last executing test programs: 2m57.836196203s ago: executing program 32 (id=1453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2m4.940361926s ago: executing program 33 (id=1790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x903, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x80) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000700)="f058050000007f8f", 0x8}], 0x2}, 0x5) 1m56.304168198s ago: executing program 1 (id=1847): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000004c0)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1m56.005299993s ago: executing program 1 (id=1849): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x25dfdbff}, 0x14}}, 0x0) 1m54.093595539s ago: executing program 1 (id=1854): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 1m53.957530645s ago: executing program 1 (id=1856): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) llistxattr(&(0x7f0000000240)='./file2\x00', 0x0, 0x0) 1m53.378131254s ago: executing program 1 (id=1858): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 1m51.632029521s ago: executing program 1 (id=1868): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 1m51.022166512s ago: executing program 34 (id=1868): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 1m13.476647928s ago: executing program 5 (id=2075): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x4000) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000100), 0x129) 1m12.479043248s ago: executing program 5 (id=2077): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1m12.312365576s ago: executing program 5 (id=2078): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) read(0xffffffffffffffff, 0x0, 0x43) 1m12.23629664s ago: executing program 5 (id=2079): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) llistxattr(&(0x7f0000000240)='./file2\x00', 0x0, 0x0) 1m11.741086775s ago: executing program 5 (id=2085): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x4000) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000100), 0x129) 1m11.248920039s ago: executing program 6 (id=2086): openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x400, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x7}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) 1m10.727604585s ago: executing program 6 (id=2088): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b13, 0x0) 1m9.211818851s ago: executing program 4 (id=2090): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) writev(r0, &(0x7f00000016c0)=[{&(0x7f0000001280)="85beb7aab0", 0x5}], 0x1) 1m9.114959706s ago: executing program 4 (id=2091): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0x0, 0x3}, {0x8, 0x4}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m8.889556987s ago: executing program 6 (id=2092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x8d0}, 0x4008800) 1m8.718864965s ago: executing program 6 (id=2093): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) llistxattr(&(0x7f0000000240)='./file2\x00', 0x0, 0x0) 1m8.404779341s ago: executing program 6 (id=2094): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) creat(0x0, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m6.478595048s ago: executing program 4 (id=2096): openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x400, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x7}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) 1m6.372315413s ago: executing program 5 (id=2097): syz_clone3(&(0x7f0000000080)={0x0, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) read(r0, 0x0, 0x43) 1m6.372149883s ago: executing program 6 (id=2098): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)='V', 0x1}], 0x1}}], 0x1, 0x4001) 1m5.593723232s ago: executing program 35 (id=2097): syz_clone3(&(0x7f0000000080)={0x0, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) read(r0, 0x0, 0x43) 1m5.571976223s ago: executing program 36 (id=2098): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)='V', 0x1}], 0x1}}], 0x1, 0x4001) 1m5.564831254s ago: executing program 4 (id=2102): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) llistxattr(&(0x7f0000000240)='./file2\x00', 0x0, 0x0) 1m4.961482733s ago: executing program 4 (id=2104): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0x0, 0x3}, {0x8, 0x4}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m1.721409495s ago: executing program 2 (id=2105): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x997, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, 0x0, 0x4000) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000100), 0x129) 1m1.61978377s ago: executing program 2 (id=2106): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) sendfile(r1, r1, 0x0, 0xffffffff) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m1.388475762s ago: executing program 4 (id=2107): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40305839, &(0x7f0000000540)={'veth0_to_hsr\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) 1m0.804691571s ago: executing program 37 (id=2107): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40305839, &(0x7f0000000540)={'veth0_to_hsr\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) 1m0.6352498s ago: executing program 2 (id=2109): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000001c0)={0x20, 0xe, 0x4, "fe350c5c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 58.290114867s ago: executing program 2 (id=2110): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) llistxattr(&(0x7f0000000240)='./file2\x00', 0x0, 0x0) 57.982755902s ago: executing program 2 (id=2111): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000740)="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", 0xc2f}], 0x1, &(0x7f0000001a80)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4002090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 56.635650439s ago: executing program 2 (id=2112): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d1050120000701020301090212000100001a000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4001) syz_usb_control_io$uac1(r0, 0x0, 0x0) 56.180324462s ago: executing program 38 (id=2112): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d1050120000701020301090212000100001a000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4001) syz_usb_control_io$uac1(r0, 0x0, 0x0) 40.933847414s ago: executing program 8 (id=2100): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 40.454203238s ago: executing program 8 (id=2114): r0 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x8000000000000000) 39.146712294s ago: executing program 8 (id=2116): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) llistxattr(&(0x7f0000000240)='./file2\x00', 0x0, 0x0) 38.782521631s ago: executing program 8 (id=2118): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 36.82580717s ago: executing program 8 (id=2121): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001140)={'team_slave_0\x00', @remote}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'team_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}) 36.312927795s ago: executing program 39 (id=2121): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001140)={'team_slave_0\x00', @remote}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'team_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}) 6.104430535s ago: executing program 0 (id=2229): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002a00)=ANY=[@ANYBLOB="1400"], 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg(r0, 0x0, 0x0, 0x0) 5.932275523s ago: executing program 0 (id=2230): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 5.536043713s ago: executing program 7 (id=2234): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb4b", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004080) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) recvmsg$kcm(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x100) 5.453659097s ago: executing program 9 (id=2236): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0x200f, {"20e30a30ed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b3a9a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19300305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a027d5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf050000008000000000f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b3f3f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2f5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d21488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e09d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a603336c00000077cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046ca5b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe6531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e6586df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59555e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb601203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000930dedf800", 0x1000}}, 0x1006) 5.251331637s ago: executing program 0 (id=2237): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x6, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r1}) 5.157089332s ago: executing program 9 (id=2238): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 4.773085521s ago: executing program 0 (id=2239): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000001c0)={0x20, 0xe, 0x4, "fe350c5c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.532760813s ago: executing program 7 (id=2240): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x40, 0x6, 0x1, "b3"}, 0x0, 0x0, 0x0, 0x0}) 4.080070496s ago: executing program 0 (id=2241): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.270299967s ago: executing program 7 (id=2247): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x6, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000001c0)={r1}) 1.956264332s ago: executing program 7 (id=2248): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb4b64f69853362a", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004080) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) recvmsg$kcm(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x100) 1.843403598s ago: executing program 9 (id=2250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)}], 0x1}, 0x4005) 1.544217833s ago: executing program 3 (id=2252): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.454632587s ago: executing program 9 (id=2253): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x8, 0x0, 0x4, 0x0, 0x5, 0x0, 0xfc, 0x80, 0x9, 0x3, 0x0, 0xf, 0xfffffef8, 0x0, 0x0, 0xff, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.132379163s ago: executing program 9 (id=2254): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.008482839s ago: executing program 0 (id=2255): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x5, {"c7517da9e7a8757d9c02fd45c7ed7c6a", "f61ac59ed63a57d6df15bd7dae0ceb42", "d08098bd12cdd439c06442623f678bba"}, 0x10001, 0x7}) 884.315596ms ago: executing program 7 (id=2256): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000001c0)={0x20, 0xe, 0x4, "fe350c5c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 856.744557ms ago: executing program 3 (id=2257): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, 0x0) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) 608.926539ms ago: executing program 9 (id=2258): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000140)={{0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) 560.303032ms ago: executing program 3 (id=2259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 461.045127ms ago: executing program 3 (id=2260): r0 = socket(0x10, 0x3, 0x0) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000040)="e62f26c3", 0x4}], 0x1) 341.826963ms ago: executing program 3 (id=2261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)}], 0x1}, 0x4005) 143.613813ms ago: executing program 7 (id=2262): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x8, 0x0, 0x4, 0x0, 0x5, 0x0, 0xfc, 0x80, 0x9, 0x3, 0x0, 0xf, 0xfffffef8, 0x0, 0x0, 0xff, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=2263): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): op4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.912543][T10198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.021835][T11929] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1943'. [ 445.864163][ T5808] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 445.961095][T11959] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1956'. [ 446.093160][ T5808] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 446.112479][ T5782] Bluetooth: hci1: command 0x0c1a tx timeout [ 446.122423][ T5808] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.137741][ T5808] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 446.149060][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.392887][ T5808] usb 3-1: usb_control_msg returned -32 [ 446.404535][ T5808] usbtmc 3-1:16.0: can't read capabilities [ 446.583824][T11946] loop5: detected capacity change from 0 to 1024 [ 446.666788][T11946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.703611][ T28] audit: type=1800 audit(1774553311.780:26): pid=11946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1951" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 446.909757][T11398] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.397493][T11999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1966'. [ 447.788502][T12010] syzkaller0: entered promiscuous mode [ 447.801858][T12010] syzkaller0: entered allmulticast mode [ 448.174855][ T5782] Bluetooth: hci1: command 0x0c1a tx timeout [ 448.677217][ T23] usb 3-1: USB disconnect, device number 2 [ 449.091143][T12049] loop4: detected capacity change from 0 to 512 [ 449.112438][T12049] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 449.167630][T12049] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 449.180897][T12049] System zones: 1-12 [ 449.215457][T12049] EXT4-fs (loop4): 1 truncate cleaned up [ 449.231953][T12049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.376638][T10198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.114298][ T5833] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 450.314087][ T5833] usb 6-1: Using ep0 maxpacket: 32 [ 450.326336][ T5833] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 450.348678][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.399425][ T5833] usb 6-1: config 0 descriptor?? [ 450.418219][ T5833] gspca_main: sunplus-2.14.0 probing 041e:400b [ 450.434354][T12069] loop2: detected capacity change from 0 to 512 [ 450.474153][T12069] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 450.520222][T12069] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 450.545544][T12069] System zones: 1-12 [ 450.575226][T12069] EXT4-fs (loop2): 1 truncate cleaned up [ 450.592998][T12069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.773126][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.304640][ T5833] gspca_sunplus: reg_w_riv err -71 [ 452.321480][ T5833] sunplus: probe of 6-1:0.0 failed with error -71 [ 452.340052][ T5833] usb 6-1: USB disconnect, device number 2 [ 452.522274][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1986'. [ 452.534125][T12056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1986'. [ 452.595915][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1986'. [ 452.618670][T12056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1986'. [ 453.273411][T12101] loop6: detected capacity change from 0 to 512 [ 453.312514][T12101] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 453.399154][T12101] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 453.459122][T12101] System zones: 1-12 [ 453.529835][T12101] EXT4-fs (loop6): 1 truncate cleaned up [ 453.542537][T12105] syzkaller0: entered promiscuous mode [ 453.552996][T12101] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.585808][T12105] syzkaller0: entered allmulticast mode [ 453.762366][T11664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.845377][T12115] syzkaller0: entered promiscuous mode [ 453.865891][T12115] syzkaller0: entered allmulticast mode [ 455.619333][T12140] loop6: detected capacity change from 0 to 512 [ 455.642523][T12140] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 455.677509][T12140] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 455.690411][T12140] System zones: 1-12 [ 455.703275][T12140] EXT4-fs (loop6): 1 truncate cleaned up [ 455.715786][T12140] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.760251][ T28] audit: type=1804 audit(1774553320.840:27): pid=12140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2014" name="/newroot/28/file2/bus" dev="loop6" ino=18 res=1 errno=0 [ 455.798271][T11664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.149566][T12147] loop6: detected capacity change from 0 to 512 [ 456.158339][T12147] EXT4-fs: Ignoring removed orlov option [ 456.219624][T12147] EXT4-fs: Ignoring removed mblk_io_submit option [ 456.253544][T12147] EXT4-fs error (device loop6): ext4_iget_extra_inode:4732: inode #15: comm syz.6.2017: corrupted in-inode xattr: e_value size too large [ 456.331880][T12147] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.2017: couldn't read orphan inode 15 (err -117) [ 456.359305][T12147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.485844][T11664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.141216][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 457.348444][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 457.405592][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 457.419473][ T9] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 457.429138][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.437786][ T9] usb 7-1: Product: syz [ 457.442080][ T9] usb 7-1: Manufacturer: syz [ 457.447146][ T9] usb 7-1: SerialNumber: syz [ 457.712035][ T9] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 457.733848][ T9] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 457.799312][ T9] usb 7-1: 3:0: failed to get current value for ch 0 (-22) [ 457.882025][ T9] usb 7-1: 3:0: cannot get min/max values for control 2 (id 3) [ 457.946306][ T9] usb 7-1: 3:0: cannot get min/max values for control 3 (id 3) [ 458.024701][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2005'. [ 458.034887][T12119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2005'. [ 458.047753][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2005'. [ 458.057361][T12119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2005'. [ 458.121775][ T9] usb 7-1: 3:0: cannot get min/max values for control 3 (id 3) [ 458.204135][ T9] usb 7-1: 3:0: cannot get min/max values for control 2 (id 3) [ 458.247233][ T9] usb 7-1: USB disconnect, device number 2 [ 458.392950][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.475628][T12161] loop5: detected capacity change from 0 to 512 [ 458.521222][T12161] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 458.545885][T12161] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 458.559163][T12161] System zones: 1-12 [ 458.575183][T12161] EXT4-fs (loop5): 1 truncate cleaned up [ 458.589150][T12161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.743668][ T28] audit: type=1804 audit(1774553323.830:28): pid=12161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2023" name="/newroot/33/file2/bus" dev="loop5" ino=18 res=1 errno=0 [ 458.912404][T11398] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.519127][T12201] loop5: detected capacity change from 0 to 512 [ 460.530612][T12201] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 460.560726][T12201] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 460.569831][T12201] System zones: 1-12 [ 460.591473][T12201] EXT4-fs (loop5): 1 truncate cleaned up [ 460.601876][T12201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.648638][ T28] audit: type=1804 audit(1774553325.740:29): pid=12201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2033" name="/newroot/38/file2/bus" dev="loop5" ino=18 res=1 errno=0 [ 460.760120][T11398] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.179627][T12160] tipc: Enabling of bearer rejected, failed to enable media [ 462.538570][T12226] loop4: detected capacity change from 0 to 512 [ 462.570789][T12226] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 462.646562][T12226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 462.697974][T12226] System zones: 1-12 [ 462.723596][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2043'. [ 462.765458][T12226] EXT4-fs (loop4): 1 truncate cleaned up [ 462.772600][T12226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.794144][T12233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2043'. [ 462.812485][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2043'. [ 462.822318][T12233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2043'. [ 462.925710][ T28] audit: type=1804 audit(1774553328.020:30): pid=12226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2042" name="/newroot/128/file2/bus" dev="loop4" ino=18 res=1 errno=0 [ 463.073377][T10198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.354211][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 463.376575][T12251] syzkaller0: entered promiscuous mode [ 463.383190][T12251] syzkaller0: entered allmulticast mode [ 463.554693][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 463.572328][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 463.583268][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 237, changing to 7 [ 463.605944][ T9] usb 6-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 463.634092][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.653144][ T9] usb 6-1: Product: syz [ 463.663001][ T9] usb 6-1: Manufacturer: syz [ 463.673137][ T9] usb 6-1: SerialNumber: syz [ 463.980034][ T9] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 463.994558][ T9] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 464.079195][ T9] usb 6-1: USB disconnect, device number 3 [ 464.168947][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.024866][ T5833] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 465.225995][ T5833] usb 6-1: Using ep0 maxpacket: 8 [ 465.249740][ T5833] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 465.259643][ T5833] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 465.278971][ T5833] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 465.300826][ T5833] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.314546][ T5833] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 465.342030][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.584270][ T5833] usb 6-1: GET_CAPABILITIES returned 0 [ 465.591757][ T5833] usbtmc 6-1:16.0: can't read capabilities [ 465.821151][ T8] usb 6-1: USB disconnect, device number 4 [ 466.852853][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2055'. [ 466.881705][T12279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2055'. [ 466.909716][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2055'. [ 466.938689][T12279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2055'. [ 466.950373][T12283] loop6: detected capacity change from 0 to 512 [ 466.984110][T12283] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 467.043883][T12283] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 467.091570][T12283] System zones: 1-12 [ 467.158821][T12283] EXT4-fs (loop6): 1 truncate cleaned up [ 467.176555][T12283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.214861][ T28] audit: type=1804 audit(1774553332.310:31): pid=12283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2056" name="/newroot/44/file2/bus" dev="loop6" ino=18 res=1 errno=0 [ 467.347723][T12295] loop5: detected capacity change from 0 to 512 [ 467.357071][T11664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.394477][T12295] EXT4-fs: Ignoring removed orlov option [ 467.400225][T12295] EXT4-fs: Ignoring removed mblk_io_submit option [ 467.450462][T12295] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.2061: corrupted in-inode xattr: e_value size too large [ 467.611341][T12295] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.2061: couldn't read orphan inode 15 (err -117) [ 467.649954][T12295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.769915][T12302] syzkaller0: entered promiscuous mode [ 467.791361][T11398] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.804114][T12302] syzkaller0: entered allmulticast mode [ 468.101083][T12315] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2069'. [ 468.500477][T12325] loop5: detected capacity change from 0 to 512 [ 468.530043][T12325] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 468.566758][T12325] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 468.576580][T12325] System zones: 1-12 [ 468.599976][T12325] EXT4-fs (loop5): 1 truncate cleaned up [ 468.607997][T12325] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.631121][ T28] audit: type=1804 audit(1774553333.720:32): pid=12325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2070" name="/newroot/53/file2/bus" dev="loop5" ino=18 res=1 errno=0 [ 468.776370][T11398] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.199676][ T5808] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 469.370899][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 469.399819][ T5808] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 469.419836][ T5808] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 64 [ 469.439678][ T5808] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 469.449393][ T5808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.492867][T12331] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 469.530243][ T5808] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 469.564251][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 469.599264][ T8] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 469.611363][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.680690][ T8] usb 3-1: config 0 descriptor?? [ 469.718461][ T8] gspca_main: sunplus-2.14.0 probing 041e:400b [ 470.082110][ T23] usb 6-1: USB disconnect, device number 5 [ 470.720984][T12338] loop5: detected capacity change from 0 to 512 [ 470.731100][T12338] EXT4-fs: Ignoring removed orlov option [ 470.751113][T12338] EXT4-fs: Ignoring removed mblk_io_submit option [ 470.782969][T12338] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.2074: corrupted in-inode xattr: e_value size too large [ 470.818668][T12338] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.2074: couldn't read orphan inode 15 (err -117) [ 470.858900][T12338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.020348][T11398] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.154358][ T8] gspca_sunplus: reg_w_riv err -71 [ 471.159870][ T8] sunplus: probe of 3-1:0.0 failed with error -71 [ 471.192850][ T8] usb 3-1: USB disconnect, device number 3 [ 472.056238][ T5808] kernel write not supported for file /input/event2 (pid: 5808 comm: kworker/1:4) [ 472.309100][T12359] loop5: detected capacity change from 0 to 512 [ 472.315891][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2068'. [ 472.329519][T12312] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2068'. [ 472.340878][T12359] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 472.360069][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2068'. [ 472.407608][T12312] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2068'. [ 472.422592][T12359] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 472.444348][T12359] System zones: 1-12 [ 472.529146][T12359] EXT4-fs (loop5): 1 truncate cleaned up [ 472.536171][T12366] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2080'. [ 472.550793][T12359] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.729615][T11398] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /59/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 472.797461][T12373] loop6: detected capacity change from 0 to 512 [ 472.816252][T12373] EXT4-fs: Ignoring removed orlov option [ 472.829273][T11398] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 472.851816][T12373] EXT4-fs: Ignoring removed mblk_io_submit option [ 472.882844][T11398] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /59/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 472.908699][T12373] EXT4-fs error (device loop6): ext4_iget_extra_inode:4732: inode #15: comm syz.6.2083: corrupted in-inode xattr: e_value size too large [ 472.946991][T12373] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.2083: couldn't read orphan inode 15 (err -117) [ 472.960370][T11398] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 473.015300][T12373] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.046344][T11398] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /59/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 473.074051][ T5833] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 473.136324][T11398] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 473.197059][T11398] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /59/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 473.229771][T11398] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 473.250113][T11664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.280698][T11398] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /59/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 473.321893][ T5833] usb 5-1: config index 0 descriptor too short (expected 61796, got 100) [ 473.334091][ T5833] usb 5-1: config 1 has an invalid interface number: 1 but max is 0 [ 473.342474][ T5833] usb 5-1: config 1 has an invalid interface number: 1 but max is 0 [ 473.360737][T11398] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 473.382887][ T5833] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.394821][ T5833] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 