last executing test programs: 3m21.036232623s ago: executing program 1 (id=503): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7) 3m20.70692804s ago: executing program 1 (id=508): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x9}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="58d8e764d9487be91c14b3489aaf78c3e8b191ea9bb17d23cde598c4b97ebfa415164f99a216f9baa1cb04ffa0ddaaf6a8a5ca01dfbb96de2771ce5b4c59e5dc796627", 0x43}, {&(0x7f0000000280)="8a4c20fde6b17d2e137e87ab0ab3941529888fb2653b93412d7437a565d8d709c6bec15b7017c964eb7630230d24489c9d0fc7b1e48c1337d4557f670bf0157ed86cb92e08ee6a00bda8c13b17716dd24a08f043e7c6b972402c1ffa054831958a982d1a7743306e632eb214ce24305f5dd7749e537a2650e9d7ad55538194c62b968d0ce682a51de7b872e1858486c6943405c36c0d9598f51bca8ce2c09530c90a35afca36b53d3864a2d3319a63", 0xaf}, {&(0x7f0000000340)="ef3a011786849eb33d6f97d60a54a48c4cbea855b8b663a3db4d0f884a7b347f5e843d46c6d2725e5b50976d4134ccaf6816b79c84c727e807ac2289310df99cb0d71985b8409832f4a88129dfbda80c7a93c9e53ccc83eaee9228089fb0f859915b655864cf1f46e0c280dee1d38c2156e7c5c87b331e3d6847de2d29c2f0b7908745f9935506d8bb80a84254432bfaf9c47f71c85581f65ce2c6ffefe170f3de8502dcf5d9", 0xa6}], 0x3}}], 0x1, 0x4c144) 3m19.155258837s ago: executing program 1 (id=522): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000ffff27bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000200012800b0001006d61637365630000100002800c000100010001000000000008000500", @ANYRES32, @ANYBLOB="28c74b58e9750e1b807732106d403b09"], 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3m19.076702141s ago: executing program 1 (id=524): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) llistxattr(&(0x7f0000000240)='./file2\x00', 0x0, 0x0) 3m18.591275195s ago: executing program 1 (id=527): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 3m18.128975549s ago: executing program 1 (id=531): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x9}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="58d8e764d9487be91c14b3489aaf78c3e8b191ea9bb17d23cde598c4b97ebfa415164f99a216f9baa1cb04ffa0ddaaf6a8a5ca01dfbb96de2771ce5b4c59e5dc796627", 0x43}, {&(0x7f0000000280)="8a4c20fde6b17d2e137e87ab0ab3941529888fb2653b93412d7437a565d8d709c6bec15b7017c964eb7630230d24489c9d0fc7b1e48c1337d4557f670bf0157ed86cb92e08ee6a00bda8c13b17716dd24a08f043e7c6b972402c1ffa054831958a982d1a7743306e632eb214ce24305f5dd7749e537a2650e9d7ad55538194c62b968d0ce682a51de7b872e1858486c6943405c36c0d9598f51bca8ce2c09530c90a35afca36b53d3864a2d3319a63", 0xaf}, {&(0x7f0000000340)="ef3a011786849eb33d6f97d60a54a48c4cbea855b8b663a3db4d0f884a7b347f5e843d46c6d2725e5b50976d4134ccaf6816b79c84c727e807ac2289310df99cb0d71985b8409832f4a88129dfbda80c7a93c9e53ccc83eaee9228089fb0f859915b655864cf1f46e0c280dee1d38c2156e7c5c87b331e3d6847de2d29c2f0b7908745f9935506d8bb80a84254432bfaf9c47f71c85581f65ce2c6ffefe170f3de8502dcf5d9", 0xa6}], 0x3}}], 0x1, 0x4c144) 3m17.90756495s ago: executing program 32 (id=531): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x9}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="58d8e764d9487be91c14b3489aaf78c3e8b191ea9bb17d23cde598c4b97ebfa415164f99a216f9baa1cb04ffa0ddaaf6a8a5ca01dfbb96de2771ce5b4c59e5dc796627", 0x43}, {&(0x7f0000000280)="8a4c20fde6b17d2e137e87ab0ab3941529888fb2653b93412d7437a565d8d709c6bec15b7017c964eb7630230d24489c9d0fc7b1e48c1337d4557f670bf0157ed86cb92e08ee6a00bda8c13b17716dd24a08f043e7c6b972402c1ffa054831958a982d1a7743306e632eb214ce24305f5dd7749e537a2650e9d7ad55538194c62b968d0ce682a51de7b872e1858486c6943405c36c0d9598f51bca8ce2c09530c90a35afca36b53d3864a2d3319a63", 0xaf}, {&(0x7f0000000340)="ef3a011786849eb33d6f97d60a54a48c4cbea855b8b663a3db4d0f884a7b347f5e843d46c6d2725e5b50976d4134ccaf6816b79c84c727e807ac2289310df99cb0d71985b8409832f4a88129dfbda80c7a93c9e53ccc83eaee9228089fb0f859915b655864cf1f46e0c280dee1d38c2156e7c5c87b331e3d6847de2d29c2f0b7908745f9935506d8bb80a84254432bfaf9c47f71c85581f65ce2c6ffefe170f3de8502dcf5d9", 0xa6}], 0x3}}], 0x1, 0x4c144) 2m14.807449743s ago: executing program 3 (id=926): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") llistxattr(&(0x7f0000000240)='./file2\x00', 0x0, 0x0) 2m14.184374684s ago: executing program 3 (id=933): open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0xb8}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x1c, 0x0, 0x0) 2m13.332357687s ago: executing program 3 (id=937): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f", 0x2}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000040)=ANY=[], 0x14) 2m12.980008524s ago: executing program 2 (id=940): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x4, 0x0, {0x80}}, 0x14}}, 0x24000010) 2m12.892304448s ago: executing program 3 (id=941): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) llistxattr(&(0x7f0000000240)='./file2\x00', 0x0, 0x0) 2m12.561691205s ago: executing program 3 (id=943): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0, 0x1}, 0xc) 2m10.421383192s ago: executing program 2 (id=945): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m10.297003098s ago: executing program 2 (id=947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002cbd700001dbdf2504"], 0x14}}, 0x800) 2m10.113545028s ago: executing program 3 (id=950): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) unshare(0x22020600) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000080)}], 0x1) 2m10.112669308s ago: executing program 2 (id=951): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) llistxattr(&(0x7f0000000240)='./file2\x00', 0x0, 0x0) 2m9.546546756s ago: executing program 33 (id=950): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) unshare(0x22020600) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000080)}], 0x1) 2m9.506965578s ago: executing program 2 (id=953): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x4, 0x0, {0x80}}, 0x14}}, 0x24000010) 2m3.443961401s ago: executing program 2 (id=959): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0, 0x1}, 0xc) 2m3.015281032s ago: executing program 34 (id=959): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0, 0x1}, 0xc) 55.293076927s ago: executing program 0 (id=1340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 55.143079944s ago: executing program 0 (id=1341): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b929, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x0, 0xfff1}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x10000000, 0xfe}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008010}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x84) 51.547178894s ago: executing program 0 (id=1349): openat$random(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0xffffffffffffffff, &(0x7f0000000040)=0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=[{0x10, 0x1}], 0x10}}], 0x1, 0x840) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 50.118883455s ago: executing program 0 (id=1354): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) llistxattr(&(0x7f0000000240)='./file2\x00', 0x0, 0x0) 49.62408589s ago: executing program 0 (id=1357): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b929, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x0, 0xfff1}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x10000000, 0xfe}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008010}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x84) 48.003821711s ago: executing program 0 (id=1364): sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 47.445294539s ago: executing program 35 (id=1364): sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 29.721087055s ago: executing program 7 (id=1365): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) llistxattr(0x0, 0x0, 0x0) 29.199465401s ago: executing program 7 (id=1423): syz_usb_connect(0x3, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003be004209904a2a9e8c4010203010902230001046b40090904e40c81ffe7bb0408240301060000000905"], 0x0) 28.22496134s ago: executing program 7 (id=1431): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) llistxattr(0x0, 0x0, 0x0) 27.648616438s ago: executing program 36 (id=1431): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) llistxattr(0x0, 0x0, 0x0) 8.497080525s ago: executing program 5 (id=1509): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x14, 0x4, "b4865713"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="00036c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000140)={0x40, 0x18, 0x4, "09d5ddc5"}, 0x0, 0x0}) 4.639902328s ago: executing program 5 (id=1527): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.444861688s ago: executing program 5 (id=1529): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900d308900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f000000b040)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x28, 0xfffffffffffffff5, 0x5, {{0xfffffffffffffffa, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1}) 4.308777285s ago: executing program 4 (id=1530): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000180)={0xd, @vbi}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.170440992s ago: executing program 6 (id=1531): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x6, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)) 4.073280916s ago: executing program 6 (id=1532): read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 4.020480829s ago: executing program 4 (id=1533): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="003008000000082259aba15388e8a1e81d8f73a0566bbdd9532ee60709"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.60118554s ago: executing program 6 (id=1534): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0x0, 0x3}, {0x8, 0x4}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x7ffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {0xa, 0xffe0}, {0xa, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xf}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c61"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.21201672s ago: executing program 6 (id=1535): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4840) shutdown(0xffffffffffffffff, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="200f06"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.056836667s ago: executing program 8 (id=1538): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x62, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc0) 2.056638377s ago: executing program 4 (id=1539): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.899491545s ago: executing program 8 (id=1540): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x6, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)) 1.780753941s ago: executing program 8 (id=1541): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000180)={0xd, @vbi}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.61311621s ago: executing program 8 (id=1542): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb4b64f69853362ac34071", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004080) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) recvmsg$kcm(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x100) 1.536976733s ago: executing program 4 (id=1543): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x8, 0x0, 0x4, 0x0, 0x5, 0x0, 0xfc, 0x80, 0x9, 0x3, 0x0, 0xf, 0xfffffef8, 0x0, 0x0, 0xff, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.271066796s ago: executing program 4 (id=1544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x20}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000080)) 1.178290581s ago: executing program 5 (id=1545): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 926.342884ms ago: executing program 4 (id=1546): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x5, {"c7517da9e7a8757d9c02fd45c7ed7c6a", "f61ac59ed63a57d6df15bd7dae0ceb42", "d08098bd12cdd439c06442623f678bba"}, 0x10001, 0x7}) 732.861403ms ago: executing program 5 (id=1547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 552.983552ms ago: executing program 8 (id=1548): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 406.56588ms ago: executing program 6 (id=1549): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, 0x0) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000002080)={0x200f, {"20e30a30ed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b3a9a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19300305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a027d5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf050000008000000000f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b3f3f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2f5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d21488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e09d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a603336c00000077cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046ca5b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe6531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e6586df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59555e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb601203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000930dedf800", 0x1000}}, 0x1006) 322.030894ms ago: executing program 5 (id=1550): r0 = socket(0x10, 0x3, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000040)="e62f26c3", 0x4}], 0x1) 136.799313ms ago: executing program 6 (id=1551): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0x0, 0x3}, {0x8, 0x4}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x7ffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {0xa, 0xffe0}, {0xa, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xf}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c61"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 8 (id=1552): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): : (slave bond_slave_1): Releasing backup interface [ 241.743816][ T7961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.973729][ T5773] Bluetooth: hci0: command tx timeout [ 242.223231][ T7961] bond0 (unregistering): Released all slaves [ 242.309237][ T8745] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.316930][ T8745] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.324554][ T8745] bridge_slave_0: entered allmulticast mode [ 242.332310][ T8745] bridge_slave_0: entered promiscuous mode [ 242.341241][ T8745] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.348666][ T8745] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.368240][ T8745] bridge_slave_1: entered allmulticast mode [ 242.376354][ T8745] bridge_slave_1: entered promiscuous mode [ 242.438539][ T8861] syzkaller0: entered promiscuous mode [ 242.444895][ T8861] syzkaller0: entered allmulticast mode [ 244.042719][ T5773] Bluetooth: hci0: command tx timeout [ 244.630701][ T8745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.649288][ T8745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.848541][ T8745] team0: Port device team_slave_0 added [ 244.875196][ T8745] team0: Port device team_slave_1 added [ 245.004959][ T8745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.012467][ T8745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.041001][ T8745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.125182][ T8745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.172712][ T8745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.251012][ T8745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.449949][ T8745] hsr_slave_0: entered promiscuous mode [ 245.467122][ T8745] hsr_slave_1: entered promiscuous mode [ 245.474848][ T8745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.483161][ T8745] Cannot create hsr debugfs directory [ 