15\xa8\x17\xce\x84\x1d\x92\x13\xdd2\xfdL\xff\x9a\x9cF\b;JY\x0f\x0f\x7f\x9d\xad\xdb\x8d:\x15\x82\xdfr\xcf2\x04\xcf\xe5M{@\x93\xd5}\xc0,\xe9\x04\x83\x1eQ\xc0\x03=\xc2\x05y\xbf\x1dc\xbd\xeck\xde\xd5\xfa\x9dP2\xc7\x85\x87\x8a/\x1fI\x92\xb6\xc6\xfe\xad\xf9\xf9]DP\x9f\xfd\xa0\xd0\xc4\xfb\xbc\x94\xb8\xce\xb6\x0eb\x06)\xe9\xf1X\aE\xf1\x7fkp\xe5\xbc\xd6#\xbf\xab\x82\x99\xd2\xafC\xe2*\xda\xf8', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x3a, [0x46]}, 0x1e8) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 7.932113836s ago: executing program 1 (id=656): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="e9ecdcb0a336629600000000000000002001040000004b00000000000000000064010102000000000000000000000000000000050000000302002000000000f2", @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d23c"], 0xfc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x7) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000004600), 0x0) 5.961640968s ago: executing program 1 (id=661): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlink(&(0x7f0000000600)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000ec0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='dummy_udc.0', 0xb) 5.405506855s ago: executing program 5 (id=665): r0 = inotify_init1(0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2008800, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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") inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x90) getdents64(r1, 0x0, 0x0) 5.209372132s ago: executing program 1 (id=666): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x60, 0xff}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x8, 0xffffffffbfffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0xfffffffe, 0x0, 0x796}, 0x1, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74bc}, 0x0, 0x1a0b0}, [@mark={0xc, 0x15, {0x35075c}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40040}, 0x8080) 5.111449792s ago: executing program 2 (id=668): socket$nl_route(0x10, 0x3, 0x0) unshare(0x28000600) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) mount$9p_xen(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x28100a0, 0x0) 4.949149359s ago: executing program 0 (id=670): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 4.782881963s ago: executing program 1 (id=671): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x0, 0x577, &(0x7f0000000640)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000001ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@broadcast, @random="fdf9a684a51b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x28, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local, [{0x2, 0x1, "042788ca7c5f"}, {0x2, 0x1, "562f7ff4783b"}]}}}}}}, 0x0) 4.731167492s ago: executing program 4 (id=673): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = dup(0xffffffffffffffff) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x102, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, 0x0, 0x6c804) 4.564781908s ago: executing program 5 (id=674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 4.395954024s ago: executing program 6 (id=675): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") dup3(r1, r0, 0x0) 4.32370678s ago: executing program 0 (id=676): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.248258387s ago: executing program 2 (id=677): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0) 4.012192394s ago: executing program 5 (id=678): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setpriority(0x1, 0x0, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x0, 0x5, 0x3c5b, 0x7d, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x9, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x2, 0x9, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0x15f, 0x129432e2, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x6, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0x2ea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0xd37, 0x5, 0x4, 0x1b, 0x2000004, 0x9, 0x80000002, 0x9, 0x6, 0x147, 0x8200, 0x1, 0x8, 0x8, 0xffffffff, 0x20000004, 0x4, 0x3, 0x50, 0x2, 0xc, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x16, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x4cf, 0x0, 0x8, 0xb, 0x1, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e8, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x2000000c, 0x8000004, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1003, 0x6d, 0x7, 0xa9, 0x4005, 0x6, 0x4006, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x80, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ee, 0x4, 0xb], [0x8001, 0xbb33, 0x6, 0xa, 0x1, 0x2, 0x5, 0x0, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x17, 0x9, 0x1, 0x80000001, 0x10000, 0x2000004, 0x7fff, 0x80, 0xa620, 0x2, 0xfffffffe, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0xb, 0x9602, 0xc, 0xaf, 0x5, 0x6, 0x22a, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x6, 0x1, 0x59, 0x0, 0x4, 0x7a, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.455505588s ago: executing program 5 (id=679): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlink(&(0x7f0000000600)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000ec0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='dummy_udc.0', 0xb) 3.424246112s ago: executing program 4 (id=680): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="1c005e800800020001000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 3.30380873s ago: executing program 0 (id=681): r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7fffffff) ftruncate(r0, 0x2007ffb) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 3.233066232s ago: executing program 6 (id=682): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001020000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.222687798s ago: executing program 1 (id=683): syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c24", @ANYRES16=0x0], 0x0) 2.791642914s ago: executing program 4 (id=684): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x11, 0xa, 0x101) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, 0x0, 0x0) 2.784415543s ago: executing program 6 (id=685): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) mount$nfs(0x0, &(0x7f0000000640)='.\x00', 0x0, 0x0, &(0x7f0000000340)) accept$inet(r0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) 2.76798817s ago: executing program 5 (id=686): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlink(&(0x7f0000000600)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000ec0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='\n', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 2.738720841s ago: executing program 2 (id=687): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @aes128, 0x1, '\x00', @c}) 2.54741785s ago: executing program 0 (id=688): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081130000bfa30000000000000703000000feffff720af0fff8ffffff79a4f0ff0000000071103800000000001d300500000000004714000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 2.547211842s ago: executing program 4 (id=689): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@errors_remount}, {@barrier}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="4b000000020000000b0000003f00"], 0x36f0516f) 2.507392695s ago: executing program 2 (id=690): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.47170806s ago: executing program 5 (id=691): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000050000000200000000000008000000000000"], 0x0, 0x29, 0x0, 0x1}, 0x28) syz_usb_connect(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) removexattr(0x0, &(0x7f0000000180)=@random={'user.', 'sysfs\x00'}) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_hcd.0\x00', 0xb) 2.243581082s ago: executing program 6 (id=692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getresgid(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x92}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000010000000100010001000000010000000700000007442cc05000000000000000010000ee"], 0x88}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}}, 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) 2.243392996s ago: executing program 4 (id=693): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.211052219s ago: executing program 2 (id=694): r0 = socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) 2.085311975s ago: executing program 0 (id=695): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) unshare(0x4000480) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000400), 0x88802, 0x0) splice(r1, 0x0, r0, 0x0, 0x8, 0x9) 1.107712855s ago: executing program 2 (id=696): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x0, 0x577, &(0x7f0000000640)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@broadcast, @random="fdf9a684a51b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x28, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local, [{0x2, 0x1, "042788ca7c5f"}, {0x2, 0x1, "562f7ff4783b"}]}}}}}}, 0x0) 1.107433314s ago: executing program 6 (id=697): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001020000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.106247455s ago: executing program 4 (id=698): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000280)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) 774.680693ms ago: executing program 6 (id=699): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlink(&(0x7f0000000600)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000ec0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='dummy_udc.0', 0xb) 743.31687ms ago: executing program 0 (id=700): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/82, 0x0, 0x41000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=701): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) semop(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. [ 91.916771][ T5605] cgroup: Unknown subsys name 'net' [ 92.064485][ T5605] cgroup: Unknown subsys name 'cpuset' [ 92.074404][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.820751][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.477273][ T9] cfg80211: failed to load regulatory.db [ 96.605608][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.616976][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.629543][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.638639][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.653003][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.656117][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.661151][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.680170][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.692775][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.704091][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.705288][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.727103][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.735721][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 96.744275][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.756867][ T5641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 96.756889][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.765109][ T5641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 96.771477][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.781675][ T5641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 96.787966][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.793670][ T5641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.801474][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.825120][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.836997][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.837799][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.854810][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.863870][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.885919][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.897028][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.916750][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.789561][ T5628] Bluetooth: hci1: command tx timeout [ 98.869645][ T5628] Bluetooth: hci5: command tx timeout [ 98.949296][ T5628] Bluetooth: hci4: command tx timeout [ 98.955238][ T5624] Bluetooth: hci2: command tx timeout [ 98.961101][ T5623] Bluetooth: hci0: command tx timeout [ 99.029310][ T5623] Bluetooth: hci3: command tx timeout [ 99.636631][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.645145][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.653009][ T5620] bridge_slave_0: entered allmulticast mode [ 99.662866][ T5620] bridge_slave_0: entered promiscuous mode [ 99.758011][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.765616][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.774883][ T5620] bridge_slave_1: entered allmulticast mode [ 99.783096][ T5620] bridge_slave_1: entered promiscuous mode [ 