473.405163][ T5833] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.425962][ T5833] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x2F, skipping [ 473.438505][ T5833] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 473.526004][ T5833] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 473.570186][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.603409][ T5833] usb 5-1: Product: syz [ 473.618232][ T5833] usb 5-1: Manufacturer: syz [ 473.634485][ T5833] usb 5-1: SerialNumber: syz [ 473.956840][T12397] syzkaller0: entered promiscuous mode [ 473.968265][T12397] syzkaller0: entered allmulticast mode [ 474.124422][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 474.354126][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 474.383503][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.394917][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 474.423182][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 474.448716][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.478656][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 474.491785][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.726810][ T5833] cdc_ncm 5-1:1.0: bind() failure [ 474.739041][ T5833] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 474.747437][ T5833] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 474.761575][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 474.767974][ T9] usbtmc 7-1:16.0: can't read capabilities [ 474.773405][ T5833] usbtest: probe of 5-1:1.1 failed with error -71 [ 474.792928][ T5833] usb 5-1: USB disconnect, device number 3 [ 475.014297][ T43] usb 7-1: USB disconnect, device number 3 [ 475.829514][T12416] loop6: detected capacity change from 0 to 512 [ 475.872243][T12416] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 475.898506][T12416] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 475.921159][T12416] System zones: 1-12 [ 475.944253][T12416] EXT4-fs (loop6): 1 truncate cleaned up [ 475.950982][T12416] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.075216][T11664] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /52/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 476.099288][T11664] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 476.100793][ C0] vkms_vblank_simulate: vblank timer overrun [ 476.122604][T11664] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /52/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 476.200267][T11664] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 476.227838][T11664] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /52/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 476.248438][ C0] vkms_vblank_simulate: vblank timer overrun [ 476.262248][T11664] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 476.284710][ C0] vkms_vblank_simulate: vblank timer overrun [ 476.292957][T11664] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /52/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 476.317898][ C0] vkms_vblank_simulate: vblank timer overrun [ 476.325340][T11664] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 476.353663][T11664] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /52/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 476.379007][T11664] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 477.724861][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2091'. [ 477.734043][T12412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2091'. [ 477.818450][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2091'. [ 477.849603][T12412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2091'. [ 477.872788][T12422] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2095'. [ 477.956863][T11398] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.012258][T11664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.177551][ T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.387324][ T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.567248][ T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.748225][ T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.040390][T12449] loop4: detected capacity change from 0 to 512 [ 479.105958][T12449] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 479.217168][T12449] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 479.285116][T12449] System zones: 1-12 [ 479.338723][T12449] EXT4-fs (loop4): 1 truncate cleaned up [ 479.375703][T12449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.519941][T10198] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /140/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 479.602855][T10198] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 479.684538][T10198] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /140/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 479.715559][T12453] syzkaller0: entered promiscuous mode [ 479.745383][T12453] syzkaller0: entered allmulticast mode [ 479.771120][T10198] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 479.823126][T10198] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /140/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 479.887007][T10198] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 479.943050][T10198] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /140/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 479.967764][ T5088] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 479.986532][ T5088] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 480.001988][ T5088] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 480.009962][T10198] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 480.044614][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 480.055154][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 480.060089][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 480.069410][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 480.078729][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 480.086699][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 480.097512][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 480.105879][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 480.115168][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 480.156807][T10198] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /140/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 480.207543][T10198] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 482.191859][ T52] Bluetooth: hci2: command tx timeout [ 482.268007][ T52] Bluetooth: hci3: command tx timeout [ 482.961399][T10198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.011443][T12462] chnl_net:caif_netlink_parms(): no params data found [ 484.132661][ T60] hsr_slave_0: left promiscuous mode [ 484.147247][ T60] hsr_slave_1: left promiscuous mode [ 484.153834][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.168271][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.205173][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.222215][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.244881][ T60] bridge_slave_1: left allmulticast mode [ 484.251253][ T60] bridge_slave_1: left promiscuous mode [ 484.257907][ T52] Bluetooth: hci2: command tx timeout [ 484.264087][ T5811] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 484.264828][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.301292][ T60] bridge_slave_0: left allmulticast mode [ 484.320401][ T60] bridge_slave_0: left promiscuous mode [ 484.327051][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.344354][ T52] Bluetooth: hci3: command tx timeout [ 484.405977][ T5088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 484.418122][ T5088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 484.427639][ T5088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 484.437826][ T5088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 484.447739][ T5088] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 484.458137][ T5088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 484.478655][ T60] veth1_macvtap: left promiscuous mode [ 484.484873][ T5811] usb 3-1: Using ep0 maxpacket: 32 [ 484.494648][ T60] veth0_macvtap: left promiscuous mode [ 484.520653][ T60] veth1_vlan: left promiscuous mode [ 484.526753][ T60] veth0_vlan: left promiscuous mode [ 484.550415][ T5811] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 484.567809][ T5811] usb 3-1: config 0 has no interface number 0 [ 484.598836][ T5811] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 484.624383][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.632812][ T5811] usb 3-1: Product: syz [ 484.653072][ T5811] usb 3-1: Manufacturer: syz [ 484.675119][ T5811] usb 3-1: SerialNumber: syz [ 484.698418][ T5811] usb 3-1: config 0 descriptor?? [ 484.712608][ T5811] smsc95xx v2.0.0 [ 485.146601][ T5811] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 485.167906][ T5811] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 485.586572][ T5811] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 485.602813][ T5811] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 485.629964][ T5811] usb 3-1: USB disconnect, device number 4 [ 485.751913][ T60] team0 (unregistering): Port device team_slave_1 removed [ 485.813346][ T60] team0 (unregistering): Port device team_slave_0 removed [ 485.872213][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.935206][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.236736][T12512] loop2: detected capacity change from 0 to 512 [ 486.265222][T12512] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 486.307538][T12512] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 486.336279][T12512] System zones: 1-12 [ 486.372598][ T5088] Bluetooth: hci2: command tx timeout [ 486.388114][T12512] EXT4-fs (loop2): 1 truncate cleaned up [ 486.396064][T12512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.414298][ T5088] Bluetooth: hci3: command tx timeout [ 486.490000][ T5773] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /546/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 486.525363][ T5773] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 486.552173][ T5773] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /546/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 486.577468][ T5088] Bluetooth: hci1: command tx timeout [ 486.590242][ T5773] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 486.620689][ T5773] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /546/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 486.645538][ T60] bond0 (unregistering): Released all slaves [ 486.652907][ T5773] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 486.681424][ T5773] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /546/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 486.723159][ T5773] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 486.746500][ T5773] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /546/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 486.779321][ T5773] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 486.902331][T12460] chnl_net:caif_netlink_parms(): no params data found [ 487.324890][T12462] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.332334][T12462] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.354339][T12462] bridge_slave_0: entered allmulticast mode [ 487.372822][T12462] bridge_slave_0: entered promiscuous mode [ 487.395246][T12462] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.409812][T12462] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.417793][T12462] bridge_slave_1: entered allmulticast mode [ 487.435474][T12462] bridge_slave_1: entered promiscuous mode [ 487.450500][T12460] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.459126][T12460] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.466988][T12460] bridge_slave_0: entered allmulticast mode [ 487.474812][T12460] bridge_slave_0: entered promiscuous mode [ 487.636430][T12460] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.643738][T12460] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.658543][T12460] bridge_slave_1: entered allmulticast mode [ 487.669159][T12460] bridge_slave_1: entered promiscuous mode [ 487.717241][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.768640][T12462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.827967][T12462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.868355][T12460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.935940][T12460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.032628][T12462] team0: Port device team_slave_0 added [ 488.086548][T12462] team0: Port device team_slave_1 added [ 488.150333][T12460] team0: Port device team_slave_0 added [ 488.171570][T12460] team0: Port device team_slave_1 added [ 488.256638][T12462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.304203][T12462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.350621][T12462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.366732][T12462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.379335][T12462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.415051][ T5088] Bluetooth: hci2: command tx timeout [ 488.430074][T12462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.470369][T12497] chnl_net:caif_netlink_parms(): no params data found [ 488.494097][ T5088] Bluetooth: hci3: command tx timeout [ 488.526597][T12460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.545316][T12460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.623064][T12460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.655106][ T5088] Bluetooth: hci1: command tx timeout [ 488.703794][T12460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.729697][T12460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.791044][T12460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.818075][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 488.836831][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 488.851182][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 488.868054][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 488.897344][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 488.905169][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 488.905434][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.934252][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.006521][T12462] hsr_slave_0: entered promiscuous mode [ 489.019866][T12462] hsr_slave_1: entered promiscuous mode [ 489.029478][T12462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.046974][T12462] Cannot create hsr debugfs directory [ 489.182219][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.199062][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.308435][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.320572][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.391354][T12460] hsr_slave_0: entered promiscuous mode [ 