245.848103][ T7961] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.934439][ T8800] chnl_net:caif_netlink_parms(): no params data found [ 246.056478][ T7961] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.122591][ T5773] Bluetooth: hci0: command tx timeout [ 246.207630][ T7961] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.286273][ T8916] syzkaller0: entered promiscuous mode [ 246.291873][ T8916] syzkaller0: entered allmulticast mode [ 246.362005][ T7961] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.541232][ T8800] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.571799][ T8800] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.590529][ T8800] bridge_slave_0: entered allmulticast mode [ 248.601502][ T8800] bridge_slave_0: entered promiscuous mode [ 248.645721][ T8800] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.656682][ T8800] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.665114][ T8800] bridge_slave_1: entered allmulticast mode [ 248.673474][ T8800] bridge_slave_1: entered promiscuous mode [ 248.790518][ T8800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.948041][ T8800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.090671][ T8800] team0: Port device team_slave_0 added [ 249.145950][ T8800] team0: Port device team_slave_1 added [ 249.153397][ T7961] tipc: Left network mode [ 249.276729][ T8745] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 249.441378][ T8800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.450056][ T8800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.477889][ T8800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.491916][ T8745] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 249.507749][ T8745] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 249.529076][ T8745] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 249.559648][ T8800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.572559][ T8800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.633642][ T8800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.040915][ T8800] hsr_slave_0: entered promiscuous mode [ 250.079897][ T8800] hsr_slave_1: entered promiscuous mode [ 250.095520][ T8800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.112487][ T8800] Cannot create hsr debugfs directory [ 250.449417][ T8977] syzkaller0: entered promiscuous mode [ 250.455334][ T8977] syzkaller0: entered allmulticast mode [ 250.533749][ T8991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.995'. [ 253.275697][ T8745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.354772][ T7961] hsr_slave_0: left promiscuous mode [ 253.361447][ T7961] hsr_slave_1: left promiscuous mode [ 253.369217][ T7961] bridge_slave_1: left allmulticast mode [ 253.376130][ T7961] bridge_slave_1: left promiscuous mode [ 253.382205][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.396366][ T7961] bridge_slave_0: left allmulticast mode [ 253.404825][ T7961] bridge_slave_0: left promiscuous mode [ 253.410984][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.483682][ T7961] veth1_macvtap: left promiscuous mode [ 253.489386][ T7961] veth0_macvtap: left promiscuous mode [ 253.508185][ T7961] veth1_vlan: left promiscuous mode [ 253.532767][ T7961] veth0_vlan: left promiscuous mode [ 253.995276][ T9028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1002'. [ 255.062079][ T7961] team0 (unregistering): Port device team_slave_1 removed [ 255.115723][ T7961] team0 (unregistering): Port device team_slave_0 removed [ 255.171306][ T7961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.226672][ T7961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.603764][ T7961] bond0 (unregistering): Released all slaves [ 255.727767][ T8745] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.834651][ T7955] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.842089][ T7955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.910019][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.917409][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.989773][ T8800] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 256.031909][ T8800] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 256.084019][ T8800] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 256.121295][ T8800] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 256.133007][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.139520][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.558821][ T8800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.604183][ T5759] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 256.620102][ T8800] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.658970][ T7974] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.666382][ T7974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.720348][ T7974] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.728330][ T7974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.832708][ T5759] usb 1-1: Using ep0 maxpacket: 32 [ 256.854943][ T5759] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 256.866355][ T5759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.884874][ T5759] usb 1-1: config 0 descriptor?? [ 256.909779][ T5759] gspca_main: sunplus-2.14.0 probing 041e:400b [ 257.042014][ T8745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.609425][ T8800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.113479][ T8745] veth0_vlan: entered promiscuous mode [ 258.184649][ T8745] veth1_vlan: entered promiscuous mode [ 258.336505][ T8745] veth0_macvtap: entered promiscuous mode [ 258.349845][ T8745] veth1_macvtap: entered promiscuous mode [ 258.369029][ T8800] veth0_vlan: entered promiscuous mode [ 258.439846][ T8800] veth1_vlan: entered promiscuous mode [ 258.485976][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.507349][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.526479][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.541929][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.559113][ T8745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.602121][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.617000][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.627996][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.640647][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.660812][ T8745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.706610][ T8745] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.742472][ T8745] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.752243][ T8745] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.776731][ T8745] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.788401][ T5759] gspca_sunplus: reg_w_riv err -71 [ 258.813834][ T5759] sunplus: probe of 1-1:0.0 failed with error -71 [ 258.852265][ T8800] veth0_macvtap: entered promiscuous mode [ 258.861896][ T5759] usb 1-1: USB disconnect, device number 6 [ 258.889982][ T8800] veth1_macvtap: entered promiscuous mode [ 259.001578][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.022682][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.033523][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.046183][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.056693][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.067883][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.094306][ T8800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.133580][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.169492][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.202542][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.222181][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.232735][ T8800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.254958][ T8800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.268960][ T8800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.326908][ T8800] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.346169][ T8800] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.379424][ T8800] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.389846][ T8800] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.423088][ T7957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.451924][ T7957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.638573][ T7963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.675733][ T7963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.733572][ T7963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.741577][ T7963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.861528][ T7974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.899270][ T7974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.059667][ T9152] loop5: detected capacity change from 0 to 512 [ 260.123165][ T9152] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 260.201526][ T9152] EXT4-fs (loop5): 1 truncate cleaned up [ 260.210390][ T9152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.243910][ T9152] 9pnet_fd: Insufficient options for proto=fd [ 260.427668][ T8745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.502543][ T5759] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 260.733135][ T5759] usb 5-1: Using ep0 maxpacket: 16 [ 260.749356][ T5759] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.802608][ T5759] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.852817][ T5759] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 260.877495][ T5759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.913687][ T5759] usb 5-1: config 0 descriptor?? [ 260.920211][ T9182] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 261.044227][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1033'. [ 261.071724][ T9187] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1033'. [ 261.091059][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1033'. [ 261.101427][ T9187] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1033'. [ 261.379481][ T5759] ntrig 0003:1B96:0008.0001: item fetching failed at offset 5/7 [ 261.409331][ T5759] ntrig 0003:1B96:0008.0001: parse failed [ 261.416024][ T5759] ntrig: probe of 0003:1B96:0008.0001 failed with error -22 [ 261.473550][ T9199] loop0: detected capacity change from 0 to 512 [ 261.496469][ T9199] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 261.570074][ T9199] EXT4-fs (loop0): 1 truncate cleaned up [ 261.602487][ T1143] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 261.620109][ T9199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.652913][ T5759] usb 5-1: USB disconnect, device number 3 [ 261.730525][ T9199] 9pnet_fd: Insufficient options for proto=fd [ 261.852472][ T1143] usb 7-1: Using ep0 maxpacket: 32 [ 261.874362][ T1143] usb 7-1: unable to get BOS descriptor or descriptor too short [ 261.890878][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.899728][ T1143] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 237, changing to 7 [ 261.937369][ T1143] usb 7-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 261.957595][ T1143] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.986160][ T1143] usb 7-1: Product: syz [ 262.001752][ T1143] usb 7-1: Manufacturer: syz [ 262.011907][ T1143] usb 7-1: SerialNumber: syz [ 262.294090][ T1143] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 262.339166][ T1143] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 262.351095][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 262.378905][ T9223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1043'. [ 262.409644][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 262.445259][ T9223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1043'. [ 262.465634][ T1143] usb 7-1: USB disconnect, device number 2 [ 262.579077][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.978045][ T9241] loop4: detected capacity change from 0 to 512 [ 263.004817][ T9241] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 263.054774][ T9241] EXT4-fs (loop4): 1 truncate cleaned up [ 263.061433][ T9241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.190142][ T9241] 9pnet_fd: Insufficient options for proto=fd [ 263.380767][ T7188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.992749][ T5815] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 264.205457][ T5815] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 264.227044][ T5815] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 64 [ 264.278935][ T5815] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 264.319713][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.371579][ T9267] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 264.405593][ T9289] netlink: 'syz.0.1064': attribute type 12 has an invalid length. [ 264.418854][ T5815] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 264.434675][ T9289] netlink: 'syz.0.1064': attribute type 29 has an invalid length. [ 264.452281][ T9289] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1064'. [ 264.838470][ T9298] loop4: detected capacity change from 0 to 1024 [ 264.919204][ T9298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.996288][ T1187] usb 6-1: USB disconnect, device number 2 [ 265.039971][ T5815] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 265.082156][ T9284] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4059: comm syz.4.1063: Allocating blocks 385-513 which overlap fs metadata [ 265.098715][ T28] audit: type=1800 audit(1774553328.406:11): pid=9284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1063" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 265.149554][ T9283] EXT4-fs (loop4): pa ffff888076eb4d98: logic 0, phys. 113, len 25 [ 265.158177][ T9283] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5393: group 0, free 0, pa_free 8 [ 265.323984][ T5815] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 265.345503][ T5815] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 265.374882][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.414183][ T5815] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 265.583924][ T7188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.753368][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1073'. [ 265.846099][ T9326] netlink: 'syz.0.1074': attribute type 12 has an invalid length. [ 265.870861][ T9326] netlink: 'syz.0.1074': attribute type 29 has an invalid length. [ 266.108706][ T9332] loop5: detected capacity change from 0 to 512 [ 266.139326][ T9335] syzkaller1: entered promiscuous mode [ 266.147008][ T9332] EXT4-fs: Ignoring removed orlov option [ 266.158508][ T9335] syzkaller1: entered allmulticast mode [ 266.165017][ T9332] EXT4-fs: Ignoring removed mblk_io_submit option [ 266.201236][ T9332] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.1076: corrupted in-inode xattr: e_value size too large [ 266.255859][ T9332] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.1076: couldn't read orphan inode 15 (err -117) [ 266.284199][ T9332] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.450247][ T8745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.526249][ T5815] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 266.733299][ T5815] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 266.741562][ T5815] stv0680 7-1:4.0: last error: 28, command = 0x81 [ 266.790559][ T5815] usb 7-1: USB disconnect, device number 3 [ 266.982496][ T5759] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 267.169588][ T9367] loop0: detected capacity change from 0 to 512 [ 267.176911][ T5759] usb 6-1: Using ep0 maxpacket: 32 [ 267.191667][ T5759] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 267.210373][ T5759] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.230277][ T5759] usb 6-1: config 0 descriptor?? [ 267.240995][ T9367] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 267.266229][ T5759] gspca_main: sunplus-2.14.0 probing 041e:400b [ 267.341034][ T9367] EXT4-fs (loop0): 1 truncate cleaned up [ 267.368250][ T9367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.392621][ T9011] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 267.561333][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.590746][ T9011] usb 5-1: Using ep0 maxpacket: 8 [ 267.621636][ T9011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 267.662600][ T9011] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 267.677551][ T9011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.722986][ T9011] usb 5-1: config 0 descriptor?? [ 267.985475][ T9011] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 268.420294][ T9011] usb 5-1: USB disconnect, device number 4 [ 268.609762][ T9401] __nla_validate_parse: 1 callbacks suppressed [ 268.609778][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'. [ 268.700977][ T9011] kernel write not supported for file /input/event2 (pid: 9011 comm: kworker/1:5) [ 268.895737][ T5759] gspca_sunplus: reg_w_riv err -71 [ 268.901477][ T5759] sunplus: probe of 6-1:0.0 failed with error -71 [ 268.951838][ T5759] usb 6-1: USB disconnect, device number 3 [ 269.613836][ T5815] kernel write not supported for file /input/event2 (pid: 5815 comm: kworker/0:3) [ 269.792550][ T5815] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 269.994486][ T5815] usb 5-1: Using ep0 maxpacket: 8 [ 270.024626][ T5815] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.059150][ T5815] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 270.095298][ T5815] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.125918][ T5815] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.159732][ T5815] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.206516][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.473339][ T5815] usb 5-1: GET_CAPABILITIES returned 0 [ 270.479062][ T5815] usbtmc 5-1:16.0: can't read capabilities [ 270.712534][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 270.737434][ T5815] usb 5-1: USB disconnect, device number 5 [ 270.947093][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 270.970762][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 271.012139][ T8] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 237, changing to 7 [ 271.039737][ T8] usb 6-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 271.058558][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.091194][ T8] usb 6-1: Product: syz [ 271.110643][ T8] usb 6-1: Manufacturer: syz [ 271.125841][ T8] usb 6-1: SerialNumber: syz [ 271.451001][ T8] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 271.505000][ T8] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 271.592787][ T8] usb 6-1: USB disconnect, device number 4 [ 271.700115][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.103596][ T9518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1121'. [ 272.489932][ T9523] loop5: detected capacity change from 0 to 1024 [ 272.599852][ T9523] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.711314][ T28] audit: type=1800 audit(1774553336.046:12): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1123" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 272.736006][ T9523] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4059: comm syz.5.1123: Allocating blocks 385-513 which overlap fs metadata [ 272.968596][ T9522] EXT4-fs (loop5): pa ffff888076eb4d98: logic 0, phys. 113, len 25 [ 272.978657][ T9522] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5393: group 0, free 0, pa_free 8 [ 273.183585][ T8745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.536809][ T9556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1132'. [ 274.820423][ T9598] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1144'. [ 274.912471][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 275.029793][ T9586] loop0: detected capacity change from 0 to 1024 [ 275.073807][ T9604] loop6: detected capacity change from 0 to 512 [ 275.102894][ T9586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.134287][ T9604] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 275.153080][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 275.164226][ T8] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 275.186821][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.213828][ T8] usb 5-1: config 0 descriptor?? [ 275.246119][ T28] audit: type=1800 audit(1774553338.586:13): pid=9586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1139" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 275.267906][ T8] gspca_main: sunplus-2.14.0 probing 041e:400b [ 275.275697][ T9604] EXT4-fs (loop6): 1 truncate cleaned up [ 275.317208][ T9604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.447259][ T9604] 9pnet_fd: Insufficient options for proto=fd [ 275.515031][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.574739][ T8800] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.457063][ T9645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1153'. [ 276.661990][ T8] gspca_sunplus: reg_w_riv err -71 [ 276.674498][ T8] sunplus: probe of 5-1:0.0 failed with error -71 [ 276.710524][ T8] usb 5-1: USB disconnect, device number 6 [ 276.925503][ T9653] loop6: detected capacity change from 0 to 512 [ 276.970831][ T9653] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 277.002883][ T9653] EXT4-fs (loop6): 1 truncate cleaned up [ 277.010054][ T9653] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.103628][ T9653] 9pnet_fd: Insufficient options for proto=fd [ 277.274085][ T8800] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.674781][ T9648] loop0: detected capacity change from 0 to 1024 [ 277.763715][ T9648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.775880][ T8] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 277.887017][ T28] audit: type=1800 audit(1774553341.216:14): pid=9648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1155" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 277.994833][ T8] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 278.020346][ T8] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 64 [ 278.069183][ T8] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 278.091188][ T9694] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1163'. [ 278.121678][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.157379][ T9671] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 278.194036][ T8] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 278.294031][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.548330][ T9703] loop0: detected capacity change from 0 to 512 [ 278.574496][ T9703] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 278.610275][ T9703] EXT4-fs (loop0): 1 truncate cleaned up [ 278.634444][ T9703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.732593][ T1187] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 278.745192][ T8] usb 7-1: USB disconnect, device number 4 [ 278.773371][ T9703] 9pnet_fd: Insufficient options for proto=fd [ 278.862975][ T5759] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 278.902738][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.933915][ T1187] usb 5-1: Using ep0 maxpacket: 32 [ 278.947123][ T1187] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 278.974486][ T1187] usb 5-1: config 0 has no interface number 0 [ 278.995600][ T1187] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 279.020696][ T1187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.040124][ T1187] usb 5-1: Product: syz [ 279.049335][ T1187] usb 5-1: Manufacturer: syz [ 279.059466][ T1187] usb 5-1: SerialNumber: syz [ 279.063094][ T5759] usb 6-1: Using ep0 maxpacket: 16 [ 279.093881][ T5759] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00 [ 279.094389][ T1187] usb 5-1: config 0 descriptor?? [ 279.110870][ T5759] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.131116][ T5759] usb 6-1: Product: syz [ 279.136157][ T5759] usb 6-1: Manufacturer: syz [ 279.141130][ T5759] usb 6-1: SerialNumber: syz [ 279.148483][ T1187] smsc95xx v2.0.0 [ 279.162301][ T5759] usb 6-1: config 0 descriptor?? [ 279.191248][ T5759] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 279.211323][ T5759] usb 6-1: Detected FT2232H [ 279.291368][ T9716] netlink: 'syz.0.1169': attribute type 12 has an invalid length. [ 279.300930][ T9716] netlink: 'syz.0.1169': attribute type 29 has an invalid length. [ 279.318180][ T9716] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1169'. [ 279.404298][ T5759] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 279.444992][ T5759] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 279.562056][ T1187] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 279.595805][ T1187] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 279.639457][ T8] usb 6-1: USB disconnect, device number 5 [ 279.664081][ T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 279.695001][ T8] ftdi_sio 6-1:0.0: device disconnected [ 279.823804][ T9727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1172'. [ 280.017458][ T1187] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 280.052241][ T1187] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 280.055096][ T9731] syzkaller0: entered promiscuous mode [ 280.085556][ T9731] syzkaller0: entered allmulticast mode [ 280.113008][ T1187] usb 5-1: USB disconnect, device number 7 [ 280.188463][ T9737] loop0: detected capacity change from 0 to 512 [ 280.196957][ T9737] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 280.215083][ T9737] EXT4-fs (loop0): 1 truncate cleaned up [ 280.222282][ T9737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.276410][ T9737] 9pnet_fd: Insufficient options for proto=fd [ 280.353987][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.516604][ T9743] netlink: 'syz.0.1178': attribute type 12 has an invalid length. [ 280.536572][ T9743] netlink: 'syz.0.1178': attribute type 29 has an invalid length. [ 280.577949][ T9743] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1178'. [ 280.839797][ T9754] loop6: detected capacity change from 0 to 512 [ 280.929023][ T9754] EXT4-fs: Ignoring removed orlov option [ 280.930029][ T9758] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1184'. [ 280.966944][ T9754] EXT4-fs: Ignoring removed mblk_io_submit option [ 281.030459][ T9754] EXT4-fs error (device loop6): ext4_iget_extra_inode:4732: inode #15: comm syz.6.1182: corrupted in-inode xattr: e_value size too large [ 281.086333][ T9754] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.1182: couldn't read orphan inode 15 (err -117) [ 281.103465][ T9754] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.268452][ T8800] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.309583][ T9769] syzkaller0: entered promiscuous mode [ 281.325918][ T9769] syzkaller0: entered allmulticast mode [ 281.820049][ T9784] syz.5.1191: vmalloc error: size 9223372036854775808, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 281.837780][ T9785] netlink: 'syz.0.1192': attribute type 12 has an invalid length. [ 281.858828][ T9785] netlink: 'syz.0.1192': attribute type 29 has an invalid length. [ 281.876564][ T9784] CPU: 1 PID: 9784 Comm: syz.5.1191 Not tainted syzkaller #0 [ 281.884057][ T9784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.894193][ T9784] Call Trace: [ 281.897725][ T9784] [ 281.900842][ T9784] dump_stack_lvl+0x18c/0x250 [ 281.905370][ T9785] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1192'. [ 281.905889][ T9784] ? show_regs_print_info+0x20/0x20 [ 281.920658][ T9784] ? load_image+0x400/0x400 [ 281.925329][ T9784] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 281.931906][ T9784] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 281.938568][ T9784] warn_alloc+0x246/0x340 [ 281.942987][ T9784] ? zone_watermark_ok_safe+0x230/0x230 [ 281.948663][ T9784] __vmalloc_node_range+0x126/0x1330 [ 281.954455][ T9784] ? __mutex_trylock_common+0x159/0x260 [ 281.960077][ T9784] ? trace_raw_output_contention_end+0xd0/0xd0 [ 281.966323][ T9784] ? trace_contention_end+0x39/0xe0 [ 281.971651][ T9784] ? __mutex_lock+0x315/0xcc0 [ 281.976400][ T9784] ? free_vm_area+0x50/0x50 [ 281.980973][ T9784] ? dvb_demux_do_ioctl+0x317/0x530 [ 281.986326][ T9784] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 281.991862][ T9784] ? mutex_lock_nested+0x20/0x20 [ 281.996950][ T9784] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 282.002836][ T9784] vmalloc+0x79/0x90 [ 282.006832][ T9784] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 282.012712][ T9784] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 282.018596][ T9784] dvb_demux_do_ioctl+0x454/0x530 [ 282.023920][ T9784] dvb_usercopy+0x195/0x2b0 [ 282.028494][ T9784] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 282.034128][ T9784] ? dvb_generic_ioctl+0xb0/0xb0 [ 282.039254][ T9784] ? dvb_demux_poll+0x220/0x220 [ 282.044275][ T9784] dvb_demux_ioctl+0x29/0x30 [ 282.049034][ T9784] __se_sys_ioctl+0xfd/0x170 [ 282.053788][ T9784] do_syscall_64+0x55/0xa0 [ 282.058358][ T9784] ? clear_bhb_loop+0x40/0x90 [ 282.063280][ T9784] ? clear_bhb_loop+0x40/0x90 [ 282.068031][ T9784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.074164][ T9784] RIP: 0033:0x7fee2eb9c799 [ 282.078843][ T9784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.098524][ T9784] RSP: 002b:00007fee2fb00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.107366][ T9784] RAX: ffffffffffffffda RBX: 00007fee2ee15fa0 RCX: 00007fee2eb9c799 [ 282.115926][ T9784] RDX: 8000000000000000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 282.124070][ T9784] RBP: 00007fee2ec32c99 R08: 0000000000000000 R09: 0000000000000000 [ 282.132540][ T9784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.140840][ T9784] R13: 00007fee2ee16038 R14: 00007fee2ee15fa0 R15: 00007ffc2c4e1ee8 [ 282.149248][ T9784] [ 282.171526][ T9784] Mem-Info: [ 282.174884][ T9784] active_anon:8862 inactive_anon:0 isolated_anon:0 [ 282.174884][ T9784] active_file:12791 inactive_file:40023 isolated_file:0 [ 282.174884][ T9784] unevictable:768 dirty:116 writeback:0 [ 282.174884][ T9784] slab_reclaimable:10449 slab_unreclaimable:94478 [ 282.174884][ T9784] mapped:27088 shmem:3762 pagetables:741 [ 282.174884][ T9784] sec_pagetables:0 bounce:0 [ 282.174884][ T9784] kernel_misc_reclaimable:0 [ 282.174884][ T9784] free:1347483 free_pcp:8707 free_cma:0 [ 282.235135][ T9784] Node 0 active_anon:35648kB inactive_anon:0kB active_file:51164kB inactive_file:159888kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108452kB dirty:460kB writeback:0kB shmem:13712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11656kB pagetables:3064kB sec_pagetables:0kB all_unreclaimable? no [ 282.292224][ T9784] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 282.339569][ T9784] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.368015][ T5782] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 282.397581][ T9784] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 282.405710][ T9784] Node 0 DMA32 free:1478696kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:36660kB inactive_anon:0kB active_file:51164kB inactive_file:159064kB unevictable:1536kB writepending:468kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:16912kB local_pcp:6752kB free_cma:0kB [ 282.446530][ T9784] lowmem_reserve[]: 0 0 0 0 0 [ 282.452027][ T9784] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.497982][ T9784] lowmem_reserve[]: 0 0 0 0 0 [ 282.514168][ T9784] Node 1 Normal