99.802880][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.810195][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.817512][ T5627] bridge_slave_0: entered allmulticast mode [ 99.825647][ T5627] bridge_slave_0: entered promiscuous mode [ 99.900669][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.907896][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.915429][ T5627] bridge_slave_1: entered allmulticast mode [ 99.923896][ T5627] bridge_slave_1: entered promiscuous mode [ 99.932077][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.939325][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.946850][ T5619] bridge_slave_0: entered allmulticast mode [ 99.955208][ T5619] bridge_slave_0: entered promiscuous mode [ 100.001542][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.024987][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.032309][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.039667][ T5619] bridge_slave_1: entered allmulticast mode [ 100.047483][ T5619] bridge_slave_1: entered promiscuous mode [ 100.094129][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.176776][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.208562][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.215907][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.223545][ T5621] bridge_slave_0: entered allmulticast mode [ 100.231470][ T5621] bridge_slave_0: entered promiscuous mode [ 100.267948][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.281513][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.304123][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.313742][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.321597][ T5621] bridge_slave_1: entered allmulticast mode [ 100.330140][ T5621] bridge_slave_1: entered promiscuous mode [ 100.348354][ T5620] team0: Port device team_slave_0 added [ 100.372409][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.429511][ T5620] team0: Port device team_slave_1 added [ 100.452420][ T5627] team0: Port device team_slave_0 added [ 100.473756][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.481041][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.488307][ T5626] bridge_slave_0: entered allmulticast mode [ 100.497620][ T5626] bridge_slave_0: entered promiscuous mode [ 100.549500][ T5627] team0: Port device team_slave_1 added [ 100.569261][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.576982][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.586844][ T5626] bridge_slave_1: entered allmulticast mode [ 100.595175][ T5626] bridge_slave_1: entered promiscuous mode [ 100.605352][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.614707][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.622746][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.630398][ T5622] bridge_slave_0: entered allmulticast mode [ 100.638783][ T5622] bridge_slave_0: entered promiscuous mode [ 100.677246][ T5619] team0: Port device team_slave_0 added [ 100.701151][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.724379][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.731734][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.739740][ T5622] bridge_slave_1: entered allmulticast mode [ 100.748153][ T5622] bridge_slave_1: entered promiscuous mode [ 100.756827][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.764099][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.791949][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.822376][ T5619] team0: Port device team_slave_1 added [ 100.868979][ T5623] Bluetooth: hci1: command tx timeout [ 100.886594][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.893867][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.920217][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.932556][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.939855][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.966233][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.971350][ T5623] Bluetooth: hci5: command tx timeout [ 100.998661][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.011313][ T5621] team0: Port device team_slave_0 added [ 101.021336][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.030869][ T5623] Bluetooth: hci0: command tx timeout [ 101.030926][ T5623] Bluetooth: hci4: command tx timeout [ 101.036432][ T5628] Bluetooth: hci2: command tx timeout [ 101.070056][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.077171][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.103770][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.114978][ T5628] Bluetooth: hci3: command tx timeout [ 101.141653][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.153794][ T5621] team0: Port device team_slave_1 added [ 101.176221][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.219057][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.226338][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.252658][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.296292][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.303387][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.329753][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.344093][ T5622] team0: Port device team_slave_0 added [ 101.357161][ T5622] team0: Port device team_slave_1 added [ 101.364168][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.371285][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.398096][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.441339][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.448555][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.474944][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.528001][ T5626] team0: Port device team_slave_0 added [ 101.590778][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.597802][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.624200][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.638419][ T5626] team0: Port device team_slave_1 added [ 101.652419][ T5620] hsr_slave_0: entered promiscuous mode [ 101.660380][ T5620] hsr_slave_1: entered promiscuous mode [ 101.676810][ T5627] hsr_slave_0: entered promiscuous mode [ 101.683806][ T5627] hsr_slave_1: entered promiscuous mode [ 101.690588][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 101.696484][ T5627] Cannot create hsr debugfs directory [ 101.706169][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.713283][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.739686][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.782715][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.790131][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.816328][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.896113][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.903448][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.929550][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.961908][ T5619] hsr_slave_0: entered promiscuous mode [ 101.968673][ T5619] hsr_slave_1: entered promiscuous mode [ 101.975755][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 101.981529][ T5619] Cannot create hsr debugfs directory [ 102.011488][ T5621] hsr_slave_0: entered promiscuous mode [ 102.018458][ T5621] hsr_slave_1: entered promiscuous mode [ 102.025118][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 102.031141][ T5621] Cannot create hsr debugfs directory [ 102.220167][ T5622] hsr_slave_0: entered promiscuous mode [ 102.226931][ T5622] hsr_slave_1: entered promiscuous mode [ 102.233812][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 102.240074][ T5622] Cannot create hsr debugfs directory [ 102.380257][ T5626] hsr_slave_0: entered promiscuous mode [ 102.387028][ T5626] hsr_slave_1: entered promiscuous mode [ 102.394531][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 102.401081][ T5626] Cannot create hsr debugfs directory [ 102.949819][ T5628] Bluetooth: hci1: command tx timeout [ 103.023020][ T5627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.030787][ T5628] Bluetooth: hci5: command tx timeout [ 103.043443][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.055475][ T5627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.068717][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.077291][ T5627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.088594][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.109024][ T5628] Bluetooth: hci0: command tx timeout [ 103.110379][ T5627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.121380][ T5628] Bluetooth: hci2: command tx timeout [ 103.121466][ T5628] Bluetooth: hci4: command tx timeout [ 103.138088][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.190985][ T5624] Bluetooth: hci3: command tx timeout [ 103.217568][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.233475][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.243297][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.256194][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.273000][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.283804][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.292482][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.303886][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.441455][ T5621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.454179][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.463882][ T5621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.474488][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.484568][ T5621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.495383][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.503829][ T5621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.519798][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.671762][ T5619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.683986][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.692607][ T5619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.703327][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.711788][ T5619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.724181][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.732585][ T5619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.743408][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.805743][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.921238][ T5622] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.935142][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.943971][ T5622] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.958560][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.967117][ T5622] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.978457][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.987676][ T5622] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.999329][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.025428][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.036937][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.099052][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.107622][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.198791][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.241964][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.249464][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.272140][ T5626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.284396][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.304669][ T5626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.320183][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.332359][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.339608][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.367445][ T5626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.379580][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.388298][ T5626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.402152][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.442408][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.450184][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.544430][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.656370][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.668570][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.682662][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.704688][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.711972][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.786334][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.793695][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.835151][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.890952][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.919641][ T457] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.927405][ T457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.036144][ T5624] Bluetooth: hci1: command tx timeout [ 