last executing test programs: 1m5.512787798s ago: executing program 3 (id=569): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x2, 0x1, 0x0, 0x0, 0x5, 0x0, 0x70bd2a, 0x0, [@sadb_address={0x3, 0x7, 0x0, 0x180, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x28}}, 0x0) 1m5.301255688s ago: executing program 3 (id=572): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="00446916ab", 0x5}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2}}}], 0x20}, 0x0) 1m5.090243709s ago: executing program 3 (id=575): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1m4.959637255s ago: executing program 3 (id=577): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000000580), 0x2000040, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m4.615348212s ago: executing program 3 (id=582): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x18, &(0x7f0000000080)={&(0x7f0000000600)="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", 0xef6}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="20216e0000006e23a42362a1024b1fced296d400e411ea17bb2585ccd6365602a9"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x2, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffedd, &(0x7f00000003c0)=ANY=[]) 1m4.331224027s ago: executing program 3 (id=586): bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b0004000280090001007379"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="e00000001000010028bd7000fedbdf25706362632866637279707429"], 0xe0}, 0x1, 0x0, 0x0, 0x48000}, 0x4040840) 1m4.06031138s ago: executing program 32 (id=586): bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b0004000280090001007379"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="e00000001000010028bd7000fedbdf25706362632866637279707429"], 0xe0}, 0x1, 0x0, 0x0, 0x48000}, 0x4040840) 36.575229366s ago: executing program 2 (id=754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x25000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x50000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0xdddd0000, 0xeeee0000, 0xb, 0x0, 0x3, 0x1, 0x1, 0x4, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0x4, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0x4000, 0x8000000, 0xf, 0x5, 0x28, 0x94, 0xa, 0x0, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x60050000, 0x0, 0xffff1000, 0x200300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x4000000000006, 0xc5]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0xb, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x5, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x0, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8f, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x4, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) 36.457657641s ago: executing program 2 (id=755): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x400c405) poll(&(0x7f0000000540)=[{r1, 0x8289}], 0x1, 0xc3cb) 33.358119834s ago: executing program 2 (id=766): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='P', @ANYRES8=r1, @ANYRES16=r4], 0x14) 30.21166887s ago: executing program 2 (id=784): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000000580), 0x2000040, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 29.946982973s ago: executing program 2 (id=789): r0 = socket$can_raw(0x1d, 0x3, 0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) 27.731427832s ago: executing program 2 (id=796): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f00000003c0), 0x1, 0x55e, &(0x7f0000001bc0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0x1dc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x5000) fallocate(r0, 0x3, 0x0, 0x8800000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8541, 0x0) 27.391931469s ago: executing program 33 (id=796): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f00000003c0), 0x1, 0x55e, &(0x7f0000001bc0)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0x1dc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x5000) fallocate(r0, 0x3, 0x0, 0x8800000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8541, 0x0) 14.874947047s ago: executing program 1 (id=847): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000000100)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000000), &(0x7f00000000c0)=@v1={0x2, "63c623be24af2fda3a62a0858559e803f8"}, 0x12, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, 0x0, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x1, &(0x7f0000000000)={{0x77359400}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x23f792fe17900424, 0x0, 0x0) 13.644900317s ago: executing program 1 (id=852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x8000, 0x8000, 0x7fffffff, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}}) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"73b5698c1a93ca52439fb6143bc6ed5cd46e9536d550c3c0b7b7af7cc2007b9f3d7c148e5ff970dd43ceff24fd175683fa5639234fecb7fffd98b04ea45e6e10721874027c9ad774a560e382c1e5f8849338c6ac098b39d0e68353bd0384ed68c24796825bbc7058b4e260e1a6c7e0ce9f9757cf21a89a43ce0ef492ffe3707b80a7e47f91796f6fed1cf35007be07a3665be419239926ad63a6bc3cc693235ea9174ef471b1a0700661936fc511420910d105730a389a191fe43002e0a5fbb5f4a8dda0b86a7bfd99d63c75fbf7406c3fd0e4bec1e42178ceec6cde5b202e506d53f90ea63071911e0d5e762b69432a8e91502375b7c8b96a791f2c2ca095c19e6798177eb371620c7d3a7e3492f37652066650f1d11c7be166fb0dbd5ad6eeadc3d23c59c47fb656642e13af92795705cc2c20d90c1c07bae981599765d37dcf930c0f58e6ae2ba948d2dbac01b9a37e5d22105bf4bc44b0d1eb4972d32d47c0b1581cb16dd88f50bb5f17b615ee895417f894ae2dc01a774f487c646f36f526bce3a86b924b90602ffb3e41eb85c2c9d627f014f7227b4a7f475cfea7681103231bd99e43286a83d2e17c735664d05ac139103844c1ac3f3b766a582b79355a61617d5f488d191807e2356dcf552b2c48d0b9d7b4feaeae9a08ec582741984f77c8a9293c396df24a580ce2bcc17954080816d502a9efc9ead43ab37b5fa38dc3ef9f8ec5fd01d78603db51e3b3009e16ba919592ad1576369a799e702c19423a8f3c6dcd1d67f25bf1b6dae315d81b4bfa6a70354637d7f025ce2d9fb0dcd66cd08b322a4c3e73ed9cfbd5d0a29d7dbd30ddcaa9b1d84c2f2bb18a56e32d59e8ea3da32647ffe467e6260f5f2f01b555e82d6d752d90460037221731b42b0668a5578e1e0b04e877734593baf3304b60e0329523924928107d9f9caffbf7db3ed8a38bec6bc8dc2d010941f72cfb4ac9d02564d7130fedd690e50061bf2617f14495cda99c768fa01c1c3239fa18cdb2308225fa8c5b280c9ae219de4ad5d311c862324723eccba1ea0faa5fcba8f33391eb424fea9d13ae871f9f061b6a90a3fd79c77572b0505d5a9a4bf58470759337fad828de1de60789e3814c98a8a87cb672fb118f46ecb2ac9570dedc6cea26f850218e46eb535e394cd60933822b155aa19be1c664443567513871ca3e6e26904642fbe3b7b89219c99b6a91400415d5af913b0bbd5586ad5f437ecd3533bf39db0ebfa12865df74a380e64edcc5889241f2ec2b84f47513e6b49188baf833887f64aa26c5ed69d00bab6738c2c4576f3918444f3b91fbec2aa155527954fd4e339747301c99c77773dc6e3fecada2e681923d6664ca4dee46faeeeb133d1085f3c28dc314c5d71c818c682e21d5b05b9c15718bec8b234adbcd9ea113abfa01dd5955c36d6b12fee9b71271cf"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x40, 0x8000, 0x2, 0x2, {{0x5, 0x4, 0x3, 0x9, 0x14, 0x68, 0x0, 0xc, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}}}}}) writev(r2, &(0x7f00000000c0), 0x0) syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 11.622975867s ago: executing program 1 (id=862): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000b00)=r0, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000015c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 10.54379543s ago: executing program 1 (id=864): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000000580), 0x2000040, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 10.112532801s ago: executing program 1 (id=868): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {@data_ordered}, {@stripe}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {@init_itable}, {@auto_da_alloc}]}, 0x1, 0x606, &(0x7f0000000600)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x52) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x4, 0x8001, 0x9}) 10.106512381s ago: executing program 6 (id=869): madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2) 9.876107513s ago: executing program 6 (id=872): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0xfd160c7ac885e8b1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 9.653591074s ago: executing program 6 (id=874): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000100)={[{@errors_remount}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0x3, 0x488, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0xee01) 9.52272251s ago: executing program 1 (id=875): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r2, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000580)={0x2, 0x4e5c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 8.972538838s ago: executing program 34 (id=875): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r2, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000580)={0x2, 0x4e5c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 8.968478188s ago: executing program 0 (id=878): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x8, 0x2, 0x8, 0x7, 0x5, 0x3, 0x0, 0x2, 0x5, 0x36, 0x2, 0x5}, 0xe) close_range(r3, 0xffffffffffffffff, 0x0) 8.967415388s ago: executing program 6 (id=879): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000000580), 0x2000040, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 8.656286273s ago: executing program 6 (id=882): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc)=0xffffffff, 0x5, 0x2, 0x0, &(0x7f0000000480)=0x2000, 0x0) 8.166193407s ago: executing program 0 (id=885): r0 = socket(0x2, 0x2, 0x1) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) 8.11271721s ago: executing program 6 (id=886): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f00000012c0), 0x0}) 8.030771094s ago: executing program 0 (id=888): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80c480, &(0x7f0000000500)=ANY=[@ANYBLOB='time_offset=0x0000000000000006,discard,discard,allow_utime=00000000000000000000011,discard,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466382c757466382c6e616d65636173653d312c696f636861727365743d6b6f69382d72752c00124f338afc02b4ce0c9921e5ae39d291bc2ac4946af5b081e8aea944c0af0e3d75273eb48c51c14dbb722611e756585fb6885ffaf590c15d89d0c9b9ed0baed625ef385d113ca3da9853b1e30af3292633b20979af0cebe19908711500b9927853d3d320f42ecd0d110810fb93a59652b7ab98e4bf19edf7600519b108bb180d8257278d3f16528c1a72ce2f6b96e7"], 0x1, 0x1548, &(0x7f0000000880)="$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") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000003c0)='.\x00', 0x1b4247c, &(0x7f0000001e80)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="ccc77239ce5e3ed12853e5834c14968440fe4be1e9570889e816f7cfd430c8cf2ceeb979d73981e408ed6928775152fec7be44e4142e29c2cd082885d63691c3d33dab7f946532637d651bf5a37a1f187cc81bb846217c874109ba0c858034fcd0cc11f3", @ANYRESHEX, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="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", @ANYRESHEX, @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="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", @ANYBLOB="94b65231ff72115114ebaa5c989b151934dc050b6a9a2be44298b5d84feb3892838280ec13531d79a890932db7ed059888c314982baa52e77255257748283ef9ebc6291f2ad639cd00274ba3bc494b67fe9b86ea83146429d9b58b5e5a5f4456ac6e3aaa769d671ec3e205be67d6bcb35240da8c3e3927beca9e0cc3e3ab04c4b217462801adae3786ceb99fd69be1bca660570b9cc3b0a6a3", @ANYRES64=0x0, @ANYRES64], 0x5, 0x0, &(0x7f0000000000)) 7.586484086s ago: executing program 35 (id=886): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f00000012c0), 0x0}) 7.544574718s ago: executing program 0 (id=890): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a00010200000000000000000a00000000000000080004"], 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 7.390032626s ago: executing program 0 (id=891): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0xf) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) 6.332311638s ago: executing program 5 (id=893): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ppoll(&(0x7f00000000c0)=[{}, {r2}], 0x2, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.576560395s ago: executing program 4 (id=895): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x8, 0x2, 0x8, 0x7, 0x5, 0x3, 0x0, 0x2, 0x5, 0x36, 0x2, 0x5}, 0xe) close_range(r3, 0xffffffffffffffff, 0x0) 4.942253447s ago: executing program 4 (id=896): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000eb00000f1000000000000061020000000000009500050000000000929b569e5b468b4c53db3f7ac9bc09236ced48406ba73fa5a110a5121c8369c038dc56e6bc1875cceae7ccb46cba30367a0cfe1f5ab6abae43"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xffd, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000240), 0x2008840, &(0x7f00000002c0)={[{@index_on}, {@uuid_on}], [{@smackfstransmute={'smackfstransmute', 0x3d, '0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k'}}]}) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) dup(0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x80000000, 0x0) ptrace(0x10, r6) r7 = syz_pidfd_open(r6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) waitid$P_PIDFD(0x3, r7, 0x0, 0xa000000c, 0x0) tee(r1, r2, 0x6, 0x0) 4.124874197s ago: executing program 5 (id=897): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000009c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x71, 0x0, &(0x7f00000008c0)="49d9a68b6ffc453d985eb6a42bc1c6fe686f0fed1f5c7a248a12e7e972ed49abcd0e27af834454a9268e55fbe4ae21f59a60ba8e99ac8186208ad94a66538d1a27505c8bcf5d96a16df5016c614ba88b843cd6d9e687a393bd1ddf1ae92f2fd47b4548e6c161d957bc8d979ef06e32d445"}) 3.924154456s ago: executing program 5 (id=898): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x200b03) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r2, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = getpid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r3}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) fcntl$setown(r2, 0x8, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) 3.800441143s ago: executing program 4 (id=899): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) 2.881470328s ago: executing program 4 (id=900): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000f001100010027bd7000fddbdf250a010102000000000000000000000000000004d30200"], 0x34}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2.64909032s ago: executing program 5 (id=901): r0 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x40400) bind$xdp(r0, 0x0, 0x0) 2.334075245s ago: executing program 5 (id=902): sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x8, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0xfb, 0x4, 0x1, 0x81, 0x0, 0x7, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x8, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.180465103s ago: executing program 0 (id=903): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x60040000) open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000008c0)={'mangle\x00', 0x0, [0x9, 0x7, 0xffff, 0xb41, 0xfffffffd]}, &(0x7f0000000180)=0x54) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x24004084) 831.816159ms ago: executing program 5 (id=904): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d00010000000000fcdbdf2507000400", @ANYRES32=r1, @ANYBLOB="000096000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 108.464965ms ago: executing program 4 (id=905): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) readv(r0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001580)=""/90, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, 0x0, &(0x7f00000016c0)=""/187, 0x0, 0x3000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, 0x0) clock_gettime(0x0, &(0x7f0000001440)) 0s ago: executing program 4 (id=906): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) add_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socket$packet(0x11, 0x2, 0x300) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) unshare(0x62000000) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x9, 0x6, 0x8, 0x209, 0x2]}, &(0x7f0000000180)=0x54) syz_emit_ethernet(0x7a, &(0x7f0000000380)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "193914", 0x44, 0x2f, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0xffff}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x7, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x4, 0x9}, 0x2, {0x2, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') execve(&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): uninitialized): Failed to read register index 0x00000098. ret = -32 [ 127.479973][ T4344] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 127.495871][ T4344] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 127.507588][ T4344] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 127.520233][ T4344] lan78xx: probe of 1-1:1.0 failed with error -32 [ 127.629054][ T22] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 127.820635][ T22] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 127.829938][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.839359][ T22] usb 2-1: config 0 descriptor?? [ 127.846436][ T22] cp210x 2-1:0.0: cp210x converter detected [ 127.927656][ T7] usb 3-1: USB disconnect, device number 17 [ 127.969093][ T4344] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 128.159045][ T4344] usb 5-1: Using ep0 maxpacket: 32 [ 128.165727][ T4344] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 128.174044][ T4344] usb 5-1: config 0 has no interface number 0 [ 128.191689][ T4344] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 128.202037][ T4344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.221066][ T4344] usb 5-1: Product: syz [ 128.226319][ T4344] usb 5-1: Manufacturer: syz [ 128.232549][ T4344] usb 5-1: SerialNumber: syz [ 128.239925][ T4344] usb 5-1: config 0 descriptor?? [ 128.248546][ T4344] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 128.259549][ T22] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -32 [ 128.267144][ T22] cp210x 2-1:0.0: GPIO initialisation failed: -32 [ 128.285659][ T22] usb 2-1: cp210x converter now attached to ttyUSB0 [ 128.298499][ T22] usb 2-1: USB disconnect, device number 18 [ 128.308564][ T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 128.330591][ T22] cp210x 2-1:0.0: device disconnected [ 128.399046][ T27] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 128.460371][ T4344] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 128.481460][ T4344] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 128.604058][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 128.613920][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.633649][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.646597][ T27] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.658551][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.667008][ T27] usb 4-1: Product: syz [ 128.671434][ T27] usb 4-1: Manufacturer: syz [ 128.676212][ T27] usb 4-1: SerialNumber: syz [ 128.883965][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 128.884269][ T4309] usb 5-1: USB disconnect, device number 23 [ 128.895504][ T27] usb 4-1: 0:2 : does not exist [ 128.917006][ T27] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 128.928041][ T4309] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 128.946172][ T27] usb 4-1: USB disconnect, device number 11 [ 128.956374][ T4309] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 128.972051][ T4309] quatech2 5-1:0.51: device disconnected [ 129.098915][ T4367] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 129.138961][ T7] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 129.213379][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.281500][ T4367] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.291862][ T4367] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.301311][ T4367] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 129.311080][ T4367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.321250][ T4367] usb 3-1: config 0 descriptor?? [ 129.330858][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.341310][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 129.352022][ T7] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 129.361391][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.371378][ T7] usb 2-1: config 0 descriptor?? [ 129.378342][ T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 129.385115][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 129.394431][ T7] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 129.403455][ T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 129.410860][ T7] usb 2-1: media controller created [ 129.419956][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.453870][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 129.479294][ T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 129.502992][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 129.534667][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 129.542180][ T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 129.596192][ T27] usb 2-1: USB disconnect, device number 19 [ 129.616141][ T4344] usb 1-1: USB disconnect, device number 13 [ 129.629398][ T5552] virt_wifi0 speed is unknown, defaulting to 1000 [ 129.643260][ T5552] virt_wifi0 speed is unknown, defaulting to 1000 [ 129.655841][ T5552] virt_wifi0 speed is unknown, defaulting to 1000 [ 129.658185][ T27] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 129.684375][ T5552] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 129.706305][ T5552] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 129.736054][ T5552] virt_wifi0 speed is unknown, defaulting to 1000 [ 129.744622][ T5552] virt_wifi0 speed is unknown, defaulting to 1000 [ 129.753936][ T5552] virt_wifi0 speed is unknown, defaulting to 1000 [ 129.763785][ T5552] virt_wifi0 speed is unknown, defaulting to 1000 [ 129.773112][ T5552] virt_wifi0 speed is unknown, defaulting to 1000 [ 129.801071][ T4367] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 129.990118][ T4367] usb 4-1: Using ep0 maxpacket: 8 [ 130.001665][ T4367] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 130.012144][ T4367] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.022922][ T4367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.114245][ T5560] netlink: 32 bytes leftover after parsing attributes in process `syz.4.430'. [ 130.213955][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 130.213970][ T26] audit: type=1326 audit(1773943799.846:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4819c799 code=0x7ffc0000 [ 130.320805][ T26] audit: type=1326 audit(1773943799.886:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4819c799 code=0x7ffc0000 [ 130.348588][ T26] audit: type=1326 audit(1773943799.886:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6a4819c799 code=0x7ffc0000 [ 130.385827][ T26] audit: type=1326 audit(1773943799.886:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4819c799 code=0x7ffc0000 [ 130.413729][ T26] audit: type=1326 audit(1773943799.886:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4819c799 code=0x7ffc0000 [ 130.508952][ T26] audit: type=1326 audit(1773943799.896:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f6a4819c799 code=0x7ffc0000 [ 130.545522][ T26] audit: type=1326 audit(1773943800.136:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4819c799 code=0x7ffc0000 [ 130.635967][ T26] audit: type=1326 audit(1773943800.136:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4819c799 code=0x7ffc0000 [ 130.686149][ T26] audit: type=1326 audit(1773943800.246:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a4819c799 code=0x7ffc0000 [ 130.745089][ T26] audit: type=1326 audit(1773943800.246:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4819c799 code=0x7ffc0000 [ 131.208983][ T27] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 131.302704][ T7] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 131.390045][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 131.402762][ T27] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 131.412394][ T27] usb 2-1: config 0 has no interface number 0 [ 131.427135][ T27] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 131.438659][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.449609][ T27] usb 2-1: Product: syz [ 131.453838][ T27] usb 2-1: Manufacturer: syz [ 131.458623][ T27] usb 2-1: SerialNumber: syz [ 131.466689][ T27] usb 2-1: config 0 descriptor?? [ 131.475187][ T27] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 131.492753][ T7] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 131.507956][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.516901][ T7] usb 5-1: Product: syz [ 131.521814][ T7] usb 5-1: Manufacturer: syz [ 131.526485][ T7] usb 5-1: SerialNumber: syz [ 131.682862][ T27] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 131.698681][ T27] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 131.709020][ T4367] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 131.742268][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 131.850927][ T4311] usb 3-1: USB disconnect, device number 18 [ 131.900939][ T4367] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.918986][ T4367] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 131.938236][ T4367] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 131.949290][ T4367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.949294][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 211 [ 131.966462][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 131.978846][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 131.988956][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 132.000525][ T7] lan78xx: probe of 5-1:1.0 failed with error -32 [ 132.010356][ T4367] usb 1-1: config 0 descriptor?? [ 132.036050][ T4367] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 132.043261][ T4367] dvb-usb: bulk message failed: -22 (3/0) [ 132.064329][ T4367] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 132.086867][ T4367] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 132.095082][ T4367] usb 1-1: media controller created [ 132.106377][ T5599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.443'. [ 132.130379][ T4367] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.144191][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 132.144393][ T4311] usb 2-1: USB disconnect, device number 20 [ 132.158888][ T4367] dvb-usb: bulk message failed: -22 (6/0) [ 132.164710][ T4367] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 132.173139][ T5600] device syzkaller1 entered promiscuous mode [ 132.183642][ T4311] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 132.199214][ T4367] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 132.214802][ T4311] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 132.231820][ T4367] dvb-usb: schedule remote query interval to 150 msecs. [ 132.241388][ T4311] quatech2 2-1:0.51: device disconnected [ 132.248680][ T4367] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 132.261667][ T4367] usb 1-1: USB disconnect, device number 14 [ 132.304854][ T4367] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 132.548675][ T4367] usb 4-1: USB disconnect, device number 12 [ 132.642018][ T5607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.446'. [ 132.651490][ T5607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.446'. [ 132.662229][ T5607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.446'. [ 132.666075][ T27] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 132.672924][ T5607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.446'. [ 132.772783][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.779169][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.828945][ T27] usb 3-1: device descriptor read/64, error -71 [ 133.098996][ T27] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 133.243761][ T5627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'. [ 133.260172][ T5627] device syzkaller1 entered promiscuous mode [ 133.269195][ T27] usb 3-1: device descriptor read/64, error -71 [ 133.389186][ T27] usb usb3-port1: attempt power cycle [ 133.508969][ T4344] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 133.698977][ T4344] usb 2-1: Using ep0 maxpacket: 16 [ 133.704384][ T3598] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 133.714060][ T4344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.732797][ T4344] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.747959][ T4344] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.768699][ T4344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.780492][ T4344] usb 2-1: Product: syz [ 133.784865][ T4344] usb 2-1: Manufacturer: syz [ 133.790912][ T4344] usb 2-1: SerialNumber: syz [ 133.808961][ T27] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 133.849554][ T27] usb 3-1: device descriptor read/8, error -71 [ 133.908933][ T3598] usb 1-1: Using ep0 maxpacket: 8 [ 133.916310][ T3598] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 133.926762][ T3598] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.943039][ T3598] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.958522][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.975661][ T3598] usbtmc 1-1:16.0: bulk endpoints not found [ 134.022069][ T4344] usb 2-1: 0:2 : does not exist [ 134.036583][ T4344] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 134.075550][ T4344] usb 2-1: USB disconnect, device number 21 [ 134.122904][ T4311] usb 5-1: USB disconnect, device number 24 [ 134.139558][ T27] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 134.179811][ T27] usb 3-1: device descriptor read/8, error -71 [ 134.220013][ T5638] siw: device registration error -23 [ 134.299413][ T27] usb usb3-port1: unable to enumerate USB device [ 134.542009][ T5652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.465'. [ 134.563752][ T5652] device syzkaller1 entered promiscuous mode [ 135.569321][ T5683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.479'. [ 135.586649][ T5683] device syzkaller1 entered promiscuous mode [ 135.698932][ T27] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 135.888887][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 135.898494][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.925817][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.945122][ T27] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.960111][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.971748][ T27] usb 2-1: Product: syz [ 135.991756][ T27] usb 2-1: Manufacturer: syz [ 135.996502][ T27] usb 2-1: SerialNumber: syz [ 136.220619][ T27] usb 2-1: 0:2 : does not exist [ 136.242433][ T27] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 136.280958][ T27] usb 2-1: USB disconnect, device number 22 [ 136.447727][ T4311] usb 1-1: USB disconnect, device number 15 [ 136.468927][ T4367] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 136.540748][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.629596][ T5711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 136.668876][ T4367] usb 5-1: Using ep0 maxpacket: 8 [ 136.677046][ T4367] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 136.679512][ T5711] device syzkaller1 entered promiscuous mode [ 136.695860][ T4367] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 136.722714][ T4367] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.755030][ T4367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.542914][ T5741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.506'. [ 137.566005][ T5741] device syzkaller1 entered promiscuous mode [ 137.608982][ T4309] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 137.800750][ T4309] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.817236][ T4309] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.836671][ T4309] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 137.863768][ T4309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.874699][ T4309] usb 4-1: config 0 descriptor?? [ 138.449617][ T5771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.519'. [ 138.471476][ T5771] device syzkaller1 entered promiscuous mode [ 139.101237][ T5796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'. [ 139.117667][ T5796] device syzkaller1 entered promiscuous mode [ 139.234683][ T4309] usb 5-1: USB disconnect, device number 25 [ 139.258965][ T4367] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 139.358716][ T5801] binder: 5800:5801 ioctl c0306201 0 returned -14 [ 139.460714][ T4367] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 139.489316][ T4367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.516639][ T4367] usb 3-1: config 0 descriptor?? [ 139.531878][ T4367] cp210x 3-1:0.0: cp210x converter detected [ 139.940462][ T4367] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -32 [ 139.948413][ T4367] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 139.965414][ T4367] usb 3-1: cp210x converter now attached to ttyUSB0 [ 139.978754][ T4367] usb 3-1: USB disconnect, device number 23 [ 139.993478][ T4367] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 140.006768][ T4367] cp210x 3-1:0.0: device disconnected [ 140.397565][ T4367] usb 4-1: USB disconnect, device number 13 [ 140.672537][ T5835] binder: 5834:5835 ioctl c0306201 0 returned -14 [ 140.888895][ T4367] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 141.008908][ T27] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 141.068876][ T7] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 141.098906][ T4367] usb 4-1: Using ep0 maxpacket: 8 [ 141.114685][ T4367] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 141.126356][ T4367] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 141.148951][ T4367] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 141.158046][ T4367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.212706][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 141.220279][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.237294][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.266587][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.269022][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 141.275932][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.291333][ T27] usb 1-1: Product: syz [ 141.295539][ T27] usb 1-1: Manufacturer: syz [ 141.300739][ T27] usb 1-1: SerialNumber: syz [ 141.302331][ T7] usb 2-1: config 0 has no interfaces? [ 141.317899][ T7] usb 2-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 141.328628][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.345461][ T7] usb 2-1: Product: syz [ 141.350108][ T7] usb 2-1: Manufacturer: syz [ 141.368856][ T7] usb 2-1: SerialNumber: syz [ 141.382533][ T7] usb 2-1: config 0 descriptor?? [ 141.389096][ T3598] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 141.513765][ T27] usb 1-1: 0:2 : does not exist [ 141.531460][ T27] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 141.558905][ T3598] usb 3-1: device descriptor read/64, error -71 [ 141.565449][ T27] usb 1-1: USB disconnect, device number 16 [ 141.727144][ T7] usb 2-1: USB disconnect, device number 23 [ 141.820751][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.839000][ T3598] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 141.979091][ T4344] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 142.009030][ T3598] usb 3-1: device descriptor read/64, error -71 [ 142.129340][ T3598] usb usb3-port1: attempt power cycle [ 142.180573][ T4344] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.191076][ T4344] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 142.200137][ T4344] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 142.209396][ T4344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.219258][ T4344] usb 5-1: config 0 descriptor?? [ 142.328956][ T7] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 142.540790][ T7] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 142.548918][ T3598] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 142.550058][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.567839][ T7] usb 1-1: config 0 descriptor?? [ 142.575919][ T7] cp210x 1-1:0.0: cp210x converter detected [ 142.582265][ T3598] usb 3-1: device descriptor read/8, error -71 [ 142.858931][ T3598] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 142.889565][ T3598] usb 3-1: device descriptor read/8, error -71 [ 142.980307][ T7] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -32 [ 142.988005][ T7] cp210x 1-1:0.0: GPIO initialisation failed: -32 [ 142.996054][ T7] usb 1-1: cp210x converter now attached to ttyUSB0 [ 143.006169][ T7] usb 1-1: USB disconnect, device number 17 [ 143.009563][ T3598] usb usb3-port1: unable to enumerate USB device [ 143.019693][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 143.035647][ T7] cp210x 1-1:0.0: device disconnected [ 143.520716][ T4344] usb 4-1: USB disconnect, device number 14 [ 143.747700][ T5879] fuse: Bad value for 'fd' [ 143.894270][ T26] kauditd_printk_skb: 69 callbacks suppressed [ 143.894285][ T26] audit: type=1326 audit(1773943813.526:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5882 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561ef9c799 code=0x7ffc0000 [ 143.929111][ T26] audit: type=1326 audit(1773943813.526:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5882 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561ef9c799 code=0x7ffc0000 [ 143.959954][ T26] audit: type=1326 audit(1773943813.556:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5882 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f561ef9c799 code=0x7ffc0000 [ 143.990189][ T26] audit: type=1326 audit(1773943813.556:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5882 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561ef9c799 code=0x7ffc0000 [ 144.072596][ T26] audit: type=1326 audit(1773943813.556:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5882 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561ef9c799 code=0x7ffc0000 [ 144.136213][ T26] audit: type=1326 audit(1773943813.556:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5882 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f561ef9c799 code=0x7ffc0000 [ 144.234175][ T26] audit: type=1326 audit(1773943813.866:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5882 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561ef9c799 code=0x7ffc0000 [ 144.275167][ T26] audit: type=1326 audit(1773943813.866:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5882 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561ef9c799 code=0x7ffc0000 [ 144.369252][ T26] audit: type=1326 audit(1773943813.956:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5882 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f561ef9c799 code=0x7ffc0000 [ 144.408959][ T26] audit: type=1326 audit(1773943813.956:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5882 comm="syz.0.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561ef9c799 code=0x7ffc0000 [ 144.677988][ T5910] binder: 5909:5910 ioctl c0306201 0 returned -14 [ 144.684685][ T4367] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 144.767244][ T5916] ======================================================= [ 144.767244][ T5916] WARNING: The mand mount option has been deprecated and [ 144.767244][ T5916] and is ignored by this kernel. Remove the mand [ 144.767244][ T5916] option from the mount to silence this warning. [ 144.767244][ T5916] ======================================================= [ 144.780340][ T7] usb 5-1: USB disconnect, device number 26 [ 144.877293][ T5921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.578'. [ 144.910738][ T4367] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 144.929428][ T4367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.961601][ T4367] usb 3-1: config 0 descriptor?? [ 144.980503][ T4367] cp210x 3-1:0.0: cp210x converter detected [ 144.992769][ T4344] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 145.228967][ T4344] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 145.238489][ T4344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.260610][ T4344] usb 2-1: Product: syz [ 145.264828][ T4344] usb 2-1: Manufacturer: syz [ 145.271688][ T4344] usb 2-1: SerialNumber: syz [ 145.379569][ T4367] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -32 [ 145.394695][ T4367] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 145.404234][ T4367] usb 3-1: cp210x converter now attached to ttyUSB0 [ 145.412598][ T7] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 145.435636][ T4367] usb 3-1: USB disconnect, device number 28 [ 145.446390][ T4367] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 145.462067][ T4367] cp210x 3-1:0.0: device disconnected [ 145.494008][ T4344] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 145.507867][ T4344] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 145.578987][ T7] usb 5-1: device descriptor read/64, error -71 [ 145.769045][ T4311] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 145.835864][ T4273] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.845048][ T4273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.853215][ T7] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 145.856781][ T4273] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.875212][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.884181][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.893081][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.928934][ T4311] usb 1-1: device descriptor read/64, error -71 [ 145.977640][ T5937] virt_wifi0 speed is unknown, defaulting to 1000 [ 145.977950][ T5940] binder: 5939:5940 ioctl c0306201 0 returned -14 [ 146.008983][ T7] usb 5-1: device descriptor read/64, error -71 [ 146.139148][ T7] usb usb5-port1: attempt power cycle [ 146.175300][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 146.201093][ T4311] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 146.260462][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.268263][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.277365][ T5937] device bridge_slave_0 entered promiscuous mode [ 146.287445][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.295010][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.303526][ T5937] device bridge_slave_1 entered promiscuous mode [ 146.345917][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.359483][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.373538][ T4311] usb 1-1: device descriptor read/64, error -71 [ 146.392137][ T5937] team0: Port device team_slave_0 added [ 146.402689][ T5937] team0: Port device team_slave_1 added [ 146.428114][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.435365][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.470238][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.488383][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.496751][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.523194][ T4311] usb usb1-port1: attempt power cycle [ 146.528426][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.558893][ T7] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 146.599616][ T7] usb 5-1: device descriptor read/8, error -71 [ 146.602016][ T5937] device hsr_slave_0 entered promiscuous mode [ 146.613243][ T5937] device hsr_slave_1 entered promiscuous mode [ 146.620286][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.628868][ T5937] Cannot create hsr debugfs directory [ 146.729392][ T4344] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 146.825996][ T5937] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 146.835984][ T5937] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 146.847574][ T5937] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 146.858595][ T5937] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 146.868985][ T7] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 146.909403][ T7] usb 5-1: device descriptor read/8, error -71 [ 146.918132][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.926283][ T5937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.935082][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.942287][ T5937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.948911][ T4311] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 146.951470][ T4344] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -71 [ 146.978695][ T4344] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 146.989823][ T4311] usb 1-1: device descriptor read/8, error -71 [ 147.016682][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.024175][ T4344] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 147.037893][ T4344] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 147.039195][ T7] usb usb5-port1: unable to enumerate USB device [ 147.050303][ T4344] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 147.069057][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.076436][ T4344] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 147.089337][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.098558][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.109715][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 147.121233][ T4344] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 147.134636][ T4344] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 147.144542][ T4344] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 147.157010][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.164664][ T4344] lan78xx: probe of 2-1:1.0 failed with error -71 [ 147.181801][ T4344] usb 2-1: USB disconnect, device number 24 [ 147.198263][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.207704][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.214955][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.232497][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.241856][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.250971][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.258289][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.266039][ T4311] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 147.267494][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.290677][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.302456][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.312942][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.317271][ T4311] usb 1-1: device descriptor read/8, error -71 [ 147.323122][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.354408][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.364911][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.374346][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.384307][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.393162][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.402059][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.413363][ T5937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.449788][ T4311] usb usb1-port1: unable to enumerate USB device [ 147.637690][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.647759][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.661735][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.903030][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.912337][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.932918][ T5937] device veth0_vlan entered promiscuous mode [ 147.939946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.948392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.957305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.965430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.972979][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 147.989222][ T5937] device veth1_vlan entered promiscuous mode [ 148.008370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.017967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.026404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.045334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.060737][ T5937] device veth0_macvtap entered promiscuous mode [ 148.106201][ T5937] device veth1_macvtap entered promiscuous mode [ 148.174359][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.203003][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.228947][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.256289][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.268131][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.288204][ T5985] binder: 5984:5985 ioctl c0306201 0 returned -14 [ 148.296312][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.306360][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.317220][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.327419][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.338071][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.360899][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.373832][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.401090][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.428136][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.455066][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.491843][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.495494][ T5989] netlink: 76 bytes leftover after parsing attributes in process `syz.1.602'. [ 148.537832][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.564887][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.589666][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.607113][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.632245][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 148.669378][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.689194][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.709192][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.735333][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.747552][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.789492][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.801527][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.817324][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.881338][ T5937] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.906042][ T5937] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.934623][ T5937] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.948959][ T5937] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.065295][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 149.065309][ T26] audit: type=1326 audit(1773943818.696:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4819c799 code=0x7ffc0000 [ 149.094420][ T5994] device syzkaller1 entered promiscuous mode [ 149.108556][ T26] audit: type=1326 audit(1773943818.696:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4819c799 code=0x7ffc0000 [ 149.143397][ T26] audit: type=1326 audit(1773943818.736:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a4819c799 code=0x7ffc0000 [ 149.172407][ T26] audit: type=1326 audit(1773943818.736:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4819c799 code=0x7ffc0000 [ 149.199788][ T26] audit: type=1326 audit(1773943818.736:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4819c799 code=0x7ffc0000 [ 149.224247][ T26] audit: type=1326 audit(1773943818.736:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a4819c799 code=0x7ffc0000 [ 149.228989][ T3598] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 149.246520][ T26] audit: type=1326 audit(1773943818.736:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4819c799 code=0x7ffc0000 [ 149.318605][ T26] audit: type=1326 audit(1773943818.736:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4819c799 code=0x7ffc0000 [ 149.341939][ T26] audit: type=1326 audit(1773943818.736:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a4815cfce code=0x7ffc0000 [ 149.389209][ T26] audit: type=1326 audit(1773943818.766:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4819c799 code=0x7ffc0000 [ 149.461998][ T3598] usb 2-1: device descriptor read/64, error -71 [ 149.729367][ T3598] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 149.878973][ T3598] usb 2-1: device descriptor read/64, error -71 [ 149.926230][ T5960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 149.997704][ T4292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.001113][ T3598] usb usb2-port1: attempt power cycle [ 150.015409][ T4292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.025635][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.049018][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 