free:3894356kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18464kB local_pcp:6496kB free_cma:0kB [ 282.582458][ T5782] usb 5-1: Using ep0 maxpacket: 32 [ 282.590265][ T5782] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 282.600143][ T5782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.633768][ T9784] lowmem_reserve[]: 0 0 0 0 0 [ 282.638690][ T9784] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 282.661666][ T5782] usb 5-1: config 0 descriptor?? [ 282.675927][ T5782] gspca_main: sunplus-2.14.0 probing 041e:400b [ 282.690935][ T9784] Node 0 DMA32: 779*4kB (UM) 149*8kB (UME) 104*16kB (UME) 301*32kB (UM) 171*64kB (UM) 71*128kB (UME) 50*256kB (UM) 24*512kB (UME) 12*1024kB (ME) 4*2048kB (UM) 341*4096kB (UM) = 1477940kB [ 282.716070][ T9784] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 282.730113][ T9784] Node 1 Normal: 273*4kB (UME) 58*8kB (UME) 46*16kB (UME) 101*32kB (UME) 27*64kB (UME) 6*128kB (UME) 3*256kB (UME) 1*512kB (E) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3894356kB [ 282.730824][ T9795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1194'. [ 282.749730][ T9784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 282.776620][ T9773] loop6: detected capacity change from 0 to 1024 [ 282.779189][ T9784] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 282.825745][ T9784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 282.843402][ T9773] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.860367][ T9784] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 282.901818][ T9784] 55753 total pagecache pages [ 282.918263][ T9784] 0 pages in swap cache [ 282.929719][ T9784] Free swap = 124996kB [ 282.945133][ T9784] Total swap = 124996kB [ 282.950320][ T28] audit: type=1800 audit(1774553346.286:15): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1188" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 282.951393][ T9784] 2097051 pages RAM [ 282.978621][ T9784] 0 pages HighMem/MovableOnly [ 282.984588][ T9784] 416926 pages reserved [ 282.989021][ T9784] 0 pages cma reserved [ 283.117770][ T8800] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.204487][ T9801] loop5: detected capacity change from 0 to 512 [ 283.224283][ T9801] EXT4-fs: Ignoring removed orlov option [ 283.230228][ T9801] EXT4-fs: Ignoring removed mblk_io_submit option [ 283.305997][ T9801] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.1196: corrupted in-inode xattr: e_value size too large [ 283.340112][ T9801] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.1196: couldn't read orphan inode 15 (err -117) [ 283.360772][ T9801] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.519449][ T8745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.675431][ T9812] netlink: 'syz.6.1201': attribute type 12 has an invalid length. [ 283.683618][ T9812] netlink: 'syz.6.1201': attribute type 29 has an invalid length. [ 283.692082][ T9812] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1201'. [ 283.887888][ T9819] loop6: detected capacity change from 0 to 512 [ 283.932574][ T9819] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 283.982115][ T9819] EXT4-fs (loop6): 1 truncate cleaned up [ 284.005298][ T9819] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.048449][ T9822] syzkaller0: entered promiscuous mode [ 284.082122][ T9822] syzkaller0: entered allmulticast mode [ 284.105492][ T5782] gspca_sunplus: reg_w_riv err -71 [ 284.117028][ T5782] sunplus: probe of 5-1:0.0 failed with error -71 [ 284.126319][ T5782] usb 5-1: USB disconnect, device number 8 [ 284.252650][ T8800] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.562251][ T9836] loop6: detected capacity change from 0 to 512 [ 284.598716][ T9836] EXT4-fs: Ignoring removed orlov option [ 284.640888][ T9836] EXT4-fs: Ignoring removed mblk_io_submit option [ 284.672143][ T9836] EXT4-fs error (device loop6): ext4_iget_extra_inode:4732: inode #15: comm syz.6.1208: corrupted in-inode xattr: e_value size too large [ 284.704477][ T9836] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.1208: couldn't read orphan inode 15 (err -117) [ 284.719536][ T9836] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.790812][ T9825] loop5: detected capacity change from 0 to 1024 [ 284.874026][ T8800] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.908344][ T9841] netlink: 'syz.4.1211': attribute type 12 has an invalid length. [ 284.928301][ T9825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.960635][ T9841] netlink: 'syz.4.1211': attribute type 29 has an invalid length. [ 284.996731][ T9841] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1211'. [ 285.215447][ T8745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.257108][ T9856] loop4: detected capacity change from 0 to 512 [ 285.284435][ T9856] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 285.383619][ T9856] EXT4-fs (loop4): 1 truncate cleaned up [ 285.439672][ T9856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.590892][ T7188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.807529][ T9876] loop0: detected capacity change from 0 to 512 [ 285.821139][ T9876] EXT4-fs: Ignoring removed orlov option [ 285.835821][ T9876] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.878513][ T9876] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.1220: corrupted in-inode xattr: e_value size too large [ 285.915497][ T9876] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.1220: couldn't read orphan inode 15 (err -117) [ 285.951857][ T9876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.129312][ T9886] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1223'. [ 286.142950][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.441561][ T9896] loop0: detected capacity change from 0 to 512 [ 286.467773][ T9896] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 286.523494][ T9896] EXT4-fs (loop0): 1 truncate cleaned up [ 286.530539][ T9896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.736327][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.880761][ T5782] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 287.014319][ T9915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1233'. [ 287.025773][ T9916] loop0: detected capacity change from 0 to 512 [ 287.037237][ T9916] EXT4-fs: Ignoring removed orlov option [ 287.066016][ T9916] EXT4-fs: Ignoring removed mblk_io_submit option [ 287.082509][ T5782] usb 6-1: Using ep0 maxpacket: 8 [ 287.103448][ T5782] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 287.117979][ T9916] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.1232: corrupted in-inode xattr: e_value size too large [ 287.137828][ T5782] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 287.172215][ T5782] usb 6-1: Product: syz [ 287.187941][ T9916] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.1232: couldn't read orphan inode 15 (err -117) [ 287.195527][ T5782] usb 6-1: Manufacturer: syz [ 287.246196][ T5782] usb 6-1: SerialNumber: syz [ 287.262043][ T5782] usb 6-1: config 0 descriptor?? [ 287.275039][ T9916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.307734][ T5782] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 287.423714][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.692554][ T1187] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 287.890240][ T1187] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.906419][ T1187] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 287.921278][ T1187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.929907][ T1187] usb 5-1: Product: syz [ 287.938449][ T1187] usb 5-1: Manufacturer: syz [ 287.942250][ T5782] gspca_zc3xx: reg_w_i err -71 [ 287.943306][ T1187] usb 5-1: SerialNumber: syz [ 287.955142][ T5782] gspca_zc3xx: probe of 6-1:0.0 failed with error -71 [ 287.959332][ T1187] usb 5-1: config 0 descriptor?? [ 287.980518][ T5782] usb 6-1: USB disconnect, device number 6 [ 287.996302][ T1187] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected [ 288.009979][ T1187] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 288.019845][ T1187] garmin_gps: probe of ttyUSB0 failed with error -22 [ 288.219250][ T23] usb 5-1: USB disconnect, device number 9 [ 288.230385][ T23] garmin_gps 5-1:0.0: device disconnected [ 288.824813][ T9954] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1242'. [ 288.953328][ T9957] netlink: 'syz.4.1243': attribute type 12 has an invalid length. [ 288.973896][ T9958] loop6: detected capacity change from 0 to 512 [ 288.980467][ T9957] netlink: 'syz.4.1243': attribute type 29 has an invalid length. [ 289.002216][ T9958] EXT4-fs: Ignoring removed orlov option [ 289.012676][ T9957] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1243'. [ 289.035704][ T9958] EXT4-fs: Ignoring removed mblk_io_submit option [ 289.142947][ T9958] EXT4-fs error (device loop6): ext4_iget_extra_inode:4732: inode #15: comm syz.6.1244: corrupted in-inode xattr: e_value size too large [ 289.284790][ T9958] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.1244: couldn't read orphan inode 15 (err -117) [ 289.446921][ T9958] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.682102][ T8800] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.921353][ T9990] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1251'. [ 290.003835][ T9992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1252'. [ 290.234502][T10003] netlink: 'syz.6.1254': attribute type 12 has an invalid length. [ 290.253355][T10003] netlink: 'syz.6.1254': attribute type 29 has an invalid length. [ 290.291125][T10003] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1254'. [ 290.322286][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1255'. [ 290.332038][T10006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1255'. [ 290.372295][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1255'. [ 290.395455][T10006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1255'. [ 290.719535][T10017] loop0: detected capacity change from 0 to 512 [ 290.784672][T10017] EXT4-fs: Ignoring removed orlov option [ 290.791711][T10017] EXT4-fs: Ignoring removed mblk_io_submit option [ 290.839642][T10017] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.1259: corrupted in-inode xattr: e_value size too large [ 290.858761][T10017] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.1259: couldn't read orphan inode 15 (err -117) [ 290.874657][T10017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.939629][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.338702][T10043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1263'. [ 291.582746][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 291.622914][T10051] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1267'. [ 291.642964][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 291.871465][T10063] loop0: detected capacity change from 0 to 512 [ 291.889824][T10063] EXT4-fs: Ignoring removed orlov option [ 291.910249][T10063] EXT4-fs: Ignoring removed mblk_io_submit option [ 291.928666][T10060] syzkaller1: entered promiscuous mode [ 291.943495][T10060] syzkaller1: entered allmulticast mode [ 291.960976][T10063] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.1271: corrupted in-inode xattr: e_value size too large [ 292.037559][T10063] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.1271: couldn't read orphan inode 15 (err -117) [ 292.092632][T10063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.322636][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.213104][T10112] loop5: detected capacity change from 0 to 512 [ 293.221122][T10112] EXT4-fs: Ignoring removed orlov option [ 293.282431][T10112] EXT4-fs: Ignoring removed mblk_io_submit option [ 293.315085][T10112] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.1283: corrupted in-inode xattr: e_value size too large [ 293.348126][T10112] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.1283: couldn't read orphan inode 15 (err -117) [ 293.410746][T10112] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.701496][ T8745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.400886][T10160] loop5: detected capacity change from 0 to 512 [ 294.461998][T10160] EXT4-fs: Ignoring removed orlov option [ 294.530378][T10160] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.601681][T10160] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.1296: corrupted in-inode xattr: e_value size too large [ 294.679465][T10160] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.1296: couldn't read orphan inode 15 (err -117) [ 294.755494][T10160] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.010717][ T8745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.105034][T10182] __nla_validate_parse: 3 callbacks suppressed [ 295.105054][T10182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1299'. [ 296.072707][ T23] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 296.166265][T10231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1312'. [ 296.275662][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 296.302918][ T23] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 296.311796][ T23] usb 7-1: config 0 has no interface number 0 [ 296.351015][ T23] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 296.366880][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.396013][ T23] usb 7-1: Product: syz [ 296.422521][ T23] usb 7-1: Manufacturer: syz [ 296.427297][ T23] usb 7-1: SerialNumber: syz [ 296.447200][ T23] usb 7-1: config 0 descriptor?? [ 296.480364][ T23] smsc95xx v2.0.0 [ 296.903070][ T23] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 296.903138][ T23] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 297.105763][ T23] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 297.106006][ T23] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 297.112725][ T23] usb 7-1: USB disconnect, device number 5 [ 297.795904][T10273] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1321'. [ 298.088074][T10278] syzkaller0: entered promiscuous mode [ 298.102532][T10278] syzkaller0: entered allmulticast mode [ 298.637423][T10286] loop4: detected capacity change from 0 to 1024 [ 298.686203][T10286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.739811][ T28] audit: type=1800 audit(1774553362.076:16): pid=10286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1324" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 298.860448][ T7188] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.292608][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 299.508520][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 299.520056][ T8] usb 5-1: config 4 has an invalid interface number: 228 but max is 0 [ 299.528975][ T8] usb 5-1: config 4 has no interface number 0 [ 299.535571][ T8] usb 5-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30 [ 299.548144][ T8] usb 5-1: config 4 interface 228 altsetting 12 has an invalid endpoint with address 0xFF, skipping [ 299.564483][ T8] usb 5-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 299.580393][ T8] usb 5-1: config 4 interface 228 has no altsetting 0 [ 299.602286][ T8] usb 5-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 299.621124][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.629771][ T8] usb 5-1: Product: syz [ 299.634954][ T8] usb 5-1: Manufacturer: syz [ 299.640512][ T8] usb 5-1: SerialNumber: syz [ 300.056985][ T8] usb 5-1: USB disconnect, device number 10 [ 300.087904][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.110926][T10254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 301.295411][ T5782] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 301.517368][ T5782] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.537580][ T5782] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 301.552158][ T5782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.613939][ T5782] usb 6-1: config 0 descriptor?? [ 301.826991][T10308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1331'. [ 302.056602][ T5782] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 302.071291][ T5782] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0002/input/input6 [ 302.383590][ T5782] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 302.724362][ T5817] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 302.752530][ T5782] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 302.956890][ T5817] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 302.965715][ T5782] usb 1-1: Using ep0 maxpacket: 32 [ 302.978653][ T5782] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 302.996919][ T5782] usb 1-1: config 0 has no interface number 0 [ 302.999397][ T5817] usb 5-1: config 0 has no interface number 0 [ 303.028485][ T5782] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 303.030832][ T5817] usb 5-1: config 0 interface 41 has no altsetting 0 [ 303.057862][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.084994][ T5782] usb 1-1: Product: syz [ 303.092605][ T5817] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 303.095326][ T5782] usb 1-1: Manufacturer: syz [ 303.104991][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.118943][ T5817] usb 5-1: Product: syz [ 303.123768][ T5817] usb 5-1: Manufacturer: syz [ 303.128605][ T5817] usb 5-1: SerialNumber: syz [ 303.140218][ T5817] usb 5-1: config 0 descriptor?? [ 303.158666][ T5782] usb 1-1: SerialNumber: syz [ 303.203342][ T5782] usb 1-1: config 0 descriptor?? [ 303.223430][ T5782] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 303.239812][ T5782] usb 1-1: selecting invalid altsetting 1 [ 303.246423][ T5782] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 303.295332][ T5782] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 303.309640][ T5782] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 303.325964][ T5782] usb 1-1: media controller created [ 303.429661][ T5782] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 303.515439][ T5782] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 303.533834][ T5782] zl10353_read_register: readreg error (reg=127, ret==-32) [ 303.813751][ T5782] usb 1-1: USB disconnect, device number 7 [ 304.021020][ T5817] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 304.074049][ T5782] usb 6-1: USB disconnect, device number 7 [ 304.333048][ T1187] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 304.497634][T10358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1340'. [ 304.543495][ T1187] usb 7-1: Using ep0 maxpacket: 32 [ 304.555655][ T1187] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 304.572427][ T1187] usb 7-1: config 0 has no interface number 0 [ 304.588839][ T1187] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 304.609200][ T1187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.628763][ T1187] usb 7-1: Product: syz [ 304.638903][ T1187] usb 7-1: Manufacturer: syz [ 304.649054][ T1187] usb 7-1: SerialNumber: syz [ 304.666229][ T1187] usb 7-1: config 0 descriptor?? [ 304.684760][ T1187] smsc95xx v2.0.0 [ 304.787885][T10361] syzkaller0: entered promiscuous mode [ 304.796155][T10361] syzkaller0: entered allmulticast mode [ 305.096152][ T1187] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 305.113060][ T1187] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 305.299899][ T5817] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 305.311303][ T5817] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 305.322839][ T5817] CoreChips: probe of 5-1:0.41 failed with error -71 [ 305.335537][ T1187] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 305.349935][ T1187] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 305.358527][ T5817] usb 5-1: USB disconnect, device number 11 [ 305.389853][ T1187] usb 7-1: USB disconnect, device number 6 [ 307.158884][T10345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.272625][ T8] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 308.328341][T10395] syzkaller0: entered promiscuous mode [ 308.334561][T10395] syzkaller0: entered allmulticast mode [ 308.452734][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 308.462788][ T8] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 308.462821][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.466003][ T8] usb 6-1: config 0 descriptor?? [ 308.475419][ T8] gspca_main: sunplus-2.14.0 probing 041e:400b [ 308.543095][ T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 308.717431][T10407] syz.6.1352: vmalloc error: size 9223372036854775808, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 308.717757][T10407] CPU: 1 PID: 10407 Comm: syz.6.1352 Not tainted syzkaller #0 [ 308.717793][T10407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 308.717808][T10407] Call Trace: [ 308.717816][T10407] [ 308.717826][T10407] dump_stack_lvl+0x18c/0x250 [ 308.717873][T10407] ? show_regs_print_info+0x20/0x20 [ 308.717907][T10407] ? load_image+0x400/0x400 [ 308.718061][T10407] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 308.718095][T10407] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 308.718131][T10407] warn_alloc+0x246/0x340 [ 308.718174][T10407] ? zone_watermark_ok_safe+0x230/0x230 [ 308.718229][T10407] __vmalloc_node_range+0x126/0x1330 [ 308.718261][T10407] ? __mutex_trylock_common+0x159/0x260 [ 308.718287][T10407] ? trace_raw_output_contention_end+0xd0/0xd0 [ 308.718319][T10407] ? trace_contention_end+0x39/0xe0 [ 308.718342][T10407] ? __mutex_lock+0x315/0xcc0 [ 308.718371][T10407] ? free_vm_area+0x50/0x50 [ 308.718399][T10407] ? dvb_demux_do_ioctl+0x317/0x530 [ 308.718425][T10407] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 308.718458][T10407] ? mutex_lock_nested+0x20/0x20 [ 308.718482][T10407] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 308.718518][T10407] vmalloc+0x79/0x90 [ 308.718547][T10407] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 308.718574][T10407] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 308.718607][T10407] dvb_demux_do_ioctl+0x454/0x530 [ 308.718639][T10407] dvb_usercopy+0x195/0x2b0 [ 308.718664][T10407] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 308.718715][T10407] ? dvb_generic_ioctl+0xb0/0xb0 [ 308.718763][T10407] ? dvb_demux_poll+0x220/0x220 [ 308.718791][T10407] dvb_demux_ioctl+0x29/0x30 [ 308.718818][T10407] __se_sys_ioctl+0xfd/0x170 [ 308.718899][T10407] do_syscall_64+0x55/0xa0 [ 308.718936][T10407] ? clear_bhb_loop+0x40/0x90 [ 308.718963][T10407] ? clear_bhb_loop+0x40/0x90 [ 308.718992][T10407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.719027][T10407] RIP: 0033:0x7f71e939c799 [ 308.719051][T10407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.719070][T10407] RSP: 002b:00007f71ea300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.719096][T10407] RAX: ffffffffffffffda RBX: 00007f71e9615fa0 RCX: 00007f71e939c799 [ 308.719113][T10407] RDX: 8000000000000000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 308.719129][T10407] RBP: 00007f71e9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 308.719149][T10407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.719163][T10407] R13: 00007f71e9616038 R14: 00007f71e9615fa0 R15: 00007ffc539d62c8 [ 308.719197][T10407] [ 308.719208][T10407] Mem-Info: [ 308.719220][T10407] active_anon:7014 inactive_anon:0 isolated_anon:0 [ 308.719220][T10407] active_file:12791 inactive_file:40061 isolated_file:0 [ 308.719220][T10407] unevictable:768 dirty:76 writeback:0 [ 308.719220][T10407] slab_reclaimable:10463 slab_unreclaimable:94778 [ 308.719220][T10407] mapped:24888 shmem:1462 pagetables:845 [ 308.719220][T10407] sec_pagetables:0 bounce:0 [ 308.719220][T10407] kernel_misc_reclaimable:0 [ 308.719220][T10407] free:1345426 free_pcp:8561 free_cma:0 [ 308.719280][T10407] Node 0 active_anon:28056kB inactive_anon:0kB active_file:51164kB inactive_file:160040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99552kB dirty:300kB writeback:0kB shmem:4312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12016kB pagetables:3380kB sec_pagetables:0kB all_unreclaimable? no [ 308.719336][T10407] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 308.719390][T10407] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.719449][T10407] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 308.719499][T10407] Node 0 DMA32 free:1471500kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:28016kB inactive_anon:0kB active_file:51164kB inactive_file:159216kB unevictable:1536kB writepending:300kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:16284kB local_pcp:15724kB free_cma:0kB [ 308.719564][T10407] lowmem_reserve[]: 0 0 0 0 0 [ 308.719611][T10407] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.719670][T10407] lowmem_reserve[]: 0 0 0 0 0 [ 308.719719][T10407] Node 1 Normal free:3894868kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17956kB local_pcp:6240kB free_cma:0kB [ 308.719796][T10407] lowmem_reserve[]: 0 0 0 0 0 [ 308.719856][T10407] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 308.720135][T10407] Node 0 DMA32: 385*4kB (UME) 269*8kB (UME) 358*16kB (UME) 458*32kB (UME) 173*64kB (UME) 61*128kB (UME) 46*256kB (UME) 23*512kB (UM) 14*1024kB (UME) 3*2048kB (UM) 338*4096kB (M) = 1471436kB [ 308.720359][T10407] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 308.720510][T10407] Node 1 Normal: 273*4kB (UME) 58*8kB (UME) 46*16kB (UME) 113*32kB (UME) 29*64kB (UME) 6*128kB (UME) 3*256kB (UME) 1*512kB (E) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3894868kB [ 308.720765][T10407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.720784][T10407] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.720803][T10407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.720821][T10407] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.720838][T10407] 54312 total pagecache pages [ 308.720848][T10407] 0 pages in swap cache [ 308.720856][T10407] Free swap = 124984kB [ 308.720865][T10407] Total swap = 124996kB [ 308.720875][T10407] 2097051 pages RAM [ 308.720883][T10407] 0 pages HighMem/MovableOnly [ 308.720890][T10407] 416926 pages reserved [ 308.720899][T10407] 0 pages cma reserved [ 308.764227][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 308.768081][ T23] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 308.768111][ T23] usb 5-1: config 0 has no interface number 0 [ 308.792127][ T23] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 309.556944][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.569872][ T23] usb 5-1: Product: syz [ 309.616030][ T23] usb 5-1: Manufacturer: syz [ 309.620718][ T23] usb 5-1: SerialNumber: syz [ 309.662290][ T23] usb 5-1: config 0 descriptor?? [ 309.683487][ T23] smsc95xx v2.0.0 [ 309.715744][T10413] loop0: detected capacity change from 0 to 512 [ 309.765024][T10413] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 309.795205][T10413] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 309.812773][T10413] System zones: 1-12 [ 309.822652][T10413] EXT4-fs (loop0): 1 truncate cleaned up [ 309.840484][T10413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.080483][ T5769] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /358/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 310.083110][ T23] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 310.117908][ T23] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 310.212618][ T5769] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 310.285864][ T5769] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /358/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 310.330932][ T23] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 310.342255][ T8] gspca_sunplus: reg_w_riv err -71 [ 310.342387][ T8] sunplus: probe of 6-1:0.0 failed with error -71 [ 310.364729][ T8] usb 6-1: USB disconnect, device number 8 [ 310.380587][ T23] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 310.393172][ T5769] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 310.420021][ T23] usb 5-1: USB disconnect, device number 12 [ 310.449866][ T5769] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /358/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 310.511831][ T5769] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 310.535919][ T5769] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /358/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 310.561654][ T5769] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 310.585784][ T5769] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /358/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 310.626636][ T5769] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 311.122951][T10440] syzkaller0: entered promiscuous mode [ 311.128819][T10440] syzkaller0: entered allmulticast mode [ 311.467930][T10451] syzkaller1: entered promiscuous mode [ 311.477208][T10451] syzkaller1: entered allmulticast mode [ 311.587337][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.719761][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.746185][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.905043][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.932683][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.116745][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.182501][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.385967][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.417393][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.592423][ T5782] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 312.802726][ T5782] usb 6-1: Using ep0 maxpacket: 32 [ 312.838586][ T5782] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 312.862511][ T5782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.908142][ T5782] usb 6-1: config 0 descriptor?? [ 312.953899][ T5782] gspca_main: sunplus-2.14.0 probing 041e:400b [ 313.270063][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 313.287602][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 313.297716][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 313.308539][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 313.323394][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 313.331198][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.457426][T10479] syzkaller0: entered promiscuous mode [ 313.489351][T10479] syzkaller0: entered allmulticast mode [ 314.373316][ T5782] gspca_sunplus: reg_w_riv err -71 [ 314.378614][ T5782] sunplus: probe of 6-1:0.0 failed with error -71 [ 314.395141][ T5782] usb 6-1: USB disconnect, device number 9 [ 315.410105][ T5773] Bluetooth: hci1: command tx timeout [ 317.033004][ T9] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 317.237049][ T9] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 317.256327][ T9] usb 6-1: config 0 has no interface number 0 [ 317.295156][ T9] usb 6-1: config 0 interface 41 has no altsetting 0 [ 317.337306][ T9] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 317.346812][ T5759] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 317.374311][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.437678][ T9] usb 6-1: Product: syz [ 317.447847][ T9] usb 6-1: Manufacturer: syz [ 317.465986][T10484] chnl_net:caif_netlink_parms(): no params data found [ 317.474740][ T9] usb 6-1: SerialNumber: syz [ 317.482665][ T5773] Bluetooth: hci1: command tx timeout [ 317.494140][ T9] usb 6-1: config 0 descriptor?? [ 317.522958][ T5759] usb 5-1: Using ep0 maxpacket: 32 [ 317.542545][ T5759] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 