489.399808][T12460] hsr_slave_1: entered promiscuous mode [ 489.407452][T12460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.415939][T12460] Cannot create hsr debugfs directory [ 489.485968][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.497072][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.626737][T12497] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.641878][T12497] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.651708][T12497] bridge_slave_0: entered allmulticast mode [ 489.671801][T12497] bridge_slave_0: entered promiscuous mode [ 489.688191][T12497] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.701498][T12497] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.713284][T12497] bridge_slave_1: entered allmulticast mode [ 489.721698][T12497] bridge_slave_1: entered promiscuous mode [ 489.964773][T12497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.157697][T12497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.298536][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.400489][T12497] team0: Port device team_slave_0 added [ 490.420033][T12497] team0: Port device team_slave_1 added [ 490.444369][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.517878][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.640532][T12497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.648305][T12497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.680929][T12497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.713894][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.734294][ T52] Bluetooth: hci1: command tx timeout [ 490.799680][T12497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.808398][T12497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.835639][T12497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.939203][T12462] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 490.951998][T12462] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 490.974211][ T52] Bluetooth: hci0: command tx timeout [ 491.046305][T12497] hsr_slave_0: entered promiscuous mode [ 491.081291][T12497] hsr_slave_1: entered promiscuous mode [ 491.107300][T12497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.137231][T12497] Cannot create hsr debugfs directory [ 491.143018][T12462] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 491.159650][T12462] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 491.231800][T12545] chnl_net:caif_netlink_parms(): no params data found [ 491.453773][T12460] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 491.527586][T12460] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 491.592422][ T60] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.617023][T12460] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 491.700107][ T60] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.721365][T12460] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 491.763131][T12545] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.773684][T12545] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.784882][T12545] bridge_slave_0: entered allmulticast mode [ 491.796777][T12545] bridge_slave_0: entered promiscuous mode [ 491.811997][T12545] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.820284][T12545] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.828825][T12545] bridge_slave_1: entered allmulticast mode [ 491.838292][T12545] bridge_slave_1: entered promiscuous mode [ 491.886686][ T60] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.029737][ T60] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.051996][T12545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.100194][T12462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.140651][T12545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.208665][T12545] team0: Port device team_slave_0 added [ 492.226922][T12545] team0: Port device team_slave_1 added [ 492.309632][T12462] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.340095][T12545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.351665][T12545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.387125][T12545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.534997][T12545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.542200][T12545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.571872][T12545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.642196][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.649626][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.663273][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.670622][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.767613][T12497] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 492.815202][ T52] Bluetooth: hci1: command tx timeout [ 492.866534][T12497] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 493.060952][ T52] Bluetooth: hci0: command tx timeout [ 493.219073][T12497] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 493.265728][T12545] hsr_slave_0: entered promiscuous mode [ 493.273668][T12545] hsr_slave_1: entered promiscuous mode [ 493.281965][T12545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.289948][T12545] Cannot create hsr debugfs directory [ 493.326584][T12497] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 493.548029][T12460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.707324][T12460] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.946196][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.953487][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.109022][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.116728][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.026911][T12462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.134753][ T52] Bluetooth: hci0: command tx timeout [ 495.237641][T12497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.441868][T12497] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.633021][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.640429][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.688047][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.695343][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.830004][T12545] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 495.850279][T12545] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 495.879589][T12545] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 495.942981][T12545] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 496.189195][T12462] veth0_vlan: entered promiscuous mode [ 496.208069][T12460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.317673][T12462] veth1_vlan: entered promiscuous mode [ 496.351068][ T60] hsr_slave_0: left promiscuous mode [ 496.374460][ T60] hsr_slave_1: left promiscuous mode [ 496.383605][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.392630][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.410584][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.422500][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.447048][ T60] bridge_slave_1: left allmulticast mode [ 496.452877][ T60] bridge_slave_1: left promiscuous mode [ 496.469314][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.481233][ T60] bridge_slave_0: left allmulticast mode [ 496.492734][ T60] bridge_slave_0: left promiscuous mode [ 496.501761][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.535919][ T60] hsr_slave_0: left promiscuous mode [ 496.542274][ T60] hsr_slave_1: left promiscuous mode [ 496.558568][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.572329][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.582410][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.590477][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.599107][ T60] bridge_slave_1: left allmulticast mode [ 496.605287][ T60] bridge_slave_1: left promiscuous mode [ 496.611183][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.623240][ T60] bridge_slave_0: left allmulticast mode [ 496.629751][ T60] bridge_slave_0: left promiscuous mode [ 496.636276][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.662579][ T60] hsr_slave_0: left promiscuous mode [ 496.669354][ T60] hsr_slave_1: left promiscuous mode [ 496.679129][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.689312][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.704572][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.712355][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.729098][ T60] bridge_slave_1: left allmulticast mode [ 496.743548][ T60] bridge_slave_1: left promiscuous mode [ 496.758474][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.772627][ T60] bridge_slave_0: left allmulticast mode [ 496.780792][ T60] bridge_slave_0: left promiscuous mode [ 496.786975][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.870510][ T60] veth0_macvtap: left promiscuous mode [ 496.876391][ T60] veth1_vlan: left promiscuous mode [ 496.882044][ T60] veth0_vlan: left promiscuous mode [ 496.897386][ T60] veth0_macvtap: left promiscuous mode [ 496.903618][ T60] veth1_vlan: left promiscuous mode [ 496.923092][ T60] veth0_vlan: left promiscuous mode [ 496.932430][ T60] veth1_macvtap: left promiscuous mode [ 496.938594][ T60] veth0_macvtap: left promiscuous mode [ 496.944521][ T60] veth1_vlan: left promiscuous mode [ 496.950002][ T60] veth0_vlan: left promiscuous mode [ 497.214127][ T52] Bluetooth: hci0: command tx timeout [ 498.002270][ T60] team0 (unregistering): Port device team_slave_1 removed [ 498.062623][ T60] team0 (unregistering): Port device team_slave_0 removed [ 498.121989][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.189539][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.650945][ T60] bond0 (unregistering): Released all slaves [ 499.470242][ T60] team0 (unregistering): Port device team_slave_1 removed [ 499.546898][ T60] team0 (unregistering): Port device team_slave_0 removed [ 499.610950][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.679468][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.167529][ T60] bond0 (unregistering): Released all slaves [ 500.972440][ T60] team0 (unregistering): Port device team_slave_1 removed [ 501.041629][ T60] team0 (unregistering): Port device team_slave_0 removed [ 501.107336][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.180788][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.657205][ T60] bond0 (unregistering): Released all slaves [ 501.981101][T12462] veth0_macvtap: entered promiscuous mode [ 502.020502][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.044793][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.083835][T12462] veth1_macvtap: entered promiscuous mode [ 502.146722][T12545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.258470][T12545] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.332030][T12462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.378503][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.386027][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.425804][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.433148][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.469476][T12462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.519782][T12462] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.538172][T12462] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.549918][T12462] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.569549][T12462] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.679512][T12497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.908929][T12460] veth0_vlan: entered promiscuous mode [ 502.994772][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.024022][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.047429][T12460] veth1_vlan: entered promiscuous mode [ 503.225510][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.233524][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.323041][T12460] veth0_macvtap: entered promiscuous mode [ 503.367430][T12460] veth1_macvtap: entered promiscuous mode [ 503.406447][T12460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.420219][T12460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.441067][T12460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.508960][T12460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.534854][T12460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.566354][T12460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.637220][T12460] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.664107][T12460] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.690321][T12460] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.726353][T12460] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.113901][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.129325][T12545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.139824][T12694] syz.8.2114: vmalloc error: size 9223372036854775808, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 504.156287][T12497] veth0_vlan: entered promiscuous mode [ 504.175904][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.204759][T12694] CPU: 0 PID: 12694 Comm: syz.8.2114 Not tainted syzkaller #0 [ 504.212316][T12694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 504.222508][T12694] Call Trace: [ 504.225995][T12694] [ 504.229130][T12694] dump_stack_lvl+0x18c/0x250 [ 504.234418][T12694] ? show_regs_print_info+0x20/0x20 [ 504.239648][T12694] ? load_image+0x400/0x400 [ 504.244286][T12694] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 504.250909][T12694] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 504.257716][T12694] warn_alloc+0x246/0x340 [ 504.262183][T12694] ? zone_watermark_ok_safe+0x230/0x230 [ 504.267810][T12694] __vmalloc_node_range+0x126/0x1330 [ 504.273362][T12694] ? __mutex_trylock_common+0x159/0x260 [ 504.279255][T12694] ? trace_raw_output_contention_end+0xd0/0xd0 [ 504.286174][T12694] ? trace_contention_end+0x39/0xe0 [ 504.291533][T12694] ? __mutex_lock+0x315/0xcc0 [ 504.296513][T12694] ? free_vm_area+0x50/0x50 [ 504.301148][T12694] ? dvb_demux_do_ioctl+0x317/0x530 [ 504.306436][T12694] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 504.312358][T12694] ? mutex_lock_nested+0x20/0x20 [ 504.317894][T12694] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 504.324144][T12694] vmalloc+0x79/0x90 [ 504.328305][T12694] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 504.334290][T12694] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 504.340191][T12694] dvb_demux_do_ioctl+0x454/0x530 [ 504.345408][T12694] dvb_usercopy+0x195/0x2b0 [ 504.350340][T12694] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 504.356070][T12694] ? dvb_generic_ioctl+0xb0/0xb0 [ 504.361152][T12694] ? dvb_demux_poll+0x220/0x220 [ 504.366170][T12694] dvb_demux_ioctl+0x29/0x30 [ 504.370841][T12694] __se_sys_ioctl+0xfd/0x170 [ 504.375690][T12694] do_syscall_64+0x55/0xa0 [ 504.381178][T12694] ? clear_bhb_loop+0x40/0x90 [ 504.385926][T12694] ? clear_bhb_loop+0x40/0x90 [ 504.390773][T12694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 504.397159][T12694] RIP: 0033:0x7fe97f99c799 [ 504.403027][T12694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.413201][T12497] veth1_vlan: entered promiscuous mode [ 504.423233][T12694] RSP: 002b:00007fe980781028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 504.423291][T12694] RAX: ffffffffffffffda RBX: 00007fe97fc15fa0 RCX: 00007fe97f99c799 [ 504.423307][T12694] RDX: 8000000000000000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 504.423321][T12694] RBP: 00007fe97fa32c99 R08: 0000000000000000 R09: 0000000000000000 [ 504.423334][T12694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.423347][T12694] R13: 00007fe97fc16038 R14: 00007fe97fc15fa0 R15: 00007fff2e2e2ff8 [ 504.423380][T12694] [ 504.520962][T12694] Mem-Info: [ 504.524325][T12694] active_anon:6429 inactive_anon:0 isolated_anon:0 [ 504.524325][T12694] active_file:1250 inactive_file:40114 isolated_file:0 [ 504.524325][T12694] unevictable:768 dirty:74 writeback:0 [ 504.524325][T12694] slab_reclaimable:10874 slab_unreclaimable:95947 [ 504.524325][T12694] mapped:24219 shmem:1525 pagetables:643 [ 504.524325][T12694] sec_pagetables:0 bounce:0 [ 504.524325][T12694] kernel_misc_reclaimable:0 [ 504.524325][T12694] free:1361856 free_pcp:10483 free_cma:0 [ 504.589261][T12694] Node 0 active_anon:25716kB inactive_anon:0kB active_file:5000kB inactive_file:160252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96876kB dirty:292kB writeback:0kB shmem:4564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11124kB pagetables:2572kB sec_pagetables:0kB all_unreclaimable? no [ 504.652791][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.679780][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.692017][T12694] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 504.724779][T12694] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 504.755971][T12545] veth0_vlan: entered promiscuous mode [ 504.770134][T12497] veth0_macvtap: entered promiscuous mode [ 504.777934][T12694] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 504.785141][T12694] Node 0 DMA32 free:1528524kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:25680kB inactive_anon:0kB active_file:5000kB inactive_file:159424kB unevictable:1536kB writepending:288kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:30432kB local_pcp:11524kB free_cma:0kB [ 504.826125][T12694] lowmem_reserve[]: 0 0 0 0 0 [ 504.831069][T12694] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 504.847835][T12497] veth1_macvtap: entered promiscuous mode [ 504.872452][T12694] lowmem_reserve[]: 0 0 0 0 0 [ 504.878274][T12694] Node 1 Normal free:3903532kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:11968kB local_pcp:3808kB free_cma:0kB [ 504.919953][T12545] veth1_vlan: entered promiscuous mode [ 504.937464][T12694] lowmem_reserve[]: 0 0 0 0 0 [ 504.942439][T12694] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 504.963017][T12694] Node 0 DMA32: 9*4kB (UME) 221*8kB (M) 254*16kB (ME) 151*32kB (UM) 44*64kB (UME) 94*128kB (UM) 151*256kB (UME) 90*512kB (UME) 31*1024kB (UME) 5*2048kB (ME) 336*4096kB (UM) = 1528524kB [ 504.991247][T12694] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 505.055010][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.084046][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.095409][T12694] Node 1 Normal: 225*4kB (UME) 45*8kB (UME) 32*16kB (UME) 180*32kB (UME) 51*64kB (UME) 8*128kB (UME) 2*256kB (ME) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3903532kB [ 505.120041][T12694] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 505.134611][T12694] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 505.143133][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.155198][T12694] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 505.155448][T12694] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 505.155469][T12694] 42880 total pagecache pages [ 505.155497][T12694] 0 pages in swap cache [ 505.155505][T12694] Free swap = 124472kB [ 505.155514][T12694] Total swap = 124996kB [ 505.155538][T12694] 2097051 pages RAM [ 505.155548][T12694] 0 pages HighMem/MovableOnly [ 505.155555][T12694] 416926 pages reserved [ 505.155563][T12694] 0 pages cma reserved [ 505.173492][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.253288][T12497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.282330][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.299836][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.310913][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.327988][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.358221][T12497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.395502][T12545] veth0_macvtap: entered promiscuous mode [ 505.451530][T12497] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.462517][T12700] loop8: detected capacity change from 0 to 512 [ 505.475555][T12497] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.488253][T12497] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.506653][T12700] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 505.525114][T12497] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.546532][T12700] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 505.589672][T12545] veth1_macvtap: entered promiscuous mode [ 505.593674][T12700] System zones: 1-12 [ 505.620641][T12700] EXT4-fs (loop8): 1 truncate cleaned up [ 505.635407][T12700] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.689250][T12462] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /2/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 505.713048][T12462] EXT4-fs error (device loop8): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 505.737512][T12462] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /2/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 505.738483][T12545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.772647][T12462] EXT4-fs error (device loop8): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 505.801261][T12462] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /2/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 505.830808][T12545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.843090][T12545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.855681][T12545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.866528][T12545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.874630][ T23] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 505.878554][T12545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.898728][T12462] EXT4-fs error (device loop8): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 505.912698][T12545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.933592][T12462] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /2/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 505.972408][T12462] EXT4-fs error (device loop8): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 505.989302][T12545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.000618][T12462] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /2/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 506.010119][T12545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.042165][T12462] EXT4-fs error (device loop8): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 506.053629][T12545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.075540][T12545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.085702][T12545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.094562][ T23] usb 8-1: Using ep0 maxpacket: 8 [ 506.101649][T12545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.115957][ T23] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 506.126981][T12545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.136069][ T23] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 506.157721][T12545] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.170139][ T23] usb 8-1: Product: syz [ 506.176084][ T23] usb 8-1: Manufacturer: syz [ 506.181284][T12545] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.191774][ T23] usb 8-1: SerialNumber: syz [ 506.197215][T12545] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.207093][T12545] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.221226][ T23] usb 8-1: config 0 descriptor?? [ 506.246516][ T23] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 506.431838][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.472263][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.555595][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.597862][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.626180][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.644517][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.680471][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.707996][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.901795][ T23] gspca_zc3xx: reg_w_i err -71 [ 506.922711][ T23] gspca_zc3xx: probe of 8-1:0.0 failed with error -71 [ 506.931027][T12709] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2108'. [ 506.973719][ T23] usb 8-1: USB disconnect, device number 2 [ 507.241460][ T2974] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.455685][ T2974] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.562408][T12462] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.585911][ T2974] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.752918][ T2974] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.045415][ T2974] tipc: Left network mode [ 508.064883][ T5811] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 508.124489][T12626] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 508.268026][ T5811] usb 8-1: Using ep0 maxpacket: 32 [ 508.293006][ T5811] usb 8-1: config 4 has an invalid interface number: 228 but max is 0 [ 508.314154][ T5811] usb 8-1: config 4 has no interface number 0 [ 508.320526][ T5811] usb 8-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30 [ 508.345457][T12626] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 508.356978][T12626] usb 10-1: config 0 has no interface number 0 [ 508.363459][T12626] usb 10-1: config 0 interface 41 has no altsetting 0 [ 508.378645][T12626] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 508.389594][ T5811] usb 8-1: config 4 interface 228 altsetting 12 has an invalid endpoint with address 0xFF, skipping [ 508.403655][T12626] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.418993][T12626] usb 10-1: Product: syz [ 508.420462][ T5811] usb 8-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 508.435517][T12626] usb 10-1: Manufacturer: syz [ 508.442486][T12626] usb 10-1: SerialNumber: syz [ 508.458711][T12626] usb 10-1: config 0 descriptor?? [ 508.464133][ T5811] usb 8-1: config 4 interface 228 has no altsetting 0 [ 508.483997][ T5811] usb 8-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 508.493433][ T5811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.548790][ T5811] usb 8-1: Product: syz [ 508.553240][ T5811] usb 8-1: Manufacturer: syz [ 508.576319][ T5811] usb 8-1: SerialNumber: syz [ 508.820729][T12730] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2125'. [ 508.928029][ T5811] usb 8-1: USB disconnect, device number 3 [ 509.019292][T12654] udevd[12654]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.186610][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 509.204681][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 509.222041][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 509.248301][ T2974] bond1: (slave gretap1): Releasing active interface [ 509.248344][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 509.274052][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 509.284731][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 509.353225][T12626] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 509.364264][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 509.559345][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.584082][ T8] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 509.604225][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.640072][ T8] usb 4-1: config 0 descriptor?? [ 509.964205][ T2974] hsr_slave_0: left promiscuous mode [ 509.970716][ T2974] hsr_slave_1: left promiscuous mode [ 509.986734][ T2974] bridge_slave_1: left allmulticast mode [ 510.002804][ T2974] bridge_slave_1: left promiscuous mode [ 510.014605][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.028984][ T2974] bridge_slave_0: left allmulticast mode [ 510.039754][ T2974] bridge_slave_0: left promiscuous mode [ 510.051359][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.098550][ T8] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 510.112353][ T2974] veth1_macvtap: left promiscuous mode [ 510.124149][ T2974] veth0_macvtap: left promiscuous mode [ 510.130173][ T2974] veth1_vlan: left promiscuous mode [ 510.136773][ T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input7 [ 510.158749][ T2974] veth0_vlan: left promiscuous mode [ 510.267349][T10454] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 510.328475][ T8] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 510.474501][T10454] usb 8-1: Using ep0 maxpacket: 8 [ 510.486891][T10454] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 510.514118][T10454] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 510.533407][T10454] usb 8-1: Product: syz [ 510.538502][T10454] usb 8-1: Manufacturer: syz [ 510.554082][T10454] usb 8-1: SerialNumber: syz [ 510.567880][T10454] usb 8-1: config 0 descriptor?? [ 510.596355][T10454] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 510.648084][T12626] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 510.680669][T12626] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 510.693672][T12626] CoreChips: probe of 10-1:0.41 failed with error -71 [ 510.722393][T12626] usb 10-1: USB disconnect, device number 2 [ 510.775983][ T2974] bond1 (unregistering): Released all slaves [ 511.011011][T10454] gspca_zc3xx: reg_r err -71 [ 511.016402][T10454] gspca_zc3xx: probe of 8-1:0.0 failed with error -71 [ 511.030404][T10454] usb 8-1: USB disconnect, device number 4 [ 511.374276][ T52] Bluetooth: hci3: command tx timeout [ 511.933682][ T2974] team0 (unregistering): Port device team_slave_1 removed [ 512.031175][ T2974] team0 (unregistering): Port device team_slave_0 removed [ 512.126690][ T2974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.183416][T10454] usb 4-1: USB disconnect, device number 2 [ 512.365594][ T2974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.014284][ T23] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 513.070427][ T2974] bond0 (unregistering): Released all slaves [ 513.077426][T12626] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 513.194694][ T23] usb 8-1: Using ep0 maxpacket: 32 [ 513.202976][ T23] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 