105.059884][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.067138][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.083584][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.090812][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.109359][ T5624] Bluetooth: hci5: command tx timeout [ 105.157218][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.164573][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.189074][ T5624] Bluetooth: hci4: command tx timeout [ 105.194674][ T5624] Bluetooth: hci2: command tx timeout [ 105.200583][ T5628] Bluetooth: hci0: command tx timeout [ 105.275674][ T5628] Bluetooth: hci3: command tx timeout [ 105.361602][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.626495][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.713447][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.720779][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.812688][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.820173][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.296200][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.581420][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.731629][ T5627] veth0_vlan: entered promiscuous mode [ 106.817237][ T5627] veth1_vlan: entered promiscuous mode [ 106.893013][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.039438][ T5627] veth0_macvtap: entered promiscuous mode [ 107.077624][ T5627] veth1_macvtap: entered promiscuous mode [ 107.264359][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.321338][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.347014][ T5621] veth0_vlan: entered promiscuous mode [ 107.378257][ T5621] veth1_vlan: entered promiscuous mode [ 107.472645][ T1167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.590908][ T5801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.683829][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.698245][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.760927][ T5810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.776226][ T5621] veth0_macvtap: entered promiscuous mode [ 107.820038][ T5621] veth1_macvtap: entered promiscuous mode [ 108.002954][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.028166][ T5801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.042482][ T5801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.075384][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.124986][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.151654][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.185639][ T5620] veth0_vlan: entered promiscuous mode [ 108.223764][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.238680][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.269327][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.319186][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.330890][ T5619] veth0_vlan: entered promiscuous mode [ 108.352915][ T5620] veth1_vlan: entered promiscuous mode [ 108.369749][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.375149][ T5627] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.508582][ T5619] veth1_vlan: entered promiscuous mode [ 108.589600][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.656379][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.662627][ T5626] veth0_vlan: entered promiscuous mode [ 108.674160][ T5622] veth0_vlan: entered promiscuous mode [ 108.682109][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.628328][ T5620] veth0_macvtap: entered promiscuous mode [ 109.641909][ T5620] veth1_macvtap: entered promiscuous mode [ 109.781359][ T5622] veth1_vlan: entered promiscuous mode [ 109.802373][ T5626] veth1_vlan: entered promiscuous mode [ 109.832535][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.860628][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.870151][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.891374][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.912399][ T5619] veth0_macvtap: entered promiscuous mode [ 109.968284][ T5619] veth1_macvtap: entered promiscuous mode [ 110.012546][ T5752] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.027389][ T5622] veth0_macvtap: entered promiscuous mode [ 110.041731][ T5622] veth1_macvtap: entered promiscuous mode [ 110.054670][ T5626] veth0_macvtap: entered promiscuous mode [ 110.128315][ T5626] veth1_macvtap: entered promiscuous mode [ 110.174754][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.195519][ T5752] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.209747][ T5752] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.225536][ T5752] usb 3-1: config 1 has no interface number 0 [ 110.229989][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.237517][ T5866] loop3: detected capacity change from 0 to 1024 [ 110.251127][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.252230][ T5752] usb 3-1: New USB device found, idVendor=041e, idProduct=3f04, bcdDevice= 0.40 [ 110.275782][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.285016][ T5752] usb 3-1: Product: syz [ 110.290781][ T5752] usb 3-1: Manufacturer: syz [ 110.296861][ T5752] usb 3-1: SerialNumber: syz [ 110.401243][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.419525][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.448276][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.454156][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.479032][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.559550][ T5810] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.586411][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.650125][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.703436][ T5752] usb 3-1: 1:0 : does not exist [ 110.713504][ T5752] usb 3-1: 1:2 : does not exist [ 110.726383][ T457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.727599][ T5752] usb 3-1: 1:3 : does not exist [ 110.742286][ T457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.743562][ T5752] usb 3-1: BAAD HEADPHONE p_chmask mismatch [ 110.965503][ T5752] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 111.016831][ T5752] usb 3-1: USB disconnect, device number 2 [ 111.145383][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.213259][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.248269][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.431281][ T457] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.636181][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.653510][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.702946][ T457] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.729038][ T5752] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.768398][ T5801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.789908][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.809488][ T5801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.885117][ T5874] loop2: detected capacity change from 0 to 1024 [ 111.910485][ T5874] ======================================================= [ 111.910485][ T5874] WARNING: The mand mount option has been deprecated and [ 111.910485][ T5874] and is ignored by this kernel. Remove the mand [ 111.910485][ T5874] option from the mount to silence this warning. [ 111.910485][ T5874] ======================================================= [ 111.917889][ T5752] usb 5-1: Using ep0 maxpacket: 32 [ 111.967198][ T457] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.000057][ T5752] usb 5-1: unable to get BOS descriptor or descriptor too short [ 112.010279][ T5752] usb 5-1: config 8 has an invalid interface number: 77 but max is 0 [ 112.019421][ T5752] usb 5-1: config 8 has no interface number 0 [ 112.024760][ T5874] EXT4-fs: Ignoring removed oldalloc option [ 112.039855][ T5752] usb 5-1: config 8 interface 77 altsetting 33 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 112.062735][ T5752] usb 5-1: config 8 interface 77 has no altsetting 0 [ 112.074787][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.085821][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.098583][ T5752] usb 5-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= a.7a [ 112.119787][ T5752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.131090][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.133274][ T5752] usb 5-1: Product: syz [ 112.134477][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.152958][ T5752] usb 5-1: Manufacturer: syz [ 112.161991][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.176837][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.188025][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.197120][ T5752] usb 5-1: SerialNumber: syz [ 112.204718][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.223209][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.223556][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.426466][ T5874] EXT4-fs (loop2): failed to open journal device unknown-block(0,7) -ENXIO [ 112.427314][ T457] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.500282][ T5801] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.531064][ T5801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.580768][ T5801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.614962][ T5752] ftdi_sio 5-1:8.77: FTDI USB Serial Device converter detected [ 112.672903][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 112.676900][ T5752] ftdi_sio ttyUSB0: unknown device type: 0xa7a [ 112.685656][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.732616][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.752017][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.769348][ T5810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.791285][ T5752] usb 5-1: USB disconnect, device number 2 [ 112.881953][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.889494][ T5752] ftdi_sio 5-1:8.77: device disconnected [ 112.959695][ T1167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.008452][ T1167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.119614][ T1167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.122933][ T5883] loop1: detected capacity change from 0 to 8192 [ 113.141721][ T1167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.152962][ T1167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.248464][ T5889] Bluetooth: MGMT ver 1.23 [ 113.628514][ T5892] loop2: detected capacity change from 0 to 512 [ 113.744935][ T5892] EXT4-fs: Ignoring removed i_version option [ 114.258208][ T5892] EXT4-fs: Ignoring removed oldalloc option [ 114.449126][ T5624] Bluetooth: hci2: command tx timeout [ 114.497818][ T5892] EXT4-fs (loop2): Test dummy encryption mode enabled [ 114.547107][ T457] bridge_slave_1: left allmulticast mode [ 114.606028][ T457] bridge_slave_1: left promiscuous mode [ 114.656849][ T457] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.760294][ T5909] loop4: detected capacity change from 0 to 512 [ 114.773363][ T5892] EXT4-fs (loop2): 1 truncate cleaned up [ 114.881755][ T5892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.043200][ T5909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.487269][ T457] bridge_slave_0: left allmulticast mode [ 115.572011][ T457] bridge_slave_0: left promiscuous mode [ 115.652676][ T457] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.763015][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.780801][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.477419][ T5624] Bluetooth: hci2: command tx timeout [ 116.511218][ T5919] loop4: detected capacity change from 0 to 4096 [ 116.527096][ T5919] EXT4-fs: Ignoring removed orlov option [ 116.541939][ T5919] EXT4-fs (loop4): Test dummy encryption mode enabled [ 116.676049][ T5751] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.753414][ T5931] Zero length message leads to an empty skb [ 117.421695][ T5919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.592495][ T5751] usb 3-1: Using ep0 maxpacket: 32 [ 117.605594][ T5751] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 117.628002][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.640586][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 117.678079][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 117.738972][ T5751] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 117.758529][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.787533][ T5751] usb 3-1: Product: syz [ 117.804922][ T5751] usb 3-1: Manufacturer: syz [ 117.816143][ T457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.831427][ T5751] usb 3-1: SerialNumber: syz [ 117.846260][ T457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.852786][ T5751] usb 3-1: config 0 descriptor?? [ 117.872558][ T5751] hub 3-1:0.0: bad descriptor, ignoring hub [ 117.882944][ T457] bond0 (unregistering): Released all slaves [ 117.889203][ T5751] hub 3-1:0.0: probe with driver hub failed with error -5 [ 117.919048][ T5751] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 117.974028][ T5751] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 118.040381][ T5751] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 118.123328][ T5911] syzkaller0: entered promiscuous mode [ 118.140830][ T5911] syzkaller0: entered allmulticast mode [ 118.296696][ T9] usb 3-1: USB disconnect, device number 3 [ 118.321486][ T5938] batadv_slave_1: entered promiscuous mode [ 118.473239][ T5946] loop1: detected capacity change from 0 to 8 [ 118.555897][ T5624] Bluetooth: hci2: command tx timeout [ 119.438947][ T186] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.591122][ T5966] loop2: detected capacity change from 0 to 2048 [ 119.649859][ T186] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 119.664143][ T186] usb 1-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 119.679223][ T186] usb 1-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid wMaxPacketSize 0 [ 119.713572][ T186] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 119.719421][ T5966] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 119.737860][ T186] usb 1-1: config 220 interface 0 has no altsetting 0 [ 119.750682][ T5966] UDF-fs: Scanning with blocksize 512 failed [ 119.764898][ T186] usb 1-1: config 220 interface 1 has no altsetting 0 [ 119.797161][ T186] usb 1-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 119.808683][ T186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.818409][ T186] usb 1-1: Product: syz [ 119.828684][ T186] usb 1-1: Manufacturer: syz [ 119.832122][ T5966] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.854285][ T186] usb 1-1: SerialNumber: syz [ 120.199316][ T186] usb 1-1: selecting invalid altsetting 0 [ 120.222542][ T186] uvcvideo 1-1:220.0: probe with driver uvcvideo failed with error -22 [ 120.248245][ T186] usb 1-1: selecting invalid altsetting 0 [ 120.261145][ T186] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 120.293594][ T186] usb 1-1: USB disconnect, device number 2 [ 120.413045][ T5801] kworker/u8:8: attempt to access beyond end of device [ 120.413045][ T5801] loop2: rw=8388609, sector=2048, nr_sectors = 2 limit=2048 [ 120.432848][ T5801] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 120.441590][ T5801] kworker/u8:8: attempt to access beyond end of device [ 120.441590][ T5801] loop2: rw=8388609, sector=2048, nr_sectors = 2 limit=2048 [ 120.456118][ T5801] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 120.467387][ T5801] kworker/u8:8: attempt to access beyond end of device [ 120.467387][ T5801] loop2: rw=8388609, sector=2050, nr_sectors = 2 limit=2048 [ 120.482377][ T5801] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 120.491166][ T5801] kworker/u8:8: attempt to access beyond end of device [ 120.491166][ T5801] loop2: rw=8388609, sector=2050, nr_sectors = 2 limit=2048 [ 120.506142][ T5801] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 120.514941][ T5801] kworker/u8:8: attempt to access beyond end of device [ 120.514941][ T5801] loop2: rw=8388609, sector=2052, nr_sectors = 2 limit=2048 [ 120.536585][ T5801] Buffer I/O error on dev loop2, logical block 1026, lost async page write [ 120.546458][ T5801] kworker/u8:8: attempt to access beyond end of device [ 120.546458][ T5801] loop2: rw=8388609, sector=2052, nr_sectors = 2 limit=2048 [ 120.561066][ T5801] Buffer I/O error on dev loop2, logical block 1026, lost async page write [ 120.573457][ T5801] kworker/u8:8: attempt to access beyond end of device [ 120.573457][ T5801] loop2: rw=8388609, sector=2054, nr_sectors = 2 limit=2048 [ 120.588561][ T5801] Buffer I/O error on dev loop2, logical block 1027, lost async page write [ 120.597659][ T5801] kworker/u8:8: attempt to access beyond end of device [ 120.597659][ T5801] loop2: rw=8388609, sector=2054, nr_sectors = 2 limit=2048 [ 120.612382][ T5801] Buffer I/O error on dev loop2, logical block 1027, lost async page write [ 120.621147][ T5801] kworker/u8:8: attempt to access beyond end of device [ 120.621147][ T5801] loop2: rw=8388609, sector=2056, nr_sectors = 2 limit=2048 [ 120.642489][ T5624] Bluetooth: hci2: command tx timeout [ 120.644147][ T5801] Buffer I/O error on dev loop2, logical block 1028, lost async page write [ 120.658841][ T5801] kworker/u8:8: attempt to access beyond end of device [ 120.658841][ T5801] loop2: rw=8388609, sector=2056, nr_sectors = 2 limit=2048 [ 120.673807][ T5801] Buffer I/O error on dev loop2, logical block 1028, lost async page write [ 122.420889][ T5937] batadv_slave_1: left promiscuous mode [ 122.653092][ T5987] syz.4.36 uses obsolete (PF_INET,SOCK_PACKET) [ 123.860409][ T5751] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.051026][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.063528][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.074117][ T5751] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.109020][ T5751] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.859015][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.896916][ T5751] usb 3-1: config 0 descriptor?? [ 125.285774][ T6020] capability: warning: `syz.1.43' uses deprecated v2 capabilities in a way that may be insecure [ 125.404499][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 125.432588][ T5751] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 125.539737][ T5751] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 125.638615][ T6018] loop5: detected capacity change from 0 to 8192 [ 125.700037][ T6018] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.705192][ T6024] loop1: detected capacity change from 0 to 256 [ 125.881930][ T6024] exFAT-fs (loop1): error, no upcase table entry. Please run fsck [ 125.954560][ T6024] exFAT-fs (loop1): Filesystem has been set read-only [ 125.968005][ T457] hsr_slave_0: left promiscuous mode [ 125.994616][ T6024] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 126.003916][ T457] hsr_slave_1: left promiscuous mode [ 126.035281][ T457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.089382][ T457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.127904][ T457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.171647][ T457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.369072][ T457] veth1_macvtap: left promiscuous mode [ 126.391610][ T457] veth0_macvtap: left promiscuous mode [ 126.408576][ T457] veth1_vlan: left promiscuous mode [ 126.425623][ T457] veth0_vlan: left promiscuous mode [ 127.648243][ T6041] loop5: detected capacity change from 0 to 1024 [ 127.684371][ T6041] EXT4-fs: Ignoring removed orlov option [ 127.826451][ T6041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.304835][ T6048] loop2: detected capacity change from 0 to 128 [ 128.440129][ T6050] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 129.027859][ T6048] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.070614][ T6048] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.194919][ T31] audit: type=1326 audit(1785660500.256:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.2.52" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c2f9e019 code=0x7ffc0000 [ 129.252542][ T31] audit: type=1326 audit(1785660500.256:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.2.52" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c2f9e019 code=0x7ffc0000 [ 129.278433][ T31] audit: type=1326 audit(1785660500.256:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.2.52" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f15c2f9e019 code=0x7ffc0000 [ 129.342979][ T31] audit: type=1326 audit(1785660500.256:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.2.52" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c2f9e019 code=0x7ffc0000 [ 129.393383][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.423743][ T5751] usb 3-1: USB disconnect, device number 4 [ 129.464263][ T31] audit: type=1326 audit(1785660500.256:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.2.52" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c2f9e019 code=0x7ffc0000 [ 129.494715][ T31] audit: type=1326 audit(1785660500.256:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.2.52" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f15c2f9e019 code=0x7ffc0000 [ 129.527205][ T31] audit: type=1326 audit(1785660500.256:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.2.52" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c2f9e019 code=0x7ffc0000 [ 129.553870][ T31] audit: type=1326 audit(1785660500.256:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.2.52" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c2f9e019 code=0x7ffc0000 [ 129.590839][ T31] audit: type=1326 audit(1785660500.256:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.2.52" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f15c2f9e019 code=0x7ffc0000 [ 129.620749][ T31] audit: type=1326 audit(1785660500.256:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.2.52" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c2f9e019 code=0x7ffc0000 [ 129.703617][ T6057] loop5: detected capacity change from 0 to 16 [ 129.740092][ T457] team0 (unregistering): Port device team_slave_1 removed [ 129.758362][ T6057] erofs (device loop5): mounted with root inode @ nid 36. [ 129.805675][ T457] team0 (unregistering): Port device team_slave_0 removed [ 130.180075][ T6039] bridge_slave_0: mtu less than device minimum [ 130.402928][ T5627] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.621522][ T6065] loop1: detected capacity change from 0 to 1024 [ 130.728603][ T6065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 130.728745][ T6065] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.437380][ T6065] EXT4-fs error (device loop1): ext4_free_blocks:6717: comm syz.1.57: Freeing blocks not in datazone - block = 0, count = 16 [ 131.484426][ T5752] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.688230][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'. [ 131.780364][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 131.866446][ T5752] usb 1-1: unable to get BOS descriptor or descriptor too short [ 131.894695][ T5752] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 131.906374][ T6097] loop5: detected capacity change from 0 to 256 [ 131.907076][ T5752] usb 1-1: can't read configurations, error -71 [ 132.002956][ T6094] warning: `syz.4.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.023715][ T6097] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 132.318393][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.326554][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.207756][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.245343][ T6120] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 133.273932][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.313882][ T5875] bridge_slave_0: entered allmulticast mode [ 133.383023][ T5875] bridge_slave_0: entered promiscuous mode [ 133.551146][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 133.608336][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.651505][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.705212][ T5875] bridge_slave_1: entered allmulticast mode [ 133.762129][ T5875] bridge_slave_1: entered promiscuous mode [ 133.831777][ T6132] loop5: detected capacity change from 0 to 512 [ 133.884770][ T6132] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 133.962542][ T6132] EXT4-fs error (device loop5): mb_free_blocks:2046: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 133.988917][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 133.997093][ C1] EXT4-fs (loop5): initial error at time 1785660505: mb_free_blocks:2046: inode 11: block 64 [ 134.007507][ C1] EXT4-fs (loop5): last error at time 1785660505: mb_free_blocks:2046: inode 11: block 64 [ 134.079101][ T6132] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #11: comm syz.5.71: corrupted inode contents [ 134.102874][ T6132] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 134.105312][ T6132] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #11: comm syz.5.71: mark_inode_dirty error [ 134.152768][ T6132] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 134.156142][ T6132] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.71: invalid indirect mapped block 1 (level 1) [ 134.166417][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.187288][ T6132] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 134.198353][ T6141] loop1: detected capacity change from 0 to 1024 [ 134.223822][ T6132] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #11: comm syz.5.71: corrupted inode contents [ 134.270670][ T6141] hfsplus: failed to load attributes file [ 134.317204][ T6132] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 134.331327][ T6132] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 134.385495][ T6132] loop5: lost filesystem error report for type 5 error -117 [ 134.386051][ T6132] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #11: comm syz.5.71: corrupted inode contents [ 134.469788][ T6132] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 134.471946][ T6132] EXT4-fs error (device loop5): ext4_truncate:4691: inode #11: comm syz.5.71: mark_inode_dirty error [ 134.539787][ T6132] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 134.540361][ T6132] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 134.573837][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.593596][ T6132] loop5: lost filesystem error report for type 5 error -117 [ 134.596166][ T6132] EXT4-fs (loop5): 1 truncate cleaned up [ 134.635063][ T6151] netlink: 32 bytes leftover after parsing attributes in process `syz.1.77'. [ 134.641152][ T6132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.831337][ T6154] unsupported nlmsg_type 40 [ 135.787900][ T5875] team0: Port device team_slave_0 added [ 135.798110][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.81'. [ 135.833851][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.855329][ T5875] team0: Port device team_slave_1 added [ 135.934999][ T6159] loop1: detected capacity change from 0 to 16 [ 136.003679][ T6159] erofs (device loop1): mounted with root inode @ nid 36. [ 136.089351][ T5624] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 136.112532][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.123838][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.123851][ T6159] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 136.153525][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.186203][ T6159] erofs (device loop1): read error -117 @ 0 of nid 89 [ 136.199919][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.207023][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.240441][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 136.240471][ T31] audit: type=1800 audit(1785660507.266:26): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.79" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 136.349167][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.517907][ T6171] loop1: detected capacity change from 0 to 256 [ 136.591483][ T6171] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 136.716387][ T6174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.85'. [ 136.734251][ T5875] hsr_slave_0: entered promiscuous mode [ 136.753949][ T5875] hsr_slave_1: entered promiscuous mode [ 136.774193][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 136.802553][ T5751] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 136.821286][ T5875] Cannot create hsr debugfs directory [ 136.986819][ T5751] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.074637][ T5751] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.191280][ T5751] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.274014][ T5751] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.453033][ T5751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.569555][ T6189] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 137.625128][ T5751] usb 6-1: config 0 descriptor?? [ 137.847143][ T5761] hid (null): report_id 33474 is invalid [ 138.002397][ T5761] hid-generic 0005:4C4A:5505.0002: collection stack underflow [ 138.054248][ T5761] hid-generic 0005:4C4A:5505.0002: item 0 2 0 12 parsing failed [ 138.115027][ T5761] hid-generic 0005:4C4A:5505.0002: probe with driver hid-generic failed with error -22 [ 138.200393][ T5751] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 138.329731][ T5751] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 138.594864][ T6206] netlink: 32 bytes leftover after parsing attributes in process `syz.2.91'. [ 139.252581][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 139.498981][ T5751] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 139.833801][ T5875] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 139.915234][ T5875] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 140.063931][ T5875] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 140.331948][ T186] usb 6-1: USB disconnect, device number 2 [ 140.615979][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.108'. [ 141.584294][ T5875] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.896442][ T5875] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 141.981200][ T6256] loop2: detected capacity change from 0 to 2048 [ 142.018194][ T5875] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 142.075601][ T6256] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.132111][ T6266] netlink: 32 bytes leftover after parsing attributes in process `syz.4.109'. [ 142.324755][ T6262] batadv_slave_1: entered promiscuous mode [ 142.341943][ T5875] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 142.403057][ T5875] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.439626][ T6259] batadv_slave_1: left promiscuous mode [ 143.049454][ T186] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 143.098678][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.217275][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.252623][ T186] usb 6-1: not running at top speed; connect to a high speed hub [ 143.287095][ T186] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 143.330747][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.336263][ T186] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 166, setting to 64 [ 143.338241][ T5902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.422859][ T186] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 143.458997][ T186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.496772][ T186] usb 6-1: Product: syz [ 143.523362][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.530635][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.546974][ T186] usb 6-1: Manufacturer: syz [ 143.568261][ T186] usb 6-1: SerialNumber: syz [ 143.609920][ T6282] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 143.666512][ T186] oti6858 6-1:1.0: oti6858 converter detected [ 143.825892][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 144.385076][ T6282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.449510][ T6282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.615967][ T186] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 144.665761][ T186] usb 6-1: USB disconnect, device number 3 [ 144.743012][ T186] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 144.782274][ T6305] Need at least one configuration in g1. [ 144.794654][ T186] oti6858 6-1:1.0: device disconnected [ 144.802428][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.123'. [ 144.820734][ T6305] udc dummy_udc.0: failed to start g1: -22 [ 144.844407][ T6305] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 144.891525][ T6304] loop1: detected capacity change from 0 to 8192 [ 145.010228][ T6305] UDC core: g1: couldn't find an available UDC or it's busy [ 145.743683][ T5619] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 145.778751][ T5619] FAT-fs (loop1): Filesystem has been set read-only [ 146.351108][ T6341] loop1: detected capacity change from 0 to 128 [ 146.374855][ T6341] vfat: Unknown parameter '˙˙˙˙000000000000000000000000177777777777777777777718446744073709551615k#$)DőZ' [ 146.736630][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'. [ 147.209382][ T6365] configfs-gadget.g1 gadget.0: HOST MAC e2:a3:24:b1:4d:aa [ 147.223567][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.230860][ T6365] configfs-gadget.g1 gadget.0: MAC 66:da:31:a0:8d:a1 [ 147.511263][ T186] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 147.714767][ T186] usb 1-1: Dual-Role OTG device on HNP port [ 147.741118][ T186] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 147.781613][ T186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.994376][ T186] cdc_ncm 1-1:1.0: MAC-Address: e2:a3:24:b1:4d:aa [ 149.043477][ T186] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), e2:a3:24:b1:4d:aa [ 149.331175][ T6411] netlink: 16 bytes leftover after parsing attributes in process `syz.5.153'. [ 149.433723][ T6415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.155'. [ 149.787342][ T5875] veth0_vlan: entered promiscuous mode [ 149.871563][ T5875] veth1_vlan: entered promiscuous mode [ 149.927278][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'. [ 150.046111][ T5875] veth0_macvtap: entered promiscuous mode [ 150.061510][ T6427] netlink: 72 bytes leftover after parsing attributes in process `syz.4.159'. [ 150.093545][ T5875] veth1_macvtap: entered promiscuous mode [ 150.221560][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.297942][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.409490][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.463896][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.518996][ T5903] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.548269][ T5903] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.142035][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'. [ 151.185530][ T5810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.238071][ T5810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.467884][ T5810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.499533][ T5810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.763086][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'. [ 152.772603][ T6503] netlink: 'syz.1.186': attribute type 58 has an invalid length. [ 153.272382][ T24] usb 1-1: USB disconnect, device number 5 [ 153.305847][ T24] cdc_ncm 1-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 154.235547][ T6543] loop6: detected capacity change from 0 to 512 [ 154.298405][ T6543] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 154.413118][ T6543] EXT4-fs (loop6): 1 truncate cleaned up [ 154.431943][ T6543] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.646760][ T6559] netlink: 'syz.0.205': attribute type 58 has an invalid length. [ 154.688006][ T6543] syz.6.201 (pid 6543) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 154.981496][ T5751] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 155.067707][ T6560] fscrypt (loop6, inode 19): Error allocating 'adiantum(xchacha12,aes)' transform: -4 [ 155.209254][ T5751] usb 1-1: Dual-Role OTG device on HNP port [ 155.239946][ T5751] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 155.286212][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.325870][ T5875] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.391226][ T24] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 155.425012][ T5751] cdc_ncm 1-1:1.0: MAC-Address: e2:a3:24:b1:4d:aa [ 155.602539][ T5751] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), e2:a3:24:b1:4d:aa [ 155.620492][ T24] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 155.668104][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.774416][ T24] usb 6-1: config 0 descriptor?? [ 155.822530][ T24] cp210x 6-1:0.0: cp210x converter detected [ 156.262957][ T24] cp210x 6-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 156.298901][ T24] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 156.361476][ T24] usb 6-1: cp210x converter now attached to ttyUSB0 [ 156.435602][ T6613] netlink: 'syz.0.223': attribute type 58 has an invalid length. [ 156.436371][ T24] usb 6-1: USB disconnect, device number 4 [ 156.545964][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 156.583833][ T24] cp210x 6-1:0.0: device disconnected [ 156.705935][ T6622] loop1: detected capacity change from 0 to 512 [ 156.741886][ T6621] loop6: detected capacity change from 0 to 2048 [ 156.763953][ T6621] EXT4-fs: Ignoring removed i_version option [ 156.912257][ T6622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.952282][ T6622] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.084490][ T6621] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.184352][ T6621] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.239154][ T6622] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #2: comm syz.1.225: corrupted inode contents [ 157.267352][ T6622] EXT4-fs (loop1): Remounting filesystem read-only [ 157.408468][ T6621] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.226: bg 0: block 153: padding at end of block bitmap is not set [ 157.550511][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.562801][ T6621] fs-verity (loop6, inode 15): ext4_end_enable_verity() failed with err -28 [ 157.864930][ T5875] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.965056][ T6659] netlink: 'syz.5.240': attribute type 58 has an invalid length. [ 158.333867][ T6669] loop5: detected capacity change from 0 to 1024 [ 158.395022][ T6669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.471694][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 159.402612][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.461814][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.538438][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.570979][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.644802][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.728099][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.782041][ T24] usb 3-1: config 0 descriptor?? [ 159.899953][ T6696] netlink: 56 bytes leftover after parsing attributes in process `syz.0.253'. [ 160.291891][ T6707] loop1: detected capacity change from 0 to 1024 [ 160.332396][ T6707] EXT4-fs: Ignoring removed orlov option [ 160.333303][ T24] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 160.429556][ T5637] usb 1-1: USB disconnect, device number 6 [ 160.440355][ T5783] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 160.493040][ T6707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.496403][ T5637] cdc_ncm 1-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 160.876417][ T5783] usb 7-1: Using ep0 maxpacket: 16 [ 160.903843][ T5783] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 160.915941][ T5783] usb 7-1: config 0 has no interface number 0 [ 160.924169][ T5783] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 160.934743][ T5783] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 161.303260][ T5783] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 161.355258][ T5783] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.391373][ T5783] usb 7-1: Product: syz [ 161.407719][ T5783] usb 7-1: Manufacturer: syz [ 161.427485][ T5783] usb 7-1: SerialNumber: syz [ 161.503773][ T24] usb 3-1: USB disconnect, device number 5 [ 161.516657][ T5783] usb 7-1: config 0 descriptor?? [ 161.569013][ T6705] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 161.618059][ T6705] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 161.695108][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.748573][ T6719] fido_id[6719]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 161.795678][ T6721] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 161.921271][ T6705] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 161.955697][ T6705] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 161.958522][ T6721] udc usbip-vudc.0: failed to start g1: -19 [ 162.027598][ T6721] UDC core: g1: couldn't find an available UDC or it's busy [ 162.208501][ T5783] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 162.332989][ T6747] netlink: 'syz.0.265': attribute type 58 has an invalid length. [ 163.025628][ T6761] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 163.467016][ T6761] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 163.723526][ T6761] udc dummy_udc.0: failed to start g1: -22 [ 163.764114][ T6761] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 163.817880][ T6761] UDC core: g1: couldn't find an available UDC or it's busy [ 163.856207][ T6769] sit0: entered promiscuous mode [ 163.915864][ T6769] netlink: 'syz.2.273': attribute type 1 has an invalid length. [ 163.939818][ T5783] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 163.971438][ T6769] netlink: 9 bytes leftover after parsing attributes in process `syz.2.273'. [ 163.997584][ T5783] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 164.051809][ T5783] asix 7-1:0.34: probe with driver asix failed with error -71 [ 164.171650][ T5783] usb 7-1: USB disconnect, device number 2 [ 164.335468][ T6780] loop1: detected capacity change from 0 to 1024 [ 164.364514][ T6780] EXT4-fs: Ignoring removed orlov option [ 164.417038][ T6780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.951931][ T6794] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 165.637525][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.781986][ T6801] netlink: 'syz.5.281': attribute type 58 has an invalid length. [ 166.479445][ T6821] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 166.509633][ T6821] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 166.534831][ T6821] udc dummy_udc.0: failed to start g1: -22 [ 166.550575][ T6821] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 166.584823][ T6821] UDC core: g1: couldn't find an available UDC or it's busy [ 167.065620][ T6838] loop1: detected capacity change from 0 to 1024 [ 167.104636][ T6838] EXT4-fs: Ignoring removed orlov option [ 167.173064][ T6838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.188632][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.6.298'. [ 167.197965][ T5772] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 167.396187][ T5772] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.494892][ T5772] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 167.791376][ T6856] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 168.500421][ T5772] usb 6-1: config 1 has no interface number 0 [ 169.041907][ T5772] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 169.053787][ T5772] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 169.064484][ T5772] usb 6-1: config 1 interface 1 has no altsetting 2 [ 169.075063][ T5772] usb 6-1: New USB device found, idVendor=0763, idProduct=200d, bcdDevice= 0.40 [ 169.093376][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.105019][ T5772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.122042][ T5772] usb 6-1: Product: syz [ 169.131792][ T5772] usb 6-1: Manufacturer: syz [ 169.142593][ T5772] usb 6-1: SerialNumber: syz [ 169.488213][ T6874] fuse: Bad value for 'fd' [ 169.526916][ T5772] usb 6-1: USB disconnect, device number 5 [ 169.741720][ T6881] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 169.770678][ T6881] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 170.665654][ T6881] udc dummy_udc.0: failed to start g1: -22 [ 170.717368][ T6881] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 170.886829][ T6881] UDC core: g1: couldn't find an available UDC or it's busy [ 170.941740][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.6.312'. [ 170.965255][ T6894] loop1: detected capacity change from 0 to 1024 [ 170.985826][ T6894] EXT4-fs: Ignoring removed orlov option [ 171.072650][ T6894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.562631][ T6911] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 172.215698][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.616915][ T6933] loop5: detected capacity change from 0 to 256 [ 172.711372][ T6933] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.743481][ T6933] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 172.799272][ T5783] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 172.822448][ T6933] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 172.880835][ T6933] exFAT-fs (loop5): failed to load alloc-bitmap [ 172.907244][ T6933] exFAT-fs (loop5): failed to recognize exfat type [ 172.924916][ T6940] loop1: detected capacity change from 0 to 512 [ 173.016208][ T5783] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 173.053959][ T5783] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.086253][ T5783] usb 7-1: Product: syz [ 173.091513][ T6940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.124422][ T6940] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.134263][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'. [ 173.142186][ T5783] usb 7-1: Manufacturer: syz [ 173.213766][ T5783] usb 7-1: SerialNumber: syz [ 173.241266][ T6940] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #2: comm syz.1.331: corrupted inode contents [ 173.331339][ T6940] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #2: comm syz.1.331: mark_inode_dirty error [ 173.416356][ T6940] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #2: comm syz.1.331: corrupted inode contents [ 173.480324][ T6950] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #2: comm syz.1.331: corrupted inode contents [ 173.563451][ T6953] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 173.581506][ T6950] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #2: comm syz.1.331: mark_inode_dirty error [ 173.582861][ T5783] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 173.617192][ T6953] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 173.632409][ T6953] udc dummy_udc.0: failed to start g1: -22 [ 173.643846][ T5783] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 173.645543][ T6950] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #2: comm syz.1.331: corrupted inode contents [ 173.655992][ T6953] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 173.682463][ T5783] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 173.701560][ T6953] UDC core: g1: couldn't find an available UDC or it's busy [ 173.724396][ T5783] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 173.767921][ T6950] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.331: mark_inode_dirty error [ 173.795067][ T5783] usb 7-1: USB disconnect, device number 3 [ 174.085253][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.443453][ T6981] loop1: detected capacity change from 0 to 1024 [ 175.482944][ T6986] loop5: detected capacity change from 0 to 512 [ 175.519343][ T6981] hfsplus: failed to load catalog file [ 175.543214][ T6986] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 175.570706][ T6986] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 175.775182][ T6986] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 176.113364][ T5624] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 176.733084][ T7019] loop5: detected capacity change from 0 to 2048 [ 176.750148][ T7019] EXT4-fs: Ignoring removed orlov option [ 176.780811][ T7019] EXT4-fs warning (device loop5): read_mmp_block:109: Error -117 while reading MMP block 64 [ 178.477033][ T7055] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 178.499523][ T7055] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 178.547177][ T7055] udc dummy_udc.0: failed to start g1: -22 [ 178.597524][ T7055] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 178.652531][ T7055] UDC core: g1: couldn't find an available UDC or it's busy [ 179.305528][ T7075] loop5: detected capacity change from 0 to 1024 [ 179.356773][ T7075] EXT4-fs: Ignoring removed orlov option [ 179.992814][ T7075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.032797][ T7081] binder: BINDER_SET_CONTEXT_MGR already set [ 180.098481][ T7081] binder: 7078:7081 ioctl 4018620d 200000004a80 returned -16 [ 180.711244][ T7100] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 181.356081][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.356635][ T7106] loop6: detected capacity change from 0 to 128 [ 181.375349][ T5637] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 181.382282][ T7106] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 181.462186][ T31] audit: type=1800 audit(1785660552.536:27): pid=7106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.387" name="file2" dev="loop6" ino=95 res=0 errno=0 [ 181.582249][ T5637] usb 2-1: unable to get BOS descriptor or descriptor too short [ 181.621552][ T5637] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.664072][ T5637] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.711177][ T5637] usb 2-1: string descriptor 0 read error: -22 [ 181.732779][ T5637] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 181.767439][ T5637] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.455521][ T7130] loop5: detected capacity change from 0 to 256 [ 182.862725][ T5637] usb 2-1: USB disconnect, device number 2 [ 183.467347][ T7150] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 184.587376][ T7157] netlink: 'syz.1.408': attribute type 12 has an invalid length. [ 185.321224][ T7179] cgroup: Unknown subsys name 'cpuset' [ 185.345429][ T7180] netlink: 40 bytes leftover after parsing attributes in process `syz.6.417'. [ 185.604130][ T7187] loop1: detected capacity change from 0 to 1024 [ 185.644712][ T7187] EXT4-fs: Ignoring removed orlov option [ 185.714191][ T7187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.771434][ T7195] loop6: detected capacity change from 0 to 1024 [ 185.878187][ T7195] hfsplus: failed to load extents file [ 186.299719][ T7205] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 186.995151][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.267873][ T7219] loop6: detected capacity change from 0 to 4096 [ 187.424176][ T7219] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.832752][ T5875] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.129668][ T7241] loop5: detected capacity change from 0 to 512 [ 188.374463][ T7251] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 189.010483][ T7241] EXT4-fs (loop5): 1 orphan inode deleted [ 189.100618][ T7241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.153571][ T7241] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.295975][ T7259] loop1: detected capacity change from 0 to 1024 [ 189.369681][ T7259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 189.481187][ T7259] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.657528][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.761612][ T7259] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.439: lblock 0 mapped to