317.570291][ T5759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.581353][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.588890][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.590638][ T5759] usb 5-1: config 0 descriptor?? [ 317.627623][ T5759] gspca_main: sunplus-2.14.0 probing 041e:400b [ 317.994372][T10554] syzkaller0: entered promiscuous mode [ 318.000081][T10554] syzkaller0: entered allmulticast mode [ 318.193568][T10484] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.211405][T10484] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.222507][T10484] bridge_slave_0: entered allmulticast mode [ 318.243533][T10484] bridge_slave_0: entered promiscuous mode [ 318.274686][T10484] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.281987][T10484] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.312070][ T9] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 318.329331][T10484] bridge_slave_1: entered allmulticast mode [ 318.345884][T10484] bridge_slave_1: entered promiscuous mode [ 318.420059][ T42] hsr_slave_0: left promiscuous mode [ 318.437673][ T42] hsr_slave_1: left promiscuous mode [ 318.459427][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.471316][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.487316][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.498455][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.512077][ T42] bridge_slave_1: left allmulticast mode [ 318.530856][ T42] bridge_slave_1: left promiscuous mode [ 318.541031][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.555244][ T42] bridge_slave_0: left allmulticast mode [ 318.572468][ T42] bridge_slave_0: left promiscuous mode [ 318.578381][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.674542][ T42] veth1_macvtap: left promiscuous mode [ 318.691904][ T42] veth0_macvtap: left promiscuous mode [ 318.703390][ T42] veth1_vlan: left promiscuous mode [ 318.709238][ T42] veth0_vlan: left promiscuous mode [ 319.038788][ T5759] gspca_sunplus: reg_w_riv err -71 [ 319.054516][ T5759] sunplus: probe of 5-1:0.0 failed with error -71 [ 319.077185][ T5759] usb 5-1: USB disconnect, device number 13 [ 319.391910][ T9] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 319.403858][ T9] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 319.428699][ T9] CoreChips: probe of 6-1:0.41 failed with error -71 [ 319.452098][ T9] usb 6-1: USB disconnect, device number 10 [ 319.572440][ T5773] Bluetooth: hci1: command tx timeout [ 319.985543][ T42] team0 (unregistering): Port device team_slave_1 removed [ 320.081638][ T42] team0 (unregistering): Port device team_slave_0 removed [ 320.221032][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.317399][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.832554][ T5759] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 320.944819][ T42] bond0 (unregistering): Released all slaves [ 321.032634][ T5759] usb 6-1: Using ep0 maxpacket: 32 [ 321.044606][ T5759] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 321.057051][ T5759] usb 6-1: config 0 has no interface number 0 [ 321.063668][ T5759] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 321.078592][ T5759] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 321.088667][ T5759] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.106419][ T5759] usb 6-1: Product: syz [ 321.111043][ T5759] usb 6-1: Manufacturer: syz [ 321.117354][ T5759] usb 6-1: SerialNumber: syz [ 321.140141][ T5759] usb 6-1: config 0 descriptor?? [ 321.161925][ T5759] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 321.204467][T10484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.208403][ T5759] em28xx 6-1:0.132: Video interface 132 found: [ 321.246313][T10484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.364391][T10484] team0: Port device team_slave_0 added [ 321.396972][T10484] team0: Port device team_slave_1 added [ 321.517595][T10484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.555901][T10484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.622014][T10484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.641407][ T5759] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 321.648092][ T5773] Bluetooth: hci1: command tx timeout [ 321.654959][T10484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.670027][T10484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.699231][T10484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.719362][T10598] syzkaller0: entered promiscuous mode [ 321.725563][T10598] syzkaller0: entered allmulticast mode [ 321.922767][T10484] hsr_slave_0: entered promiscuous mode [ 321.943987][T10484] hsr_slave_1: entered promiscuous mode [ 321.979078][T10484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.987680][T10484] Cannot create hsr debugfs directory [ 322.278500][ T5759] em28xx 6-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 322.312679][ T5759] em28xx 6-1:0.132: failed to read eeprom (err=-5) [ 322.319775][ T5759] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 322.415985][ T5759] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 322.437667][ T5759] em28xx 6-1:0.132: analog set to bulk mode. [ 322.459890][ T23] em28xx 6-1:0.132: Registering V4L2 extension [ 322.488859][ T5759] usb 6-1: USB disconnect, device number 11 [ 322.495791][ T5782] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 322.543288][ T5759] em28xx 6-1:0.132: Disconnecting em28xx [ 322.670204][T10484] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 322.704508][ T5782] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 322.713944][T10484] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 322.733054][ T5782] usb 5-1: config 0 has no interface number 0 [ 322.749742][ T5782] usb 5-1: config 0 interface 41 has no altsetting 0 [ 322.772752][T10484] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 322.796008][ T5782] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 322.807212][ T5782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.820085][T10484] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 322.825866][ T5782] usb 5-1: Product: syz [ 322.834218][ T5782] usb 5-1: Manufacturer: syz [ 322.839694][ T5782] usb 5-1: SerialNumber: syz [ 322.863237][ T5782] usb 5-1: config 0 descriptor?? [ 323.037047][ T23] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 323.074738][ T23] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 323.118454][ T23] em28xx 6-1:0.132: No AC97 audio processor [ 323.163233][T10484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.183726][ T23] usb 6-1: Decoder not found [ 323.192597][ T23] em28xx 6-1:0.132: failed to create media graph [ 323.209716][ T23] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 323.267042][ T23] em28xx 6-1:0.132: Remote control support is not available for this card. [ 323.282010][T10484] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.303686][ T5759] em28xx 6-1:0.132: Closing input extension [ 323.363254][ T7955] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.370673][ T7955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.415974][ T7955] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.424673][ T7955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.451279][ T5759] em28xx 6-1:0.132: Freeing device [ 323.645437][T10484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.713058][ T5782] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 324.223520][T10654] syzkaller0: entered promiscuous mode [ 324.229368][T10654] syzkaller0: entered allmulticast mode [ 324.441338][T10484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.793564][ T5782] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 324.815754][ T5782] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 324.826068][ T5782] CoreChips: probe of 5-1:0.41 failed with error -71 [ 324.848996][ T5782] usb 5-1: USB disconnect, device number 14 [ 325.219657][T10484] veth0_vlan: entered promiscuous mode [ 325.260770][T10484] veth1_vlan: entered promiscuous mode [ 325.387076][T10484] veth0_macvtap: entered promiscuous mode [ 325.429337][T10484] veth1_macvtap: entered promiscuous mode [ 325.509998][T10484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.539829][T10484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.560518][T10484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.588025][T10484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.619969][T10484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.647143][T10484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.685354][T10484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.740548][T10484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.768588][T10484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.791801][T10484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.823777][T10484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.843688][T10484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.877190][T10484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.917985][T10484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.999059][T10484] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.030602][T10484] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.050754][T10484] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.072480][T10484] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.210997][T10705] syzkaller0: entered promiscuous mode [ 326.223248][T10705] syzkaller0: entered allmulticast mode [ 327.462563][ T5782] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 327.655259][ T5782] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 327.664725][ T5782] usb 7-1: config 0 has no interface number 0 [ 327.671015][ T5782] usb 7-1: config 0 interface 41 has no altsetting 0 [ 327.689615][ T5782] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 327.699554][ T5782] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.708285][ T5782] usb 7-1: Product: syz [ 327.717519][ T5782] usb 7-1: Manufacturer: syz [ 327.722800][ T5782] usb 7-1: SerialNumber: syz [ 327.733794][ T5782] usb 7-1: config 0 descriptor?? [ 328.577190][ T5782] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 329.357395][T10717] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1415'. [ 329.369234][T10717] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1415'. [ 329.613340][ T5782] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 329.646599][ T5782] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 329.663953][ T7950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.684812][ T7950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.699869][ T5782] CoreChips: probe of 7-1:0.41 failed with error -71 [ 329.729730][ T7955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.752513][ T5782] usb 7-1: USB disconnect, device number 7 [ 329.769154][ T7955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.085419][T10737] loop7: detected capacity change from 0 to 512 [ 330.130772][T10737] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 330.163106][T10737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 330.203410][T10737] System zones: 1-12 [ 330.232587][T10737] EXT4-fs (loop7): 1 truncate cleaned up [ 330.256657][T10737] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.373057][T10737] loop7: detected capacity change from 512 to 0 [ 330.508331][T10484] syz-executor: attempt to access beyond end of device [ 330.508331][T10484] loop7: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 330.607687][T10750] process 'syz.6.1422' launched './file0' with NULL argv: empty string added [ 330.655052][T10752] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1424'. [ 330.692698][T10752] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1424'. [ 330.746139][T10484] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.772126][T10484] syz-executor: attempt to access beyond end of device [ 330.772126][T10484] loop7: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 330.816767][T10484] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 330.872647][T10484] EXT4-fs (loop7): I/O error while writing superblock [ 330.896238][T10757] syzkaller0: entered promiscuous mode [ 330.903484][T10757] syzkaller0: entered allmulticast mode [ 331.379698][ T5773] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 331.501082][ T1187] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 331.605311][ T7950] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.716668][ T1187] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 331.726514][ T1187] usb 6-1: config 0 has no interface number 0 [ 331.746168][ T1187] usb 6-1: config 0 interface 41 has no altsetting 0 [ 331.787919][ T1187] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 331.799944][ T7950] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.821408][ T1187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.830161][ T1187] usb 6-1: Product: syz [ 331.841644][ T1187] usb 6-1: Manufacturer: syz [ 331.872451][ T1187] usb 6-1: SerialNumber: syz [ 331.884936][ T1187] usb 6-1: config 0 descriptor?? [ 331.903239][ T9011] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 331.935964][ T7950] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.112839][ T9011] usb 7-1: Using ep0 maxpacket: 8 [ 332.121417][ T7950] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.145317][ T9011] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 332.154866][ T9011] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 332.189613][ T9011] usb 7-1: Product: syz [ 332.209964][ T9011] usb 7-1: Manufacturer: syz [ 332.232466][ T9011] usb 7-1: SerialNumber: syz [ 332.260404][ T9011] usb 7-1: config 0 descriptor?? [ 332.287840][ T9011] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 332.619345][T10785] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1435'. [ 332.731724][ T9011] gspca_zc3xx: reg_r err -71 [ 332.749533][ T9011] gspca_zc3xx: probe of 7-1:0.0 failed with error -71 [ 332.778821][ T1187] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 332.805100][ T9011] usb 7-1: USB disconnect, device number 8 [ 332.859861][T10785] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1435'. [ 333.134119][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.154172][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.163161][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.182674][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.191630][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 333.199714][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.629099][ T8] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 333.814263][T10802] syzkaller0: entered promiscuous mode [ 333.820125][T10802] syzkaller0: entered allmulticast mode [ 333.832965][ T1187] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 333.860719][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 333.872600][ T1187] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 333.901230][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 333.915291][ T1187] CoreChips: probe of 6-1:0.41 failed with error -71 [ 333.945095][ T1187] usb 6-1: USB disconnect, device number 12 [ 333.953872][ T8] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 333.995973][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.053372][ T8] usb 5-1: config 0 descriptor?? [ 334.300348][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 334.316496][ T8] usbhid: probe of 5-1:0.0 failed with error -71 [ 334.358459][ T8] usb 5-1: USB disconnect, device number 15 [ 334.395873][T10811] nbd5: detected capacity change from 0 to 63 [ 334.444268][T10812] block nbd5: NBD_DISCONNECT [ 