513.213009][ T23] usb 8-1: config 0 has no interface number 0 [ 513.223225][ T23] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 513.240707][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.249832][ T23] usb 8-1: Product: syz [ 513.261956][ T23] usb 8-1: Manufacturer: syz [ 513.273317][ T23] usb 8-1: SerialNumber: syz [ 513.284924][ T23] usb 8-1: config 0 descriptor?? [ 513.302019][ T23] smsc95xx v2.0.0 [ 513.305999][T12626] usb 4-1: Using ep0 maxpacket: 32 [ 513.315875][T12626] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 513.325591][T12626] usb 4-1: config 0 has no interface number 0 [ 513.327891][T12731] chnl_net:caif_netlink_parms(): no params data found [ 513.336655][T12626] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 513.368115][T12626] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 513.398226][T12626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.448762][T12626] usb 4-1: Product: syz [ 513.454414][ T52] Bluetooth: hci3: command tx timeout [ 513.468944][T12626] usb 4-1: Manufacturer: syz [ 513.473879][T12626] usb 4-1: SerialNumber: syz [ 513.530705][T12626] usb 4-1: config 0 descriptor?? [ 513.569549][T12626] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 513.633569][T12626] em28xx 4-1:0.132: Video interface 132 found: [ 513.754182][ T23] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 513.803232][ T23] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 513.853659][T12731] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.862081][T12731] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.875643][T12731] bridge_slave_0: entered allmulticast mode [ 513.883705][T12731] bridge_slave_0: entered promiscuous mode [ 513.894384][T12731] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.901979][T12731] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.909684][T12731] bridge_slave_1: entered allmulticast mode [ 513.918304][T12731] bridge_slave_1: entered promiscuous mode [ 513.968257][T12731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.988770][T12731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.999009][T12626] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 514.050728][ T23] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 514.068270][ T23] smsc95xx: probe of 8-1:0.67 failed with error -71 [ 514.093842][ T23] usb 8-1: USB disconnect, device number 5 [ 514.100171][T12731] team0: Port device team_slave_0 added [ 514.107429][T12731] team0: Port device team_slave_1 added [ 514.191354][T12731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.206296][T12731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.235017][T12731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.248702][T12731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.256467][T12731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.283416][T12731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.342128][ T2974] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.465141][ T2974] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.491299][T12731] hsr_slave_0: entered promiscuous mode [ 514.502446][T12731] hsr_slave_1: entered promiscuous mode [ 514.553833][ T2974] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.618635][T12626] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 514.645380][T12626] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 514.658478][T12626] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 514.705753][ T2974] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.774113][T12626] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 514.782365][T12626] em28xx 4-1:0.132: analog set to bulk mode. [ 514.829638][ T23] em28xx 4-1:0.132: Registering V4L2 extension [ 514.860449][T12626] usb 4-1: USB disconnect, device number 3 [ 514.883796][T12626] em28xx 4-1:0.132: Disconnecting em28xx [ 515.044343][ T5811] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 515.248352][ T5811] usb 8-1: Using ep0 maxpacket: 8 [ 515.296488][ T5811] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 515.324103][ T5811] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 515.332367][ T5811] usb 8-1: Product: syz [ 515.364444][ T5811] usb 8-1: Manufacturer: syz [ 515.369320][ T5811] usb 8-1: SerialNumber: syz [ 515.387326][ T23] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 515.396019][ T23] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 515.403724][ T23] em28xx 4-1:0.132: No AC97 audio processor [ 515.415720][ T5811] usb 8-1: config 0 descriptor?? [ 515.432638][ T23] usb 4-1: Decoder not found [ 515.437709][ T23] em28xx 4-1:0.132: failed to create media graph [ 515.461018][ T5811] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 515.484412][ T23] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 515.519628][ T23] em28xx 4-1:0.132: Remote control support is not available for this card. [ 515.535213][ T52] Bluetooth: hci3: command tx timeout [ 515.580151][T12626] em28xx 4-1:0.132: Closing input extension [ 515.706765][T12626] em28xx 4-1:0.132: Freeing device [ 515.846711][ T5811] gspca_zc3xx: reg_r err -71 [ 515.853477][ T5811] gspca_zc3xx: probe of 8-1:0.0 failed with error -71 [ 515.905682][ T5811] usb 8-1: USB disconnect, device number 6 [ 515.956854][T12780] loop9: detected capacity change from 0 to 1024 [ 516.057167][T12780] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.168111][ T28] audit: type=1800 audit(1774553381.260:33): pid=12780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2139" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 516.370566][T12497] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.834192][ T43] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 517.036074][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.059386][ T43] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 517.072998][T12808] loop3: detected capacity change from 0 to 1024 [ 517.094140][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.139954][T12808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.155216][ T43] usb 10-1: config 0 descriptor?? [ 517.233495][ T28] audit: type=1800 audit(1774553382.320:34): pid=12808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2147" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 517.560594][T12545] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.623972][ T52] Bluetooth: hci3: command tx timeout [ 517.642672][ T43] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 517.662358][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0002/input/input8 [ 517.975935][ T43] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 518.957520][T12829] loop7: detected capacity change from 0 to 1024 [ 519.004400][ T2974] hsr_slave_0: left promiscuous mode [ 519.065979][ T2974] hsr_slave_1: left promiscuous mode [ 519.094798][T12829] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.157347][ T28] audit: type=1800 audit(1774553384.250:35): pid=12829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2149" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 519.194742][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.226478][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.283199][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.321584][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.387356][ T2974] bridge_slave_1: left allmulticast mode [ 519.393302][ T2974] bridge_slave_1: left promiscuous mode [ 519.414808][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.427661][ T2974] bridge_slave_0: left allmulticast mode [ 519.433621][ T2974] bridge_slave_0: left promiscuous mode [ 519.454440][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.500932][T12460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.547971][ T2974] veth1_macvtap: left promiscuous mode [ 519.553810][ T2974] veth0_macvtap: left promiscuous mode [ 519.589333][T12626] usb 10-1: USB disconnect, device number 3 [ 519.604352][ T2974] veth1_vlan: left promiscuous mode [ 519.609970][ T2974] veth0_vlan: left promiscuous mode [ 520.198016][T12626] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 520.244212][T12707] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 520.415711][T12626] usb 10-1: Using ep0 maxpacket: 32 [ 520.424927][T12626] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 520.448863][T12626] usb 10-1: config 0 has no interface number 0 [ 520.460563][T12626] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 520.470950][T12707] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 520.493397][T12707] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 520.504555][T12626] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.512880][T12626] usb 10-1: Product: syz [ 520.526757][T12707] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 520.544019][T12626] usb 10-1: Manufacturer: syz [ 520.549265][T12707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.557796][T12626] usb 10-1: SerialNumber: syz [ 520.586353][T12707] usb 4-1: Product: syz [ 520.590687][T12707] usb 4-1: Manufacturer: syz [ 520.596746][T12626] usb 10-1: config 0 descriptor?? [ 520.606486][T12626] smsc95xx v2.0.0 [ 520.624858][T12464] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 520.635600][T12707] usb 4-1: SerialNumber: syz [ 520.644919][T12707] usb 4-1: config 0 descriptor?? [ 520.651268][T12867] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 520.663607][T12867] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 520.708512][T12707] usb 4-1: ucan: probing device on interface #0 [ 520.717162][T12707] usb 4-1: ucan: invalid EP count (1) [ 520.722974][T12707] usb 4-1: ucan: probe failed; try to update the device firmware [ 520.831575][T12464] usb 8-1: Using ep0 maxpacket: 8 [ 520.844691][T12464] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 520.857558][T12464] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 520.874419][T12464] usb 8-1: Product: syz [ 520.880169][T12464] usb 8-1: Manufacturer: syz [ 520.885488][T12464] usb 8-1: SerialNumber: syz [ 520.936953][T12464] usb 8-1: config 0 descriptor?? [ 520.955102][T12464] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 521.038705][T12626] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 521.062285][T12626] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 521.280834][T12626] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 521.318746][T12626] smsc95xx: probe of 10-1:0.67 failed with error -71 [ 521.339827][T12626] usb 10-1: USB disconnect, device number 4 [ 521.377320][T12464] gspca_zc3xx: reg_r err -71 [ 521.382062][T12464] gspca_zc3xx: probe of 8-1:0.0 failed with error -71 [ 521.418243][T12464] usb 8-1: USB disconnect, device number 7 [ 521.629476][ T2974] team0 (unregistering): Port device team_slave_1 removed [ 521.738963][ T2974] team0 (unregistering): Port device team_slave_0 removed [ 521.869571][ T2974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.055755][ T2974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.614985][T12903] loop9: detected capacity change from 0 to 1024 [ 522.669697][T12903] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.720167][ T28] audit: type=1800 audit(1774553387.810:36): pid=12903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2153" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 522.928142][ T2974] bond0 (unregistering): Released all slaves [ 522.976247][T12497] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.985446][T12464] usb 4-1: USB disconnect, device number 4 [ 523.504723][T12464] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 523.638279][T12927] binder_alloc: 12926: binder_alloc_buf, no vma [ 523.647193][T12731] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 523.669584][T12731] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 523.688739][T12731] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 523.717801][T12731] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 523.763785][T12464] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.763842][T12464] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 523.763867][T12464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.772567][T12464] usb 4-1: config 0 descriptor?? [ 524.081530][T12731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.123709][T12731] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.147680][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.147832][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.171388][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.171502][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.192406][T12464] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 524.217537][T12464] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0003/input/input9 [ 524.269128][ T43] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 524.376276][T12464] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 524.475303][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 524.515461][ T43] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 524.548974][ T43] usb 8-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 524.575062][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.625444][ T43] usb 8-1: config 0 descriptor?? [ 524.862363][ T43] usbhid 8-1:0.0: can't add hid device: -71 [ 524.886413][ T43] usbhid: probe of 8-1:0.0 failed with error -71 [ 524.913611][ T43] usb 8-1: USB disconnect, device number 8 [ 525.096876][T12731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.240466][T12731] veth0_vlan: entered promiscuous mode [ 525.280633][T12731] veth1_vlan: entered promiscuous mode [ 525.401322][T12731] veth0_macvtap: entered promiscuous mode [ 525.431896][T12731] veth1_macvtap: entered promiscuous mode [ 525.518417][T12731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.532577][T12961] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2164'. [ 525.553094][T12731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.568085][T12731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.580266][T12731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.610469][T12731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.627843][T12731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.649202][T12731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.689978][T12731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.728766][T12731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.753162][T12731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.769753][T12731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.804866][T12731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.837777][T12731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.880236][T12731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.943629][T12731] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.980138][T12731] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.000495][T12731] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.021247][T12731] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.136162][ T5834] usb 4-1: USB disconnect, device number 5 [ 526.382676][T12978] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2168'. [ 526.442067][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.484777][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.604543][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.644066][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.995991][T12626] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 527.094074][ T5834] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 527.184438][T12626] usb 8-1: Using ep0 maxpacket: 32 [ 527.186608][T12626] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 527.186639][T12626] usb 8-1: config 0 has no interface number 0 [ 527.186693][T12626] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 527.189666][T12626] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 527.189699][T12626] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.189721][T12626] usb 8-1: Product: syz [ 527.189736][T12626] usb 8-1: Manufacturer: syz [ 527.189751][T12626] usb 8-1: SerialNumber: syz [ 527.197270][T12626] usb 8-1: config 0 descriptor?? [ 527.222953][T12626] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 527.284322][ T5834] usb 10-1: Using ep0 maxpacket: 32 [ 527.304326][T12464] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 527.344472][T12626] em28xx 8-1:0.132: Video interface 132 found: [ 527.346462][ T5834] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 527.346495][ T5834] usb 10-1: config 0 has no interface number 0 [ 527.349401][ T5834] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 527.349442][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.349465][ T5834] usb 10-1: Product: syz [ 527.349481][ T5834] usb 10-1: Manufacturer: syz [ 527.349497][ T5834] usb 10-1: SerialNumber: syz [ 527.352367][ T5834] usb 10-1: config 0 descriptor?? [ 527.357338][ T5834] smsc95xx v2.0.0 [ 527.497189][T12464] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.497277][T12464] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 527.497305][T12464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.500645][T12464] usb 4-1: config 0 descriptor?? [ 527.629742][T12626] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 527.784316][ T5834] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 527.815010][ T5834] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 527.928252][T12464] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 527.967305][T12464] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0004/input/input10 [ 528.040641][ T5834] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 528.046252][T12626] em28xx 8-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 528.101744][ T5834] smsc95xx: probe of 10-1:0.67 failed with error -71 [ 528.120397][T12626] em28xx 8-1:0.132: board has no eeprom [ 528.152553][ T5834] usb 10-1: USB disconnect, device number 5 [ 528.167676][T12464] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 528.224551][T12626] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 528.259365][T12626] em28xx 8-1:0.132: analog set to bulk mode. [ 528.285938][T12464] em28xx 8-1:0.132: Registering V4L2 extension [ 528.325425][T12626] usb 8-1: USB disconnect, device number 9 [ 528.332939][T12626] em28xx 8-1:0.132: Disconnecting em28xx [ 528.833078][T12464] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 528.858172][T12464] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 528.884792][T12464] em28xx 8-1:0.132: No AC97 audio processor [ 528.916724][T12464] usb 8-1: Decoder not found [ 528.947199][T12464] em28xx 8-1:0.132: failed to create media graph [ 528.989618][T12464] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 529.034780][T12464] em28xx 8-1:0.132: Remote control support is not available for this card. [ 529.066744][T12626] em28xx 8-1:0.132: Closing input extension [ 529.113426][T12626] em28xx 8-1:0.132: Freeing device [ 530.051289][ T8] usb 4-1: USB disconnect, device number 6 [ 530.064477][T12725] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 530.260922][ T5810] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 530.273987][T12725] usb 10-1: Using ep0 maxpacket: 32 [ 530.286323][T12725] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 530.298134][T12725] usb 10-1: config 0 has no interface number 0 [ 530.310973][T12725] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 530.337043][T12725] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.349704][T12725] usb 10-1: Product: syz [ 530.359560][T12725] usb 10-1: Manufacturer: syz [ 530.365340][T12725] usb 10-1: SerialNumber: syz [ 530.381333][T12725] usb 10-1: config 0 descriptor?? [ 530.392928][T12725] smsc95xx v2.0.0 [ 530.474478][ T5810] usb 1-1: Using ep0 maxpacket: 32 [ 530.482225][ T5810] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 530.495379][ T5810] usb 1-1: config 0 has no interface number 0 [ 530.513409][ T5810] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 530.537293][ T5810] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 530.560044][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.573843][ T5810] usb 1-1: Product: syz [ 530.584159][ T5810] usb 1-1: Manufacturer: syz [ 530.589004][ T5810] usb 1-1: SerialNumber: syz [ 530.616220][ T5810] usb 1-1: config 0 descriptor?? [ 530.629541][ T5810] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 530.656162][ T5810] em28xx 1-1:0.132: Video interface 132 found: [ 530.830469][T12725] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 530.856170][T12725] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 531.050669][ T5810] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 531.097390][T12725] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 531.140464][T12725] smsc95xx: probe of 10-1:0.67 failed with error -71 [ 531.166420][T12725] usb 10-1: USB disconnect, device number 6 [ 531.469179][ T5810] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 531.496665][ T5810] em28xx 1-1:0.132: board has no eeprom [ 531.598311][ T5810] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 531.620792][ T5810] em28xx 1-1:0.132: analog set to bulk mode. [ 531.663157][ T23] em28xx 1-1:0.132: Registering V4L2 extension [ 531.682507][ T5810] usb 1-1: USB disconnect, device number 2 [ 531.714591][ T5810] em28xx 1-1:0.132: Disconnecting em28xx [ 531.894256][T12725] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 531.954155][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 531.980128][ T23] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 531.998199][ T23] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 532.017951][ T23] em28xx 1-1:0.132: No AC97 audio processor [ 532.049615][ T23] usb 1-1: Decoder not found [ 532.078352][ T23] em28xx 1-1:0.132: failed to create media graph [ 532.096734][ T23] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 532.115382][ T23] em28xx 1-1:0.132: Remote control support is not available for this card. [ 532.130358][T12725] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.144222][ T5810] em28xx 1-1:0.132: Closing input extension [ 532.174165][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 532.179560][T12725] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 532.197110][T12725] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.205008][ T5810] em28xx 1-1:0.132: Freeing device [ 532.212712][ T8] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 532.230606][ T8] usb 4-1: config 0 has no interface number 0 [ 532.255200][T12725] usb 8-1: config 0 descriptor?? [ 532.269399][ T8] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 532.321006][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.342341][ T8] usb 4-1: Product: syz [ 532.363024][ T8] usb 4-1: Manufacturer: syz [ 532.373170][ T8] usb 4-1: SerialNumber: syz [ 532.400010][ T8] usb 4-1: config 0 descriptor?? [ 532.423047][ T8] smsc95xx v2.0.0 [ 532.708124][T12725] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 532.756418][T12725] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0005/input/input11 [ 532.846817][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 532.883543][T12725] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 532.914071][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 533.843197][T13162] loop9: detected capacity change from 0 to 512 [ 533.862834][T13162] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 533.892831][T13162] EXT4-fs (loop9): 1 truncate cleaned up [ 533.901068][T13162] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.984146][T12725] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 534.057367][T12497] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.174920][T12725] usb 1-1: Using ep0 maxpacket: 32 [ 534.197304][T12725] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 534.212909][T12725] usb 1-1: config 0 has no interface number 0 [ 534.233634][T12725] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 534.247599][T12725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.266245][T12725] usb 1-1: Product: syz [ 534.279196][T12725] usb 1-1: Manufacturer: syz [ 534.302024][T12725] usb 1-1: SerialNumber: syz [ 534.324534][T12725] usb 1-1: config 0 descriptor?? [ 534.346727][T12725] smsc95xx v2.0.0 [ 534.679348][ T23] usb 8-1: USB disconnect, device number 10 [ 534.782378][T12725] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 534.822260][T12725] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 534.943004][T13184] nbd9: detected capacity change from 0 to 63 [ 534.964671][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 534.975995][T13188] block nbd9: NBD_DISCONNECT [ 534.981413][T13188] block nbd9: Disconnected due to user request. [ 535.011709][ T8] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 535.061711][T12725] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 535.076348][ T56] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 535.087421][ T56] Buffer I/O error on dev nbd9, logical block 0, async page read [ 535.096099][ T56] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 535.105595][ T56] Buffer I/O error on dev nbd9, logical block 1, async page read [ 535.113478][ T56] Buffer I/O error on dev nbd9, logical block 2, async page read [ 535.123194][ T56] Buffer I/O error on dev nbd9, logical block 3, async page read [ 535.132066][ T8] usb 4-1: USB disconnect, device number 7 [ 535.137815][ T56] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 535.148948][ T56] Buffer I/O error on dev nbd9, logical block 0, async page read [ 535.155040][T12725] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 535.157423][ T56] Buffer I/O error on dev nbd9, logical block 1, async page read [ 535.171658][T13188] block nbd9: shutting down sockets [ 535.171669][ T56] Buffer I/O error on dev nbd9, logical block 2, async page read [ 535.171694][ T56] Buffer I/O error on dev nbd9, logical block 3, async page read [ 535.193584][ T56] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 535.203019][ T56] Buffer I/O error on dev nbd9, logical block 0, async page read [ 535.211016][ T56] Buffer I/O error on dev nbd9, logical block 1, async page read [ 535.219299][ T56] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 535.248446][T12725] usb 1-1: USB disconnect, device number 3 [ 535.259146][ T1056] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 535.276355][ T56] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 535.286349][ T56] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 535.297588][ T56] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 535.307739][T12861] ldm_validate_partition_table(): Disk read failed. [ 535.315999][ T56] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 535.328946][T12861] Dev nbd9: unable to read RDB block 0 [ 535.337784][T12861] nbd9: unable to read partition table [ 535.390299][T12861] ldm_validate_partition_table(): Disk read failed. [ 535.411322][T12861] Dev nbd9: unable to read RDB block 0 [ 535.436714][T12861] nbd9: unable to read partition table [ 535.720164][T13202] loop0: detected capacity change from 0 to 512 [ 535.750232][T13202] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 535.789403][T13202] EXT4-fs (loop0): 1 truncate cleaned up [ 535.797299][T13202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.884960][ T5810] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 535.962273][T12731] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.104216][ T5810] usb 10-1: Using ep0 maxpacket: 32 [ 536.129138][ T5810] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 536.156899][ T5810] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.194210][ T5810] usb 10-1: config 0 descriptor?? [ 536.208438][ T5810] gspca_main: sunplus-2.14.0 probing 041e:400b [ 536.576028][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 536.806455][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.818231][T12464] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 536.827532][ T5810] gspca_sunplus: reg_r err -32 [ 536.832817][ T5810] sunplus: probe of 10-1:0.0 failed with error -32 [ 536.840544][ T23] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 536.856458][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.874921][ T23] usb 1-1: config 0 descriptor?? [ 536.944132][T12707] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 537.029474][T12464] usb 8-1: Using ep0 maxpacket: 32 [ 537.040711][T12464] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 537.056943][T12464] usb 8-1: config 0 has no interface number 0 [ 537.063387][T12464] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 537.086832][T12464] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 537.101838][T12464] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.111717][T12464] usb 8-1: Product: syz [ 537.124821][T12464] usb 8-1: Manufacturer: syz [ 537.129557][T12464] usb 8-1: SerialNumber: syz [ 537.151037][T12464] usb 8-1: config 0 descriptor?? [ 537.171694][T12464] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 537.189231][T12707] usb 4-1: Using ep0 maxpacket: 32 [ 537.196833][T12464] em28xx 8-1:0.132: Video interface 132 found: [ 537.207062][T12707] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 537.226591][T12707] usb 4-1: config 0 has no interface number 0 [ 537.246500][T12707] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 537.258022][T12707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.267084][T12707] usb 4-1: Product: syz [ 537.273397][T12707] usb 4-1: Manufacturer: syz [ 537.278752][T12707] usb 4-1: SerialNumber: syz [ 537.288010][T12707] usb 4-1: config 0 descriptor?? [ 537.305806][T12707] smsc95xx v2.0.0 [ 537.317633][ T23] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 537.358420][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0006/input/input12 [ 537.530519][ T23] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 