last executing test programs: 3m23.120583025s ago: executing program 0 (id=50): sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}, {&(0x7f00000005c0)}], 0x3}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02", 0x63}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)}, {0x0}], 0x6}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m22.797331911s ago: executing program 0 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfc, 0xa8, 0x0, 0x6, 0xd9, 0x5, 0x1, 0xfb, 0x0, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4040800) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) 3m21.292442426s ago: executing program 0 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0x6, 0x2c1, &(0x7f0000001880)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZzWSNMZHNyu1+Ps0++8zznfk9k4fsbJEnH748Obqfx8MnX/wSWZZEZxjDOEliEJ1ofBULht8EAPAsOymK+L2Y2SSXRES2vbIAgC1a7+9/d9786VLKAgC26N677729f3Bw550ssrg7+fp4VP5nX/6cHd9/GB/HOB7Ea9GP04jqQWE3qqeFsnm3KIppNy8N4uZkejwqk5MPntbn3/8tosrvRT8GVdfZ00aVf+vgzl4+08pPyzqer68/LPO3ox8vnoUX8reX5GOUxquvtOq/Ff34+aP4JMZxvypinv9yL8/fLL794/P3y/LKfDI9HvWqcXPFziW/NAAAAAAAAAAAAAAAAAAAAAAAXGG36r1zepHfiJuTsqvef2fnNNLy17wxWNyfZ5ZPmhO19wcqimJaxPetLQXzoh44z3fjpW57Y0EAAAAAAAAAAAAAAAAAAAC4vh5/+tnR4Xj84NGFNJrdALoR8ee9iP96nmGr50asHtyrr3k4Hnfq5sKYp2m7J3aaMUnEyjLKSVzQbfm3xnPna24aP/xYTnCTE2atnteXT3B3+/NqVtfRYbL8Wr1oerJ6kXyXRszHpLHmtdJ/OlTEJssvXXqov/Hc0xeqxnTFmEhWFfbGr7M7V/ck52eRVnd1aXy3brTi59bGWq97ZLP4398rkmq3jt723owAAAAAAAAAAAAAAAAAAOCam3/6d8nBJyujncJHgQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Iubf/79BY1qH1xicxqPH//MUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAb+CgAA//8HIVi7") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = inotify_init() r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x8, 0x7, 0x8, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d000000040000000400", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a0000000000007910a8000d00000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) inotify_add_watch(r3, &(0x7f0000000180)='./file0\x00', 0x449) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x198) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000180)={0x2, 0x5}, 0x8) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 3m19.539801582s ago: executing program 0 (id=59): sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}, {&(0x7f00000005c0)}], 0x3}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02", 0x63}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)}, {0x0}], 0x6}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea76a6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1b3ac0686db46783f45fe6aa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a775f0a4b15f63f5c4851df9aef747ace240cec55ce1659c08d38714245835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe8a4edde1c5397c761a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a24eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000025d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e947cc15e0957a98a843911c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fc0e796afead2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f6f4bc29e7dbfae6788549e600000000271cd7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dccee1a480d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbee3f263a16cb565b61690b5804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb32d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca4d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m18.197192428s ago: executing program 0 (id=61): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0xc000) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x100000000, 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x80, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x801, 0x2000004, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m8.841550119s ago: executing program 0 (id=76): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 3m8.489379596s ago: executing program 32 (id=76): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 17.979065595s ago: executing program 4 (id=425): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000540)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0}) 13.713105075s ago: executing program 1 (id=431): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x6, @string={0x6, 0x3, "86315950"}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.253155757s ago: executing program 4 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0x6, 0x2c1, &(0x7f0000001880)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZzWSNMZHNyu1+Ps0++8zznfk9k4fsbJEnH748Obqfx8MnX/wSWZZEZxjDOEliEJ1ofBULht8EAPAsOymK+L2Y2SSXRES2vbIAgC1a7+9/d9786VLKAgC26N677729f3Bw550ssrg7+fp4VP5nX/6cHd9/GB/HOB7Ea9GP04jqQWE3qqeFsnm3KIppNy8N4uZkejwqk5MPntbn3/8tosrvRT8GVdfZ00aVf+vgzl4+08pPyzqer68/LPO3ox8vnoUX8reX5GOUxquvtOq/Ff34+aP4JMZxvypinv9yL8/fLL794/P3y/LKfDI9HvWqcXPFziW/NAAAAAAAAAAAAAAAAAAAAAAAXGG36r1zepHfiJuTsqvef2fnNNLy17wxWNyfZ5ZPmhO19wcqimJaxPetLQXzoh44z3fjpW57Y0EAAAAAAAAAAAAAAAAAAAC4vh5/+tnR4Xj84NGFNJrdALoR8ee9iP96nmGr50asHtyrr3k4Hnfq5sKYp2m7J3aaMUnEyjLKSVzQbfm3xnPna24aP/xYTnCTE2atnteXT3B3+/NqVtfRYbL8Wr1oerJ6kXyXRszHpLHmtdJ/OlTEJssvXXqov/Hc0xeqxnTFmEhWFfbGr7M7V/ck52eRVnd1aXy3brTi59bGWq97ZLP4398rkmq3jt723owAAAAAAAAAAAAAAAAAAOCam3/6d8nBJyujncJHgQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Iubf/79BY1qH1xicxqPH//MUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAb+CgAA//8HIVi7") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = inotify_init() r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x8, 0x7, 0x8, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a0000000000007910a8000d00000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) inotify_add_watch(r3, &(0x7f0000000180)='./file0\x00', 0x449) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x198) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000180)={0x2, 0x5}, 0x8) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x40047211, &(0x7f0000000400)) socket(0x10, 0x3, 0x0) open(0x0, 0xcc00, 0x20) 12.339992133s ago: executing program 4 (id=436): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x1e, 0x2, &(0x7f0000000080)="3cca") syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r2) syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300000009", @ANYBLOB="8fcf"], 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041fc700000000000109022400010000e80b090400000103eb01000921fd7f000122e3010905810389"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x0, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) syz_usb_ep_read(r0, 0xce, 0xa6, &(0x7f0000000100)=""/166) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x82, &(0x7f0000000080)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000001c0)={0x50, 0x3, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x5c, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0x6, 0xfffb, 0xa}, 0x0, 0x0}}) 11.334097962s ago: executing program 1 (id=437): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f00000004c0)={[], [{@context={'context', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, '%'}}, {@obj_user={'obj_user', 0x3d, '|\xef\x89m*w\xabU\xf0\xc9\xe0\xb88=\x88\xcf\xfa\xda\x93:A;\xe4\x0f\x87\xefP\t\x8f\xc0\xe4k\xec\xf4\x0f\xe4\xadI\xa1\xfb\'w\xe6\xeb\xe5\x1e\xdex^\xeb'}}, {@dont_hash}, {@fowner_eq}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@obj_type={'obj_type', 0x3d, '[c'}}, {@obj_user={'obj_user', 0x3d, '.\x82{%'}}, {@smackfshat={'smackfshat', 0x3d, '\x00\x00'}}, {@dont_appraise}]}, 0x1, 0x56b, &(0x7f0000000b00)="$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") syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x110e022, &(0x7f0000000400)=ANY=[], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000005a40)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000400), 0x2000011a) r4 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1}, 0x80, 0x0}}], 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket(0x10, 0x6, 0x401) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r7, &(0x7f0000008340), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12450031, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utime(&(0x7f0000000100)='./file0\x00', 0x0) 9.196559057s ago: executing program 3 (id=441): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c757466383d302c757466383d312c756e695f786c6174653d302c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c6e66733d6e6f7374616c655f726f2c756e695f786c6174653d312c73686f72746e616d653d77696e39352c646973636172642c004338cb8631b26441e86414f461975e105d02960776fcb7ddfd80b96c1b2ffd13d5cc37784797dbc9e26b7c39310b49940995ce6e6ce1c218890b59506de99e2dd234abcde0be50d3de656741fee78f74e94ee73bd6d7162f0d2a8275e0a6125615ce223c21fe303d561d81b2681dce1c0b7061c5a347b2040e7b6c9210507527467dad005f3e38c47d4daa9d76c69f51ffeb2f81123fe54df14c6c02413e51ba63c35f11"], 0x0, 0x2b9, &(0x7f0000000280)="$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") 8.631213045s ago: executing program 1 (id=442): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 8.399037827s ago: executing program 4 (id=443): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2a140, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, 0x0) 8.205291946s ago: executing program 1 (id=445): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x6, @string={0x6, 0x3, "86315950"}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.588227136s ago: executing program 4 (id=446): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b06e53f0708"], 0x0}, 0x0) 6.346164848s ago: executing program 3 (id=447): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x27, 0x0, &(0x7f0000000380)="b99331b81ac2a7f63d2233f088a82de0ffff200000000001010aac14140ce000c33159e332f0c0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.721234629s ago: executing program 2 (id=449): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) getpid() mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2a400, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x8008743f, 0xf0ff1f00000000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x7, 0xc1}, 0x48) syz_open_procfs$namespace(0x0, 0x0) openat$cgroup_type(r0, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, 0x0) 5.525975908s ago: executing program 3 (id=450): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f00000004c0)={[], [{@context={'context', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, '%'}}, {@obj_user={'obj_user', 0x3d, '|\xef\x89m*w\xabU\xf0\xc9\xe0\xb88=\x88\xcf\xfa\xda\x93:A;\xe4\x0f\x87\xefP\t\x8f\xc0\xe4k\xec\xf4\x0f\xe4\xadI\xa1\xfb\'w\xe6\xeb\xe5\x1e\xdex^\xeb'}}, {@dont_hash}, {@fowner_eq}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@obj_type={'obj_type', 0x3d, '[c'}}, {@obj_user={'obj_user', 0x3d, '.\x82{%'}}, {@smackfshat={'smackfshat', 0x3d, '\x00\x00'}}, {@dont_appraise}]}, 0x1, 0x56b, &(0x7f0000000b00)="$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") syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x110e022, &(0x7f0000000400)=ANY=[], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000005a40)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000400), 0x2000011a) r4 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1}, 0x80, 0x0}}], 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket(0x10, 0x6, 0x401) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r7, &(0x7f0000008340), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12450031, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x1000c0b, 0x0) 5.379440786s ago: executing program 2 (id=451): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f00000004c0)={[], [{@context={'context', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, '%'}}, {@obj_user={'obj_user', 0x3d, '|\xef\x89m*w\xabU\xf0\xc9\xe0\xb88=\x88\xcf\xfa\xda\x93:A;\xe4\x0f\x87\xefP\t\x8f\xc0\xe4k\xec\xf4\x0f\xe4\xadI\xa1\xfb\'w\xe6\xeb\xe5\x1e\xdex^\xeb'}}, {@dont_hash}, {@fowner_eq}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@obj_type={'obj_type', 0x3d, '[c'}}, {@obj_user={'obj_user', 0x3d, '.\x82{%'}}, {@smackfshat={'smackfshat', 0x3d, '\x00\x00'}}, {@dont_appraise}]}, 0x1, 0x56b, &(0x7f0000000b00)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdy+A/4Vwx0MGQUvfCmctKTLmvTNuvSJVs+HzjjfXNO+p4n73nevSdvQgIYWKPZP4WIlyPimyTicEQk+b7hyHeOrh63/PD6VLYlsbLy6V9J47is3vxbzecdzCsvRcRvX0WcLGxst7a4NFuuVNL5vD5Wn7syVltcOnVprjyTzqSXJyYnz7w9OfHeu+90LdY3zv/z/Sd3Pzzz9fHl7365f+R2EmfjUL6vNY6ncKO1Mhqj+WtSjLPrDhzvQmP9JOn1CbAjQ3meFyMbAw7HUJ71wIvvy4hYAQZUIv9hQDXnAc17+y7dBz83HnywegO0Mf7h1fdGYl/j3ujAcvLYnVF2vzvShfazNn79887tbIvuvQ8BsK0bNyPi9PDwxvEvyce/nTvdwTHr2zD+wbNzN5v/vNlu/lNYm/9Em/nPwTa5uxPb53/hfhea2VQ2/3u/7fx3bdFqZCiv/a8x5ysmFy9V0mxs+39EnIji3qy+1XrOmeV7K5vta53/ZVvWfnMumJ/H/eG9jz9nulwvP03MrR7cjHil7fw3Wev/pE3/Z6/H+Q7bOJbeeW2zfdvHv7tWfop4vW3/P1rRSrZenxxrXA9jzatio79vHft9s/Z7HX/W/wc2xF9sjX8kaV2vrT15Gz/u+zfdbN9j8Ufn1/+e5LNGeU/+2LVyvT4/HrEn+Xjj4xOPntusN4/P4j9xfOvxr931vz8iPu8w/ltHf361o/i36/9dWGTN4p/e+vpf1/9PXrj30Rc/7Dz+rP/fapRO5I90Mv51eoJP89oBAAAAAABAvylExKFICqW1cqFQKq1+vuNoHChUqrX6yYvVhcvT0fiu7EgUC82V7sMtn4cYzz8P26xPrKtPRsSRiPh2aH+jXpqqVqZ7HTwAAAAAAAAAAAAAAAAAAAD0iYObfP8/88dQr88O2HV+8hsG17b5341fegL6kv//YXDJfxhc8h8Gl/yHwSX/YXDJfxhc8h8GUyL/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoNvOnzuXbSvLD69PZfXpq4sLs9Wrp6bT2mxpbmGqNFWdv1KaqVZnKmlpqjq33d+rVKtXxidi4dpYPa3Vx2qLSxfmqguX6xcuzZVn0gtp8ZlEBQAAAAAAAAAAAAAAAAAAAM+X2uLSbLlSSed7UhjqaesK3SgM98dpLM1G9MVpvCiFXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//q/g2ew==") syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x110e022, &(0x7f0000000400)=ANY=[], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000005a40)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000400), 0x2000011a) r4 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1}, 0x80, 0x0}}], 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket(0x10, 0x6, 0x401) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r7, &(0x7f0000008340), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12450031, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x1000c0b, 0x0) 3.314799647s ago: executing program 3 (id=452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3.279195059s ago: executing program 2 (id=453): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) 3.224642312s ago: executing program 1 (id=454): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x20, 0xd, 0x48, {0x48, 0x5, "766b146ffe49f32b7e53eb47fc095ab94291899d2a0824370898a8952a2c25987f73d5d503cdc4ac1fadf6a3b6f1cb1ee747946e2e0fd1da5d3e2bfaa2d11b4aa1fcc8eec3ec"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x20, 0x23, 0x2, {0x2, 0x9}}, &(0x7f0000000a00)=ANY=[], &(0x7f0000000180)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x14, 0x5, 0xd, 0x8, 0x21}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0xd4c5728ef60ccba2, 0x7f, 0x5, "6dcabc91", "e2a31bfd"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x60, 0x2, 0xfe, 0xf, 0x400, 0x8}}}, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x0, &(0x7f0000000400)) 3.025327851s ago: executing program 3 (id=455): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCGMASK(r1, 0x5b01, 0x0) 2.985423554s ago: executing program 2 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0x6, 0x2c1, &(0x7f0000001880)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZzWSNMZHNyu1+Ps0++8zznfk9k4fsbJEnH748Obqfx8MnX/wSWZZEZxjDOEliEJ1ofBULht8EAPAsOymK+L2Y2SSXRES2vbIAgC1a7+9/d9786VLKAgC26N677729f3Bw550ssrg7+fp4VP5nX/6cHd9/GB/HOB7Ea9GP04jqQWE3qqeFsnm3KIppNy8N4uZkejwqk5MPntbn3/8tosrvRT8GVdfZ00aVf+vgzl4+08pPyzqer68/LPO3ox8vnoUX8reX5GOUxquvtOq/Ff34+aP4JMZxvypinv9yL8/fLL794/P3y/LKfDI9HvWqcXPFziW/NAAAAAAAAAAAAAAAAAAAAAAAXGG36r1zepHfiJuTsqvef2fnNNLy17wxWNyfZ5ZPmhO19wcqimJaxPetLQXzoh44z3fjpW57Y0EAAAAAAAAAAAAAAAAAAAC4vh5/+tnR4Xj84NGFNJrdALoR8ee9iP96nmGr50asHtyrr3k4Hnfq5sKYp2m7J3aaMUnEyjLKSVzQbfm3xnPna24aP/xYTnCTE2atnteXT3B3+/NqVtfRYbL8Wr1oerJ6kXyXRszHpLHmtdJ/OlTEJssvXXqov/Hc0xeqxnTFmEhWFfbGr7M7V/ck52eRVnd1aXy3brTi59bGWq97ZLP4398rkmq3jt723owAAAAAAAAAAAAAAAAAAOCam3/6d8nBJyujncJHgQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Iubf/79BY1qH1xicxqPH//MUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAb+CgAA//8HIVi7") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = inotify_init() r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x8, 