illegal pblock 0 (length 1) [ 189.785114][ T7259] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 189.826868][ T7259] EXT4-fs (loop1): This should not happen!! Data will be lost [ 189.826868][ T7259] [ 189.936204][ T7272] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 190.418230][ T5902] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:12: lblock 4 mapped to illegal pblock 4 (length 2) [ 190.575272][ T5902] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 190.666807][ T5902] EXT4-fs (loop1): This should not happen!! Data will be lost [ 190.666807][ T5902] [ 190.752420][ T5902] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:12: lblock 8 mapped to illegal pblock 8 (length 8) [ 190.815849][ T5902] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 190.835239][ T7284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.443'. [ 190.839890][ T7283] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 190.867814][ T5902] EXT4-fs (loop1): This should not happen!! Data will be lost [ 190.867814][ T5902] [ 190.880519][ T7283] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 190.895524][ T7283] udc dummy_udc.0: failed to start g1: -22 [ 190.910503][ T5619] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 190.917145][ T7283] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 190.937179][ T7283] UDC core: g1: couldn't find an available UDC or it's busy [ 190.989667][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 191.372202][ T7293] loop1: detected capacity change from 0 to 256 [ 191.462508][ T7293] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 191.938397][ T7308] loop6: detected capacity change from 0 to 1024 [ 191.979225][ T7308] hfsplus: failed to load extents file [ 192.311340][ T5783] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 192.370629][ T7316] loop1: detected capacity change from 0 to 256 [ 192.475617][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.462'. [ 192.519327][ T5783] usb 3-1: Using ep0 maxpacket: 16 [ 192.560478][ T5783] usb 3-1: config 0 interface 0 has no altsetting 0 [ 192.600118][ T5783] usb 3-1: New USB device found, idVendor=0eef, idProduct=72aa, bcdDevice= 0.00 [ 192.649856][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.719049][ T5783] usb 3-1: config 0 descriptor?? [ 193.310237][ T7338] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 193.602218][ T31] audit: type=1326 audit(1785660564.676:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7335 comm="syz.5.468" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50f1f9e019 code=0x0 [ 193.650824][ T5783] hid-generic 0003:0EEF:72AA.0005: unknown main item tag 0x6 [ 193.730047][ T5783] hid-generic 0003:0EEF:72AA.0005: unknown main item tag 0x0 [ 193.764971][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.788524][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.844188][ T5783] hid-generic 0003:0EEF:72AA.0005: unknown main item tag 0x0 [ 193.904497][ T5783] hid-generic 0003:0EEF:72AA.0005: unknown main item tag 0x0 [ 193.952799][ T5783] hid-generic 0003:0EEF:72AA.0005: unknown main item tag 0x0 [ 193.983553][ T5783] hid-generic 0003:0EEF:72AA.0005: unknown main item tag 0x0 [ 194.015584][ T5783] hid-generic 0003:0EEF:72AA.0005: unknown main item tag 0x0 [ 194.082485][ T5783] hid-generic 0003:0EEF:72AA.0005: hidraw0: USB HID v0.08 Device [HID 0eef:72aa] on usb-dummy_hcd.2-1/input0 [ 194.181376][ T5783] usb 3-1: USB disconnect, device number 6 [ 195.141634][ T7351] fido_id[7351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 195.411298][ T7363] loop5: detected capacity change from 0 to 1024 [ 195.457164][ T7363] EXT4-fs: Ignoring removed bh option [ 195.496118][ T7363] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 195.642444][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.478'. [ 195.879199][ T7376] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 195.933512][ T7376] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 195.986628][ T7376] udc dummy_udc.0: failed to start g1: -22 [ 195.997510][ T7376] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 196.508026][ T7361] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.521030][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.614952][ T7376] UDC core: g1: couldn't find an available UDC or it's busy [ 197.041745][ T7385] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 197.687537][ T7361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.704833][ T7361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.817433][ T7414] dvmrp0: entered allmulticast mode [ 198.877825][ T6765] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.960022][ T49] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.034396][ T49] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.069859][ T7421] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 199.101406][ T49] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.125324][ T7421] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 199.156465][ T7421] udc dummy_udc.0: failed to start g1: -22 [ 199.195516][ T7421] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 199.272806][ T7421] UDC core: g1: couldn't find an available UDC or it's busy [ 199.707127][ T7433] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 200.591118][ T5637] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 200.786081][ T5637] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.819816][ T5637] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.850675][ T5637] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.878460][ T5637] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.896376][ T5637] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.919859][ T5637] usb 6-1: config 0 descriptor?? [ 200.995178][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.512'. [ 201.476889][ T5637] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 202.169534][ T7479] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 202.194541][ T7479] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 202.204399][ T7479] udc dummy_udc.0: failed to start g1: -22 [ 202.210534][ T7479] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 202.225686][ T7479] UDC core: g1: couldn't find an available UDC or it's busy [ 202.348944][ T7485] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 202.970411][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.522'. [ 203.424002][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.528'. [ 203.483204][ T5637] usb 6-1: USB disconnect, device number 6 [ 203.734416][ T7505] loop6: detected capacity change from 0 to 512 [ 203.830212][ T7505] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm syz.6.529: bg 0: block 5: invalid block bitmap [ 203.852983][ T7505] loop6: lost filesystem error report for type 5 error -117 [ 203.858816][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 203.873221][ C0] EXT4-fs (loop6): initial error at time 1785660574: ext4_validate_block_bitmap:431 [ 203.882805][ C0] EXT4-fs (loop6): last error at time 1785660574: ext4_validate_block_bitmap:431 [ 203.915880][ T7505] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 203.980613][ T7505] loop6: lost filesystem error report for type 5 error -117 [ 203.985364][ T7505] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #11: comm syz.6.529: invalid indirect mapped block 3 (level 2) [ 204.067611][ T7505] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 204.074987][ T7505] EXT4-fs (loop6): 1 orphan inode deleted [ 204.150284][ T7505] EXT4-fs (loop6): 1 truncate cleaned up [ 205.173227][ T7523] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 205.219157][ T7523] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 205.228151][ T7523] udc dummy_udc.0: failed to start g1: -22 [ 205.241442][ T7528] input: syz1 as /devices/virtual/input/input8 [ 206.241201][ T7523] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 206.459909][ T5903] wlan1: Trigger new scan to find an IBSS to join [ 206.502541][ T7523] UDC core: g1: couldn't find an available UDC or it's busy [ 206.806630][ T7505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.124429][ T5875] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.316763][ T7541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.545'. [ 207.530172][ T31] audit: type=1326 audit(1785660578.606:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.6.544" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280019e019 code=0x7fc00000 [ 208.128418][ T7573] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 208.168676][ T7570] loop5: detected capacity change from 0 to 2048 [ 208.189850][ T7573] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 208.255418][ T7573] udc dummy_udc.0: failed to start g1: -22 [ 208.328182][ T7573] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 208.335531][ T7570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.466632][ T7580] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 208.605248][ T7573] UDC core: g1: couldn't find an available UDC or it's busy [ 209.087555][ T7570] EXT4-fs error (device loop5): ext4_ext_precache:631: inode #2: comm syz.5.554: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 209.386799][ T7570] EXT4-fs (loop5): Remounting filesystem read-only [ 209.564961][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.559'. [ 209.669441][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.315293][ T5903] wlan1: Trigger new scan to find an IBSS to join [ 210.423511][ T7617] loop5: detected capacity change from 0 to 1024 [ 210.454810][ T7617] EXT4-fs: Ignoring removed orlov option [ 210.531932][ T7617] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.604848][ T115] wlan1: Creating new IBSS network, BSSID e6:34:18:2c:8e:e3 [ 211.756730][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.772532][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.6.577'. [ 211.855225][ T7642] netlink: 'syz.1.576': attribute type 4 has an invalid length. [ 211.944062][ T7641] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 211.983203][ T7641] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 212.101416][ T7641] udc dummy_udc.0: failed to start g1: -22 [ 212.136721][ T7645] loop5: detected capacity change from 0 to 512 [ 212.168107][ T7641] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 212.230376][ T7641] UDC core: g1: couldn't find an available UDC or it's busy [ 212.314919][ T7645] EXT4-fs (loop5): 1 truncate cleaned up [ 212.390133][ T7645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.538248][ T7645] EXT4-fs (loop5): shut down requested (1) [ 212.733298][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.019219][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 213.162531][ T7675] loop5: detected capacity change from 0 to 2048 [ 213.369493][ T5751] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 213.419005][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 213.901165][ T24] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 213.964689][ T24] usb 7-1: config 0 has no interface number 0 [ 214.008955][ T24] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 214.072203][ T24] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 214.146249][ T24] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 214.223477][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.262373][ T24] usb 7-1: Product: syz [ 214.276527][ T24] usb 7-1: Manufacturer: syz [ 214.293425][ T24] usb 7-1: SerialNumber: syz [ 214.333991][ T5751] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 214.336431][ T24] usb 7-1: config 0 descriptor?? [ 214.369390][ T5751] usb 2-1: config 0 has no interface number 0 [ 214.376264][ T7666] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 214.388046][ T5751] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 214.401881][ T7666] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 214.414828][ T7691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.594'. [ 214.457350][ T5751] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 214.484785][ T5751] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 214.515450][ T5751] usb 2-1: Manufacturer: syz [ 214.539533][ T5751] usb 2-1: SerialNumber: syz [ 214.567728][ T5751] usb 2-1: config 0 descriptor?? [ 214.658517][ T7666] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 214.702096][ T7666] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 214.806299][ T7702] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 214.819918][ T7702] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 214.880677][ T7702] udc dummy_udc.0: failed to start g1: -22 [ 214.899929][ T7702] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 214.941424][ T7702] UDC core: g1: couldn't find an available UDC or it's busy [ 214.968463][ T24] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 215.211066][ T7708] loop1: detected capacity change from 0 to 128 [ 215.262386][ T7708] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.276519][ T7708] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 215.703774][ T7721] loop5: detected capacity change from 0 to 1024 [ 215.728546][ T7721] EXT4-fs: Ignoring removed orlov option [ 215.782442][ T7721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.660052][ T24] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 216.728957][ T24] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 216.815765][ T24] asix 7-1:0.34: probe with driver asix failed with error -71 [ 216.880413][ T5637] usb 2-1: USB disconnect, device number 3 [ 216.928295][ T24] usb 7-1: USB disconnect, device number 4 [ 216.971651][ T5619] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.984438][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.204732][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.5.612'. [ 217.294982][ T7740] loop1: detected capacity change from 0 to 1024 [ 218.821642][ T7755] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 218.958446][ T7755] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 219.083387][ T7755] udc dummy_udc.0: failed to start g1: -22 [ 219.215066][ T7768] loop6: detected capacity change from 0 to 512 [ 219.215304][ T7755] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 219.369204][ T7770] loop5: detected capacity change from 0 to 512 [ 219.375887][ T7768] EXT4-fs (loop6): 1 orphan inode deleted [ 219.475871][ T7768] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.631897][ T7768] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.792848][ T7755] UDC core: g1: couldn't find an available UDC or it's busy [ 219.885591][ T7770] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 219.945186][ T7776] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 220.224916][ T7770] EXT4-fs (loop5): orphan cleanup on readonly fs [ 220.266975][ T7770] Quota error (device loop5): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 220.370269][ T7770] EXT4-fs warning (device loop5): ext4_enable_quotas:7272: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 220.472507][ T7770] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 220.595120][ T7770] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz.5.622: bg 0: block 15: invalid block bitmap [ 220.644023][ T7770] loop5: lost filesystem error report for type 5 error -117 [ 220.648944][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 220.662833][ C0] EXT4-fs (loop5): initial error at time 1785660591: ext4_validate_block_bitmap:431 [ 220.672515][ C0] EXT4-fs (loop5): last error at time 1785660591: ext4_validate_block_bitmap:431 [ 220.678321][ T5875] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.691520][ T7770] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 220.714974][ T7770] loop5: lost filesystem error report for type 5 error -117 [ 220.725296][ T7770] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #16: comm syz.5.622: data will be lost [ 220.784511][ T7770] EXT4-fs (loop5): 1 truncate cleaned up [ 220.798160][ T7770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 220.835396][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.630'. [ 221.015993][ T7790] xt_bpf: check failed: parse error [ 221.149521][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.230267][ T7793] loop1: detected capacity change from 0 to 1024 [ 221.331471][ T7793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.489830][ T31] audit: type=1804 audit(1785660592.546:30): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.633" name="/newroot/106/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 221.594919][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 221.601295][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 221.607670][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 221.614092][ T5642] Bluetooth: hci4: command 0x0406 tx timeout [ 221.635161][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 222.129406][ T7805] EXT4-fs (loop1): shut down requested (2) [ 222.693681][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.728362][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.5.645'. [ 225.648718][ T7861] loop5: detected capacity change from 0 to 1024 [ 225.709084][ T7861] hfsplus: failed to load catalog file [ 225.762335][ T7863] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 225.789631][ T7863] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 225.856379][ T7863] udc dummy_udc.0: failed to start g1: -22 [ 225.887904][ T7863] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 225.932113][ T7867] loop6: detected capacity change from 0 to 1024 [ 225.967134][ T7863] UDC core: g1: couldn't find an available UDC or it's busy [ 226.023647][ T7867] hfsplus: failed to load extents file [ 226.276406][ T7871] loop5: detected capacity change from 0 to 512 [ 226.382101][ T7871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.502874][ T7871] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.581503][ T7871] EXT4-fs error (device loop5): ext4_readdir:223: inode #12: comm syz.5.665: path /102/file0/file0: directory fails checksum at offset 0 [ 226.843835][ T7886] loop1: detected capacity change from 0 to 1024 [ 226.878530][ T7886] EXT4-fs: Ignoring removed orlov option [ 226.911540][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.965981][ T7886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.422591][ T7896] loop6: detected capacity change from 0 to 256 [ 227.565214][ T7905] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 227.873115][ T7896] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.156780][ T7908] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 228.237021][ T7908] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 228.238204][ T5619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.251191][ T7908] udc dummy_udc.0: failed to start g1: -22 [ 228.291550][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.680'. [ 228.328933][ T7908] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 228.404903][ T7908] UDC core: g1: couldn't find an available UDC or it's busy [ 228.789009][ T5637] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 228.980324][ T5637] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 229.001990][ T5637] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.039553][ T5637] usb 2-1: config 0 has no interface number 0 [ 229.064122][ T5637] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 229.090095][ T5637] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.128628][ T5637] usb 2-1: Product: syz [ 229.135113][ T7935] dummy_hcd dummy_hcd.0: remove, state 4 [ 229.147912][ T5637] usb 2-1: Manufacturer: syz [ 229.164197][ T7935] usb usb1: USB disconnect, device number 1 [ 229.173651][ T5637] usb 2-1: SerialNumber: syz [ 229.200192][ T5637] usb 2-1: config 0 descriptor?? [ 229.228490][ T5637] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 229.271017][ T5637] uvcvideo 2-1:0.64: No valid video chain found. [ 230.181275][ T186] usb 2-1: USB disconnect, device number 4 [ 230.535328][ T7935] dummy_hcd dummy_hcd.0: stopped [ 230.569016][ T7935] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 230.643153][ T7936] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 230.683188][ T7936] dummy_hcd dummy_hcd.0: Dummy host controller [ 230.755106][ T7954] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 231.399182][ T7957] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 231.411314][ T7957] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 231.419758][ T7957] CPU: 1 UID: 0 PID: 7957 Comm: syz.6.699 Not tainted syzkaller #0 PREEMPT(full) [ 231.428992][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 231.439085][ T7957] RIP: 0010:dummy_set_selfpowered+0xe4/0x1c0 [ 231.445133][ T7957] Code: c1 ea 03 80 3c 02 00 0f 85 e6 00 00 00 48 8b 9b 90 06 00 00 e8 ed c8 3a fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 231.465120][ T7957] RSP: 0018:ffffc9000385f8e0 EFLAGS: 00010256 [ 231.471341][ T7957] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9001df77000 [ 231.479331][ T7957] RDX: 0000000000000000 RSI: ffffffff87cf87d3 RDI: ffff8880283e5290 [ 231.487320][ T7957] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000005 [ 231.495335][ T7957] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 231.503331][ T7957] R13: ffff8880283e4068 R14: ffff8880283e4c58 R15: ffff8880547b7d10 [ 231.511333][ T7957] FS: 00007f28010e56c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 231.520294][ T7957] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.526903][ T7957] CR2: 00007ffc7d1228cc CR3: 0000000056192000 CR4: 0000000000350ef0 [ 231.535248][ T7957] Call Trace: [ 231.538536][ T7957] [ 231.541481][ T7957] ? __pfx_dummy_set_selfpowered+0x10/0x10 [ 231.547364][ T7957] usb_gadget_set_selfpowered+0x73/0x2b0 [ 231.553064][ T7957] composite_dev_prepare+0x254/0x420 [ 231.558442][ T7957] configfs_composite_bind+0xd2/0x1960 [ 231.564059][ T7957] ? kernfs_create_link+0x1bd/0x240 [ 231.569476][ T7957] gadget_bind_driver+0x28c/0xbf0 [ 231.574729][ T7957] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 231.580454][ T7957] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.586128][ T7957] ? __pfx_gadget_bind_driver+0x10/0x10 [ 231.591716][ T7957] really_probe+0x241/0xa60 [ 231.596273][ T7957] __driver_probe_device+0x20e/0x450 [ 231.601775][ T7957] driver_probe_device+0x4a/0x140 [ 231.606850][ T7957] __driver_attach+0x21f/0x5b0 [ 231.611746][ T7957] ? __pfx___driver_attach+0x10/0x10 [ 231.617071][ T7957] bus_for_each_dev+0x13e/0x1d0 [ 231.622040][ T7957] ? __pfx_bus_for_each_dev+0x10/0x10 [ 231.627490][ T7957] ? bus_add_driver+0x2b5/0x5b0 [ 231.632390][ T7957] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.638060][ T7957] bus_add_driver+0x305/0x5b0 [ 231.642791][ T7957] driver_register+0x1e2/0x360 [ 231.647586][ T7957] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.653249][ T7957] usb_gadget_register_driver_owner+0x132/0x210 [ 231.659516][ T7957] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 231.665206][ T7957] configfs_write_iter+0x302/0x4e0 [ 231.670372][ T7957] vfs_write+0x6ac/0x1050 [ 231.674735][ T7957] ? __pfx_configfs_write_iter+0x10/0x10 [ 231.680412][ T7957] ? __pfx_vfs_write+0x10/0x10 [ 231.685224][ T7957] ksys_write+0x12a/0x250 [ 231.689668][ T7957] ? __pfx_ksys_write+0x10/0x10 [ 231.694546][ T7957] ? srso_alias_return_thunk+0x5/0xfbef5 [ 231.700218][ T7957] do_syscall_64+0x115/0x870 [ 231.704896][ T7957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.710839][ T7957] RIP: 0033:0x7f280019e019 [ 231.715502][ T7957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.735156][ T7957] RSP: 002b:00007f28010e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.743679][ T7957] RAX: ffffffffffffffda RBX: 00007f2800425fa0 RCX: 00007f280019e019 [ 231.751668][ T7957] RDX: 000000000000000b RSI: 0000200000000900 RDI: 0000000000000007 [ 231.759736][ T7957] RBP: 00007f280023500c R08: 0000000000000000 R09: 0000000000000000 [ 231.767714][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.775902][ T7957] R13: 00007f2800426038 R14: 00007f2800425fa0 R15: 00007ffd49a106c8 [ 231.784013][ T7957] [ 231.787034][ T7957] Modules linked in: [ 231.792962][ T7957] ---[ end trace 0000000000000000 ]--- [ 231.800890][ T7936] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 231.835729][ T7936] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 231.846446][ T7936] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 231.855393][ T7936] usb usb1: Product: Dummy host controller [ 231.861592][ T7936] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 231.874658][ T7936] usb usb1: SerialNumber: dummy_hcd.0 [ 231.882359][ T7957] RIP: 0010:dummy_set_selfpowered+0xe4/0x1c0 [ 231.889076][ T7957] Code: c1 ea 03 80 3c 02 00 0f 85 e6 00 00 00 48 8b 9b 90 06 00 00 e8 ed c8 3a fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 231.912995][ T7957] RSP: 0018:ffffc9000385f8e0 EFLAGS: 00010256 [ 231.920201][ T7936] hub 1-0:1.0: USB hub found [ 231.925504][ T7936] hub 1-0:1.0: 1 port detected [ 231.935464][ T7957] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9001df77000 [ 231.948019][ T7957] RDX: 0000000000000000 RSI: ffffffff87cf87d3 RDI: ffff8880283e5290 [ 231.956467][ T7957] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000005 [ 231.965115][ T7957] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 231.973833][ T7957] R13: ffff8880283e4068 R14: ffff8880283e4c58 R15: ffff8880547b7d10 [ 231.984415][ T7957] FS: 00007f28010e56c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 231.994931][ T7957] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.001938][ T7957] CR2: 000000110c386053 CR3: 0000000056192000 CR4: 0000000000350ef0 [ 232.010540][ T7957] Kernel panic - not syncing: Fatal exception [ 232.017007][ T7957] Kernel Offset: disabled [ 232.021730][ T7957] Rebooting in 86400 seconds..