334.466721][T10812] block nbd5: Disconnected due to user request. [ 334.484049][T10812] block nbd5: shutting down sockets [ 334.503562][ C0] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.513108][ C0] Buffer I/O error on dev nbd5, logical block 0, async page read [ 334.521421][ C0] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.530732][ C0] Buffer I/O error on dev nbd5, logical block 1, async page read [ 334.538628][ C0] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.547989][ C0] Buffer I/O error on dev nbd5, logical block 2, async page read [ 334.552209][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.556086][ C0] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.572118][ C0] Buffer I/O error on dev nbd5, logical block 3, async page read [ 334.599294][ T55] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 334.611700][ T55] Buffer I/O error on dev nbd5, logical block 0, async page read [ 334.621375][ T55] Buffer I/O error on dev nbd5, logical block 1, async page read [ 334.629741][ T55] Buffer I/O error on dev nbd5, logical block 2, async page read [ 334.637969][ T55] Buffer I/O error on dev nbd5, logical block 3, async page read [ 334.659794][ T55] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 334.669613][ T55] Buffer I/O error on dev nbd5, logical block 0, async page read [ 334.677985][ T55] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 334.687765][ T55] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 334.697331][ T55] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 334.707095][ T55] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 334.716282][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.724188][ T5788] ldm_validate_partition_table(): Disk read failed. [ 334.732886][ T5788] Dev nbd5: unable to read RDB block 0 [ 334.740633][ T5788] nbd5: unable to read partition table [ 334.756352][ T5788] ldm_validate_partition_table(): Disk read failed. [ 334.765488][ T5788] Dev nbd5: unable to read RDB block 0 [ 334.773067][ T5788] nbd5: unable to read partition table [ 335.132646][ T8] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 335.243810][ T5773] Bluetooth: hci1: command tx timeout [ 335.328208][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 335.372691][ T8] usb 6-1: config 4 has an invalid interface number: 228 but max is 0 [ 335.381219][ T8] usb 6-1: config 4 has no interface number 0 [ 335.400771][ T8] usb 6-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30 [ 335.410233][ T5773] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 335.421994][ T5773] Bluetooth: hci3: Injecting HCI hardware error event [ 335.442190][ T5773] Bluetooth: hci3: hardware error 0x00 [ 335.450394][ T8] usb 6-1: config 4 interface 228 altsetting 12 has an invalid endpoint with address 0x0, skipping [ 335.464641][ T8] usb 6-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 335.491877][ T8] usb 6-1: config 4 interface 228 has no altsetting 0 [ 335.502848][ T8] usb 6-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 335.512249][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.515800][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.527399][ T8] usb 6-1: Product: syz [ 335.531938][ T8] usb 6-1: Manufacturer: syz [ 335.541534][ T8] usb 6-1: SerialNumber: syz [ 335.867373][ T8] usb 6-1: USB disconnect, device number 13 [ 335.914669][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.332025][ T5779] Bluetooth: hci1: command tx timeout [ 337.482614][ T5773] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 337.716970][T10825] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1443'. [ 337.729439][T10825] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1443'. [ 338.088016][T10792] chnl_net:caif_netlink_parms(): no params data found [ 338.144551][ T1187] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 338.232568][ T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 338.373250][ T1187] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 338.381845][ T1187] usb 7-1: config 0 has no interface number 0 [ 338.392620][ T8] usb 5-1: device descriptor read/64, error -71 [ 338.404706][ T7950] hsr_slave_0: left promiscuous mode [ 338.411124][ T1187] usb 7-1: config 0 interface 41 has no altsetting 0 [ 338.454865][ T7950] hsr_slave_1: left promiscuous mode [ 338.461658][ T1187] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 338.462027][ T7950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.481280][ T7950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.492278][ T7950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.500327][ T7950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.522410][ T1187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.530838][ T1187] usb 7-1: Product: syz [ 338.539405][ T7950] bridge_slave_1: left allmulticast mode [ 338.550918][ T7950] bridge_slave_1: left promiscuous mode [ 338.557774][ T7950] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.560619][ T1187] usb 7-1: Manufacturer: syz [ 338.588330][ T1187] usb 7-1: SerialNumber: syz [ 338.590957][ T7950] bridge_slave_0: left allmulticast mode [ 338.606495][ T7950] bridge_slave_0: left promiscuous mode [ 338.614758][ T1187] usb 7-1: config 0 descriptor?? [ 338.620748][ T7950] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.662737][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 338.732371][ T7950] veth1_macvtap: left promiscuous mode [ 338.763033][ T7950] veth0_macvtap: left promiscuous mode [ 338.773034][ T7950] veth1_vlan: left promiscuous mode [ 338.778496][ T7950] veth0_vlan: left promiscuous mode [ 338.842746][ T8] usb 5-1: device descriptor read/64, error -71 [ 338.972702][ T8] usb usb5-port1: attempt power cycle [ 339.410881][ T5773] Bluetooth: hci1: command tx timeout [ 339.422583][ T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 339.474049][ T1187] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 339.528356][ T8] usb 5-1: device descriptor read/8, error -71 [ 339.821900][ T8] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 339.883923][ T8] usb 5-1: device descriptor read/8, error -71 [ 340.017022][ T8] usb usb5-port1: unable to enumerate USB device [ 340.470839][ T7950] team0 (unregistering): Port device team_slave_1 removed [ 340.544783][ T1187] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 340.563723][ T1187] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 340.574468][ T1187] CoreChips: probe of 7-1:0.41 failed with error -71 [ 340.587497][ T1187] usb 7-1: USB disconnect, device number 9 [ 340.594729][ T7950] team0 (unregistering): Port device team_slave_0 removed [ 340.715386][ T7950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.896318][ T7950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.484318][ T5773] Bluetooth: hci1: command tx timeout [ 341.708762][ T7950] bond0 (unregistering): Released all slaves [ 341.931757][T10898] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1459'. [ 341.952731][T10792] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.960139][T10792] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.968743][T10792] bridge_slave_0: entered allmulticast mode [ 341.977339][T10792] bridge_slave_0: entered promiscuous mode [ 341.988348][T10792] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.997114][T10792] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.011109][T10792] bridge_slave_1: entered allmulticast mode [ 342.019471][T10792] bridge_slave_1: entered promiscuous mode [ 342.059835][T10792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.094402][T10792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.233071][T10792] team0: Port device team_slave_0 added [ 342.306879][T10792] team0: Port device team_slave_1 added [ 342.445055][T10792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.490549][T10792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.598442][T10792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.647899][T10792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.675950][T10792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.725522][T10792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.849758][ T5782] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 342.936898][T10792] hsr_slave_0: entered promiscuous mode [ 342.982892][T10792] hsr_slave_1: entered promiscuous mode [ 342.996962][T10792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.009215][T10792] Cannot create hsr debugfs directory [ 343.034647][ T5782] usb 6-1: device descriptor read/64, error -71 [ 343.303104][ T5782] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 343.472698][ T5782] usb 6-1: device descriptor read/64, error -71 [ 343.602749][ T5782] usb usb6-port1: attempt power cycle [ 343.641398][T10792] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 343.684566][T10792] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 343.713302][T10792] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 343.732278][T10792] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 343.851847][T10792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.894794][T10792] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.914422][ T7955] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.921762][ T7955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.946823][ T7955] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.954204][ T7955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.023028][ T5782] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 344.053217][ T5782] usb 6-1: device descriptor read/8, error -71 [ 344.332416][ T5782] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 344.401752][ T5782] usb 6-1: device descriptor read/8, error -71 [ 344.449791][T10792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.529246][ T5782] usb usb6-port1: unable to enumerate USB device [ 344.773596][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 344.802722][T10967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1473'. [ 344.971554][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 344.996764][T10967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1473'. [ 345.215564][T10792] veth0_vlan: entered promiscuous mode [ 345.248902][T10792] veth1_vlan: entered promiscuous mode [ 345.377129][T10792] veth0_macvtap: entered promiscuous mode [ 345.405378][T10792] veth1_macvtap: entered promiscuous mode [ 345.460807][T10792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.483980][T10792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.495074][T10792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.506486][T10792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.517124][T10792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.531420][T10792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.586046][T10792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.609833][T10792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.640995][T10792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.656136][T10792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.668479][T10792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.681976][T10792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.695568][T10792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.705967][ T5817] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 345.721483][T10792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.745590][T10792] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.755575][T10792] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.767246][T10792] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.782033][T10792] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.913219][ T5817] usb 7-1: Using ep0 maxpacket: 32 [ 345.940808][ T5817] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 345.966920][ T5817] usb 7-1: config 0 has no interface number 0 [ 345.998915][ T5817] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 346.022700][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.047029][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.050001][ T5817] usb 7-1: Product: syz [ 346.076730][ T5817] usb 7-1: Manufacturer: syz [ 346.081536][ T5817] usb 7-1: SerialNumber: syz [ 346.087884][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.116253][ T5817] usb 7-1: config 0 descriptor?? [ 346.217993][ T5817] smsc95xx v2.0.0 [ 346.272492][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.306673][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.549748][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1482'. [ 346.580381][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1482'. [ 346.612587][ T5817] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 346.652711][ T5817] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 346.751332][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1482'. [ 346.781959][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1482'. [ 346.911886][T11022] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1483'. [ 347.393014][ T9011] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 347.572657][ T9011] usb 9-1: device descriptor read/64, error -71 [ 347.854700][ T9011] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 348.043414][ T9011] usb 9-1: device descriptor read/64, error -71 [ 348.177556][ T9011] usb usb9-port1: attempt power cycle [ 348.212654][ T23] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 348.308596][T11061] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1492'. [ 348.431762][ T23] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 348.453440][ T23] usb 5-1: config 0 has no interface number 0 [ 348.477799][ T23] usb 5-1: config 0 interface 41 has no altsetting 0 [ 348.495846][ T23] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 348.510455][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.519572][ T23] usb 5-1: Product: syz [ 348.528847][ T23] usb 5-1: Manufacturer: syz [ 348.534468][ T23] usb 5-1: SerialNumber: syz [ 348.556212][ T23] usb 5-1: config 0 descriptor?? [ 348.602622][ T9011] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 348.644629][ T9011] usb 9-1: device descriptor read/8, error -71 [ 348.716971][ T5817] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 348.757933][ T5817] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 348.785812][ T5817] usb 7-1: USB disconnect, device number 10 [ 348.935763][ T9011] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 348.983545][ T9011] usb 9-1: device descriptor read/8, error -71 [ 349.114066][ T9011] usb usb9-port1: unable to enumerate USB device [ 349.396581][ T23] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 350.052689][ T8] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 350.242459][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 350.275411][ T8] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 350.305416][ T8] usb 7-1: config 0 has no interface number 0 [ 350.311634][ T8] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 350.346334][ T8] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 350.365937][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.389169][ T8] usb 7-1: Product: syz [ 350.397014][T11116] __nla_validate_parse: 4 callbacks suppressed [ 350.397032][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1502'. [ 350.404103][ T8] usb 7-1: Manufacturer: syz [ 350.421256][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1502'. [ 350.423982][ T8] usb 7-1: SerialNumber: syz [ 350.468514][ T23] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 350.471491][ T8] usb 7-1: config 0 descriptor?? [ 350.503588][ T23] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 