537.594461][T12464] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 537.746450][T12707] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 537.759129][T12707] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 537.790665][T12725] usb 1-1: USB disconnect, device number 4 [ 537.971209][T12707] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 537.985081][T12707] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 538.010173][T12707] usb 4-1: USB disconnect, device number 8 [ 538.016723][T12464] em28xx 8-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 538.060891][T12464] em28xx 8-1:0.132: board has no eeprom [ 538.134024][T12464] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 538.142347][T12464] em28xx 8-1:0.132: analog set to bulk mode. [ 538.164545][ T23] em28xx 8-1:0.132: Registering V4L2 extension [ 538.188498][T12464] usb 8-1: USB disconnect, device number 11 [ 538.203886][T12464] em28xx 8-1:0.132: Disconnecting em28xx [ 538.438712][ T23] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 538.454681][ T23] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 538.468950][ T23] em28xx 8-1:0.132: No AC97 audio processor [ 538.488665][ T23] usb 8-1: Decoder not found [ 538.493439][ T23] em28xx 8-1:0.132: failed to create media graph [ 538.534213][ T23] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 538.542660][ T23] em28xx 8-1:0.132: Remote control support is not available for this card. [ 538.575095][T12464] em28xx 8-1:0.132: Closing input extension [ 538.617031][T12464] em28xx 8-1:0.132: Freeing device [ 538.684155][T13269] loop0: detected capacity change from 0 to 512 [ 538.694471][ T23] usb 10-1: USB disconnect, device number 7 [ 538.742294][T13269] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 538.752850][T13272] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2231'. [ 538.775360][T13272] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2231'. [ 538.823718][T13269] EXT4-fs (loop0): 1 truncate cleaned up [ 538.861286][T13269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.264824][T12731] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.295986][T12464] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 539.567009][T12464] usb 4-1: Using ep0 maxpacket: 16 [ 539.582477][T12464] usb 4-1: unable to get BOS descriptor or descriptor too short [ 539.613620][T12464] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 539.650597][T12464] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 539.668452][T12464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.683045][T12464] usb 4-1: Product: syz [ 539.708636][T12464] usb 4-1: Manufacturer: syz [ 539.713730][T12464] usb 4-1: SerialNumber: syz [ 539.989136][T12464] snd-ua101 4-1:1.1: sample format descriptor not found [ 540.015068][T12464] snd-ua101 4-1:1.0: invalid num_altsetting [ 540.052736][T12464] usb 4-1: USB disconnect, device number 9 [ 540.324019][ T5834] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 540.534493][ T5834] usb 8-1: Using ep0 maxpacket: 32 [ 540.546526][ T5834] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 540.576754][ T5834] usb 8-1: config 0 has no interface number 0 [ 540.583383][ T5834] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 540.653141][ T5834] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 540.674101][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.682302][ T5834] usb 8-1: Product: syz [ 540.692535][ T5834] usb 8-1: Manufacturer: syz [ 540.694660][T12464] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 540.714067][ T5834] usb 8-1: SerialNumber: syz [ 540.731223][ T5834] usb 8-1: config 0 descriptor?? [ 540.756307][ T5834] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 540.795229][ T5834] em28xx 8-1:0.132: Video interface 132 found: [ 540.878467][T13328] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2243'. [ 540.904317][T12464] usb 1-1: Using ep0 maxpacket: 32 [ 540.904960][T13328] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2243'. [ 540.918924][T12464] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 540.918956][T12464] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.945461][T12464] usb 1-1: config 0 descriptor?? [ 540.967808][T12464] gspca_main: sunplus-2.14.0 probing 041e:400b [ 541.167390][ T5834] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 541.585835][ T5834] em28xx 8-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 541.600348][T12464] gspca_sunplus: reg_r err -32 [ 541.613640][T12464] sunplus: probe of 1-1:0.0 failed with error -32 [ 541.642105][ T5834] em28xx 8-1:0.132: board has no eeprom [ 541.713815][T13339] loop3: detected capacity change from 0 to 512 [ 541.730628][ T5834] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 541.746329][ T5834] em28xx 8-1:0.132: analog set to bulk mode. [ 541.763673][ T5811] em28xx 8-1:0.132: Registering V4L2 extension [ 541.793495][ T5834] usb 8-1: USB disconnect, device number 12 [ 541.824908][ T5834] em28xx 8-1:0.132: Disconnecting em28xx [ 541.836659][T13339] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 541.894215][T13339] EXT4-fs (loop3): 1 truncate cleaned up [ 541.901612][T13339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.048441][ T5811] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 542.079384][ T5811] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 542.117452][ T5811] em28xx 8-1:0.132: No AC97 audio processor [ 542.150731][ T5811] usb 8-1: Decoder not found [ 542.168446][ T5811] em28xx 8-1:0.132: failed to create media graph [ 542.181094][ T5811] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 542.193480][ T5811] em28xx 8-1:0.132: Remote control support is not available for this card. [ 542.202688][ T5834] em28xx 8-1:0.132: Closing input extension [ 542.210042][T12545] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.264927][ T5834] em28xx 8-1:0.132: Freeing device [ 542.672906][T13365] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2249'. [ 542.802413][T13368] syzkaller0: entered promiscuous mode [ 542.816856][T13368] syzkaller0: entered allmulticast mode [ 543.444294][ T5811] usb 1-1: USB disconnect, device number 5 [ 543.492433][T13387] loop9: detected capacity change from 0 to 512 [ 543.563612][T13387] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 543.614332][T13387] EXT4-fs (loop9): 1 truncate cleaned up [ 543.635079][T13387] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.879070][T12497] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.944843][T13403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2259'. [ 544.014137][ T5811] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 544.183778][T13411] syzkaller0: entered promiscuous mode [ 544.190124][T13411] syzkaller0: entered allmulticast mode [ 544.244026][ T5811] usb 1-1: Using ep0 maxpacket: 32 [ 544.252832][ T5811] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 544.284111][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.315704][ T5811] usb 1-1: config 0 descriptor?? [ 544.411199][ T5811] as10x_usb: device has been detected [ 544.425882][ T5811] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 544.522276][ T5811] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 544.558892][T13393] ------------[ cut here ]------------ [ 544.565067][T13393] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 544.576159][T13393] WARNING: CPU: 0 PID: 13393 at kernel/locking/mutex.c:582 __mutex_lock+0xb85/0xcc0 [ 544.592048][T13393] Modules linked in: [ 544.596439][T13393] CPU: 0 PID: 13393 Comm: syz.0.2255 Not tainted syzkaller #0 [ 544.604567][T13393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 544.615238][T13393] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 544.620759][T13393] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 94 87 fc 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b4 ca 8a 48 c7 c6 20 b5 ca 8a e8 5b 28 c2 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 544.641465][T13393] RSP: 0018:ffffc9000b5dfaa0 EFLAGS: 00010246 [ 544.648484][T13393] RAX: 38052fe02696d700 RBX: ffff88805ba1ace0 RCX: 0000000000080000 [ 544.656905][T13393] RDX: ffffc900173fa000 RSI: 0000000000007016 RDI: 0000000000007017 [ 544.665159][T13393] RBP: ffffc9000b5dfbf8 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 544.673524][T13393] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 0000000000000000 [ 544.681985][T13393] R13: 1ffff920016bbf64 R14: dffffc0000000000 R15: 0000000000000000 [ 544.690496][T13393] FS: 00007f27cc5c56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 544.700029][T13393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 544.706978][T13393] CR2: 000000110c429cc8 CR3: 000000007ca87000 CR4: 00000000003526f0 [ 544.715357][T13393] Call Trace: [ 544.718821][T13393] [ 544.721985][T13393] ? trace_contention_end+0x39/0xe0 [ 544.727769][T13393] ? __mutex_lock+0x315/0xcc0 [ 544.732519][T13393] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 544.738541][T13393] ? mutex_lock_nested+0x20/0x20 [ 544.743574][T13393] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 544.750580][T13393] ? dmx_section_feed_start_filtering+0x55/0x690 [ 544.757335][T13393] ? mutex_lock_nested+0x20/0x20 [ 544.762736][T13393] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 544.769205][T13393] ? lock_chain_count+0x20/0x20 [ 544.774192][T13393] ? _raw_spin_lock_irq+0xbb/0xf0 [ 544.779489][T13393] as102_dvb_dmx_start_feed+0x70/0x280 [ 544.785247][T13393] dmx_section_feed_start_filtering+0x4f5/0x690 [ 544.791567][T13393] dvb_dmxdev_filter_start+0xcbd/0x10c0 [ 544.797242][T13393] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 544.803036][T13393] dvb_demux_do_ioctl+0x467/0x530 [ 544.808211][T13393] dvb_usercopy+0x195/0x2b0 [ 544.812847][T13393] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 544.819008][T13393] ? dvb_generic_ioctl+0xb0/0xb0 [ 544.824273][T13393] ? dvb_demux_poll+0x220/0x220 [ 544.829551][T13393] dvb_demux_ioctl+0x29/0x30 [ 544.834551][T13393] __se_sys_ioctl+0xfd/0x170 [ 544.839222][T13393] do_syscall_64+0x55/0xa0 [ 544.843959][T13393] ? clear_bhb_loop+0x40/0x90 [ 544.849751][T13393] ? clear_bhb_loop+0x40/0x90 [ 544.854866][T13393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 544.861017][T13393] RIP: 0033:0x7f27cb79c799 [ 544.865826][T13393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.886174][T13393] RSP: 002b:00007f27cc5c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.895155][T13393] RAX: ffffffffffffffda RBX: 00007f27cba15fa0 RCX: 00007f27cb79c799 [ 544.903365][T13393] RDX: 0000200000000000 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 544.911725][T13393] RBP: 00007f27cb832c99 R08: 0000000000000000 R09: 0000000000000000 [ 544.920006][T13393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.924220][T12464] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 544.928590][T13393] R13: 00007f27cba16038 R14: 00007f27cba15fa0 R15: 00007ffedd7d9328 [ 544.944459][T13393] [ 544.947701][T13393] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 544.955985][T13393] CPU: 0 PID: 13393 Comm: syz.0.2255 Not tainted syzkaller #0 [ 544.963668][T13393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 544.974126][T13393] Call Trace: [ 544.977624][T13393] [ 544.980884][T13393] dump_stack_lvl+0x18c/0x250 [ 544.985898][T13393] ? show_regs_print_info+0x20/0x20 [ 544.991447][T13393] ? load_image+0x400/0x400 [ 544.996372][T13393] panic+0x2dc/0x730 [ 545.000337][T13393] ? bpf_jit_dump+0xd0/0xd0 [ 545.005187][T13393] __warn+0x2e0/0x470 [ 545.009667][T13393] ? __mutex_lock+0xb85/0xcc0 [ 545.014403][T13393] ? __mutex_lock+0xb85/0xcc0 [ 545.019270][T13393] report_bug+0x2be/0x4f0 [ 545.023836][T13393] ? __mutex_lock+0xb85/0xcc0 [ 545.028832][T13393] ? __mutex_lock+0xb85/0xcc0 [ 545.033809][T13393] ? __mutex_lock+0xb87/0xcc0 [ 545.038527][T13393] handle_bug+0xcf/0x120 [ 545.042814][T13393] exc_invalid_op+0x1a/0x50 [ 545.047524][T13393] asm_exc_invalid_op+0x1a/0x20 [ 545.052871][T13393] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 545.058290][T13393] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 94 87 fc 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b4 ca 8a 48 c7 c6 20 b5 ca 8a e8 5b 28 c2 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 545.078900][T13393] RSP: 0018:ffffc9000b5dfaa0 EFLAGS: 00010246 [ 545.085102][T13393] RAX: 38052fe02696d700 RBX: ffff88805ba1ace0 RCX: 0000000000080000 [ 545.093299][T13393] RDX: ffffc900173fa000 RSI: 0000000000007016 RDI: 0000000000007017 [ 545.101711][T13393] RBP: ffffc9000b5dfbf8 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 545.110113][T13393] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 0000000000000000 [ 545.118385][T13393] R13: 1ffff920016bbf64 R14: dffffc0000000000 R15: 0000000000000000 [ 545.126576][T13393] ? trace_contention_end+0x39/0xe0 [ 545.131978][T13393] ? __mutex_lock+0x315/0xcc0 [ 545.136788][T13393] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 545.142459][T13393] ? mutex_lock_nested+0x20/0x20 [ 545.147875][T13393] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 545.153999][T13393] ? dmx_section_feed_start_filtering+0x55/0x690 [ 545.160401][T13393] ? mutex_lock_nested+0x20/0x20 [ 545.165637][T13393] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 545.172150][T13393] ? lock_chain_count+0x20/0x20 [ 545.177133][T13393] ? _raw_spin_lock_irq+0xbb/0xf0 [ 545.182385][T13393] as102_dvb_dmx_start_feed+0x70/0x280 [ 545.188182][T13393] dmx_section_feed_start_filtering+0x4f5/0x690 [ 545.195270][T13393] dvb_dmxdev_filter_start+0xcbd/0x10c0 [ 545.200969][T13393] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 545.207089][T13393] dvb_demux_do_ioctl+0x467/0x530 [ 545.212320][T13393] dvb_usercopy+0x195/0x2b0 [ 545.216988][T13393] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 545.223051][T13393] ? dvb_generic_ioctl+0xb0/0xb0 [ 545.228046][T13393] ? dvb_demux_poll+0x220/0x220 [ 545.232932][T13393] dvb_demux_ioctl+0x29/0x30 [ 545.237706][T13393] __se_sys_ioctl+0xfd/0x170 [ 545.242805][T13393] do_syscall_64+0x55/0xa0 [ 545.247814][T13393] ? clear_bhb_loop+0x40/0x90 [ 545.252535][T13393] ? clear_bhb_loop+0x40/0x90 [ 545.257449][T13393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.263589][T13393] RIP: 0033:0x7f27cb79c799 [ 545.268070][T13393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.288149][T13393] RSP: 002b:00007f27cc5c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.296980][T13393] RAX: ffffffffffffffda RBX: 00007f27cba15fa0 RCX: 00007f27cb79c799 [ 545.305093][T13393] RDX: 0000200000000000 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 545.313300][T13393] RBP: 00007f27cb832c99 R08: 0000000000000000 R09: 0000000000000000 [ 545.321780][T13393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.330169][T13393] R13: 00007f27cba16038 R14: 00007f27cba15fa0 R15: 00007ffedd7d9328 [ 545.338369][T13393] [ 545.342274][T13393] Kernel Offset: disabled [ 545.346815][T13393] Rebooting in 86400 seconds..