0x7, 0x8, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a0000000000007910a8000d00000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) inotify_add_watch(r3, &(0x7f0000000180)='./file0\x00', 0x449) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x198) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000180)={0x2, 0x5}, 0x8) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x40047211, &(0x7f0000000400)) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) 1.793743242s ago: executing program 4 (id=457): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104f0ff01090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r1 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 1.779470773s ago: executing program 2 (id=458): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000006000010b507120300000000000109022400010000800009040000090300000009210001020122290009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xa9, &(0x7f0000000180)=ANY=[@ANYBLOB="12010003000000406b1d0101400001020301090297000301ede4020904000000010101000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002000a000b00040c240202030202788000090109040100000103000009040101010102"], 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 97.711746ms ago: executing program 3 (id=459): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 58.179607ms ago: executing program 1 (id=460): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x97, 0x19, 0xa5, 0x8, 0x46d, 0x897, 0x5104, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0x90, 0x5, "", [{{0x9, 0x4, 0x1e, 0x7, 0x0, 0x94, 0xb7, 0x2d, 0x5}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=461): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f00000004c0)={[], [{@context={'context', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, '%'}}, {@obj_user={'obj_user', 0x3d, '|\xef\x89m*w\xabU\xf0\xc9\xe0\xb88=\x88\xcf\xfa\xda\x93:A;\xe4\x0f\x87\xefP\t\x8f\xc0\xe4k\xec\xf4\x0f\xe4\xadI\xa1\xfb\'w\xe6\xeb\xe5\x1e\xdex^\xeb'}}, {@dont_hash}, {@fowner_eq}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@obj_type={'obj_type', 0x3d, '[c'}}, {@obj_user={'obj_user', 0x3d, '.\x82{%'}}, {@smackfshat={'smackfshat', 0x3d, '\x00\x00'}}, {@dont_appraise}]}, 0x1, 0x56b, &(0x7f0000000b00)="$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") syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x110e022, &(0x7f0000000400)=ANY=[], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000005a40)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000400), 0x2000011a) r4 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1}, 0x80, 0x0}}], 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket(0x10, 0x6, 0x401) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x1000c0b, 0x0) kernel console output (not intermixed with test programs): ED25519) to the list of known hosts. [ 71.736612][ T5758] cgroup: Unknown subsys name 'net' [ 71.871308][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.189089][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.196967][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.292401][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.605430][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.616858][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.634769][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.643606][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.652497][ T5771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.664903][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.727359][ T5771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.738020][ T5771] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.745909][ T5771] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.765724][ T5771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.775331][ T5771] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.786333][ T5771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.809224][ T5084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.818752][ T5084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.827376][ T5084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.842674][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.854491][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.863052][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.896245][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.905782][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.914037][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.924267][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.933089][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.943636][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.171332][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 75.312880][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.322402][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.330762][ T5769] bridge_slave_0: entered allmulticast mode [ 75.338952][ T5769] bridge_slave_0: entered promiscuous mode [ 75.348533][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 75.377651][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.385512][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.393378][ T5769] bridge_slave_1: entered allmulticast mode [ 75.405914][ T5769] bridge_slave_1: entered promiscuous mode [ 75.485752][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.513364][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.587294][ T5769] team0: Port device team_slave_0 added [ 75.600918][ T5769] team0: Port device team_slave_1 added [ 75.646384][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 75.675672][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.682949][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.711347][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.724620][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.732104][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.741774][ T5772] bridge_slave_0: entered allmulticast mode [ 75.749502][ T5772] bridge_slave_0: entered promiscuous mode [ 75.778909][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.786338][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.814449][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.826640][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.833882][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.842760][ T5772] bridge_slave_1: entered allmulticast mode [ 75.850357][ T5772] bridge_slave_1: entered promiscuous mode [ 75.877128][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 75.919884][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.962724][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.013303][ T5769] hsr_slave_0: entered promiscuous mode [ 76.020598][ T5769] hsr_slave_1: entered promiscuous mode [ 76.060242][ T5772] team0: Port device team_slave_0 added [ 76.095603][ T5772] team0: Port device team_slave_1 added [ 76.117707][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.125622][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.133096][ T5774] bridge_slave_0: entered allmulticast mode [ 76.140433][ T5774] bridge_slave_0: entered promiscuous mode [ 76.197208][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.204727][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.212640][ T5774] bridge_slave_1: entered allmulticast mode [ 76.220161][ T5774] bridge_slave_1: entered promiscuous mode [ 76.256632][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.275837][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.282835][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.310145][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.322091][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.330254][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.338414][ T5777] bridge_slave_0: entered allmulticast mode [ 76.346812][ T5777] bridge_slave_0: entered promiscuous mode [ 76.355914][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.363800][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.372163][ T5777] bridge_slave_1: entered allmulticast mode [ 76.380902][ T5777] bridge_slave_1: entered promiscuous mode [ 76.390204][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.415287][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.422366][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.450080][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.522159][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.537584][ T5774] team0: Port device team_slave_0 added [ 76.560384][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.573534][ T5774] team0: Port device team_slave_1 added [ 76.632547][ T5772] hsr_slave_0: entered promiscuous mode [ 76.639339][ T5772] hsr_slave_1: entered promiscuous mode [ 76.646153][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.654648][ T5772] Cannot create hsr debugfs directory [ 76.671608][ T5777] team0: Port device team_slave_0 added [ 76.690368][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.697605][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.725468][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.746501][ T5779] Bluetooth: hci0: command tx timeout [ 76.758273][ T5777] team0: Port device team_slave_1 added [ 76.786605][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.793964][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.824991][ T5779] Bluetooth: hci1: command tx timeout [ 76.825261][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.904556][ T5779] Bluetooth: hci2: command tx timeout [ 76.917008][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.924074][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.951417][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.964856][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.972100][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.999827][ T5779] Bluetooth: hci3: command tx timeout [ 77.006380][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.058548][ T5774] hsr_slave_0: entered promiscuous mode [ 77.065453][ T5774] hsr_slave_1: entered promiscuous mode [ 77.072832][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.084422][ T5774] Cannot create hsr debugfs directory [ 77.203098][ T5777] hsr_slave_0: entered promiscuous mode [ 77.209938][ T5777] hsr_slave_1: entered promiscuous mode [ 77.217147][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.226691][ T5777] Cannot create hsr debugfs directory [ 77.297842][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.342735][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.353028][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.396867][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.495844][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.517260][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.527893][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.539871][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.629805][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.658145][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.677363][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.690363][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.779502][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.793577][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.817237][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.829384][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.899949][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.915956][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.966424][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.991700][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.030789][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.038320][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.051555][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.059065][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.068503][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.076253][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.088293][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.095782][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.224198][ T5769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.236984][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.257529][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.281743][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.340398][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.384198][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.391522][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.417666][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.438628][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.445920][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.473267][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.481062][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.507436][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.514769][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.729517][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.776362][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.831670][ T5779] Bluetooth: hci0: command tx timeout [ 78.858308][ T5772] veth0_vlan: entered promiscuous mode [ 78.891457][ T5772] veth1_vlan: entered promiscuous mode [ 78.905585][ T5779] Bluetooth: hci1: command tx timeout [ 78.975632][ T5772] veth0_macvtap: entered promiscuous mode [ 78.984537][ T5779] Bluetooth: hci2: command tx timeout [ 79.012381][ T5769] veth0_vlan: entered promiscuous mode [ 79.028631][ T5772] veth1_macvtap: entered promiscuous mode [ 79.052617][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.067181][ T5779] Bluetooth: hci3: command tx timeout [ 79.097183][ T5769] veth1_vlan: entered promiscuous mode [ 79.117876][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.132023][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.155647][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.171489][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.181383][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.191492][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.200710][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.278442][ T5774] veth0_vlan: entered promiscuous mode [ 79.293291][ T5769] veth0_macvtap: entered promiscuous mode [ 79.321533][ T5769] veth1_macvtap: entered promiscuous mode [ 79.362859][ T5774] veth1_vlan: entered promiscuous mode [ 79.412527][ T5777] veth0_vlan: entered promiscuous mode [ 79.422918][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.435278][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.447019][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.472253][ T5777] veth1_vlan: entered promiscuous mode [ 79.487072][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.499126][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.508078][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.519683][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.531266][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.563329][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.574130][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.584456][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.593204][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.634608][ T5777] veth0_macvtap: entered promiscuous mode [ 79.661393][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.677309][ T5777] veth1_macvtap: entered promiscuous mode [ 79.685499][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.696638][ T5774] veth0_macvtap: entered promiscuous mode [ 79.709069][ T5774] veth1_macvtap: entered promiscuous mode [ 79.750244][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.769838][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.780444][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.799766][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.812604][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.878521][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.890592][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.902448][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.913104][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.926366][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.937862][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.951448][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.962097][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.974149][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.988009][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.000044][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.026843][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.058827][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.085343][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.086534][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.099251][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.122846][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.131894][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.135440][ T5832] syz.1.2[5832]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 80.155745][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.172399][ T5832] loop1: detected capacity change from 0 to 512 [ 80.179548][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.199900][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.212385][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.222682][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.234079][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.245995][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.291068][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.300455][ T5832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 80.302450][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.313829][ T5832] ext4 filesystem being mounted at /0/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.330445][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.344085][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.419574][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 80.452564][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.480379][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.603965][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.623200][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.792627][ T5841] loop1: detected capacity change from 0 to 256 [ 80.805434][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.813394][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.858899][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.879411][ T5841] FAT-fs (loop1): Directory bread(block 64) failed [ 80.889639][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.898525][ T5841] FAT-fs (loop1): Directory bread(block 65) failed [ 80.915109][ T5841] FAT-fs (loop1): Directory bread(block 66) failed [ 80.916592][ T5779] Bluetooth: hci0: command tx timeout [ 80.951452][ T5841] FAT-fs (loop1): Directory bread(block 67) failed [ 80.970275][ T5841] FAT-fs (loop1): Directory bread(block 68) failed [ 80.977664][ T5841] FAT-fs (loop1): Directory bread(block 69) failed [ 80.984572][ T5779] Bluetooth: hci1: command tx timeout [ 80.991497][ T5841] FAT-fs (loop1): Directory bread(block 70) failed [ 81.000916][ T5841] FAT-fs (loop1): Directory bread(block 71) failed [ 81.001025][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.008350][ T5841] FAT-fs (loop1): Directory bread(block 72) failed [ 81.008398][ T5841] FAT-fs (loop1): Directory bread(block 73) failed [ 81.037111][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.065211][ T5779] Bluetooth: hci2: command tx timeout [ 81.146059][ T5779] Bluetooth: hci3: command tx timeout [ 81.175334][ T5807] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.233246][ T5841] syz.1.6: attempt to access beyond end of device [ 81.233246][ T5841] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 81.320313][ T5849] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.376365][ T5807] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.771382][ T5807] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.967611][ T5807] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.109231][ T5807] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.138293][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.166086][ T5807] usb 1-1: Product: syz [ 82.170424][ T5807] usb 1-1: Manufacturer: syz [ 82.178659][ T5807] usb 1-1: SerialNumber: syz [ 82.486633][ T5860] loop3: detected capacity change from 0 to 1024 [ 82.521102][ T5860] ======================================================= [ 82.521102][ T5860] WARNING: The mand mount option has been deprecated and [ 82.521102][ T5860] and is ignored by this kernel. Remove the mand [ 82.521102][ T5860] option from the mount to silence this warning. [ 82.521102][ T5860] ======================================================= [ 82.645637][ T5860] EXT4-fs: Ignoring removed i_version option [ 82.696683][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.705487][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.728200][ T5860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.850800][ T5807] cdc_ncm 1-1:1.0: bind() failure [ 82.912346][ T5807] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 82.936617][ T28] audit: type=1800 audit(1773858770.700:2): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 82.959447][ T5807] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 83.004477][ T5779] Bluetooth: hci0: command tx timeout [ 83.005974][ T5860] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4045: comm syz.3.11: Allocating blocks 385-513 which overlap fs metadata [ 83.014523][ T5807] usbtest: probe of 1-1:1.1 failed with error -71 [ 83.114554][ T5779] Bluetooth: hci1: command tx timeout [ 83.133804][ T5866] EXT4-fs (loop3): pa ffff888078550910: logic 16, phys. 129, len 24 [ 83.142507][ T5866] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5386: group 0, free 0, pa_free 8 [ 83.168315][ T5779] Bluetooth: hci2: command tx timeout [ 83.225500][ T5779] Bluetooth: hci3: command tx timeout [ 83.253869][ T5807] usb 1-1: USB disconnect, device number 2 [ 83.452731][ T5868] loop0: detected capacity change from 0 to 256 [ 83.883840][ T28] audit: type=1804 audit(1773858771.540:3): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.12" name="/newroot/2/file0/file0" dev="loop0" ino=1048593 res=1 errno=0 [ 84.188212][ T12] Trying to write to read-only block-device loop3 [ 84.236382][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.376628][ T5859] loop1: detected capacity change from 0 to 40427 [ 84.425447][ T5859] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 84.441215][ T5875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14'. [ 84.451541][ T5859] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 84.524684][ T5859] F2FS-fs (loop1): Found nat_bits in checkpoint [ 84.679317][ T5859] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 84.690388][ T5851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.697570][ T5859] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 84.779270][ T5851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.405742][ T5851] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.415781][ T5851] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.425817][ T5851] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.435053][ T5851] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.537075][ T5884] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.779073][ T5882] loop3: detected capacity change from 0 to 40427 [ 85.856145][ T5760] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 85.985307][ T5892] loop0: detected capacity change from 0 to 128 [ 86.041723][ T5892] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 86.068562][ T5892] FAT-fs (loop0): Filesystem has been set read-only [ 86.340496][ T5897] loop0: detected capacity change from 0 to 512 [ 86.383057][ T5897] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.417495][ T5897] EXT4-fs: journaled quota format not specified [ 87.731450][ T9] cfg80211: failed to load regulatory.db [ 87.954232][ T5907] loop2: detected capacity change from 0 to 256 [ 87.961949][ T5907] exfat: Deprecated parameter 'utf8' [ 87.967635][ T5907] exfat: Deprecated parameter 'namecase' [ 87.973397][ T5907] exfat: Deprecated parameter 'utf8' [ 88.015927][ T5907] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 88.804530][ T5829] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.634403][ T5829] usb 2-1: Using ep0 maxpacket: 32 [ 89.647430][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.752605][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.763338][ T5829] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 89.776266][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.809355][ T5829] usb 2-1: config 0 descriptor?? [ 89.833184][ T5829] hub 2-1:0.0: USB hub found [ 89.843479][ T5921] loop2: detected capacity change from 0 to 256 [ 90.111550][ T5921] FAT-fs (loop2): Directory bread(block 64) failed [ 90.118656][ T5921] FAT-fs (loop2): Directory bread(block 65) failed [ 90.127292][ T5921] FAT-fs (loop2): Directory bread(block 66) failed [ 90.136990][ T5921] FAT-fs (loop2): Directory bread(block 67) failed [ 90.143762][ T5921] FAT-fs (loop2): Directory bread(block 68) failed [ 90.322776][ T5921] FAT-fs (loop2): Directory bread(block 69) failed [ 90.403142][ T5921] FAT-fs (loop2): Directory bread(block 70) failed [ 90.500600][ T5921] FAT-fs (loop2): Directory bread(block 71) failed [ 90.631654][ T5921] FAT-fs (loop2): Directory bread(block 72) failed [ 90.823541][ T5829] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 90.849689][ T5921] FAT-fs (loop2): Directory bread(block 73) failed [ 90.925082][ T5829] usbhid 2-1:0.0: can't add hid device: -71 [ 90.964542][ T5829] usbhid: probe of 2-1:0.0 failed with error -71 [ 91.030504][ T5829] usb 2-1: USB disconnect, device number 2 [ 91.874708][ T5861] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.315609][ T5861] usb 3-1: Using ep0 maxpacket: 32 [ 92.360086][ T5861] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 92.391656][ T5861] usb 3-1: config 0 has no interface number 0 [ 92.415177][ T5861] usb 3-1: config 0 interface 184 has no altsetting 0 [ 92.448545][ T5927] loop3: detected capacity change from 0 to 40427 [ 92.544201][ T5945] loop1: detected capacity change from 0 to 128 [ 92.628642][ T5861] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 92.648251][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.669902][ T5861] usb 3-1: Product: syz [ 92.674171][ T5861] usb 3-1: Manufacturer: syz [ 92.689158][ T5861] usb 3-1: SerialNumber: syz [ 92.701744][ T5861] usb 3-1: config 0 descriptor?? [ 92.729327][ T5861] smsc75xx v1.0.0 [ 92.791069][ T5945] syz.1.33: attempt to access beyond end of device [ 92.791069][ T5945] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 92.859599][ T5945] syz.1.33: attempt to access beyond end of device [ 92.859599][ T5945] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 94.414412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 94.435356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.444169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.537828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.640128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.649137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.684460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 94.794554][ T5861] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 94.814552][ T5861] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 95.045163][ T5861] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 95.094551][ T5861] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 95.114584][ T5861] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 95.135054][ T5861] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 95.164563][ T5861] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 95.175796][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.183586][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.191113][ T5861] usb 3-1: USB disconnect, device number 2 [ 95.404031][ T5961] capability: warning: `syz.0.36' uses 32-bit capabilities (legacy support in use) [ 96.409563][ T5974] xt_TPROXY: Can be used only with -p tcp or -p udp [ 96.867128][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.912060][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.111443][ T5983] mmap: syz.0.42 (5983) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.252194][ T5971] sched: RT throttling activated [ 101.002632][ T5957] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.011983][ T5957] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.021151][ T5957] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.030630][ T5957] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.110833][ T5996] process 'syz.0.44' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' with NULL argv: empty string added [ 102.702689][ T6000] loop1: detected capacity change from 0 to 1024 [ 102.728622][ T6000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.314543][ T5861] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.496402][ T5861] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.511701][ T5861] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.520973][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.529152][ T5861] usb 4-1: Product: syz [ 104.533626][ T5861] usb 4-1: Manufacturer: syz [ 104.538701][ T5861] usb 4-1: SerialNumber: syz [ 104.968539][ T6014] loop2: detected capacity change from 0 to 256 [ 104.992109][ T6014] exfat: Bad value for 'umask' [ 105.049804][ T5763] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.611276][ T5861] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 105.618521][ T5861] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 105.630722][ T5861] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 105.950955][ T5861] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 106.007998][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.055173][ T5861] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 106.141126][ T6028] loop2: detected capacity change from 0 to 512 [ 106.150128][ T5861] usb 4-1: USB disconnect, device number 2 [ 106.161569][ T5861] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 106.175706][ T6028] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.223669][ T6028] EXT4-fs: journaled quota format not specified [ 109.529019][ T6057] loop2: detected capacity change from 0 to 256 [ 109.576861][ T6057] exfat: Bad value for 'umask' [ 112.117358][ T6077] loop1: detected capacity change from 0 to 128 [ 112.146252][ T6077] EXT4-fs: Ignoring removed nobh option [ 112.183268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.269818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 112.288559][ T6077] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.438532][ T6077] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.382501][ T6085] loop2: detected capacity change from 0 to 512 [ 113.398813][ T6085] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.434796][ T6087] loop3: detected capacity change from 0 to 128 [ 