150.066860][ T4292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.077379][ T4292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.123667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.250652][ T6019] netlink: 32 bytes leftover after parsing attributes in process `syz.4.614'. [ 150.418918][ T4311] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 150.430599][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.617'. [ 150.452751][ T6028] device syzkaller1 entered promiscuous mode [ 150.469189][ T3598] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 150.510492][ T3598] usb 2-1: device descriptor read/8, error -71 [ 150.588878][ T4311] usb 1-1: device descriptor read/64, error -71 [ 150.699399][ T4367] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 150.779016][ T3598] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 150.819421][ T3598] usb 2-1: device descriptor read/8, error -71 [ 150.885606][ T4311] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 150.920782][ T4367] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.939612][ T3598] usb usb2-port1: unable to enumerate USB device [ 150.944755][ T4367] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 150.972239][ T4367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.996930][ T4367] usb 5-1: config 0 descriptor?? [ 151.004116][ T4367] pwc: Askey VC010 type 2 USB webcam detected. [ 151.059110][ T4311] usb 1-1: device descriptor read/64, error -71 [ 151.180104][ T4311] usb usb1-port1: attempt power cycle [ 151.407657][ T4367] pwc: recv_control_msg error -32 req 02 val 2b00 [ 151.417518][ T4367] pwc: recv_control_msg error -32 req 02 val 2700 [ 151.430895][ T4367] pwc: recv_control_msg error -32 req 02 val 2c00 [ 151.437885][ T4367] pwc: recv_control_msg error -32 req 04 val 1000 [ 151.446239][ T4367] pwc: recv_control_msg error -32 req 04 val 1300 [ 151.457010][ T4367] pwc: recv_control_msg error -32 req 04 val 1400 [ 151.465665][ T4367] pwc: recv_control_msg error -32 req 02 val 2000 [ 151.473873][ T4367] pwc: recv_control_msg error -32 req 02 val 2100 [ 151.481081][ T4367] pwc: recv_control_msg error -32 req 04 val 1500 [ 151.490409][ T4367] pwc: recv_control_msg error -71 req 02 val 2500 [ 151.497325][ T4367] pwc: recv_control_msg error -71 req 02 val 2400 [ 151.504828][ T4367] pwc: recv_control_msg error -71 req 02 val 2600 [ 151.512286][ T4367] pwc: recv_control_msg error -71 req 02 val 2900 [ 151.519230][ T4367] pwc: recv_control_msg error -71 req 02 val 2800 [ 151.526114][ T4367] pwc: recv_control_msg error -71 req 04 val 1100 [ 151.533192][ T4367] pwc: recv_control_msg error -71 req 04 val 1200 [ 151.542487][ T4367] pwc: Registered as video103. [ 151.547930][ T4367] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 151.562932][ T4367] usb 5-1: USB disconnect, device number 31 [ 151.609092][ T4311] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 151.639569][ T4311] usb 1-1: device descriptor read/8, error -71 [ 151.918976][ T4311] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 151.961389][ T4311] usb 1-1: device descriptor read/8, error -71 [ 152.007446][ T6050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.625'. [ 152.017942][ T6050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.625'. [ 152.083011][ T4311] usb usb1-port1: unable to enumerate USB device [ 152.129089][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 152.312520][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.630'. [ 152.352862][ T6061] device syzkaller1 entered promiscuous mode [ 152.885198][ T6090] netlink: 'syz.4.634': attribute type 10 has an invalid length. [ 152.907879][ T6090] team0: Device ipvlan1 failed to register rx_handler [ 153.006169][ T6056] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 153.418970][ T4344] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 153.589646][ T4344] usb 6-1: device descriptor read/64, error -71 [ 153.669003][ T22] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 153.863021][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.873321][ T4344] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 153.889736][ T22] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 153.920388][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.937087][ T22] usb 5-1: config 0 descriptor?? [ 153.942371][ T6040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.948579][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.643'. [ 153.978082][ T22] pwc: Askey VC010 type 2 USB webcam detected. [ 153.988123][ T6115] device syzkaller1 entered promiscuous mode [ 154.028923][ T4344] usb 6-1: device descriptor read/64, error -71 [ 154.067533][ T6114] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3642988519 (466302530432 ns) > initial count (459226025088 ns). Using initial count to start timer. [ 154.106806][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'. [ 154.149093][ T4344] usb usb6-port1: attempt power cycle [ 154.209001][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 154.371457][ T22] pwc: recv_control_msg error -32 req 02 val 2b00 [ 154.385211][ T22] pwc: recv_control_msg error -32 req 02 val 2700 [ 154.393193][ T22] pwc: recv_control_msg error -32 req 02 val 2c00 [ 154.406864][ T22] pwc: recv_control_msg error -32 req 04 val 1000 [ 154.414816][ T22] pwc: recv_control_msg error -32 req 04 val 1300 [ 154.422657][ T22] pwc: recv_control_msg error -32 req 04 val 1400 [ 154.430406][ T22] pwc: recv_control_msg error -32 req 02 val 2000 [ 154.438443][ T22] pwc: recv_control_msg error -32 req 02 val 2100 [ 154.457672][ T22] pwc: recv_control_msg error -32 req 04 val 1500 [ 154.464690][ T22] pwc: recv_control_msg error -71 req 02 val 2500 [ 154.471930][ T22] pwc: recv_control_msg error -71 req 02 val 2400 [ 154.479070][ T22] pwc: recv_control_msg error -71 req 02 val 2600 [ 154.486038][ T22] pwc: recv_control_msg error -71 req 02 val 2900 [ 154.493573][ T22] pwc: recv_control_msg error -71 req 02 val 2800 [ 154.500728][ T22] pwc: recv_control_msg error -71 req 04 val 1100 [ 154.507790][ T22] pwc: recv_control_msg error -71 req 04 val 1200 [ 154.525887][ T22] pwc: Registered as video103. [ 154.546239][ T22] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 154.569186][ T27] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 154.578965][ T4308] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 154.586680][ T22] usb 5-1: USB disconnect, device number 32 [ 154.599243][ T4344] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 154.639635][ T4344] usb 6-1: device descriptor read/8, error -71 [ 154.739066][ T4308] usb 1-1: device descriptor read/64, error -71 [ 154.746026][ T27] usb 3-1: device descriptor read/64, error -71 [ 154.908913][ T4344] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 154.939729][ T4344] usb 6-1: device descriptor read/8, error -71 [ 155.018915][ T4308] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 155.026642][ T27] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 155.065277][ T4344] usb usb6-port1: unable to enumerate USB device [ 155.199065][ T27] usb 3-1: device descriptor read/64, error -71 [ 155.205479][ T4308] usb 1-1: device descriptor read/64, error -71 [ 155.298636][ T6136] netlink: 68 bytes leftover after parsing attributes in process `syz.1.651'. [ 155.330510][ T4308] usb usb1-port1: attempt power cycle [ 155.336251][ T27] usb usb3-port1: attempt power cycle [ 155.768901][ T4308] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 155.776660][ T27] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 155.810500][ T4308] usb 1-1: device descriptor read/8, error -71 [ 155.816865][ T27] usb 3-1: device descriptor read/8, error -71 [ 156.099014][ T4308] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 156.106769][ T27] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 156.166079][ T27] usb 3-1: device descriptor read/8, error -71 [ 156.172638][ T4308] usb 1-1: device descriptor read/8, error -71 [ 156.272571][ T6153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.656'. [ 156.291830][ T6153] device syzkaller1 entered promiscuous mode [ 156.314511][ T4308] usb usb1-port1: unable to enumerate USB device [ 156.322329][ T27] usb usb3-port1: unable to enumerate USB device [ 156.462463][ T6156] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3642988519 (466302530432 ns) > initial count (459226025088 ns). Using initial count to start timer. [ 156.590927][ T6159] netlink: 20 bytes leftover after parsing attributes in process `syz.5.659'. [ 156.603113][ T6159] netlink: 28 bytes leftover after parsing attributes in process `syz.5.659'. [ 156.874706][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 157.699087][ T4311] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 157.820956][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.5.668'. [ 157.856767][ T6182] device syzkaller1 entered promiscuous mode [ 157.889623][ T27] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 157.923269][ T4311] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 157.935693][ T4311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.947793][ T4311] usb 3-1: Product: syz [ 157.954844][ T4311] usb 3-1: Manufacturer: syz [ 157.968738][ T4311] usb 3-1: SerialNumber: syz [ 158.049015][ T27] usb 2-1: device descriptor read/64, error -71 [ 158.065523][ T6184] binder: 6183:6184 ioctl c0306201 2000000009c0 returned -11 [ 158.198622][ T4311] net_ratelimit: 2 callbacks suppressed [ 158.198641][ T4311] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 158.238308][ T4311] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 158.258613][ T4311] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 158.280616][ T4311] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 158.301026][ T4311] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 158.311443][ T4311] lan78xx: probe of 3-1:1.0 failed with error -32 [ 158.318975][ T27] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 158.498891][ T27] usb 2-1: device descriptor read/64, error -71 [ 158.629004][ T27] usb usb2-port1: attempt power cycle [ 159.039019][ T27] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 159.048898][ T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 159.080033][ T27] usb 2-1: device descriptor read/8, error -71 [ 159.224088][ T6146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.252327][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 159.272619][ T7] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 159.284375][ T7] usb 6-1: config 16 has an invalid interface number: 48 but max is 0 [ 159.313339][ T7] usb 6-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 159.327767][ T7] usb 6-1: config 16 has no interface number 0 [ 159.337472][ T7] usb 6-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 159.348951][ T27] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 159.367391][ T7] usb 6-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 159.379575][ T27] usb 2-1: device descriptor read/8, error -71 [ 159.387227][ T7] usb 6-1: config 16 interface 48 has no altsetting 0 [ 159.394458][ T7] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.410041][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.469768][ T4344] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 159.499058][ T27] usb usb2-port1: unable to enumerate USB device [ 159.669599][ T4344] usb 1-1: no configurations [ 159.674328][ T4344] usb 1-1: can't read configurations, error -22 [ 159.848953][ T4344] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 160.029580][ T4344] usb 1-1: no configurations [ 160.034328][ T4344] usb 1-1: can't read configurations, error -22 [ 160.059674][ T4344] usb usb1-port1: attempt power cycle [ 160.475683][ T4367] usb 3-1: USB disconnect, device number 33 [ 160.479125][ T4344] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 160.540078][ T4344] usb 1-1: no configurations [ 160.544733][ T4344] usb 1-1: can't read configurations, error -22 [ 160.577983][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.680'. [ 160.644548][ T6215] device syzkaller1 entered promiscuous mode [ 160.709041][ T4344] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 160.752111][ T4344] usb 1-1: no configurations [ 160.756763][ T4344] usb 1-1: can't read configurations, error -22 [ 160.768172][ T4344] usb usb1-port1: unable to enumerate USB device [ 161.833130][ T7] usb 6-1: string descriptor 0 read error: -71 [ 161.862403][ T7] usb 6-1: USB disconnect, device number 6 [ 162.478966][ T4308] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 162.556980][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.694'. [ 162.599436][ T6261] device syzkaller1 entered promiscuous mode [ 162.702388][ T4308] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 162.729031][ T27] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 162.737341][ T4308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.745642][ T4308] usb 6-1: Product: syz [ 162.758630][ T4308] usb 6-1: Manufacturer: syz [ 162.763954][ T4308] usb 6-1: SerialNumber: syz [ 162.919011][ T27] usb 1-1: device descriptor read/64, error -71 [ 162.997901][ T4308] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 163.012699][ T4308] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 163.035012][ T4308] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 163.047893][ T4308] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 163.058083][ T4308] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 163.073987][ T4308] lan78xx: probe of 6-1:1.0 failed with error -32 [ 163.208884][ T27] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 163.369118][ T27] usb 1-1: device descriptor read/64, error -71 [ 163.489121][ T27] usb usb1-port1: attempt power cycle [ 163.909026][ T27] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 163.939541][ T27] usb 1-1: device descriptor read/8, error -71 [ 163.954164][ T6287] netlink: 112 bytes leftover after parsing attributes in process `syz.2.700'. [ 163.964400][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.700'. [ 164.139198][ T4308] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 164.209050][ T27] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 164.249684][ T27] usb 1-1: device descriptor read/8, error -71 [ 164.328958][ T22] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 164.336690][ T4308] usb 2-1: Using ep0 maxpacket: 8 [ 164.343830][ T4308] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 164.352327][ T4308] usb 2-1: config 16 has an invalid interface number: 48 but max is 0 [ 164.360775][ T4308] usb 2-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 164.373257][ T27] usb usb1-port1: unable to enumerate USB device [ 164.380241][ T4308] usb 2-1: config 16 has no interface number 0 [ 164.386448][ T4308] usb 2-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 164.397892][ T4308] usb 2-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 164.411358][ T4308] usb 2-1: config 16 interface 48 has no altsetting 0 [ 164.418156][ T4308] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.427566][ T4308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.540099][ T22] usb 3-1: no configurations [ 164.544937][ T22] usb 3-1: can't read configurations, error -22 [ 164.656359][ T6233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.708995][ T22] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 164.939593][ T22] usb 3-1: no configurations [ 164.944596][ T22] usb 3-1: can't read configurations, error -22 [ 164.952100][ T22] usb usb3-port1: attempt power cycle [ 165.262868][ T3598] usb 6-1: USB disconnect, device number 7 [ 165.438393][ T22] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 165.480197][ T22] usb 3-1: no configurations [ 165.485116][ T22] usb 3-1: can't read configurations, error -22 [ 165.638973][ T22] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 165.690399][ T22] usb 3-1: no configurations [ 165.695591][ T22] usb 3-1: can't read configurations, error -22 [ 165.708681][ T22] usb usb3-port1: unable to enumerate USB device [ 165.858929][ T3598] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 166.065706][ T3598] usb 6-1: Using ep0 maxpacket: 16 [ 166.072607][ T3598] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.131449][ T3598] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.174250][ T3598] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.198014][ T3598] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.247609][ T3598] usb 6-1: Product: syz [ 166.268659][ T3598] usb 6-1: Manufacturer: syz [ 166.304396][ T3598] usb 6-1: SerialNumber: syz [ 166.509715][ T6327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.712'. [ 166.548109][ T3598] usb 6-1: 0:2 : does not exist [ 166.563709][ T3598] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 166.592954][ T3598] usb 6-1: USB disconnect, device number 8 [ 166.819890][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.886473][ T4308] usb 2-1: string descriptor 0 read error: -71 [ 166.911031][ T4308] usb 2-1: USB disconnect, device number 33 [ 167.129002][ T4309] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 167.323104][ T4309] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 167.337106][ T4309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.338945][ T4308] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 167.356036][ T4309] usb 5-1: Product: syz [ 167.365048][ T4309] usb 5-1: Manufacturer: syz [ 167.372554][ T4309] usb 5-1: SerialNumber: syz [ 167.549574][ T4308] usb 2-1: no configurations [ 167.554371][ T4308] usb 2-1: can't read configurations, error -22 [ 167.622069][ T4309] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 167.644151][ T4309] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 167.670211][ T4309] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 167.682032][ T4309] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 167.693051][ T4309] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 167.703459][ T4309] lan78xx: probe of 5-1:1.0 failed with error -32 [ 167.721876][ T4308] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 167.920386][ T4308] usb 2-1: no configurations [ 167.925307][ T4308] usb 2-1: can't read configurations, error -22 [ 167.936478][ T4308] usb usb2-port1: attempt power cycle [ 168.348878][ T4308] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 168.390042][ T4308] usb 2-1: no configurations [ 168.394851][ T4308] usb 2-1: can't read configurations, error -22 [ 168.493805][ T6363] netlink: 24 bytes leftover after parsing attributes in process `syz.5.724'. [ 168.562326][ T4308] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 168.610241][ T4308] usb 2-1: no configurations [ 168.615015][ T4308] usb 2-1: can't read configurations, error -22 [ 168.629005][ T4308] usb usb2-port1: unable to enumerate USB device [ 168.928993][ T4367] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 169.108966][ T4367] usb 6-1: Using ep0 maxpacket: 8 [ 169.116127][ T4367] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 169.124539][ T4367] usb 6-1: config 16 has an invalid interface number: 48 but max is 0 [ 169.136321][ T4367] usb 6-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 169.146754][ T4367] usb 6-1: config 16 has no interface number 0 [ 169.153175][ T4367] usb 6-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 169.164418][ T4367] usb 6-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 169.177996][ T4367] usb 6-1: config 16 interface 48 has no altsetting 0 [ 169.185712][ T4367] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.194832][ T4367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.479748][ T6324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.879010][ T22] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 169.921359][ T4308] usb 5-1: USB disconnect, device number 33 [ 170.034439][ T6386] netlink: 'syz.0.733': attribute type 29 has an invalid length. [ 170.069376][ T6386] netlink: 'syz.0.733': attribute type 29 has an invalid length. [ 170.099665][ T22] usb 3-1: no configurations [ 170.104895][ T22] usb 3-1: can't read configurations, error -22 [ 170.119324][ T6387] netlink: 'syz.0.733': attribute type 29 has an invalid length. [ 170.269209][ T22] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 170.500187][ T22] usb 3-1: no configurations [ 170.511424][ T22] usb 3-1: can't read configurations, error -22 [ 170.520281][ T9] nci: nci_rsp_packet: unknown rsp opcode 0x7 [ 170.548549][ T22] usb usb3-port1: attempt power cycle [ 170.999111][ T22] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 171.040141][ T22] usb 3-1: no configurations [ 171.044799][ T22] usb 3-1: can't read configurations, error -22 [ 171.208888][ T22] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 171.238961][ T3598] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 171.251398][ T22] usb 3-1: no configurations [ 171.266467][ T22] usb 3-1: can't read configurations, error -22 [ 171.276958][ T22] usb usb3-port1: unable to enumerate USB device [ 171.442200][ T3598] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 171.457434][ T3598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.465917][ T3598] usb 1-1: Product: syz [ 171.470618][ T3598] usb 1-1: Manufacturer: syz [ 171.475261][ T3598] usb 1-1: SerialNumber: syz [ 171.693624][ T4367] usb 6-1: string descriptor 0 read error: -71 [ 171.707673][ T3598] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 171.725461][ T4367] usb 6-1: USB disconnect, device number 9 [ 171.733553][ T3598] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 171.777164][ T3598] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 171.791613][ T3598] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 171.801653][ T3598] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 171.811952][ T3598] lan78xx: probe of 1-1:1.0 failed with error -32 [ 172.038930][ T7] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 172.148984][ T4367] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 172.220393][ T7] usb 2-1: no configurations [ 172.225092][ T7] usb 2-1: can't read configurations, error -22 [ 172.329064][ T4367] usb 6-1: Using ep0 maxpacket: 8 [ 172.335939][ T4367] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.346157][ T4367] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.356344][ T4367] usb 6-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 172.367588][ T4367] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.381204][ T7] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 172.388984][ T4367] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.398127][ T4367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.411316][ T4367] usbtmc 6-1:16.0: bulk endpoints not found [ 172.579395][ T7] usb 2-1: no configurations [ 172.584066][ T7] usb 2-1: can't read configurations, error -22 [ 172.590583][ T7] usb usb2-port1: attempt power cycle [ 172.736662][ T6430] netlink: 48 bytes leftover after parsing attributes in process `syz.2.748'. [ 172.797768][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.749'. [ 172.911720][ T6437] netlink: 'syz.2.751': attribute type 29 has an invalid length. [ 172.920320][ T6437] netlink: 'syz.2.751': attribute type 29 has an invalid length. [ 172.929591][ T6437] netlink: 'syz.2.751': attribute type 29 has an invalid length. [ 172.937970][ T6437] netlink: 'syz.2.751': attribute type 29 has an invalid length. [ 172.951286][ T6437] netlink: 'syz.2.751': attribute type 29 has an invalid length. [ 173.029043][ T7] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 173.061930][ T6442] fuse: Bad value for 'group_id' [ 173.076395][ T7] usb 2-1: no configurations [ 173.081532][ T7] usb 2-1: can't read configurations, error -22 [ 173.229106][ T7] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 173.269924][ T7] usb 2-1: no configurations [ 173.274553][ T7] usb 2-1: can't read configurations, error -22 [ 173.282611][ T7] usb usb2-port1: unable to enumerate USB device [ 173.433970][ T6403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.528927][ T4367] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 173.719259][ T4367] usb 3-1: Using ep0 maxpacket: 8 [ 173.726268][ T4367] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 173.736244][ T4367] usb 3-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config [ 173.746870][ T4367] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.760121][ T4367] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.770424][ T4367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.783856][ T4367] usbtmc 3-1:16.0: bulk endpoints not found [ 173.790008][ T7] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 173.980356][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.996766][ T7] usb 5-1: config 0 has no interfaces? [ 174.015160][ T7] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 174.034536][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.046590][ T7] usb 5-1: Product: syz [ 174.050998][ T7] usb 5-1: Manufacturer: syz [ 174.055795][ T7] usb 5-1: SerialNumber: syz [ 174.062940][ T7] usb 5-1: config 0 descriptor?? [ 174.070547][ T4367] usb 1-1: USB disconnect, device number 38 [ 174.488945][ T4367] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 174.668889][ T4367] usb 1-1: Using ep0 maxpacket: 16 [ 174.676530][ T4367] usb 1-1: unable to get BOS descriptor or descriptor too short [ 174.685421][ T4367] usb 1-1: config 1 has an invalid interface number: 47 but max is 0 [ 174.694065][ T4367] usb 1-1: config 1 has an invalid interface number: 47 but max is 0 [ 174.702897][ T4367] usb 1-1: config 1 has no interface number 0 [ 174.713351][ T4367] usb 1-1: config 1 interface 47 altsetting 11 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 174.724521][ T4367] usb 1-1: config 1 interface 47 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.737754][ T4367] usb 1-1: too many endpoints for config 1 interface 47 altsetting 4: 107, using maximum allowed: 30 [ 174.748734][ T4367] usb 1-1: config 1 interface 47 altsetting 4 endpoint 0xA has an invalid bInterval 128, changing to 11 [ 174.791065][ T4367] usb 1-1: config 1 interface 47 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 107 [ 174.805853][ T4367] usb 1-1: config 1 interface 47 has no altsetting 0 [ 174.817309][ T4367] usb 1-1: config 1 interface 47 has no altsetting 1 [ 174.832487][ T7] usb 6-1: USB disconnect, device number 10 [ 174.844758][ T4367] usb 1-1: New USB device found, idVendor=049f, idProduct=505a, bcdDevice=2f.4b [ 174.857689][ T4367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.890873][ T4367] usb 1-1: Product: syz [ 174.895267][ T4367] usb 1-1: Manufacturer: syz [ 174.904072][ T4367] usb 1-1: SerialNumber: syz [ 174.923875][ T6460] loop5: detected capacity change from 0 to 512 [ 175.066199][ T6463] loop1: detected capacity change from 0 to 128 [ 175.135127][ T4367] cdc_subset: probe of 1-1:1.47 failed with error -22 [ 175.157528][ T4367] usb 1-1: USB disconnect, device number 39 [ 175.418935][ T27] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 175.579256][ T27] usb 6-1: device descriptor read/64, error -71 [ 175.848891][ T27] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 175.998890][ T27] usb 6-1: device descriptor read/64, error -71 [ 176.102711][ T6476] fuse: Bad value for 'group_id' [ 176.129347][ T27] usb usb6-port1: attempt power cycle [ 176.266325][ T6478] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3642988519 (466302530432 ns) > initial count (459226025088 ns). Using initial count to start timer. [ 176.316866][ T3598] usb 3-1: USB disconnect, device number 42 [ 176.446773][ T9] nci: nci_rsp_packet: unknown rsp opcode 0x7 [ 176.565148][ T27] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 176.577279][ T4276] usb 5-1: USB disconnect, device number 34 [ 176.614663][ T27] usb 6-1: device descriptor read/8, error -71 [ 176.672399][ T6493] device pim6reg1 entered promiscuous mode [ 176.769149][ T22] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 176.826768][ T6495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.770'. [ 176.889130][ T27] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 176.935835][ T27] usb 6-1: device descriptor read/8, error -71 [ 176.982524][ T22] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 176.992582][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.001079][ T22] usb 1-1: Product: syz [ 177.005367][ T22] usb 1-1: Manufacturer: syz [ 177.010020][ T22] usb 1-1: SerialNumber: syz [ 177.058967][ T4276] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 177.066800][ T27] usb usb6-port1: unable to enumerate USB device [ 177.221134][ T22] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 177.235601][ T22] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 177.248020][ T22] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 177.260400][ T22] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 177.270172][ T4276] usb 5-1: no configurations [ 177.275368][ T4276] usb 5-1: can't read configurations, error -22 [ 177.281846][ T22] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 177.292942][ T22] lan78xx: probe of 1-1:1.0 failed with error -32 [ 177.438993][ T4276] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 177.639535][ T4276] usb 5-1: no configurations [ 177.644244][ T4276] usb 5-1: can't read configurations, error -22 [ 177.651373][ T4276] usb usb5-port1: attempt power cycle [ 177.709600][ T6507] fuse: Bad value for 'group_id' [ 177.764942][ T6509] loop1: detected capacity change from 0 to 256 [ 177.801695][ T6509] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 177.965878][ T6514] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.778'. [ 178.059172][ T4276] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 178.089843][ T4276] usb 5-1: no configurations [ 178.095062][ T4276] usb 5-1: can't read configurations, error -22 [ 178.259021][ T4276] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 178.289146][ T4367] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 178.291437][ T4276] usb 5-1: no configurations [ 178.302818][ T4276] usb 5-1: can't read configurations, error -22 [ 178.309633][ T4276] usb usb5-port1: unable to enumerate USB device [ 178.468953][ T4367] usb 2-1: Using ep0 maxpacket: 16 [ 178.476041][ T4367] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.486385][ T4367] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 178.497527][ T4367] usb 2-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 178.507963][ T4367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.516144][ T4367] usb 2-1: Product: syz [ 178.520859][ T4367] usb 2-1: Manufacturer: syz [ 178.525448][ T4367] usb 2-1: SerialNumber: syz [ 178.588936][ T7] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 178.755285][ T4367] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 178.764462][ T4367] usb 2-1: USB disconnect, device number 42 [ 178.779065][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 178.786067][ T7] usb 6-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 178.797294][ T7] usb 6-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.811410][ T7] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 178.820701][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.832090][ T7] hub 6-1:32.0: bad descriptor, ignoring hub [ 178.838209][ T7] hub: probe of 6-1:32.0 failed with error -5 [ 178.990937][ T4470] udevd[4470]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.149420][ T22] usb 6-1: USB disconnect, device number 15 [ 179.297040][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'. [ 179.366739][ T6482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.395695][ T6527] netlink: 32 bytes leftover after parsing attributes in process `syz.1.783'. [ 179.573508][ T4311] usb 1-1: USB disconnect, device number 40 [ 179.704300][ T6534] loop1: detected capacity change from 0 to 4096 [ 179.739875][ T6534] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.961194][ T6534] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 180.249116][ T22] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 180.509139][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 180.651988][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 180.701546][ T22] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 180.772509][ T22] usb 1-1: can't read configurations, error -71 [ 180.928934][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 180.935035][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 180.941326][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 181.756267][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 181.978161][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'. [ 182.014813][ T34] nci: nci_rsp_packet: unknown rsp opcode 0x7 [ 182.036547][ T6565] netlink: 32 bytes leftover after parsing attributes in process `syz.5.795'. [ 182.342804][ T6570] tmpfs: Unknown parameter 'no' [ 182.473304][ T6553] loop4: detected capacity change from 0 to 131072 [ 182.503000][ T6553] F2FS-fs (loop4): invalid crc value [ 182.556502][ T6553] F2FS-fs (loop4): Found nat_bits in checkpoint [ 182.598936][ T3598] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 182.645890][ T6553] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 182.682700][ T4273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.696686][ T4273] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.706132][ T4273] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.714480][ T4273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.722364][ T4273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 182.729788][ T4273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.780493][ T6578] virt_wifi0 speed is unknown, defaulting to 1000 [ 182.791076][ T3598] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.808853][ T3598] usb 2-1: config 0 has no interfaces? [ 182.824596][ T3598] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 182.844798][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.855737][ T3598] usb 2-1: config 0 descriptor?? [ 183.025162][ T6578] chnl_net:caif_netlink_parms(): no params data found [ 183.067446][ T4276] usb 2-1: USB disconnect, device number 43 [ 183.228262][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.253408][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.282115][ T6578] device bridge_slave_0 entered promiscuous mode [ 183.316721][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.334256][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.361107][ T6578] device bridge_slave_1 entered promiscuous mode [ 183.429789][ T6578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.451627][ T6578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.513473][ T6578] team0: Port device team_slave_0 added [ 183.539794][ T6578] team0: Port device team_slave_1 added [ 183.583234][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.598860][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.656825][ T6578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.680399][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.698353][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.726465][ T6553] F2FS-fs (loop4): Start checkpoint disabled! [ 183.746696][ T6578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.817452][ T6578] device hsr_slave_0 entered promiscuous mode [ 183.845356][ T6578] device hsr_slave_1 entered promiscuous mode [ 183.874898][ T6578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.889085][ T6578] Cannot create hsr debugfs directory [ 183.977062][ T22] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 184.074637][ T6582] loop5: detected capacity change from 0 to 131072 [ 184.093642][ T6582] F2FS-fs (loop5): invalid crc value [ 184.139131][ T6582] F2FS-fs (loop5): Found nat_bits in checkpoint [ 184.160627][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.178904][ T22] usb 2-1: config 0 has no interfaces? [ 184.207666][ T22] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 184.233132][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.233588][ T6582] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 184.249359][ T22] usb 2-1: Product: syz [ 184.253545][ T22] usb 2-1: Manufacturer: syz [ 184.258148][ T22] usb 2-1: SerialNumber: syz [ 184.269808][ T6582] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 184.278354][ T22] usb 2-1: config 0 descriptor?? [ 184.674516][ T6600] loop4: detected capacity change from 0 to 512 [ 184.708917][ T6600] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.807: inode has both inline data and extents flags [ 184.740238][ T6600] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.807: couldn't read orphan inode 15 (err -117) [ 184.769075][ T4273] Bluetooth: hci4: command 0x0409 tx timeout [ 184.777343][ T6600] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 184.797528][ T6557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.809167][ T6578] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 184.909780][ T6604] process 'syz.4.807' launched './file0' with NULL argv: empty string added [ 184.923471][ T6578] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 184.941478][ T6578] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 184.960175][ T6578] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 185.050183][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 185.101553][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 185.195969][ T6578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.289421][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.317765][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.368315][ T6578] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.398446][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.418739][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.432142][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.439409][ T6550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.463197][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.498184][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.514856][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.527759][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.535057][ T6550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.580800][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.624655][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.634426][ T6622] loop5: detected capacity change from 0 to 1024 [ 185.635490][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.653110][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.657920][ T6622] EXT4-fs: Ignoring removed bh option [ 185.669443][ T6622] EXT4-fs: Ignoring removed oldalloc option [ 185.677349][ T6622] EXT4-fs: Ignoring removed nobh option [ 185.693613][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.714063][ T6622] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.723695][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.752119][ T4308] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 185.754666][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.797342][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.820598][ T6622] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 185.826878][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.867655][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.909817][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.929411][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.970882][ T4308] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.003961][ T4308] usb 5-1: config 0 has no interfaces? [ 186.027226][ T4308] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 186.066813][ T4308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.131732][ T4308] usb 5-1: config 0 descriptor?? [ 186.302205][ T6622] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3850: comm syz.5.814: Allocating blocks 497-513 which overlap fs metadata [ 186.335388][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.352488][ T4311] usb 5-1: USB disconnect, device number 39 [ 186.354715][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.400518][ T6578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.407621][ T6622] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3850: comm syz.5.814: Allocating blocks 497-513 which overlap fs metadata [ 186.436958][ T6621] EXT4-fs (loop5): pa ffff888073e08d20: logic 48, phys. 177, len 21 [ 186.445580][ T6621] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 1 [ 186.570719][ T5937] EXT4-fs (loop5): unmounting filesystem. [ 186.776438][ T6645] loop0: detected capacity change from 0 to 512 [ 186.800381][ T4308] usb 2-1: USB disconnect, device number 44 [ 186.849102][ T4273] Bluetooth: hci4: command 0x041b tx timeout [ 186.918871][ T6645] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.817: inode has both inline data and extents flags [ 186.977308][ T6645] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.817: couldn't read orphan inode 15 (err -117) [ 187.007084][ T6645] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 187.976777][ T6666] loop4: detected capacity change from 0 to 512 [ 188.017466][ T6666] ext4: Unknown parameter 'nouser_xattr' [ 188.058249][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 188.062354][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.079962][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.156254][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.185317][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.213189][ T6578] device veth0_vlan entered promiscuous mode [ 188.231127][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.239858][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.255680][ T6578] device veth1_vlan entered promiscuous mode [ 188.323380][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.359715][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 188.389632][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.416922][ T6643] loop5: detected capacity change from 0 to 40427 [ 188.419711][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.454859][ T6672] netlink: 32 bytes leftover after parsing attributes in process `syz.0.824'. [ 188.463588][ T6674] loop4: detected capacity change from 0 to 512 [ 188.465456][ T6578] device veth0_macvtap entered promiscuous mode [ 188.478498][ T6643] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 188.521441][ T6643] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 188.532088][ T6674] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 188.542965][ T6674] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.551352][ T6578] device veth1_macvtap entered promiscuous mode [ 188.587631][ T6643] F2FS-fs (loop5): invalid crc value [ 188.594301][ T6578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.625314][ T6643] F2FS-fs (loop5): Found nat_bits in checkpoint [ 188.648089][ T6578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.673942][ T6578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.685733][ T6578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.758845][ T6578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.799250][ T6578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.823088][ T6643] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 188.828843][ T6578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.844733][ T6643] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 188.872740][ T6578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.912838][ T6578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.918707][ T6683] loop0: detected capacity change from 0 to 512 [ 188.938190][ T6578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.953558][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 188.968945][ T6578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.988887][ T6578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.010960][ T6578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.020836][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.042622][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 189.055011][ T6683] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 189.138581][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.152306][ T6683] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.828: invalid indirect mapped block 4294967295 (level 1) [ 189.209276][ T6683] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.828: invalid indirect mapped block 4294967295 (level 1) [ 189.245193][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.265653][ T6683] EXT4-fs (loop0): 2 truncates cleaned up [ 189.274052][ T6663] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 189.291693][ T6686] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.302637][ T6683] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 189.302642][ T6663] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 189.320047][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.363298][ T6578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.373881][ T6683] capability: warning: `syz.0.828' uses deprecated v2 capabilities in a way that may be insecure [ 189.394173][ T6686] F2FS-fs (loop8): Unable to read 1th superblock [ 189.401113][ T6578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.412543][ T6686] I/O error, dev loop8, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.423829][ T6578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.442591][ T6686] F2FS-fs (loop8): Unable to read 2th superblock [ 189.453328][ T6578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.486274][ T6578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.526535][ T6578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.548127][ T6578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.590602][ T6578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.631600][ T6578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.657692][ T6578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.669014][ T6578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.679930][ T6578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.691928][ T6578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.695529][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 189.702602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.747922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.773401][ T6578] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.796819][ T6578] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.818433][ T6578] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.827811][ T6578] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.872652][ T6693] loop0: detected capacity change from 0 to 2048 [ 190.001520][ T6663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.036308][ T6693] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 190.049977][ T6663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.123194][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 190.139881][ T6693] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 190.179200][ T6693] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 190.211964][ T6663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.220322][ T6693] EXT4-fs (loop0): This should not happen!! Data will be lost [ 190.220322][ T6693] [ 190.254261][ T6693] EXT4-fs (loop0): Total free blocks count 0 [ 190.257551][ T6663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.261349][ T6700] loop5: detected capacity change from 0 to 1024 [ 190.280578][ T6663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.294986][ T6693] EXT4-fs (loop0): Free/Dirty block details [ 190.386369][ T6693] EXT4-fs (loop0): free_blocks=2415919504 [ 190.452734][ T6693] EXT4-fs (loop0): dirty_blocks=16 [ 190.514384][ T6693] EXT4-fs (loop0): Block reservation details [ 190.523406][ T6700] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 190.645035][ T6700] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.800858][ T6693] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 191.087194][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 191.134099][ T6700] EXT4-fs error (device loop5): ext4_map_blocks:745: inode #15: block 3: comm syz.5.829: lblock 3 mapped to illegal pblock 3 (length 3) [ 191.291758][ T6700] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 191.293119][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 191.329073][ T6700] EXT4-fs (loop5): This should not happen!! Data will be lost [ 191.329073][ T6700] [ 191.381387][ T6707] EXT4-fs error (device loop5): ext4_map_blocks:745: inode #15: block 8: comm syz.5.829: lblock 8 mapped to illegal pblock 8 (length 8) [ 191.478972][ T6707] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 191.528240][ T6707] EXT4-fs (loop5): This should not happen!! Data will be lost [ 191.528240][ T6707] [ 191.579163][ T6715] netlink: 32 bytes leftover after parsing attributes in process `syz.6.836'. [ 191.671508][ T6659] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:12: bg 0: block 112: padding at end of block bitmap is not set [ 191.737932][ T6659] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 117 [ 191.768635][ T6659] EXT4-fs (loop5): This should not happen!! Data will be lost [ 191.768635][ T6659] [ 191.791033][ T5937] EXT4-fs (loop5): unmounting filesystem. [ 193.219994][ T4273] Bluetooth: hci4: command 0x0407 tx timeout [ 193.264240][ T6726] loop5: detected capacity change from 0 to 128 [ 193.278815][ C0] sched: RT throttling activated [ 193.309564][ T6726] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 193.399699][ T6726] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.478535][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 193.478551][ T26] audit: type=1800 audit(1773943863.106:539): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.838" name="file2" dev="loop5" ino=12 res=0 errno=0 [ 193.540710][ T6731] loop1: detected capacity change from 0 to 16 [ 193.653793][ T6731] erofs: (device loop1): mounted with root inode @ nid 36. [ 193.740974][ T5937] EXT4-fs (loop5): unmounting filesystem. [ 193.775758][ T6709] loop4: detected capacity change from 0 to 40427 [ 193.782997][ T6731] syz.1.841: attempt to access beyond end of device [ 193.782997][ T6731] loop1: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 193.879692][ T6731] syz.1.841: attempt to access beyond end of device [ 193.879692][ T6731] loop1: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 193.894464][ T6709] F2FS-fs (loop4): invalid crc value [ 193.938841][ T6709] F2FS-fs (loop4): Found nat_bits in checkpoint [ 194.197963][ T6709] F2FS-fs (loop4): Start checkpoint disabled! [ 194.221633][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.228071][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.377296][ T6737] loop6: detected capacity change from 0 to 2048 [ 194.402913][ T6739] loop1: detected capacity change from 0 to 2048 [ 194.451881][ T6737] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 194.474967][ T6737] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.528872][ T6739] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 194.537491][ T6739] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.557149][ T6737] fs-verity: sha512 using implementation "sha512-avx2" [ 194.620462][ T6578] EXT4-fs (loop6): unmounting filesystem. [ 194.799132][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 194.854026][ T4367] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 195.053153][ T4367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.082490][ T4367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.194597][ T4367] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 195.216330][ T4367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.228251][ T4367] usb 5-1: config 0 descriptor?? [ 196.146138][ T6763] netlink: 32 bytes leftover after parsing attributes in process `syz.6.849'. [ 196.298667][ T4367] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 196.328998][ T4367] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 196.348941][ T4367] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 196.378362][ T4367] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 196.406634][ T4367] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 196.436256][ T4367] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 196.541382][ T4367] playstation 0003:054C:0DF2.0003: Invalid reportID received, expected 9 got 46 [ 196.565870][ T4367] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense pairing info: -22 [ 196.596064][ T4367] playstation 0003:054C:0DF2.0003: Failed to get MAC address from DualSense [ 196.646175][ T4367] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 196.671665][ T4367] playstation: probe of 0003:054C:0DF2.0003 failed with error -22 [ 196.712225][ T6776] device pim6reg1 entered promiscuous mode [ 196.746750][ T4276] usb 5-1: USB disconnect, device number 40 [ 196.965740][ T6779] loop6: detected capacity change from 0 to 512 [ 197.000173][ T6779] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 197.012707][ T6777] fido_id[6777]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 197.032666][ T6779] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 197.078912][ T6779] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 197.122523][ T6779] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 197.131979][ T6759] loop0: detected capacity change from 0 to 40427 [ 197.133803][ T6779] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e042e01c, mo2=0000] [ 197.147302][ T6779] EXT4-fs (loop6): failed to initialize system zone (-117) [ 197.155198][ T6779] EXT4-fs (loop6): mount failed [ 197.180254][ T6759] F2FS-fs (loop0): invalid crc value [ 197.210101][ T6759] F2FS-fs (loop0): Found nat_bits in checkpoint [ 197.387576][ T6759] F2FS-fs (loop0): Start checkpoint disabled! [ 197.460020][ T6759] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 197.488471][ T6788] loop4: detected capacity change from 0 to 512 [ 197.530724][ T6788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.595146][ T6788] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 197.723408][ T6788] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3850: comm syz.4.857: Allocating blocks 41-42 which overlap fs metadata [ 197.828846][ T6788] EXT4-fs (loop4): Remounting filesystem read-only [ 197.836230][ T6788] Quota error (device loop4): write_blk: dquota write failed [ 197.879049][ T6788] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 197.899841][ T6788] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 197.929040][ T6788] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.857: Failed to acquire dquot type 1 [ 197.930280][ T6659] kworker/u4:12: attempt to access beyond end of device [ 197.930280][ T6659] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 197.963016][ T6788] EXT4-fs (loop4): Remounting filesystem read-only [ 197.999238][ T6788] EXT4-fs error (device loop4): mb_free_blocks:1824: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 198.035411][ T6788] EXT4-fs (loop4): Remounting filesystem read-only [ 198.045546][ T6788] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #12: comm syz.4.857: corrupted inode contents [ 198.134962][ T6788] EXT4-fs (loop4): Remounting filesystem read-only [ 198.149739][ T6788] EXT4-fs error (device loop4): ext4_dirty_inode:6137: inode #12: comm syz.4.857: mark_inode_dirty error [ 198.198308][ T6788] EXT4-fs (loop4): Remounting filesystem read-only [ 198.267541][ T6788] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #12: comm syz.4.857: corrupted inode contents [ 198.359862][ T6788] EXT4-fs (loop4): Remounting filesystem read-only [ 198.367165][ T6788] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.857: mark_inode_dirty error [ 198.781846][ T6806] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 198.791734][ T6806] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 198.839956][ T6806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.009019][ T6788] EXT4-fs (loop4): Remounting filesystem read-only [ 199.016628][ T6788] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #12: comm syz.4.857: corrupted inode contents [ 199.093618][ T6805] loop5: detected capacity change from 0 to 1024 [ 199.161908][ T6788] EXT4-fs (loop4): Remounting filesystem read-only [ 199.168472][ T6788] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 199.189805][ T6788] EXT4-fs (loop4): Remounting filesystem read-only [ 199.196804][ T6788] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #12: comm syz.4.857: corrupted inode contents [ 199.314741][ T6788] EXT4-fs (loop4): Remounting filesystem read-only [ 199.409815][ T6788] EXT4-fs error (device loop4): ext4_truncate:4318: inode #12: comm syz.4.857: mark_inode_dirty error [ 199.478511][ T6814] fuse: Unknown parameter 'grou00000000000000000000' [ 199.487616][ T6788] EXT4-fs (loop4): Remounting filesystem read-only [ 199.503688][ T6788] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 199.529303][ T6788] EXT4-fs (loop4): Remounting filesystem read-only [ 199.548231][ T6788] EXT4-fs (loop4): 1 truncate cleaned up [ 199.566660][ T6788] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 199.779036][ T4310] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 199.842743][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 200.001375][ T4310] usb 6-1: config 2 has an invalid interface number: 43 but max is 0 [ 200.029054][ T4310] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 200.054546][ T4310] usb 6-1: config 2 has no interface number 0 [ 200.061436][ T6829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.873'. [ 200.072795][ T4310] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 200.082201][ T4310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.091842][ T6829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.873'. [ 200.129272][ T4310] usb 6-1: Product: syz [ 200.133499][ T4310] usb 6-1: Manufacturer: syz [ 200.138117][ T4310] usb 6-1: SerialNumber: syz [ 200.141165][ T6831] loop6: detected capacity change from 0 to 512 [ 200.228766][ T6831] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 200.254014][ T6831] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 200.307364][ T6831] EXT4-fs error (device loop6): __ext4_iget:5095: inode #11: block 2: comm syz.6.874: invalid block [ 200.382291][ T4310] ums-usbat 6-1:2.43: USB Mass Storage device detected [ 200.394507][ T6831] EXT4-fs (loop6): Remounting filesystem read-only [ 200.431154][ T4310] ums-usbat 6-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 200.431215][ T6831] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.874: couldn't read orphan inode 11 (err -117) [ 200.532869][ T4310] usb 6-1: USB disconnect, device number 16 [ 200.556447][ T6831] EXT4-fs (loop6): Remounting filesystem read-only [ 200.563170][ T6831] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 200.601682][ T6831] EXT4-fs (loop6): shut down requested (2) [ 200.635355][ T6578] EXT4-fs (loop6): unmounting filesystem. [ 200.749708][ T26] audit: type=1326 audit(1773943870.386:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561ef9c799 code=0x7ffc0000 [ 200.799385][ T6844] fuse: Unknown parameter 'grou00000000000000000000' [ 200.844321][ T26] audit: type=1326 audit(1773943870.386:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561ef9c799 code=0x7ffc0000 [ 200.866989][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.066949][ T26] audit: type=1326 audit(1773943870.406:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f561ef9c799 code=0x7ffc0000 [ 201.119221][ T26] audit: type=1326 audit(1773943870.406:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561ef9c799 code=0x7ffc0000 [ 201.251073][ T26] audit: type=1326 audit(1773943870.406:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561ef9c799 code=0x7ffc0000 [ 201.314308][ T26] audit: type=1326 audit(1773943870.406:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f561ef9c799 code=0x7ffc0000 [ 201.370325][ T4273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.379974][ T26] audit: type=1326 audit(1773943870.636:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561ef9c799 code=0x7ffc0000 [ 201.409474][ T4273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.417880][ T4273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.427438][ T4273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.435448][ T4273] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 201.443818][ T4273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.544782][ T6853] virt_wifi0 speed is unknown, defaulting to 1000 [ 201.604533][ T6858] loop5: detected capacity change from 0 to 1024 [ 201.618268][ T26] audit: type=1326 audit(1773943870.636:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561ef9c799 code=0x7ffc0000 [ 201.712929][ T6865] loop0: detected capacity change from 0 to 256 [ 201.727708][ T6858] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 201.753587][ T4292] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.759176][ T26] audit: type=1326 audit(1773943870.746:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f561ef9c799 code=0x7ffc0000 [ 201.808221][ T6865] exfat: Deprecated parameter 'utf8' [ 201.827734][ T6865] exfat: Deprecated parameter 'utf8' [ 201.859040][ T26] audit: type=1326 audit(1773943870.746:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561ef9c799 code=0x7ffc0000 [ 201.879431][ T6865] exfat: Deprecated parameter 'namecase' [ 201.937060][ T6865] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 202.048066][ T4292] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.098906][ T7] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 202.179688][ T4292] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.299002][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 202.305812][ T7] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 202.327418][ T4292] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.328999][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.363155][ T6850] loop4: detected capacity change from 0 to 40427 [ 202.369017][ T7] usb 6-1: config 0 has no interface number 0 [ 202.390561][ T7] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 202.408885][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.421841][ T6850] F2FS-fs (loop4): invalid crc value [ 202.436163][ T7] usb 6-1: Product: syz [ 202.440760][ T7] usb 6-1: Manufacturer: syz [ 202.452844][ T7] usb 6-1: SerialNumber: syz [ 202.464038][ T6850] F2FS-fs (loop4): Found nat_bits in checkpoint [ 202.475858][ T7] usb 6-1: config 0 descriptor?? [ 202.507016][ T7] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 202.537214][ T7] usb 6-1: No valid video chain found. [ 202.631064][ T6853] chnl_net:caif_netlink_parms(): no params data found [ 202.666818][ T6850] F2FS-fs (loop4): Start checkpoint disabled! [ 202.697960][ T6873] ipt_CLUSTERIP: Please specify destination IP [ 202.712261][ T4276] usb 6-1: USB disconnect, device number 17 [ 202.749063][ T6850] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 202.810108][ T4278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.820867][ T4278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.830175][ T4278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.841934][ T4278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.854843][ T4278] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 202.863531][ T4278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.945715][ T6877] virt_wifi0 speed is unknown, defaulting to 1000 [ 203.084192][ T6853] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.102975][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.147241][ T6853] device bridge_slave_0 entered promiscuous mode [ 203.172661][ T46] kworker/u4:3: attempt to access beyond end of device [ 203.172661][ T46] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 203.331930][ T5937] EXT4-fs (loop5): unmounting filesystem. [ 203.425596][ T6853] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.439060][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.459960][ T6853] device bridge_slave_1 entered promiscuous mode [ 203.489745][ T4278] Bluetooth: hci0: command 0x0409 tx timeout [ 203.630666][ T6853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.722582][ T6853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.735239][ T6898] fuse: Unknown parameter 'grou00000000000000000000' [ 203.969363][ T6853] team0: Port device team_slave_0 added [ 204.124939][ T6853] team0: Port device team_slave_1 added [ 204.142592][ T6877] chnl_net:caif_netlink_parms(): no params data found [ 204.438288][ T6853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.469152][ T6853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.585039][ T6853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.809607][ T6853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.858919][ T6853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.926656][ T6853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.940095][ T4278] Bluetooth: hci4: command 0x0409 tx timeout [ 205.569647][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 205.930218][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.946992][ T6877] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.001131][ T6877] device bridge_slave_0 entered promiscuous mode [ 206.121358][ T6853] device hsr_slave_0 entered promiscuous mode [ 206.283254][ T6853] device hsr_slave_1 entered promiscuous mode [ 206.417785][ T6853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.586447][ T6853] Cannot create hsr debugfs directory [ 206.671839][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.691541][ T6877] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.742753][ T6877] device bridge_slave_1 entered promiscuous mode [ 207.009319][ T4278] Bluetooth: hci4: command 0x041b tx timeout [ 207.109838][ T6877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.147162][ T6877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.158933][ T4311] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 207.269974][ T4292] device hsr_slave_0 left promiscuous mode [ 207.314080][ T4292] device hsr_slave_1 left promiscuous mode [ 207.329935][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.337824][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.361015][ T4311] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 207.379217][ T4311] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 207.390177][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.397741][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.412919][ T4311] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 207.430056][ T4292] device bridge_slave_1 left promiscuous mode [ 207.448679][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.468923][ T4311] usb 5-1: config 220 has no interface number 2 [ 207.475280][ T4311] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 207.527701][ T4311] usb 5-1: config 220 interface 0 has no altsetting 0 [ 207.547718][ T4311] usb 5-1: config 220 interface 76 has no altsetting 0 [ 207.555264][ T4311] usb 5-1: config 220 interface 1 has no altsetting 0 [ 207.609214][ T4311] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 207.618304][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.642698][ T4311] usb 5-1: Product: syz [ 207.646935][ T4311] usb 5-1: Manufacturer: syz [ 207.652908][ T4278] Bluetooth: hci0: command 0x040f tx timeout [ 207.671008][ T4311] usb 5-1: SerialNumber: syz [ 207.761834][ T4292] device bridge_slave_0 left promiscuous mode [ 207.768201][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.109876][ T4292] device veth1_macvtap left promiscuous mode [ 208.194465][ T4292] device veth0_macvtap left promiscuous mode [ 208.296896][ T4292] device veth1_vlan left promiscuous mode [ 208.809259][ T4292] device veth0_vlan left promiscuous mode [ 208.929158][ T4311] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 208.935647][ T4311] usb 5-1: No valid video chain found. [ 208.942574][ T4311] usb 5-1: selecting invalid altsetting 0 [ 209.088981][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 209.555980][ T4311] usb 5-1: selecting invalid altsetting 0 [ 209.562300][ T4311] usbtest: probe of 5-1:220.1 failed with error -22 [ 209.575505][ T4311] usb 5-1: USB disconnect, device number 41 [ 209.729215][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 209.978987][ T6963] loop4: detected capacity change from 0 to 512 [ 209.994529][ T6963] EXT4-fs: Ignoring removed nobh option [ 210.166239][ T6963] [ 210.168647][ T6963] ====================================================== [ 210.175759][ T6963] WARNING: possible circular locking dependency detected [ 210.182849][ T6963] syzkaller #0 Not tainted [ 210.187250][ T6963] ------------------------------------------------------ [ 210.194430][ T6963] syz.4.906/6963 is trying to acquire lock: [ 210.200988][ T6963] ffff888053afeb98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2f40 [ 210.211382][ T6963] [ 210.211382][ T6963] but task is already holding lock: [ 210.218915][ T6963] ffff888054d1ef20 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 210.228930][ T6963] [ 210.228930][ T6963] which lock already depends on the new lock. [ 210.228930][ T6963] [ 210.239415][ T6963] [ 210.239415][ T6963] the existing dependency chain (in reverse order) is: [ 210.248525][ T6963] [ 210.248525][ T6963] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 210.256093][ T6963] down_write+0x36/0x60 [ 210.260774][ T6963] ext4_destroy_inline_data+0x24/0xe0 [ 210.266851][ T6963] ext4_writepages+0x670/0x2f40 [ 210.272222][ T6963] do_writepages+0x3ba/0x640 [ 210.277349][ T6963] filemap_fdatawrite_wbc+0x11e/0x180 [ 210.283333][ T6963] filemap_flush+0xe0/0x140 [ 210.288422][ T6963] ext4_convert_inline_data+0x18b/0x5f0 [ 210.294489][ T6963] ext4_fallocate+0xf6/0x2000 [ 210.299776][ T6963] vfs_fallocate+0x584/0x6f0 [ 210.304882][ T6963] do_vfs_ioctl+0x1b42/0x1d40 [ 210.310108][ T6963] __se_sys_ioctl+0x83/0x170 [ 210.315300][ T6963] do_syscall_64+0x4c/0xa0 [ 210.320410][ T6963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.326995][ T6963] [ 210.326995][ T6963] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 210.336200][ T6963] __lock_acquire+0x2d07/0x7d10 [ 210.341747][ T6963] lock_acquire+0x1bb/0x4a0 [ 210.346857][ T6963] percpu_down_read+0x44/0x1a0 [ 210.352280][ T6963] ext4_writepages+0x20f/0x2f40 [ 210.357749][ T6963] do_writepages+0x3ba/0x640 [ 210.362852][ T6963] __writeback_single_inode+0x156/0x1160 [ 210.369091][ T6963] writeback_single_inode+0x3cb/0x8e0 [ 210.374980][ T6963] write_inode_now+0x17f/0x210 [ 210.380276][ T6963] iput+0x613/0x980 [ 210.384705][ T6963] ext4_xattr_block_set+0x273b/0x32b0 [ 210.390616][ T6963] ext4_expand_extra_isize_ea+0x120b/0x1dc0 [ 210.397124][ T6963] __ext4_expand_extra_isize+0x301/0x3e0 [ 210.403287][ T6963] __ext4_mark_inode_dirty+0x47f/0x770 [ 210.409350][ T6963] ext4_evict_inode+0xa7f/0x1110 [ 210.415097][ T6963] evict+0x4c9/0x8d0 [ 210.419694][ T6963] ext4_orphan_cleanup+0xbeb/0x1420 [ 210.425416][ T6963] ext4_fill_super+0x7829/0x7dc0 [ 210.430871][ T6963] get_tree_bdev+0x3f1/0x610 [ 210.436064][ T6963] vfs_get_tree+0x88/0x270 [ 210.441002][ T6963] do_new_mount+0x24a/0xa40 [ 210.446019][ T6963] __se_sys_mount+0x2e3/0x3d0 [ 210.451226][ T6963] do_syscall_64+0x4c/0xa0 [ 210.456163][ T6963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.462750][ T6963] [ 210.462750][ T6963] other info that might help us debug this: [ 210.462750][ T6963] [ 210.473230][ T6963] Possible unsafe locking scenario: [ 210.473230][ T6963] [ 210.480769][ T6963] CPU0 CPU1 [ 210.486284][ T6963] ---- ---- [ 210.492073][ T6963] lock(&ei->xattr_sem); [ 210.496409][ T6963] lock(&sbi->s_writepages_rwsem); [ 210.504202][ T6963] lock(&ei->xattr_sem); [ 210.511304][ T6963] lock(&sbi->s_writepages_rwsem); [ 210.516667][ T6963] [ 210.516667][ T6963] *** DEADLOCK *** [ 210.516667][ T6963] [ 210.524803][ T6963] 3 locks held by syz.4.906/6963: [ 210.529871][ T6963] #0: ffff88805321c0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x930 [ 210.540064][ T6963] #1: ffff88805321c650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x43c/0x1110 [ 210.549545][ T6963] #2: ffff888054d1ef20 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 210.560062][ T6963] [ 210.560062][ T6963] stack backtrace: [ 210.566476][ T6963] CPU: 1 PID: 6963 Comm: syz.4.906 Not tainted syzkaller #0 [ 210.574282][ T6963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 210.584684][ T6963] Call Trace: [ 210.588051][ T6963] [ 210.590982][ T6963] dump_stack_lvl+0x188/0x24e [ 210.595660][ T6963] ? load_image+0x400/0x400 [ 210.600162][ T6963] ? show_regs_print_info+0x12/0x12 [ 210.605570][ T6963] ? print_circular_bug+0x12b/0x1a0 [ 210.610768][ T6963] check_noncircular+0x296/0x330 [ 210.615966][ T6963] ? look_up_lock_class+0x75/0x140 [ 210.621077][ T6963] ? add_chain_block+0x940/0x940 [ 210.626011][ T6963] ? lockdep_lock+0xf1/0x1f0 [ 210.630595][ T6963] ? _find_first_zero_bit+0xcf/0x100 [ 210.635988][ T6963] __lock_acquire+0x2d07/0x7d10 [ 210.640944][ T6963] ? mark_lock+0x94/0x320 [ 210.645378][ T6963] ? __schedule+0x119d/0x40e0 [ 210.650146][ T6963] ? verify_lock_unused+0x140/0x140 [ 210.655431][ T6963] ? lockdep_hardirqs_on+0x94/0x140 [ 210.660633][ T6963] ? finish_task_switch+0x265/0x8f0 [ 210.666009][ T6963] ? __schedule+0x11d9/0x40e0 [ 210.670711][ T6963] lock_acquire+0x1bb/0x4a0 [ 210.676132][ T6963] ? ext4_writepages+0x20f/0x2f40 [ 210.683417][ T6963] ? __lock_acquire+0x13cf/0x7d10 [ 210.689624][ T6963] ? __might_sleep+0xd0/0xd0 [ 210.695370][ T6963] ? read_lock_is_recursive+0x10/0x10 [ 210.700992][ T6963] ? mark_lock+0x94/0x320 [ 210.706065][ T6963] percpu_down_read+0x44/0x1a0 [ 210.710835][ T6963] ? ext4_writepages+0x20f/0x2f40 [ 210.716403][ T6963] ext4_writepages+0x20f/0x2f40 [ 210.721291][ T6963] ? verify_lock_unused+0x140/0x140 [ 210.726683][ T6963] ? verify_lock_unused+0x140/0x140 [ 210.732158][ T6963] ? verify_lock_unused+0x140/0x140 [ 210.737388][ T6963] ? mark_lock+0x94/0x320 [ 210.742009][ T6963] ? ext4_read_folio+0x370/0x370 [ 210.747637][ T6963] ? __lock_acquire+0x13cf/0x7d10 [ 210.753039][ T6963] ? psi_task_switch+0x398/0x6d0 [ 210.758356][ T6963] ? __lock_acquire+0x7d10/0x7d10 [ 210.763980][ T6963] ? do_raw_spin_lock+0x128/0x2f0 [ 210.769192][ T6963] ? do_raw_spin_unlock+0x11d/0x230 [ 210.774604][ T6963] ? ext4_read_folio+0x370/0x370 [ 210.779835][ T6963] do_writepages+0x3ba/0x640 [ 210.784741][ T6963] ? __writepage+0x130/0x130 [ 210.789691][ T6963] ? writeback_single_inode+0x3c0/0x8e0 [ 210.795270][ T6963] ? __lock_acquire+0x7d10/0x7d10 [ 210.800594][ T6963] ? do_raw_spin_lock+0x128/0x2f0 [ 210.806055][ T6963] __writeback_single_inode+0x156/0x1160 [ 210.811696][ T6963] writeback_single_inode+0x3cb/0x8e0 [ 210.817088][ T6963] ? schedule+0xd0/0x180 [ 210.821560][ T6963] ? write_inode_now+0x210/0x210 [ 210.826535][ T6963] ? io_schedule+0x7c/0xd0 [ 210.830990][ T6963] write_inode_now+0x17f/0x210 [ 210.836112][ T6963] ? bdi_split_work_to_wbs+0x910/0x910 [ 210.842130][ T6963] ? do_raw_spin_unlock+0x11d/0x230 [ 210.847709][ T6963] iput+0x613/0x980 [ 210.851708][ T6963] ext4_xattr_block_set+0x273b/0x32b0 [ 210.857181][ T6963] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 210.862859][ T6963] ? ext4_xattr_block_find+0x241/0x2b0 [ 210.868610][ T6963] ext4_expand_extra_isize_ea+0x120b/0x1dc0 [ 210.874908][ T6963] __ext4_expand_extra_isize+0x301/0x3e0 [ 210.880651][ T6963] __ext4_mark_inode_dirty+0x47f/0x770 [ 210.886247][ T6963] ext4_evict_inode+0xa7f/0x1110 [ 210.891719][ T6963] ? _raw_spin_unlock+0x24/0x40 [ 210.897124][ T6963] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 210.903208][ T6963] ? do_raw_spin_unlock+0x11d/0x230 [ 210.908805][ T6963] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 210.915310][ T6963] evict+0x4c9/0x8d0 [ 210.919408][ T6963] ? proc_nr_inodes+0x2f0/0x2f0 [ 210.924868][ T6963] ? do_raw_spin_unlock+0x11d/0x230 [ 210.930080][ T6963] ? _raw_spin_unlock+0x24/0x40 [ 210.935112][ T6963] ? iput+0x768/0x980 [ 210.939097][ T6963] ext4_orphan_cleanup+0xbeb/0x1420 [ 210.944297][ T6963] ? preempt_schedule_thunk+0x16/0x18 [ 210.949691][ T6963] ? ext4_orphan_del+0xbf0/0xbf0 [ 210.954656][ T6963] ? errseq_check_and_advance+0x62/0x120 [ 210.960637][ T6963] ext4_fill_super+0x7829/0x7dc0 [ 210.965716][ T6963] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 210.972067][ T6963] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 210.978411][ T6963] ? lock_chain_count+0x20/0x20 [ 210.983441][ T6963] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 210.989110][ T6963] ? set_blocksize+0x1d0/0x470 [ 210.994047][ T6963] ? sb_set_blocksize+0xa5/0xe0 [ 210.998901][ T6963] get_tree_bdev+0x3f1/0x610 [ 211.003659][ T6963] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 211.010082][ T6963] vfs_get_tree+0x88/0x270 [ 211.014502][ T6963] do_new_mount+0x24a/0xa40 [ 211.019002][ T6963] __se_sys_mount+0x2e3/0x3d0 [ 211.023949][ T6963] ? __x64_sys_mount+0xc0/0xc0 [ 211.028730][ T6963] ? syscall_enter_from_user_mode+0x2a/0x80 [ 211.034653][ T6963] ? __x64_sys_mount+0x1c/0xc0 [ 211.039613][ T6963] do_syscall_64+0x4c/0xa0 [ 211.044210][ T6963] ? clear_bhb_loop+0x60/0xb0 [ 211.048884][ T6963] ? clear_bhb_loop+0x60/0xb0 [ 211.053583][ T6963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.059562][ T6963] RIP: 0033:0x7f6a4819da0a [ 211.064252][ T6963] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.084166][ T6963] RSP: 002b:00007f6a4900ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 211.093322][ T6963] RAX: ffffffffffffffda RBX: 00007f6a4900eee0 RCX: 00007f6a4819da0a [ 211.101386][ T6963] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f6a4900eea0 [ 211.109438][ T6963] RBP: 0000200000000180 R08: 00007f6a4900eee0 R09: 0000000000800718 [ 211.117530][ T6963] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 211.125866][ T6963] R13: 00007f6a4900eea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 211.133870][ T6963] [ 211.168881][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 211.209144][ T6963] ------------[ cut here ]------------ [ 211.215140][ T6963] EA inode 11 i_nlink=1026 [ 211.215447][ T6963] WARNING: CPU: 1 PID: 6963 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4e7/0x540 [ 211.230230][ T6963] Modules linked in: [ 211.234135][ T6963] CPU: 1 PID: 6963 Comm: syz.4.906 Not tainted syzkaller #0 [ 211.241559][ T6963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 211.251737][ T6963] RIP: 0010:ext4_xattr_inode_update_ref+0x4e7/0x540 [ 211.258549][ T6963] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 7a c5 9b ff 49 8b 37 48 c7 c7 00 a1 a0 8a 89 da e8 79 4b 16 ff <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 13 6d f5 07 [ 211.278922][ T6963] RSP: 0018:ffffc900032271e0 EFLAGS: 00010246 [ 211.285017][ T6963] RAX: c798daf4e0283a00 RBX: 0000000000000402 RCX: 0000000000080000 [ 211.293025][ T6963] RDX: ffffc90012908000 RSI: 000000000007ffff RDI: 0000000000080000 [ 211.301045][ T6963] RBP: ffffc900032272d8 R08: ffffc90003226e67 R09: 1ffff92000644dcc [ 211.310040][ T6963] R10: dffffc0000000000 R11: fffff52000644dcd R12: ffff888073f3c8e8 [ 211.318027][ T6963] R13: 1ffff1100e7e795c R14: dffffc0000000000 R15: ffff888073f3c928 [ 211.326208][ T6963] FS: 00007f6a4900f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 211.335202][ T6963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.341872][ T6963] CR2: 00007f231dc56000 CR3: 00000000665d7000 CR4: 00000000003506e0 [ 211.350005][ T6963] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.358707][ T6963] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 211.366740][ T6963] Call Trace: [ 211.370051][ T6963] [ 211.373166][ T6963] ? ext4_xattr_block_csum+0x560/0x560 [ 211.379033][ T6963] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 211.384984][ T6963] ext4_xattr_set_entry+0xb33/0x1e90 [ 211.390650][ T6963] ext4_xattr_ibody_set+0x250/0x690 [ 211.396280][ T6963] ext4_expand_extra_isize_ea+0x12c7/0x1dc0 [ 211.402672][ T6963] __ext4_expand_extra_isize+0x301/0x3e0 [ 211.408331][ T6963] __ext4_mark_inode_dirty+0x47f/0x770 [ 211.413849][ T6963] ext4_evict_inode+0xa7f/0x1110 [ 211.418827][ T6963] ? _raw_spin_unlock+0x24/0x40 [ 211.423702][ T6963] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 211.429641][ T6963] ? do_raw_spin_unlock+0x11d/0x230 [ 211.434855][ T6963] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 211.440788][ T6963] evict+0x4c9/0x8d0 [ 211.444797][ T6963] ? proc_nr_inodes+0x2f0/0x2f0 [ 211.449751][ T6963] ? do_raw_spin_unlock+0x11d/0x230 [ 211.454975][ T6963] ? _raw_spin_unlock+0x24/0x40 [ 211.459903][ T6963] ? iput+0x768/0x980 [ 211.463897][ T6963] ext4_orphan_cleanup+0xbeb/0x1420 [ 211.469138][ T6963] ? preempt_schedule_thunk+0x16/0x18 [ 211.474530][ T6963] ? ext4_orphan_del+0xbf0/0xbf0 [ 211.479550][ T6963] ? errseq_check_and_advance+0x62/0x120 [ 211.485314][ T6963] ext4_fill_super+0x7829/0x7dc0 [ 211.490489][ T6963] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 211.496764][ T6963] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 211.502835][ T6963] ? lock_chain_count+0x20/0x20 [ 211.507740][ T6963] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 211.513413][ T6963] ? set_blocksize+0x1d0/0x470 [ 211.518191][ T6963] ? sb_set_blocksize+0xa5/0xe0 [ 211.523077][ T6963] get_tree_bdev+0x3f1/0x610 [ 211.527682][ T6963] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 211.534043][ T6963] vfs_get_tree+0x88/0x270 [ 211.538483][ T6963] do_new_mount+0x24a/0xa40 [ 211.543021][ T6963] __se_sys_mount+0x2e3/0x3d0 [ 211.547905][ T6963] ? __x64_sys_mount+0xc0/0xc0 [ 211.552707][ T6963] ? syscall_enter_from_user_mode+0x2a/0x80 [ 211.558630][ T6963] ? __x64_sys_mount+0x1c/0xc0 [ 211.563779][ T6963] do_syscall_64+0x4c/0xa0 [ 211.568323][ T6963] ? clear_bhb_loop+0x60/0xb0 [ 211.573194][ T6963] ? clear_bhb_loop+0x60/0xb0 [ 211.577918][ T6963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.584221][ T6963] RIP: 0033:0x7f6a4819da0a [ 211.588666][ T6963] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.608446][ T6963] RSP: 002b:00007f6a4900ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 211.617609][ T6963] RAX: ffffffffffffffda RBX: 00007f6a4900eee0 RCX: 00007f6a4819da0a [ 211.625732][ T6963] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f6a4900eea0 [ 211.634176][ T6963] RBP: 0000200000000180 R08: 00007f6a4900eee0 R09: 0000000000800718 [ 211.642336][ T6963] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 211.650783][ T6963] R13: 00007f6a4900eea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 211.659094][ T6963] [ 211.662147][ T6963] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 211.669515][ T6963] CPU: 1 PID: 6963 Comm: syz.4.906 Not tainted syzkaller #0 [ 211.676791][ T6963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 211.687008][ T6963] Call Trace: [ 211.690290][ T6963] [ 211.693217][ T6963] dump_stack_lvl+0x188/0x24e [ 211.697899][ T6963] ? memcpy+0x3c/0x60 [ 211.701879][ T6963] ? show_regs_print_info+0x12/0x12 [ 211.707072][ T6963] ? load_image+0x400/0x400 [ 211.711669][ T6963] panic+0x2e5/0x730 [ 211.715557][ T6963] ? bpf_jit_dump+0xd0/0xd0 [ 211.720318][ T6963] __warn+0x2f8/0x4f0 [ 211.724302][ T6963] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 211.730470][ T6963] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 211.736461][ T6963] report_bug+0x2ba/0x4f0 [ 211.740796][ T6963] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 211.746879][ T6963] handle_bug+0x3a/0x70 [ 211.751121][ T6963] exc_invalid_op+0x16/0x40 [ 211.755802][ T6963] asm_exc_invalid_op+0x16/0x20 [ 211.760748][ T6963] RIP: 0010:ext4_xattr_inode_update_ref+0x4e7/0x540 [ 211.767334][ T6963] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 7a c5 9b ff 49 8b 37 48 c7 c7 00 a1 a0 8a 89 da e8 79 4b 16 ff <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 13 6d f5 07 [ 211.787049][ T6963] RSP: 0018:ffffc900032271e0 EFLAGS: 00010246 [ 211.793138][ T6963] RAX: c798daf4e0283a00 RBX: 0000000000000402 RCX: 0000000000080000 [ 211.801115][ T6963] RDX: ffffc90012908000 RSI: 000000000007ffff RDI: 0000000000080000 [ 211.809169][ T6963] RBP: ffffc900032272d8 R08: ffffc90003226e67 R09: 1ffff92000644dcc [ 211.817491][ T6963] R10: dffffc0000000000 R11: fffff52000644dcd R12: ffff888073f3c8e8 [ 211.825475][ T6963] R13: 1ffff1100e7e795c R14: dffffc0000000000 R15: ffff888073f3c928 [ 211.833718][ T6963] ? ext4_xattr_block_csum+0x560/0x560 [ 211.839180][ T6963] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 211.844723][ T6963] ext4_xattr_set_entry+0xb33/0x1e90 [ 211.850009][ T6963] ext4_xattr_ibody_set+0x250/0x690 [ 211.855445][ T6963] ext4_expand_extra_isize_ea+0x12c7/0x1dc0 [ 211.861537][ T6963] __ext4_expand_extra_isize+0x301/0x3e0 [ 211.867227][ T6963] __ext4_mark_inode_dirty+0x47f/0x770 [ 211.872701][ T6963] ext4_evict_inode+0xa7f/0x1110 [ 211.877659][ T6963] ? _raw_spin_unlock+0x24/0x40 [ 211.882533][ T6963] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 211.888455][ T6963] ? do_raw_spin_unlock+0x11d/0x230 [ 211.893666][ T6963] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 211.899559][ T6963] evict+0x4c9/0x8d0 [ 211.903471][ T6963] ? proc_nr_inodes+0x2f0/0x2f0 [ 211.908362][ T6963] ? do_raw_spin_unlock+0x11d/0x230 [ 211.913587][ T6963] ? _raw_spin_unlock+0x24/0x40 [ 211.918432][ T6963] ? iput+0x768/0x980 [ 211.922504][ T6963] ext4_orphan_cleanup+0xbeb/0x1420 [ 211.927701][ T6963] ? preempt_schedule_thunk+0x16/0x18 [ 211.933435][ T6963] ? ext4_orphan_del+0xbf0/0xbf0 [ 211.938437][ T6963] ? errseq_check_and_advance+0x62/0x120 [ 211.944177][ T6963] ext4_fill_super+0x7829/0x7dc0 [ 211.949129][ T6963] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 211.955365][ T6963] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 211.961431][ T6963] ? lock_chain_count+0x20/0x20 [ 211.966284][ T6963] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 211.972099][ T6963] ? set_blocksize+0x1d0/0x470 [ 211.976950][ T6963] ? sb_set_blocksize+0xa5/0xe0 [ 211.981826][ T6963] get_tree_bdev+0x3f1/0x610 [ 211.986535][ T6963] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 211.992835][ T6963] vfs_get_tree+0x88/0x270 [ 211.997347][ T6963] do_new_mount+0x24a/0xa40 [ 212.001855][ T6963] __se_sys_mount+0x2e3/0x3d0 [ 212.006545][ T6963] ? __x64_sys_mount+0xc0/0xc0 [ 212.011317][ T6963] ? syscall_enter_from_user_mode+0x2a/0x80 [ 212.017310][ T6963] ? __x64_sys_mount+0x1c/0xc0 [ 212.022254][ T6963] do_syscall_64+0x4c/0xa0 [ 212.026694][ T6963] ? clear_bhb_loop+0x60/0xb0 [ 212.031374][ T6963] ? clear_bhb_loop+0x60/0xb0 [ 212.036052][ T6963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.041940][ T6963] RIP: 0033:0x7f6a4819da0a [ 212.046348][ T6963] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.065959][ T6963] RSP: 002b:00007f6a4900ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 212.074661][ T6963] RAX: ffffffffffffffda RBX: 00007f6a4900eee0 RCX: 00007f6a4819da0a [ 212.082838][ T6963] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f6a4900eea0 [ 212.091259][ T6963] RBP: 0000200000000180 R08: 00007f6a4900eee0 R09: 0000000000800718 [ 212.099361][ T6963] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 212.107422][ T6963] R13: 00007f6a4900eea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 212.115490][ T6963] [ 212.119083][ T6963] Kernel Offset: disabled [ 212.123394][ T6963] Rebooting in 86400 seconds..