350.536692][ T23] CoreChips: probe of 5-1:0.41 failed with error -71 [ 350.542106][ T8] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 350.585874][ T23] usb 5-1: USB disconnect, device number 20 [ 350.591255][ T8] em28xx 7-1:0.132: Video interface 132 found: [ 350.648183][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1502'. [ 350.673796][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1502'. [ 350.950135][ T8] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 351.367197][ T8] em28xx 7-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 351.412622][ T8] em28xx 7-1:0.132: board has no eeprom [ 351.497880][ T8] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 351.542608][ T8] em28xx 7-1:0.132: analog set to bulk mode. [ 351.557363][ T9] em28xx 7-1:0.132: Registering V4L2 extension [ 351.580519][ T8] usb 7-1: USB disconnect, device number 11 [ 351.587112][ T5817] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 351.623805][ T8] em28xx 7-1:0.132: Disconnecting em28xx [ 351.812680][ T5817] usb 6-1: Using ep0 maxpacket: 32 [ 351.846834][ T5817] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 351.868678][ T5817] usb 6-1: config 0 has no interface number 0 [ 351.897697][ T5817] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 351.922597][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.941777][ T5817] usb 6-1: Product: syz [ 351.957810][ T5817] usb 6-1: Manufacturer: syz [ 351.972699][ T5817] usb 6-1: SerialNumber: syz [ 351.989224][ T5817] usb 6-1: config 0 descriptor?? [ 352.030569][ T5817] smsc95xx v2.0.0 [ 352.035908][ T9] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 352.052936][ T9] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 352.079101][ T9] em28xx 7-1:0.132: No AC97 audio processor [ 352.110777][ T9] usb 7-1: Decoder not found [ 352.120662][ T9] em28xx 7-1:0.132: failed to create media graph [ 352.141197][ T9] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 352.159678][ T5815] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 352.172187][ T9] em28xx 7-1:0.132: Remote control support is not available for this card. [ 352.187948][ T8] em28xx 7-1:0.132: Closing input extension [ 352.215964][ T8] em28xx 7-1:0.132: Freeing device [ 352.414604][ T5815] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 352.451012][ T5817] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 352.462646][ T5815] usb 9-1: config 0 has no interface number 0 [ 352.468841][ T5815] usb 9-1: config 0 interface 41 has no altsetting 0 [ 352.503322][ T5817] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 352.530626][ T5815] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 352.552585][ T5815] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.560888][ T5815] usb 9-1: Product: syz [ 352.575399][ T5815] usb 9-1: Manufacturer: syz [ 352.580182][ T5815] usb 9-1: SerialNumber: syz [ 352.590331][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1515'. [ 352.633827][ T5815] usb 9-1: config 0 descriptor?? [ 352.644652][T11172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1515'. [ 352.727588][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1515'. [ 352.746226][T11172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1515'. [ 353.460877][ T5815] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 354.380505][ T5817] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 354.396440][ T5817] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 354.433201][ T5817] usb 6-1: USB disconnect, device number 18 [ 354.523436][ T5815] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 354.554198][ T5815] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 354.571310][ T5815] CoreChips: probe of 9-1:0.41 failed with error -71 [ 354.600769][ T5815] usb 9-1: USB disconnect, device number 6 [ 354.632754][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1524'. [ 354.656630][T11221] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1524'. [ 355.212440][ T5815] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 355.395070][ T5815] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.431512][ T5815] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 355.461633][ T5815] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.482509][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 355.493345][ T5815] usb 9-1: config 0 descriptor?? [ 356.052618][ T5817] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 356.128287][ T5815] usbhid 9-1:0.0: can't add hid device: -71 [ 356.142978][ T5815] usbhid: probe of 9-1:0.0 failed with error -71 [ 356.169054][ T5815] usb 9-1: USB disconnect, device number 7 [ 356.182417][T11268] __nla_validate_parse: 2 callbacks suppressed [ 356.182435][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1534'. [ 356.213092][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1534'. [ 356.272245][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1534'. [ 356.279342][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.301889][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1534'. [ 356.303632][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.345367][ T5817] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 356.368742][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.395405][ T5817] usb 5-1: config 0 descriptor?? [ 356.802788][ T9011] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 356.830517][ T5817] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x2 [ 356.860577][ T5817] pyra 0003:1E7D:2CF6.0003: unbalanced collection at end of report description [ 356.886237][ T5817] pyra 0003:1E7D:2CF6.0003: parse failed [ 356.892772][ T5817] pyra: probe of 0003:1E7D:2CF6.0003 failed with error -22 [ 357.007832][ T9011] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 357.031397][ T5817] usb 5-1: USB disconnect, device number 21 [ 357.037129][ T9011] usb 7-1: config 0 has no interface number 0 [ 357.056007][ T9011] usb 7-1: config 0 interface 41 has no altsetting 0 [ 357.082479][ T9011] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 357.102039][ T9011] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.126648][ T9011] usb 7-1: Product: syz [ 357.130918][ T9011] usb 7-1: Manufacturer: syz [ 357.160943][ T9011] usb 7-1: SerialNumber: syz [ 357.179839][ T9011] usb 7-1: config 0 descriptor?? [ 357.717284][T11305] block nbd8: NBD_DISCONNECT [ 358.029112][ T9011] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 359.104981][ T9011] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 359.117108][ T23] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 359.150718][ T9011] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 359.171672][T11347] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1547'. [ 359.189720][ T9011] CoreChips: probe of 7-1:0.41 failed with error -71 [ 359.228912][ T9011] usb 7-1: USB disconnect, device number 12 [ 359.259946][T11349] loop8: detected capacity change from 0 to 512 [ 359.318404][T11349] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 359.351201][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 359.385676][ T23] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 359.428803][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.437510][T11349] EXT4-fs (loop8): 1 truncate cleaned up [ 359.469914][T11349] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.486452][ T23] usb 5-1: config 0 descriptor?? [ 359.501295][ T23] as10x_usb: device has been detected [ 359.534909][ T23] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 359.630656][ T23] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 359.655389][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1551'. [ 359.706984][T11341] ------------[ cut here ]------------ [ 359.712723][T11361] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1551'. [ 359.721862][T11341] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 359.731892][T10792] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.754261][T11341] WARNING: CPU: 0 PID: 11341 at kernel/locking/mutex.c:582 __mutex_lock+0xb85/0xcc0 [ 359.764411][T11341] Modules linked in: [ 359.768478][T11341] CPU: 0 PID: 11341 Comm: syz.4.1546 Not tainted syzkaller #0 [ 359.776435][T11341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 359.786869][T11341] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 359.792361][T11341] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 94 87 fc 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b4 ca 8a 48 c7 c6 20 b5 ca 8a e8 5b 28 c2 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 359.813905][T11341] RSP: 0018:ffffc90004c2faa0 EFLAGS: 00010246 [ 359.820192][T11341] RAX: 2470645860d43d00 RBX: ffff88807a330ce0 RCX: 0000000000080000 [ 359.828301][T11341] RDX: ffffc9000be79000 RSI: 00000000000092c8 RDI: 00000000000092c9 [ 359.834884][ T23] as10x_usb: error during firmware upload part1 [ 359.836792][T11341] RBP: ffffc90004c2fbf8 R08: ffffc90004c2f6a7 R09: 1ffff92000985ed4 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 359.851908][T11341] R10: dffffc0000000000 R11: fffff52000985ed5 R12: 0000000000000000 [ 359.860158][T11341] R13: 1ffff92000985f64 R14: dffffc0000000000 R15: 0000000000000000 [ 359.869066][T11341] FS: 00007f79960e06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 359.878856][T11341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.885764][T11341] CR2: 00007ffd21b69880 CR3: 0000000077d75000 CR4: 00000000003506f0 [ 359.888487][ T23] Registered device nBox DVB-T Dongle [ 359.894115][T11341] Call Trace: [ 359.894128][T11341] [ 359.894138][T11341] ? trace_contention_end+0x39/0xe0 [ 359.894165][T11341] ? __mutex_lock+0x315/0xcc0 [ 359.894186][T11341] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 359.923365][T11341] ? mutex_lock_nested+0x20/0x20 [ 359.928371][T11341] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 359.934095][T11341] ? dmx_section_feed_start_filtering+0x55/0x690 [ 359.941286][T11341] ? mutex_lock_nested+0x20/0x20 [ 359.946415][T11341] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 359.952509][T11341] ? lock_chain_count+0x20/0x20 [ 359.957426][T11341] ? _raw_spin_lock_irq+0xbb/0xf0 [ 359.962578][T11341] as102_dvb_dmx_start_feed+0x70/0x280 [ 359.968248][T11341] dmx_section_feed_start_filtering+0x4f5/0x690 [ 359.975026][T11341] dvb_dmxdev_filter_start+0xcbd/0x10c0 [ 359.980762][T11341] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 359.986643][T11341] dvb_demux_do_ioctl+0x467/0x530 [ 359.992002][T11341] dvb_usercopy+0x195/0x2b0 [ 359.996944][T11341] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 360.002697][T11341] ? dvb_generic_ioctl+0xb0/0xb0 [ 360.007796][T11341] ? dvb_demux_poll+0x220/0x220 [ 360.014172][T11341] dvb_demux_ioctl+0x29/0x30 [ 360.018934][T11341] __se_sys_ioctl+0xfd/0x170 [ 360.023938][T11341] do_syscall_64+0x55/0xa0 [ 360.028771][T11341] ? clear_bhb_loop+0x40/0x90 [ 360.033649][T11341] ? clear_bhb_loop+0x40/0x90 [ 360.039491][T11341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.045687][T11341] RIP: 0033:0x7f799519c799 [ 360.050245][T11341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.070280][ C0] vkms_vblank_simulate: vblank timer overrun [ 360.076405][T11341] RSP: 002b:00007f79960e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.085329][T11341] RAX: ffffffffffffffda RBX: 00007f7995415fa0 RCX: 00007f799519c799 [ 360.093886][T11341] RDX: 0000200000000000 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 360.102084][T11341] RBP: 00007f7995232c99 R08: 0000000000000000 R09: 0000000000000000 [ 360.110334][T11341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.119760][T11341] R13: 00007f7995416038 R14: 00007f7995415fa0 R15: 00007fff2071b3a8 [ 360.128245][T11341] [ 360.131309][T11341] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 360.138894][T11341] CPU: 0 PID: 11341 Comm: syz.4.1546 Not tainted syzkaller #0 [ 360.146484][T11341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 360.156684][T11341] Call Trace: [ 360.160118][T11341] [ 360.163186][T11341] dump_stack_lvl+0x18c/0x250 [ 360.168083][T11341] ? show_regs_print_info+0x20/0x20 [ 360.173528][T11341] ? load_image+0x400/0x400 [ 360.178232][T11341] panic+0x2dc/0x730 [ 360.182373][T11341] ? bpf_jit_dump+0xd0/0xd0 [ 360.187029][T11341] __warn+0x2e0/0x470 [ 360.191072][T11341] ? __mutex_lock+0xb85/0xcc0 [ 360.195798][T11341] ? __mutex_lock+0xb85/0xcc0 [ 360.200504][T11341] report_bug+0x2be/0x4f0 [ 360.204862][T11341] ? __mutex_lock+0xb85/0xcc0 [ 360.209564][T11341] ? __mutex_lock+0xb85/0xcc0 [ 360.214442][T11341] ? __mutex_lock+0xb87/0xcc0 [ 360.219203][T11341] handle_bug+0xcf/0x120 [ 360.223523][T11341] exc_invalid_op+0x1a/0x50 [ 360.228077][T11341] asm_exc_invalid_op+0x1a/0x20 [ 360.233067][T11341] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 360.238911][T11341] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 94 87 fc 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b4 ca 8a 48 c7 c6 20 b5 ca 8a e8 5b 28 c2 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 360.259394][T11341] RSP: 0018:ffffc90004c2faa0 EFLAGS: 00010246 [ 360.265684][T11341] RAX: 2470645860d43d00 RBX: ffff88807a330ce0 RCX: 0000000000080000 [ 360.273782][T11341] RDX: ffffc9000be79000 RSI: 00000000000092c8 RDI: 00000000000092c9 [ 360.281887][T11341] RBP: ffffc90004c2fbf8 R08: ffffc90004c2f6a7 R09: 1ffff92000985ed4 [ 360.289988][T11341] R10: dffffc0000000000 R11: fffff52000985ed5 R12: 0000000000000000 [ 360.298151][T11341] R13: 1ffff92000985f64 R14: dffffc0000000000 R15: 0000000000000000 [ 360.306268][T11341] ? trace_contention_end+0x39/0xe0 [ 360.311507][T11341] ? __mutex_lock+0x315/0xcc0 [ 360.316313][T11341] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 360.322191][T11341] ? mutex_lock_nested+0x20/0x20 [ 360.327257][T11341] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 360.333009][T11341] ? dmx_section_feed_start_filtering+0x55/0x690 [ 360.339376][T11341] ? mutex_lock_nested+0x20/0x20 [ 360.344335][T11341] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 360.350347][T11341] ? lock_chain_count+0x20/0x20 [ 360.355317][T11341] ? _raw_spin_lock_irq+0xbb/0xf0 [ 360.360502][T11341] as102_dvb_dmx_start_feed+0x70/0x280 [ 360.366003][T11341] dmx_section_feed_start_filtering+0x4f5/0x690 [ 360.372542][T11341] dvb_dmxdev_filter_start+0xcbd/0x10c0 [ 360.378122][T11341] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 360.383742][T11341] dvb_demux_do_ioctl+0x467/0x530 [ 360.388832][T11341] dvb_usercopy+0x195/0x2b0 [ 360.393816][T11341] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 360.399855][T11341] ? dvb_generic_ioctl+0xb0/0xb0 [ 360.405011][T11341] ? dvb_demux_poll+0x220/0x220 [ 360.409895][T11341] dvb_demux_ioctl+0x29/0x30 [ 360.414524][T11341] __se_sys_ioctl+0xfd/0x170 [ 360.419278][T11341] do_syscall_64+0x55/0xa0 [ 360.423931][T11341] ? clear_bhb_loop+0x40/0x90 [ 360.429080][T11341] ? clear_bhb_loop+0x40/0x90 [ 360.434051][T11341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.439983][T11341] RIP: 0033:0x7f799519c799 [ 360.444432][T11341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.464644][T11341] RSP: 002b:00007f79960e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.473085][T11341] RAX: ffffffffffffffda RBX: 00007f7995415fa0 RCX: 00007f799519c799 [ 360.481358][T11341] RDX: 0000200000000000 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 360.489378][T11341] RBP: 00007f7995232c99 R08: 0000000000000000 R09: 0000000000000000 [ 360.497553][T11341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.505729][T11341] R13: 00007f7995416038 R14: 00007f7995415fa0 R15: 00007fff2071b3a8 [ 360.513825][T11341] [ 360.517544][T11341] Kernel Offset: disabled [ 360.521879][T11341] Rebooting in 86400 seconds..