113.448511][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.456988][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.467214][ T6085] EXT4-fs: journaled quota format not specified [ 113.471879][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.279964][ T6099] loop3: detected capacity change from 0 to 256 [ 116.159747][ T6108] loop3: detected capacity change from 0 to 256 [ 116.178060][ T6108] exfat: Bad value for 'umask' [ 117.843519][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.946287][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.954584][ T2176] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.159749][ T2176] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.159833][ T2176] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.159870][ T2176] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 118.163817][ T2176] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.163845][ T2176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.163864][ T2176] usb 4-1: Product: syz [ 118.163878][ T2176] usb 4-1: Manufacturer: syz [ 118.163893][ T2176] usb 4-1: SerialNumber: syz [ 118.261498][ T6118] loop1: detected capacity change from 0 to 512 [ 118.477905][ T6118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.478043][ T6118] ext4 filesystem being mounted at /18/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.633325][ T2176] cdc_ncm 4-1:1.0: bind() failure [ 118.663363][ T2176] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 118.685093][ T2176] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 118.694555][ T2176] usbtest: probe of 4-1:1.1 failed with error -71 [ 118.709131][ T2176] usb 4-1: USB disconnect, device number 3 [ 118.802449][ T6070] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.811958][ T6070] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.822556][ T6070] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.831798][ T6070] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.999725][ T6121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.73'. [ 119.010524][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.73'. [ 119.083635][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.247081][ T6132] binder: 6131:6132 ioctl 400c620e 2000000067c0 returned -22 [ 119.380232][ T6134] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.017893][ T6141] loop3: detected capacity change from 0 to 256 [ 120.025529][ T6141] exfat: Bad value for 'umask' [ 120.071278][ T5760] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.311279][ T6147] loop1: detected capacity change from 0 to 256 [ 121.936961][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.952609][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.962832][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.973996][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.992785][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 122.000798][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.643907][ T6164] loop3: detected capacity change from 0 to 512 [ 122.653051][ T6164] EXT4-fs: Ignoring removed nobh option [ 122.851071][ T2176] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.341172][ T2176] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.414425][ T2176] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.496825][ T2176] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 123.598387][ T2176] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.666838][ T2176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.723725][ T2176] usb 3-1: Product: syz [ 123.763529][ T2176] usb 3-1: Manufacturer: syz [ 123.790272][ T2176] usb 3-1: SerialNumber: syz [ 124.105581][ T5779] Bluetooth: hci0: command tx timeout [ 124.264525][ T2176] cdc_ncm 3-1:1.0: bind() failure [ 124.288022][ T2176] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 124.301808][ T6150] chnl_net:caif_netlink_parms(): no params data found [ 124.314373][ T2176] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 124.334682][ T2176] usbtest: probe of 3-1:1.1 failed with error -71 [ 124.391607][ T2176] usb 3-1: USB disconnect, device number 3 [ 125.062054][ T6150] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.094189][ T6150] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.115031][ T6150] bridge_slave_0: entered allmulticast mode [ 125.134469][ T6150] bridge_slave_0: entered promiscuous mode [ 125.178408][ T6150] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.204526][ T6150] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.234622][ T6150] bridge_slave_1: entered allmulticast mode [ 125.258180][ T6150] bridge_slave_1: entered promiscuous mode [ 126.184650][ T5779] Bluetooth: hci0: command tx timeout [ 126.807847][ T6200] loop3: detected capacity change from 0 to 256 [ 126.929490][ T6200] exfat: Bad value for 'umask' [ 128.268921][ T5779] Bluetooth: hci0: command tx timeout [ 128.458696][ T6150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.521764][ T6150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.641697][ T6150] team0: Port device team_slave_0 added [ 128.667208][ T6150] team0: Port device team_slave_1 added [ 128.742505][ T6150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.777858][ T6150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.860076][ T6150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.892783][ T6150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.923922][ T6150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.989749][ T6150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.141440][ T6150] hsr_slave_0: entered promiscuous mode [ 129.159926][ T6150] hsr_slave_1: entered promiscuous mode [ 129.179098][ T6150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.194450][ T6150] Cannot create hsr debugfs directory [ 130.082760][ T11] hsr_slave_0: left promiscuous mode [ 130.089502][ T11] hsr_slave_1: left promiscuous mode [ 130.101009][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.113965][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.123692][ T11] bridge_slave_1: left allmulticast mode [ 130.131004][ T11] bridge_slave_1: left promiscuous mode [ 130.138747][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.151016][ T11] bridge_slave_0: left allmulticast mode [ 130.160893][ T11] bridge_slave_0: left promiscuous mode [ 130.174157][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.349321][ T5779] Bluetooth: hci0: command tx timeout [ 132.043447][ T11] team0 (unregistering): Port device team_slave_1 removed [ 132.106438][ T11] team0 (unregistering): Port device team_slave_0 removed [ 132.186631][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.252295][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.266259][ T2176] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 132.475059][ T2176] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.490933][ T2176] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.521311][ T2176] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 132.569462][ T2176] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.584381][ T2176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.593230][ T2176] usb 2-1: Product: syz [ 132.603575][ T2176] usb 2-1: Manufacturer: syz [ 132.608986][ T2176] usb 2-1: SerialNumber: syz [ 132.891956][ T6219] loop3: detected capacity change from 0 to 131072 [ 132.913163][ T11] bond0 (unregistering): Released all slaves [ 132.944771][ T5763] I/O error, dev loop3, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 133.073871][ T2176] cdc_ncm 2-1:1.0: bind() failure [ 133.117792][ T2176] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 133.143483][ T2176] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 133.168963][ T2176] usbtest: probe of 2-1:1.1 failed with error -71 [ 133.181783][ T6150] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 133.190601][ T2176] usb 2-1: USB disconnect, device number 3 [ 133.226853][ T6150] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 133.271925][ T6150] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 133.286764][ T6150] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 133.649909][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.664602][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.740326][ T6150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.870528][ T6150] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.920935][ T1021] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.928492][ T1021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.976596][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.983817][ T1021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.430692][ T6246] loop3: detected capacity change from 0 to 256 [ 134.462023][ T6246] exfat: Bad value for 'umask' [ 137.217828][ T6150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.624926][ T6298] loop3: detected capacity change from 0 to 256 [ 138.798839][ T6150] veth0_vlan: entered promiscuous mode [ 139.086194][ T6150] veth1_vlan: entered promiscuous mode [ 139.354213][ T6150] veth0_macvtap: entered promiscuous mode [ 139.392099][ T6150] veth1_macvtap: entered promiscuous mode [ 139.476783][ T6150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.514700][ T6150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.545985][ T6150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.641681][ T6150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.714422][ T6150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.758952][ T6150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.839138][ T6150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.904473][ T6150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.941528][ T6150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.992588][ T6150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.021363][ T6322] loop1: detected capacity change from 0 to 256 [ 140.656235][ T1021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.671528][ T1021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.934988][ T1311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.009770][ T1311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.933035][ T6340] loop3: detected capacity change from 0 to 256 [ 141.980911][ T6342] loop4: detected capacity change from 0 to 512 [ 141.986356][ T6340] exfat: Bad value for 'umask' [ 142.053313][ T5760] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.116057][ T6342] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.171724][ T6342] EXT4-fs: journaled quota format not specified [ 144.689391][ T6362] netlink: 80 bytes leftover after parsing attributes in process `syz.3.115'. [ 145.403555][ T6371] xt_TCPMSS: Only works on TCP SYN packets [ 146.039365][ T6376] loop4: detected capacity change from 0 to 256 [ 149.526839][ T5965] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 149.734409][ T5965] usb 4-1: Using ep0 maxpacket: 8 [ 149.769880][ T5965] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 149.788280][ T5965] usb 4-1: config 135 has an invalid descriptor of length 97, skipping remainder of the config [ 149.831036][ T5965] usb 4-1: config 135 has no interface number 0 [ 149.858610][ T5965] usb 4-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 149.904429][ T5965] usb 4-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 149.971475][ T5965] usb 4-1: config 135 interface 230 has no altsetting 0 [ 150.001155][ T5965] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 150.023588][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.053391][ T5965] usb 4-1: Product: syz [ 150.059831][ T5965] usb 4-1: Manufacturer: syz [ 150.083093][ T5965] usb 4-1: SerialNumber: syz [ 150.321527][ T5965] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 150.354855][ T5965] usb 4-1: No valid video chain found. [ 150.368097][ T5965] usb 4-1: USB disconnect, device number 4 [ 150.668935][ T6435] loop2: detected capacity change from 0 to 1024 [ 150.780788][ T6435] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 150.955516][ T6435] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 151.790304][ T6435] EXT4-fs (loop2): orphan cleanup on readonly fs [ 151.877525][ T6435] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 151.964569][ T6435] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 151.999808][ T6435] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 152.080019][ T6435] EXT4-fs (loop2): 1 truncate cleaned up [ 152.121208][ T6435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.255593][ T6454] loop1: detected capacity change from 0 to 1024 [ 152.323306][ T6454] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 0 [ 152.340400][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.464080][ T5965] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 154.525624][ T5965] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.584936][ T5965] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.631259][ T5965] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 154.671539][ T5965] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.692208][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.711256][ T5965] usb 5-1: Product: syz [ 154.719535][ T5965] usb 5-1: Manufacturer: syz [ 154.734903][ T5965] usb 5-1: SerialNumber: syz [ 156.605810][ T5965] cdc_ncm 5-1:1.0: bind() failure [ 156.668087][ T5965] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 156.692318][ T6498] loop1: detected capacity change from 0 to 16 [ 158.488975][ T5965] cdc_ncm 5-1:1.1: bind() failure [ 158.513838][ T6498] erofs: (device loop1): mounted with root inode @ nid 36. [ 158.535995][ T6491] syz.1.139: attempt to access beyond end of device [ 158.535995][ T6491] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 158.584144][ T6491] syz.1.139: attempt to access beyond end of device [ 158.584144][ T6491] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 158.605730][ T6491] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 158.620447][ T28] audit: type=1800 audit(1773858846.390:4): pid=6491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.139" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 158.646678][ T6491] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 158.661338][ T6491] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 158.853288][ T6491] syz.1.139 (6491) used greatest stack depth: 19856 bytes left [ 158.938865][ T5808] usb 5-1: USB disconnect, device number 2 [ 159.624454][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 162.874860][ T9] usb 2-1: device not accepting address 4, error -71 [ 163.362892][ T6563] loop1: detected capacity change from 0 to 16 [ 163.383711][ T6563] erofs: (device loop1): mounted with root inode @ nid 36. [ 163.410346][ T6563] syz.1.151: attempt to access beyond end of device [ 163.410346][ T6563] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 163.431125][ T6563] syz.1.151: attempt to access beyond end of device [ 163.431125][ T6563] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 163.461124][ T6563] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 163.487556][ T6563] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 163.502033][ T6563] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 163.553024][ T28] audit: type=1800 audit(1773858851.230:5): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.151" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 163.761958][ T6563] syz.1.151 (6563) used greatest stack depth: 19048 bytes left [ 163.833159][ T6558] loop3: detected capacity change from 0 to 512 [ 163.875496][ T6558] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.021355][ T5760] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 170.484539][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 170.712899][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.769649][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.824509][ T9] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 170.884456][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.923883][ T9] usb 5-1: config 0 descriptor?? [ 171.801228][ T9] hid-led: probe of 0003:27B8:01ED.0001 failed with error -71 [ 171.801256][ T6610] loop1: detected capacity change from 0 to 16 [ 171.830501][ T6610] erofs: (device loop1): mounted with root inode @ nid 36. [ 171.841296][ T6610] syz.1.163: attempt to access beyond end of device [ 171.841296][ T6610] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 171.867975][ T6610] syz.1.163: attempt to access beyond end of device [ 171.867975][ T6610] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 171.882281][ T6610] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 171.894398][ T28] audit: type=1800 audit(1773858859.650:6): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.163" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 171.955256][ T9] usb 5-1: USB disconnect, device number 3 [ 172.548301][ T6637] loop4: detected capacity change from 0 to 512 [ 172.565424][ T6637] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.992122][ T6637] EXT4-fs: journaled quota format not specified [ 174.000250][ T6643] loop1: detected capacity change from 0 to 256 [ 174.181231][ T28] audit: type=1804 audit(1773858861.910:7): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.169" name="/newroot/43/file0/file0" dev="loop1" ino=1048601 res=1 errno=0 [ 177.948084][ T6669] loop3: detected capacity change from 0 to 16 [ 180.272746][ T6694] loop2: detected capacity change from 0 to 256 [ 180.965587][ T6702] loop4: detected capacity change from 0 to 512 [ 181.020880][ T6702] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.092557][ T6702] EXT4-fs: journaled quota format not specified [ 184.435859][ T6731] loop4: detected capacity change from 0 to 16 [ 184.572870][ T6731] erofs: (device loop4): mounted with root inode @ nid 36. [ 184.595809][ T6731] syz.4.186: attempt to access beyond end of device [ 184.595809][ T6731] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 184.620027][ T6731] syz.4.186: attempt to access beyond end of device [ 184.620027][ T6731] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 184.635009][ T6731] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 184.656664][ T6731] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 184.669409][ T6731] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 184.714871][ T28] audit: type=1800 audit(1773858872.410:8): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.186" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 192.882501][ T6776] overlayfs: missing 'lowerdir' [ 193.624654][ T6795] syz.3.199 (6795) used obsolete PPPIOCDETACH ioctl [ 193.898013][ T6799] netlink: 48 bytes leftover after parsing attributes in process `syz.3.200'. [ 194.189949][ T6806] loop2: detected capacity change from 0 to 512 [ 194.237851][ T6806] EXT4-fs: Ignoring removed mblk_io_submit option [ 194.316931][ T6806] EXT4-fs: journaled quota format not specified [ 194.488586][ T5760] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 195.189430][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.199793][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.785947][ T6845] loop1: detected capacity change from 0 to 512 [ 196.822906][ T6845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 196.914200][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.086310][ T6856] loop2: detected capacity change from 0 to 256 [ 197.225466][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 197.231842][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 197.511844][ T6842] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 197.524802][ T6842] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 197.553050][ T6842] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 197.567257][ T6842] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 197.601128][ T6842] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.623828][ T6842] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 197.632966][ T6842] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 197.640332][ T6842] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 197.660592][ T6842] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 198.063486][ T6873] Zero length message leads to an empty skb [ 198.824389][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 199.240757][ T6888] loop3: detected capacity change from 0 to 512 [ 199.272058][ T6888] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.628447][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 199.634759][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 199.704799][ T5084] Bluetooth: hci0: command 0x0c1a tx timeout [ 200.904774][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 202.258788][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 202.266083][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 202.272212][ T5779] Bluetooth: hci0: command 0x0c1a tx timeout [ 202.694880][ T6927] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 202.705283][ T6927] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 202.715190][ T6927] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 202.774411][ T28] audit: type=1800 audit(1773858890.450:9): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.219" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 202.795810][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 202.866058][ T6927] syz.1.219 (6927) used greatest stack depth: 16752 bytes left [ 203.004461][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 203.017492][ T9] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 203.029115][ T28] audit: type=1326 audit(1773858890.790:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.1.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c5b9c799 code=0x7ffc0000 [ 203.060432][ T9] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 203.120249][ T9] usb 4-1: config 135 has no interface number 0 [ 203.157448][ T28] audit: type=1326 audit(1773858890.820:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.1.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c5b9c799 code=0x7ffc0000 [ 203.158398][ T9] usb 4-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 203.180878][ T28] audit: type=1326 audit(1773858890.820:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.1.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c5b9c799 code=0x7ffc0000 [ 203.214897][ T28] audit: type=1326 audit(1773858890.820:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.1.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c5b9c799 code=0x7ffc0000 [ 203.241948][ T28] audit: type=1326 audit(1773858890.820:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.1.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4c5b9c799 code=0x7ffc0000 [ 203.247604][ T9] usb 4-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 203.291107][ T9] usb 4-1: config 135 interface 230 has no altsetting 0 [ 203.301952][ T28] audit: type=1326 audit(1773858890.840:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.1.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c5b9c799 code=0x7ffc0000 [ 203.611717][ T28] audit: type=1326 audit(1773858890.840:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.1.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c5b9c799 code=0x7ffc0000 [ 203.886405][ T28] audit: type=1326 audit(1773858890.840:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.1.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c5b9c799 code=0x7ffc0000 [ 204.016834][ T28] audit: type=1326 audit(1773858890.840:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.1.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c5b9c799 code=0x7ffc0000 [ 204.069783][ T9] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 204.079438][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.094203][ T9] usb 4-1: Product: syz [ 204.103702][ T9] usb 4-1: can't set config #135, error -71 [ 204.113950][ T9] usb 4-1: USB disconnect, device number 5 [ 204.344403][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 204.403760][ T6946] loop4: detected capacity change from 0 to 512 [ 204.447373][ T6946] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.481678][ T6946] EXT4-fs: journaled quota format not specified [ 206.345003][ T6969] loop3: detected capacity change from 0 to 128 [ 206.656463][ T6972] loop4: detected capacity change from 0 to 256 [ 207.782231][ T6978] overlayfs: missing 'lowerdir' [ 208.418107][ T5808] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 208.708719][ T5808] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.735094][ T5808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.761821][ T5808] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 208.783530][ T5808] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.803696][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.835612][ T5808] usb 4-1: Product: syz [ 208.840446][ T5808] usb 4-1: Manufacturer: syz [ 208.861354][ T5808] usb 4-1: SerialNumber: syz [ 208.920919][ T6989] syz_tun: entered allmulticast mode [ 209.065571][ T5968] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 209.234533][ T5968] usb 2-1: device descriptor read/64, error -71 [ 209.332500][ T6992] loop2: detected capacity change from 0 to 256 [ 209.436871][ T6993] syz_tun: left allmulticast mode [ 209.506111][ T5968] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 209.677832][ T5968] usb 2-1: device descriptor read/64, error -71 [ 209.757587][ T5808] cdc_ncm 4-1:1.0: bind() failure [ 209.772087][ T5808] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 209.792329][ T5808] cdc_ncm 4-1:1.1: bind() failure [ 209.814698][ T5968] usb usb2-port1: attempt power cycle [ 209.817972][ T5808] usb 4-1: USB disconnect, device number 6 [ 210.234436][ T5968] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 210.275334][ T5968] usb 2-1: device descriptor read/8, error -71 [ 210.421459][ T6995] loop3: detected capacity change from 0 to 512 [ 210.468773][ T6995] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.564500][ T5968] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 210.605239][ T5968] usb 2-1: device descriptor read/8, error -71 [ 210.744807][ T5968] usb usb2-port1: unable to enumerate USB device [ 212.705726][ T7005] loop3: detected capacity change from 0 to 1024 [ 212.739645][ T7005] ext4: Unknown parameter 'context' [ 214.324002][ T7020] overlayfs: missing 'lowerdir' [ 215.112434][ T7012] loop2: detected capacity change from 0 to 256 [ 215.354750][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 215.354768][ T28] audit: type=1804 audit(1773858903.100:67): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.242" name="/newroot/49/file0/file0" dev="loop2" ino=1048603 res=1 errno=0 [ 215.744341][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 215.764613][ T7029] loop2: detected capacity change from 0 to 512 [ 215.772129][ T7029] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.796715][ T7029] EXT4-fs: journaled quota format not specified [ 215.970011][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.013271][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.049501][ T9] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 216.083675][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.099993][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.119760][ T9] usb 5-1: Product: syz [ 216.124792][ T9] usb 5-1: Manufacturer: syz [ 216.129518][ T9] usb 5-1: SerialNumber: syz [ 217.241225][ T9] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 217.253912][ T9] cdc_ncm 5-1:1.0: bind() failure [ 217.273435][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 217.298023][ T9] cdc_ncm 5-1:1.1: bind() failure [ 217.324651][ T9] usb 5-1: USB disconnect, device number 4 [ 217.768429][ T7051] loop2: detected capacity change from 0 to 256 [ 218.761016][ T7056] loop4: detected capacity change from 0 to 16 [ 218.828019][ T7056] erofs: (device loop4): mounted with root inode @ nid 36. [ 218.918992][ T7056] syz.4.253: attempt to access beyond end of device [ 218.918992][ T7056] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 219.516454][ T7056] syz.4.253: attempt to access beyond end of device [ 219.516454][ T7056] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 219.654983][ T7061] overlayfs: missing 'lowerdir' [ 219.666970][ T7056] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 219.814397][ T28] audit: type=1800 audit(1773858907.440:68): pid=7056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.253" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 220.316595][ T7069] loop2: detected capacity change from 0 to 256 [ 220.613096][ T28] audit: type=1804 audit(1773858908.370:69): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.255" name="/newroot/52/file0/file0" dev="loop2" ino=1048604 res=1 errno=0 [ 221.075357][ T5968] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 221.251024][ T7075] loop2: detected capacity change from 0 to 512 [ 221.273972][ T7075] EXT4-fs: Ignoring removed mblk_io_submit option [ 221.301178][ T5968] usb 5-1: Using ep0 maxpacket: 32 [ 221.315302][ T7075] EXT4-fs: journaled quota format not specified [ 221.341340][ T5968] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 221.356301][ T5968] usb 5-1: config 0 has no interface number 0 [ 221.378155][ T5968] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 221.391186][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.964418][ T5968] usb 5-1: Product: syz [ 221.968744][ T5968] usb 5-1: Manufacturer: syz [ 221.973633][ T5968] usb 5-1: SerialNumber: syz [ 222.003419][ T5968] usb 5-1: config 0 descriptor?? [ 222.037360][ T5968] smsc95xx v2.0.0 [ 222.397575][ T7083] loop2: detected capacity change from 0 to 1024 [ 222.415853][ T7083] EXT4-fs: Ignoring removed orlov option [ 222.421782][ T7083] EXT4-fs: Ignoring removed bh option [ 222.444435][ T7083] ext4: Unknown parameter 'seclabel' [ 222.505709][ T7083] loop2: detected capacity change from 0 to 1024 [ 222.655321][ T5968] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 222.692962][ T7083] EXT4-fs: Ignoring removed i_version option [ 222.694584][ T5968] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 222.706514][ T7083] EXT4-fs: inline encryption not supported [ 222.720601][ T7083] EXT4-fs (loop2): Test dummy encryption mode enabled [ 222.729674][ T5968] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 222.755074][ T7083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.767140][ T5968] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 222.829848][ T5968] usb 5-1: USB disconnect, device number 5 [ 223.694524][ T5968] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 223.896553][ T5968] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.927481][ T5968] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.954410][ T5968] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 223.992764][ T5968] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.012681][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.052037][ T5968] usb 5-1: Product: syz [ 224.060368][ T5968] usb 5-1: Manufacturer: syz [ 224.079819][ T5968] usb 5-1: SerialNumber: syz [ 224.191523][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.003802][ T7108] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 225.012915][ T7108] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 225.898668][ T5968] cdc_ncm 5-1:1.0: bind() failure [ 225.949430][ T5968] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 225.976973][ T5968] cdc_ncm 5-1:1.1: bind() failure [ 226.017984][ T5968] usb 5-1: USB disconnect, device number 6 [ 227.496269][ T7121] loop2: detected capacity change from 0 to 256 [ 227.561698][ T28] audit: type=1804 audit(1773858915.320:70): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.267" name="/newroot/56/file0/file0" dev="loop2" ino=1048605 res=1 errno=0 [ 227.711989][ T7123] loop4: detected capacity change from 0 to 512 [ 227.745825][ T7123] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.753358][ T7123] EXT4-fs: journaled quota format not specified [ 227.810256][ T5763] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 230.635479][ T7151] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 230.644605][ T7151] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 231.030985][ T7153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.275'. [ 231.614358][ T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 231.827860][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.854590][ T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.879453][ T27] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 231.908966][ T7160] loop1: detected capacity change from 0 to 256 [ 232.083400][ T27] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.099988][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.108577][ T27] usb 5-1: Product: syz [ 232.112944][ T27] usb 5-1: Manufacturer: syz [ 232.117778][ T27] usb 5-1: SerialNumber: syz [ 233.306501][ T7171] loop2: detected capacity change from 0 to 256 [ 234.032444][ T27] cdc_ncm 5-1:1.0: bind() failure [ 234.048135][ T27] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 234.056330][ T27] cdc_ncm 5-1:1.1: bind() failure [ 234.066729][ T27] usb 5-1: USB disconnect, device number 7 [ 234.146197][ T7174] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 234.393189][ T7176] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 236.705162][ T7191] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 236.714353][ T7191] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 237.738798][ T7198] loop2: detected capacity change from 0 to 1024 [ 237.848691][ T7198] EXT4-fs: Ignoring removed orlov option [ 237.954775][ T7198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.412838][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.582659][ T7212] loop2: detected capacity change from 0 to 512 [ 238.625295][ T7212] EXT4-fs: Ignoring removed nobh option [ 238.675484][ T7212] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 238.711968][ T7212] EXT4-fs (loop2): group descriptors corrupted! [ 238.746949][ T7204] loop4: detected capacity change from 0 to 40427 [ 238.785397][ T7204] F2FS-fs (loop4): LFS is not compatible with checkpoint=disable [ 239.214332][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 239.732144][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.754106][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.768983][ T23] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 239.789936][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.818945][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.832987][ T23] usb 3-1: Product: syz [ 239.843865][ T23] usb 3-1: Manufacturer: syz [ 239.849395][ T23] usb 3-1: SerialNumber: syz [ 240.181141][ T7227] overlayfs: missing 'lowerdir' [ 241.320546][ T7237] overlayfs: missing 'lowerdir' [ 241.831789][ T23] cdc_ncm 3-1:1.0: bind() failure [ 241.851485][ T23] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 241.874506][ T23] cdc_ncm 3-1:1.1: bind() failure [ 241.931606][ T23] usb 3-1: USB disconnect, device number 4 [ 242.190699][ T7232] loop4: detected capacity change from 0 to 40427 [ 242.215637][ T7232] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 242.236168][ T7232] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 242.438627][ T7232] F2FS-fs (loop4): Found nat_bits in checkpoint [ 242.663882][ T7232] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 242.673695][ T7232] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 243.221479][ T7266] loop3: detected capacity change from 0 to 256 [ 243.316167][ T5760] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 243.630242][ T7270] overlayfs: missing 'lowerdir' [ 243.851262][ T7281] mmap: syz.1.309 (7281): VmData 47120384 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 244.058141][ T7284] loop1: detected capacity change from 0 to 2048 [ 244.098778][ T7284] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 244.168656][ T7284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.365826][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.424433][ T5807] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 244.636427][ T5807] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.654367][ T5807] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.676898][ T5807] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 244.707028][ T5807] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.724300][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.743092][ T5807] usb 3-1: Product: syz [ 244.747418][ T5807] usb 3-1: Manufacturer: syz [ 244.752211][ T5807] usb 3-1: SerialNumber: syz [ 244.764400][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 245.148004][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.162597][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.174411][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.182860][ T23] usb 2-1: Product: syz [ 245.195432][ T23] usb 2-1: Manufacturer: syz [ 245.209411][ T23] usb 2-1: SerialNumber: syz [ 245.619765][ T5807] cdc_ncm 3-1:1.0: bind() failure [ 245.641202][ T5807] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 245.673512][ T5807] cdc_ncm 3-1:1.1: bind() failure [ 245.710881][ T5807] usb 3-1: USB disconnect, device number 5 [ 246.236937][ T7291] loop4: detected capacity change from 0 to 131072 [ 246.269146][ T7291] F2FS-fs (loop4): invalid crc value [ 246.300370][ T7291] F2FS-fs (loop4): Found nat_bits in checkpoint [ 246.403741][ T7291] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 246.481399][ T23] cdc_ncm 2-1:1.0: failed to get mac address [ 246.504872][ T23] cdc_ncm 2-1:1.0: bind() failure [ 246.534128][ T23] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 246.730161][ T23] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 246.814956][ T23] usbtest: probe of 2-1:1.1 failed with error -71 [ 246.836891][ T23] usb 2-1: USB disconnect, device number 10 [ 247.049189][ T7305] loop2: detected capacity change from 0 to 40427 [ 247.085608][ T7305] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 247.101476][ T7305] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 247.118456][ T7305] F2FS-fs (loop2): invalid crc value [ 247.188894][ T7305] F2FS-fs (loop2): Found nat_bits in checkpoint [ 247.281088][ T7305] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 247.334704][ T7305] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 247.700028][ T5777] syz-executor: attempt to access beyond end of device [ 247.700028][ T5777] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 247.731900][ T5777] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 247.759254][ T7322] loop3: detected capacity change from 0 to 512 [ 247.775454][ T7323] overlayfs: missing 'lowerdir' [ 248.407460][ T5760] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 249.087747][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 251.174694][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 251.188079][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.203556][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.223434][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 251.233600][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.267268][ T9] usb 2-1: config 0 descriptor?? [ 251.280519][ T9] hub 2-1:0.0: USB hub found [ 251.593705][ T9] hub 2-1:0.0: 1 port detected [ 251.989317][ T7354] overlayfs: missing 'lowerdir' [ 253.420578][ T9] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 253.452458][ T9] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 253.514867][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 253.532848][ T9] usbhid: probe of 2-1:0.0 failed with error -71 [ 253.579802][ T9] usb 2-1: USB disconnect, device number 11 [ 253.687629][ T7367] xt_hashlimit: size too large, truncated to 1048576 [ 255.936294][ T7362] overlayfs: missing 'workdir' [ 256.040306][ T7375] loop3: detected capacity change from 0 to 1024 [ 256.098427][ T5760] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 256.203432][ T7360] loop2: detected capacity change from 0 to 40427 [ 256.283193][ T7360] F2FS-fs (loop2): invalid crc value [ 256.353127][ T7360] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 256.509024][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.563818][ T7380] veth0: entered promiscuous mode [ 256.573480][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.114965][ T7374] veth0: left promiscuous mode [ 257.128640][ T7382] loop1: detected capacity change from 0 to 1024 [ 257.173061][ T7382] EXT4-fs: Ignoring removed oldalloc option [ 257.211100][ T7382] EXT4-fs: Ignoring removed bh option [ 257.269320][ T7382] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 257.365366][ T7382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.706483][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.215003][ T7401] loop2: detected capacity change from 0 to 256 [ 258.364301][ T7403] overlayfs: missing 'workdir' [ 260.500054][ T7415] overlayfs: missing 'workdir' [ 261.001665][ T28] audit: type=1326 audit(1773858948.760:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598839c799 code=0x7ffc0000 [ 261.062830][ T7418] loop2: detected capacity change from 0 to 256 [ 261.105729][ T7418] exfat: Deprecated parameter 'utf8' [ 261.124058][ T28] audit: type=1326 audit(1773858948.760:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598839c799 code=0x7ffc0000 [ 261.174511][ T7418] exfat: Deprecated parameter 'utf8' [ 261.229263][ T7418] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 261.284814][ T28] audit: type=1326 audit(1773858948.800:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f598839c799 code=0x7ffc0000 [ 261.434434][ T28] audit: type=1326 audit(1773858948.800:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598839c799 code=0x7ffc0000 [ 261.550959][ T28] audit: type=1326 audit(1773858948.800:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f598839c799 code=0x7ffc0000 [ 261.627452][ T28] audit: type=1326 audit(1773858948.800:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598839c799 code=0x7ffc0000 [ 261.716366][ T28] audit: type=1326 audit(1773858948.800:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f598839c799 code=0x7ffc0000 [ 261.804537][ T28] audit: type=1326 audit(1773858948.800:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598839c799 code=0x7ffc0000 [ 261.896472][ T28] audit: type=1326 audit(1773858948.800:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f598839c799 code=0x7ffc0000 [ 261.989876][ T28] audit: type=1326 audit(1773858948.800:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598839c799 code=0x7ffc0000 [ 264.594741][ T7443] overlayfs: missing 'workdir' [ 264.981985][ T7447] loop1: detected capacity change from 0 to 2048 [ 265.178831][ T7447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.294597][ T7446] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 266.258041][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.755539][ T7461] overlayfs: missing 'workdir' [ 266.847544][ T7468] loop4: detected capacity change from 0 to 1024 [ 266.885610][ T7468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.387215][ T7493] overlayfs: missing 'workdir' [ 269.961919][ T7496] loop1: detected capacity change from 0 to 256 [ 270.931927][ T6150] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.007623][ T7506] loop3: detected capacity change from 0 to 256 [ 271.203952][ T5760] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 272.260654][ T7519] loop2: detected capacity change from 0 to 1024 [ 272.298876][ T7519] ext4: Unknown parameter 'context' [ 274.411203][ T7547] syzkaller0: entered promiscuous mode [ 274.430322][ T7547] syzkaller0: entered allmulticast mode [ 274.931607][ T7543] loop3: detected capacity change from 0 to 40427 [ 275.034559][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 275.060428][ T7561] loop2: detected capacity change from 0 to 256 [ 275.137662][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 275.137676][ T28] audit: type=1804 audit(1773858962.900:115): pid=7561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.388" name="/newroot/89/file0/file0" dev="loop2" ino=1048610 res=1 errno=0 [ 275.194325][ T5968] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 275.215667][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 275.223947][ T9] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 275.237696][ T9] usb 5-1: config 0 has no interface number 0 [ 275.244175][ T9] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 275.270970][ T9] usb 5-1: config 0 interface 196 has no altsetting 0 [ 275.287397][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 275.297300][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.305840][ T9] usb 5-1: Product: syz [ 275.310250][ T9] usb 5-1: Manufacturer: syz [ 275.315441][ T9] usb 5-1: SerialNumber: syz [ 275.323702][ T9] usb 5-1: config 0 descriptor?? [ 275.330609][ T7555] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 275.389791][ T5968] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 275.404388][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.424364][ T5968] usb 2-1: Product: syz [ 275.440474][ T5968] usb 2-1: Manufacturer: syz [ 275.454524][ T5968] usb 2-1: SerialNumber: syz [ 276.591824][ T9] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 276.644446][ T9] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 276.673734][ T5968] (unnamed net_device) (uninitialized): Assigned a random MAC address: 0e:c4:8f:85:ce:52 [ 276.741428][ T5968] rtl8150 2-1:1.0: eth6: rtl8150 is detected [ 277.009426][ T7578] loop3: detected capacity change from 0 to 256 [ 277.881411][ T7593] loop2: detected capacity change from 0 to 1024 [ 277.908705][ T7593] ext4: Unknown parameter 'context' [ 278.005533][ T23] usb 2-1: USB disconnect, device number 12 [ 278.174829][ T5760] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 278.574400][ T5807] usb 5-1: USB disconnect, device number 8 [ 278.969074][ T5807] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 279.082868][ T23] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 279.410498][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.672965][ T23] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 279.736052][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.794509][ T23] usb 2-1: config 0 descriptor?? [ 279.952904][ T7618] loop2: detected capacity change from 0 to 256 [ 280.033853][ T28] audit: type=1804 audit(1773858967.790:116): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.400" name="/newroot/94/file0/file0" dev="loop2" ino=1048611 res=1 errno=0 [ 280.224405][ T5807] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 280.237838][ T23] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 280.272257][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input6 [ 280.674589][ T5807] usb 5-1: Using ep0 maxpacket: 16 [ 280.684913][ T5807] usb 5-1: unable to get BOS descriptor or descriptor too short [ 280.705810][ T5807] usb 5-1: config 1 has an invalid interface number: 206 but max is 0 [ 280.726810][ T23] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 280.804313][ T5807] usb 5-1: config 1 has no interface number 0 [ 280.920933][ T5807] usb 5-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=38.0a [ 281.140781][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.409214][ T23] usb 2-1: USB disconnect, device number 13 [ 281.415988][ T5807] usb 5-1: Product: syz [ 281.421545][ T5807] usb 5-1: Manufacturer: syz [ 281.430193][ T5807] usb 5-1: SerialNumber: syz [ 281.651428][ T7632] fido_id[7632]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 281.697107][ T5807] usb 5-1: USB disconnect, device number 9 [ 282.049801][ T7641] loop3: detected capacity change from 0 to 256 [ 282.394621][ T23] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 282.644478][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 282.844646][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.861455][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.872080][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 282.889675][ T23] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 283.019328][ T7650] loop4: detected capacity change from 0 to 256 [ 283.081877][ T28] audit: type=1804 audit(1773858970.830:117): pid=7650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.407" name="/newroot/67/file0/file0" dev="loop4" ino=1048612 res=1 errno=0 [ 283.108135][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.133544][ T23] usb 2-1: config 0 descriptor?? [ 283.744347][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 283.783275][ T7640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.859744][ T7640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.944428][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 283.960607][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 283.983770][ T7655] loop3: detected capacity change from 0 to 512 [ 283.990348][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 284.030629][ T23] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 284.037000][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 284.038157][ T23] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 284.058527][ T23] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 284.066191][ T23] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 284.067787][ T9] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 284.073600][ T23] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 284.073630][ T23] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 284.073654][ T23] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 284.073676][ T23] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 284.099006][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.099030][ T9] usb 3-1: Product: syz [ 284.099042][ T9] usb 3-1: Manufacturer: syz [ 284.099252][ T9] usb 3-1: SerialNumber: syz [ 284.107179][ T23] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 284.123513][ T5760] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 284.192143][ T23] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 284.199857][ T23] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 284.207578][ T23] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 284.215306][ T23] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 284.222828][ T23] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 284.230935][ T23] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 284.238501][ T23] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 284.246209][ T23] megaworld 0003:07B5:0312.0003: item fetching failed at offset 39/41 [ 284.269957][ T23] megaworld 0003:07B5:0312.0003: parse failed [ 284.376258][ T23] megaworld: probe of 0003:07B5:0312.0003 failed with error -22 [ 284.680371][ T23] usb 2-1: USB disconnect, device number 14 [ 284.835454][ T9] usb 3-1: config 0 descriptor?? [ 285.244493][ T9] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 285.254438][ T5968] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 285.346706][ T7668] loop3: detected capacity change from 0 to 256 [ 285.408028][ T7669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.425448][ T7669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.447972][ T5968] usb 2-1: Using ep0 maxpacket: 8 [ 285.456029][ T9] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 285.472543][ T9] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.487606][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 285.500147][ T9] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 285.510100][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.531354][ T9] usb 5-1: config 0 descriptor?? [ 285.541559][ T5968] usb 2-1: unable to get BOS descriptor or descriptor too short [ 285.560668][ T5968] usb 2-1: config 47 has an invalid interface number: 47 but max is 0 [ 285.575380][ T5968] usb 2-1: config 47 has no interface number 0 [ 285.597899][ T5968] usb 2-1: config 47 interface 47 has no altsetting 0 [ 285.613545][ T5968] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=e0.a0 [ 285.624817][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.633321][ T5968] usb 2-1: Product: syz [ 285.645156][ T7669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.667132][ T7669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.680870][ T5968] usb 2-1: Manufacturer: syz [ 285.686107][ T5968] usb 2-1: SerialNumber: syz [ 285.935248][ T5968] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 285.955135][ T5968] dvb-usb: bulk message failed: -22 (2/0) [ 285.963163][ T5968] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 285.983641][ T5968] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 286.010448][ T9] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 286.021331][ T5968] usb 2-1: media controller created [ 286.027900][ T9] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 286.045596][ T7670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.071305][ T9] hid-steam 0003:28DE:1102.0004: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 286.095012][ T7670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.109957][ T5968] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.128409][ T7670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.158619][ T7670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.187313][ T5968] dvb-usb: bulk message failed: -22 (1/0) [ 286.193345][ T5968] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 286.204677][ T9] hid-steam 0003:28DE:1102.0004: Steam Controller 'XXXXXXXXXX' connected [ 286.248219][ T9] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0004/input/input7 [ 286.262689][ T5968] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 286.354923][ T5968] dvb-usb: schedule remote query interval to 50 msecs. [ 286.376934][ T9] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 286.408676][ T5968] dvb-usb: bulk message failed: -22 (2/0) [ 286.436619][ T9] hid-steam 0003:28DE:1102.0005: unknown main item tag 0x0 [ 286.458983][ T5968] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 286.472908][ T5965] dvb-usb: bulk message failed: -22 (1/0) [ 286.489688][ T5965] dvb-usb: error while querying for an remote control event. [ 286.499172][ T5760] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 286.757318][ T9] hid-steam 0003:28DE:1102.0005: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 286.776412][ T5968] usb 2-1: USB disconnect, device number 15 [ 286.792778][ T9] usb 5-1: USB disconnect, device number 10 [ 286.960170][ T5968] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 287.063542][ T7676] fido_id[7676]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 287.103973][ T9] hid-steam 0003:28DE:1102.0004: Steam Controller 'XXXXXXXXXX' disconnected [ 287.298295][ T7681] loop3: detected capacity change from 0 to 256 [ 287.632135][ T7683] loop4: detected capacity change from 0 to 256 [ 288.310259][ T5968] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 288.403857][ T7689] loop3: detected capacity change from 0 to 512 [ 288.447307][ T23] usb 3-1: USB disconnect, device number 6 [ 288.504498][ T5968] usb 2-1: Using ep0 maxpacket: 8 [ 288.549596][ T5968] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.594433][ T5968] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 288.619562][ T5968] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 288.633835][ T5968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.660141][ T5968] usb 2-1: config 0 descriptor?? [ 288.906244][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.916081][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.932599][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.942430][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.953557][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.962981][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.084393][ T27] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 289.172996][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.187476][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.195811][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 289.226927][ T5968] usb 2-1: USB disconnect, device number 16 [ 289.377939][ T27] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 289.387239][ T27] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 289.397790][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 289.411440][ T27] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 289.420717][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.430762][ T27] usb 3-1: config 0 descriptor?? [ 289.493906][ T7705] loop4: detected capacity change from 0 to 256 [ 289.712433][ T28] audit: type=1804 audit(1773858977.460:118): pid=7705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.424" name="/newroot/72/file0/file0" dev="loop4" ino=1048614 res=1 errno=0 [ 289.893802][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 290.026088][ T23] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 290.124586][ T23] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 290.140684][ T23] usb 4-1: config 63 has no interface number 0 [ 290.147044][ T23] usb 4-1: config 63 interface 66 has no altsetting 0 [ 290.159309][ T23] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 290.169195][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.177909][ T23] usb 4-1: Product: syz [ 290.182346][ T23] usb 4-1: Manufacturer: syz [ 290.187491][ T23] usb 4-1: SerialNumber: syz [ 290.235078][ T27] usb 3-1: string descriptor 0 read error: -71 [ 290.245924][ T27] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 290.260395][ T27] usb 3-1: USB disconnect, device number 7 [ 290.432172][ T23] usb 4-1: Found UVC 0.07 device syz (174f:8acf) [ 290.444395][ T23] usb 4-1: No valid video chain found. [ 290.464668][ T23] usb 4-1: USB disconnect, device number 7 [ 290.564453][ T5968] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 290.634657][ T2176] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 290.751424][ T5968] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 290.760938][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.770363][ T5968] usb 5-1: Product: syz [ 290.775183][ T5968] usb 5-1: Manufacturer: syz [ 290.780393][ T5968] usb 5-1: SerialNumber: syz [ 290.796781][ T5968] usb 5-1: config 0 descriptor?? [ 290.983260][ T2176] usb 2-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 290.995102][ T2176] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 291.004698][ T2176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.022424][ T5968] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 291.024767][ T7710] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 291.040995][ T2176] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 291.103538][ T7714] loop2: detected capacity change from 0 to 256 [ 291.184305][ T23] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 291.583689][ T28] audit: type=1804 audit(1773858979.260:119): pid=7714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.427" name="/newroot/98/file0/file0" dev="loop2" ino=1048615 res=1 errno=0 [ 291.628945][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 291.742561][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 291.752571][ T23] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 291.762411][ T23] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 291.773507][ T23] usb 4-1: config 63 has no interface number 0 [ 291.779946][ T23] usb 4-1: config 63 interface 66 has no altsetting 0 [ 291.798522][ T23] usb 4-1: string descriptor 0 read error: -22 [ 291.812441][ T23] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 291.832045][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.894911][ T23] usb 4-1: Found UVC 0.07 device (174f:8acf) [ 291.903805][ T23] usb 4-1: No valid video chain found. [ 291.960078][ T23] usb 4-1: USB disconnect, device number 8 [ 292.257729][ T7722] loop2: detected capacity change from 0 to 256 [ 292.419484][ T7724] loop3: detected capacity change from 0 to 256 [ 293.729063][ T5968] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -110 [ 293.799511][ T5968] usb 2-1: USB disconnect, device number 17 [ 294.484769][ T5762] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 294.744550][ T5968] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 294.784060][ T9] usb 5-1: USB disconnect, device number 11 [ 294.948276][ T5968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.983576][ T5968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.002760][ T5968] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 295.020110][ T5968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.054653][ T5968] usb 2-1: config 0 descriptor?? [ 295.155966][ T7734] loop4: detected capacity change from 0 to 256 [ 295.188568][ T28] audit: type=1804 audit(1773858982.950:120): pid=7734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.433" name="/newroot/74/file0/file0" dev="loop4" ino=1048616 res=1 errno=0 [ 295.217720][ T5965] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 295.419602][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.434929][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.453811][ T5965] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.468165][ T5965] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.478388][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.505890][ T5965] usb 3-1: config 0 descriptor?? [ 295.893741][ T5968] hid-led 0003:27B8:01ED.0006: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 295.905940][ T786] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 295.928569][ T5968] hid-led 0003:27B8:01ED.0006: ThingM blink(1) v1 initialized [ 295.953655][ T5965] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 295.994648][ T5965] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 296.085666][ T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 296.114351][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 296.121879][ T786] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 296.130985][ T786] usb 4-1: config 0 has no interface number 0 [ 296.132781][ T5807] usb 2-1: USB disconnect, device number 18 [ 296.143667][ T786] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 296.143695][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.143713][ T786] usb 4-1: Product: syz [ 296.143725][ T786] usb 4-1: Manufacturer: syz [ 296.143737][ T786] usb 4-1: SerialNumber: syz [ 296.150736][ T786] usb 4-1: config 0 descriptor?? [ 296.195752][ T786] smsc95xx v2.0.0 [ 296.287868][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 296.295395][ T23] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 296.304001][ T23] usb 5-1: config 179 has no interface number 0 [ 296.310759][ T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 296.322110][ T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 296.333843][ T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 296.345460][ T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 296.357359][ T23] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 296.373241][ T23] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 296.384900][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.407309][ T7745] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 296.612695][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.632400][ T5965] usb 3-1: USB disconnect, device number 8 [ 296.664148][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.787710][ T7745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.797393][ T7745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.872454][ T7752] loop1: detected capacity change from 0 to 1024 [ 296.889735][ T7752] ext4: Unknown parameter 'context' [ 297.012860][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.029592][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.141351][ T7745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.162023][ T7745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.458397][ T786] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM is busy [ 297.563940][ T7745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.615427][ T7745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.668331][ T786] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 297.738892][ T786] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 297.809848][ T786] usb 4-1: USB disconnect, device number 9 [ 297.876593][ T7745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.940524][ T7745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.024704][ T5965] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 298.154517][ T7745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.183777][ T7745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.246177][ T5965] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 298.277733][ T5965] usb 3-1: config 0 has no interface number 0 [ 298.283919][ T5965] usb 3-1: config 0 interface 200 altsetting 2 has an invalid endpoint with address 0xD8, skipping [ 298.340574][ T5965] usb 3-1: config 0 interface 200 has no altsetting 0 [ 298.373160][ T5965] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 298.414092][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.471552][ T5965] usb 3-1: Product: syz [ 298.487004][ T5965] usb 3-1: Manufacturer: syz [ 298.491948][ T5965] usb 3-1: SerialNumber: syz [ 298.552619][ T5965] usb 3-1: config 0 descriptor?? [ 298.746378][ T786] usb 5-1: USB disconnect, device number 12 [ 298.746379][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 298.764303][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 298.815907][ T7761] fuse: Bad value for 'fd' [ 298.886043][ T5965] usbhid 3-1:0.200: couldn't find an input interrupt endpoint [ 298.977519][ T5965] usb 3-1: USB disconnect, device number 9 [ 299.413890][ T7769] loop3: detected capacity change from 0 to 256 [ 299.423546][ T5807] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 299.438379][ T5807] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input10 [ 300.138527][ T786] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 300.287613][ T5760] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 301.118980][ T7779] loop2: detected capacity change from 0 to 256 [ 301.869093][ T28] audit: type=1804 audit(1773858989.590:121): pid=7779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.444" name="/newroot/103/file0/file0" dev="loop2" ino=1048617 res=1 errno=0 [ 302.415664][ T5968] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 302.504506][ T786] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 302.620345][ T5968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.649715][ T5968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.674318][ T5968] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 302.683890][ T5968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.707088][ T5968] usb 2-1: config 0 descriptor?? [ 302.734355][ T786] usb 5-1: Using ep0 maxpacket: 16 [ 302.755678][ T7791] loop3: detected capacity change from 0 to 1024 [ 302.763130][ T7791] ext4: Unknown parameter 'context' [ 302.783924][ T786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.819396][ T786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.844309][ T786] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 302.873757][ T7793] loop2: detected capacity change from 0 to 1024 [ 302.884776][ T786] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 302.902520][ T7793] ext4: Unknown parameter 'context' [ 302.909509][ T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.975253][ T786] usb 5-1: config 0 descriptor?? [ 303.030953][ T5760] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 304.753449][ T786] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 304.826634][ T786] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 304.879449][ T5968] hid-led: probe of 0003:27B8:01ED.0008 failed with error -71 [ 304.895436][ T786] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 304.937963][ T786] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 304.952273][ T5968] usb 2-1: USB disconnect, device number 19 [ 304.975586][ T786] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 305.008179][ T786] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 305.036945][ T786] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 305.068858][ T786] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 305.100949][ T786] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 305.124435][ T786] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 305.131723][ T786] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 305.163240][ T786] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0009/input/input11 [ 305.268402][ T786] input input11: event field not found [ 305.356557][ T5968] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 305.404617][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 305.479431][ T7812] loop2: detected capacity change from 0 to 256 [ 305.508810][ T786] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 306.071096][ T28] audit: type=1804 audit(1773858993.820:122): pid=7812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.456" name="/newroot/108/file0/file0" dev="loop2" ino=1048618 res=1 errno=0 [ 306.192082][ T786] usb 5-1: USB disconnect, device number 13 [ 306.204861][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 306.236988][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 306.254361][ T5968] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 306.273106][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 306.294045][ T5968] usb 2-1: config 1 has no interface number 0 [ 306.335490][ T786] input input11: event field not found [ 306.341882][ T5968] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 306.363347][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 306.399156][ T5968] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.424401][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 306.471190][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.493443][ T5968] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 306.526083][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.536844][ T7814] fido_id[7814]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 306.556647][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 306.567689][ T5968] usb 2-1: Product: syz [ 306.572015][ T5968] usb 2-1: Manufacturer: syz [ 306.580992][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.594347][ T5968] usb 2-1: SerialNumber: syz [ 306.618693][ T7805] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 306.656469][ T5968] usb 2-1: Expected 3 endpoints, found: 2 [ 306.794608][ T27] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 306.817907][ T9] usb 4-1: usb_control_msg returned -32 [ 306.824580][ T9] usbtmc 4-1:16.0: can't read capabilities [ 306.904720][ T786] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 306.984602][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 306.997477][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.011201][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.027402][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 307.042019][ T27] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 307.055120][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.070220][ T27] usb 3-1: config 0 descriptor?? [ 307.084849][ T786] usb 5-1: Using ep0 maxpacket: 16 [ 307.095963][ T786] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.106845][ T786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.119486][ T786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 307.131147][ T786] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 307.141366][ T786] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.166119][ T786] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 307.183291][ T786] usb 5-1: New USB device strings: Mfr=4, Product=240, SerialNumber=255 [ 307.192461][ T786] usb 5-1: Product: syz [ 307.197264][ T786] usb 5-1: Manufacturer: syz [ 307.201995][ T786] usb 5-1: SerialNumber: syz [ 307.237417][ T786] usb 5-1: config 0 descriptor?? [ 307.453133][ T7824] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 307.468446][ T9] usb 4-1: USB disconnect, device number 10 [ 307.501300][ T7818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.517630][ T7818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.540073][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 307.550434][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 307.561631][ T27] usb 3-1: USB disconnect, device number 10 [ 307.605256][ T786] rc_core: IR keymap rc-hauppauge not found [ 307.611273][ T786] Registered IR keymap rc-empty [ 307.617858][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 307.654866][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 307.687980][ T786] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 307.702799][ T786] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 307.726621][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 307.764837][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 307.794491][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 307.824426][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 307.854709][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 307.884976][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 307.914566][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 307.954570][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 307.984611][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 308.014476][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 308.025887][ T27] usb 2-1: USB disconnect, device number 20 [ 308.080591][ T786] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 308.124547][ T786] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 308.159610][ T786] usb 5-1: USB disconnect, device number 14 [ 308.171105][ T7831] [ 308.173995][ T7831] ============================= [ 308.179521][ T7831] WARNING: suspicious RCU usage [ 308.182921][ T7833] loop2: detected capacity change from 0 to 1024 [ 308.185145][ T7831] syzkaller #0 Not tainted [ 308.196182][ T7831] ----------------------------- [ 308.201606][ T7831] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 308.206240][ T7833] ext4: Unknown parameter 'context' [ 308.212118][ T7831] [ 308.212118][ T7831] other info that might help us debug this: [ 308.212118][ T7831] [ 308.227404][ T7831] [ 308.227404][ T7831] rcu_scheduler_active = 2, debug_locks = 1 [ 308.236088][ T7831] 1 lock held by syz.3.459/7831: [ 308.241256][ T7831] #0: ffffffff8d132240 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 308.252043][ T7831] [ 308.252043][ T7831] stack backtrace: [ 308.258276][ T7831] CPU: 0 PID: 7831 Comm: syz.3.459 Not tainted syzkaller #0 [ 308.265603][ T7831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 308.275895][ T7831] Call Trace: [ 308.279234][ T7831] [ 308.282201][ T7831] dump_stack_lvl+0x18c/0x250 [ 308.287363][ T7831] ? show_regs_print_info+0x20/0x20 [ 308.292805][ T7831] ? load_image+0x400/0x400 [ 308.297461][ T7831] lockdep_rcu_suspicious+0x1e1/0x300 [ 308.302892][ T7831] get_callchain_entry+0x2a9/0x3c0 [ 308.308063][ T7831] get_perf_callchain+0xc6/0x510 [ 308.313314][ T7831] ? put_callchain_entry+0xb0/0xb0 [ 308.318565][ T7831] __bpf_get_stack+0x2e4/0x540 [ 308.323401][ T7831] ? stack_map_get_build_id_offset+0x720/0x720 [ 308.329778][ T7831] ? __cant_sleep+0x220/0x220 [ 308.334575][ T7831] ? bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 308.340253][ T7831] bpf_get_stack_raw_tp+0x1a9/0x210 [ 308.345590][ T7831] bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 308.351178][ T7831] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 308.356855][ T7831] bpf_prog_test_run_syscall+0x317/0x4a0 [ 308.362964][ T7831] ? sock_gen_cookie+0x60/0x60 [ 308.368125][ T7831] ? sock_gen_cookie+0x60/0x60 [ 308.373027][ T7831] bpf_prog_test_run+0x321/0x390 [ 308.378010][ T7831] __sys_bpf+0x49d/0x890 [ 308.382382][ T7831] ? bpf_link_show_fdinfo+0x390/0x390 [ 308.387810][ T7831] ? lock_chain_count+0x20/0x20 [ 308.392988][ T7831] __x64_sys_bpf+0x7c/0x90 [ 308.397594][ T7831] do_syscall_64+0x55/0xa0 [ 308.402052][ T7831] ? clear_bhb_loop+0x40/0x90 [ 308.407205][ T7831] ? clear_bhb_loop+0x40/0x90 [ 308.412454][ T7831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.418948][ T7831] RIP: 0033:0x7f3f88d9c799 [ 308.423744][ T7831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.443800][ T7831] RSP: 002b:00007f3f89c64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.452867][ T7831] RAX: ffffffffffffffda RBX: 00007f3f89015fa0 RCX: 00007f3f88d9c799 [ 308.460953][ T7831] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 308.469226][ T7831] RBP: 00007f3f88e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 308.477202][ T7831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.485381][ T7831] R13: 00007f3f89016038 R14: 00007f3f89015fa0 R15: 00007ffcc184a198 [ 308.493362][ T7831] [ 308.516954][ T5763] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 308.719153][ T27] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 310.134342][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 310.142471][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 310.151712][ T27] usb 2-1: config 1 has an invalid interface number: 30 but max is 0 [ 310.160001][ T27] usb 2-1: config 1 has no interface number 0 [ 310.166348][ T27] usb 2-1: config 1 interface 30 has no altsetting 0 [ 310.177170][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=0897, bcdDevice=51.04 [ 310.186675][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.195833][ T27] usb 2-1: Product: syz [ 310.200245][ T27] usb 2-1: Manufacturer: syz [ 310.205069][ T27] usb 2-1: SerialNumber: syz [ 310.429100][ T27] gspca_main: vc032x-2.14.0 probing 046d:0897 [ 310.439450][ T27] gspca_vc032x: reg_r err -71 [ 310.444520][ T27] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.450329][ T27] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.455940][ T27] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.461420][ T27] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.467049][ T27] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.472521][ T27] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.477961][ T27] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.483352][ T27] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.488700][ T27] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.494021][ T27] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.500323][ T27] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.505715][ T27] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.511019][ T27] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.516395][ T27] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.522063][ T27] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.527622][ T27] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.533188][ T27] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.538714][ T27] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.544751][ T27] gspca_vc032x: Unknown sensor... [ 310.550052][ T27] vc032x: probe of 2-1:1.30 failed with error -22 [ 310.565650][ T27] usb 2-1: USB disconnect, device number 21 [ 317.950952][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.958696][ T1284] ieee802154 phy1 wpan1: encryption failed: -22