last executing test programs: 6.42008754s ago: executing program 1 (id=3296): mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, 0x0) 6.329502515s ago: executing program 1 (id=3298): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x4, 0xffffffff, 0x800}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xffff}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.289422127s ago: executing program 0 (id=3299): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90, 0x50000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) 6.129084785s ago: executing program 0 (id=3302): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.128064806s ago: executing program 4 (id=3303): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.904032437s ago: executing program 1 (id=3304): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.885680798s ago: executing program 1 (id=3306): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0x0, {0xa, 0x4e24, 0x2, @private1, 0x7}}}, 0x80, 0x0}, 0x2000f761) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300fd010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 5.800497793s ago: executing program 1 (id=3307): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="201006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x0, 0x11, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.986975439s ago: executing program 2 (id=3314): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000003880)='ns/mnt\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYRES8=r1, @ANYBLOB='\a'], 0x0) 3.243616918s ago: executing program 4 (id=3317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000680)={0x1, 0x0, {0x12, 0x2a, 0x0, 0x1c, 0x0, 0xbcde, 0x0, 0xc2, 0x1}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002600)=[{&(0x7f00000024c0)="4843a6b3feebbf94cc5a47b332a09dc6bec0151cb16a3f1733f93dd5951e065e7a9cca945a6636ec", 0x28}], 0x1}}], 0x1, 0x20008000) close(r1) shutdown(r0, 0x2) bind$inet6(r0, 0x0, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x43) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a01040000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000), 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) r5 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x2400) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000080)={{0x3, 0x1}, {}, 0x0, 0x4, 0x7}) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x801) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x2, 0x3, 0x201, 0x0, 0x0, {0xb, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x319, 0x2}}]}, 0x20}}, 0x2000c010) 3.183328151s ago: executing program 4 (id=3318): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$DVB_DEMUX_DMX_QBUF(0xffffffffffffffff, 0xc0186f3f, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102c9ccf310c80a01c305d40102030109021200010c0190060904"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000780)={0x14, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) 3.02297029s ago: executing program 0 (id=3319): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000000)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}, {&(0x7f0000000200)}], 0x3}}], 0x1, 0x4800) 2.935937015s ago: executing program 0 (id=3320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x7fe, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x1, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x0, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x3, 0x100, 0xfffffffe, 0xd, 0xff, 0x3, 0xfffc, 0x6, 0x10a4, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0x1, 0x3, 0x2, 0x9, 0x81, 0x7, 0x8, 0x5, 0x10001, 0x8f7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xffffca9a, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x8, 0x6, 0x10007e, 0x8, 0x0, 0x5, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x9, 0x2, 0x2, 0x6, 0x3ff, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x180, 0x2f0cb955, 0x7, 0x8, 0xf, 0x6ae, 0x9, 0x0, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0x40ac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x3, 0xa, 0x3, 0xffffffff, 0x8, 0x9, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x5, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x206, 0x5f, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x6, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x4, 0x2, 0x1, 0x200, 0x0, 0x8, 0x7, 0x0, 0x80, 0x5, 0x8, 0x1, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0xafb, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0xa, 0xb}, {0x6, 0x1, 0xd, 0x800, 0x1}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 2.855094689s ago: executing program 0 (id=3321): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x1, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000"/52], 0x0) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002680)=""/147, 0x93}, 0x8}], 0x2, 0x40010022, 0x0) 2.737133905s ago: executing program 1 (id=3322): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6, 0x5c}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x6b, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.432524692s ago: executing program 3 (id=3326): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@auto_da_alloc}, {@nobarrier}, {@debug}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 2.119509248s ago: executing program 3 (id=3327): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x80}]}, 0x10) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.015770913s ago: executing program 3 (id=3328): socket$qrtr(0x2a, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.945886427s ago: executing program 0 (id=3329): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.88550951s ago: executing program 3 (id=3330): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) connect$unix(r1, &(0x7f00000003c0)=@file={0x1, './file2\x00'}, 0x6e) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6a00000000641100fc000000000000000000000000000001ff020000000000000000000000000001731d4e20"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000f14010028bd7000fbdbdf2509004500756d616405"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) openat(r1, &(0x7f0000000000)='./file0\x00', 0x63000, 0x62) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.449416483s ago: executing program 3 (id=3331): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x4, 0x0, [{0xb, 0x6, 0x9, 0x861, 0x9, 0x1, 0x5}, {0xa, 0x9, 0x2, 0x56, 0x9, 0x0, 0xed2}, {0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.300784291s ago: executing program 3 (id=3332): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="201006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x0, 0x11, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.269003123s ago: executing program 4 (id=3333): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 819.890647ms ago: executing program 2 (id=3334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x33}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000000)="b8", 0x1}], 0x1}, 0x404481c) 530.204402ms ago: executing program 2 (id=3335): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 457.726515ms ago: executing program 2 (id=3336): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90, 0x50000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 351.551982ms ago: executing program 4 (id=3337): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) 283.784925ms ago: executing program 2 (id=3338): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x33}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000000)="b8", 0x1}], 0x1}, 0x404481c) 222.097748ms ago: executing program 4 (id=3339): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x1, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aa"], 0x0) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002680)=""/147, 0x93}, 0x8}], 0x2, 0x40010022, 0x0) 0s ago: executing program 2 (id=3340): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$eJzs289vFFUcAPDvTH8AIhQRf4CoVWLSaGxpQeXgRaOJMRhN9IDH2i6kYaGGViNIpBjjycSQ6Jl4NPoXeDMmRj2ZcPXkyZAQ5QJ4qpnZGViGXaB2y5bu55NM+97Mm5337Zsfb97rBtCzhiNiISLujYg/ImIoIpJqgeHGr8sXT05duXhyKonFxbf/TvJyly6enCqLlvttLDIjaUT6WdLYuWLu+InDk/V67ViRH5s/8v7Y3PETz354ZPJQ7VDt6MS+fXv3jL/w/MRzHYkzi+vSjk9md25/7d0zb0wdOPPer98nRdxRiaNThrPA/1nMVbc91emDddmmpnTS38WKsCR9EZE110B+/Q9FX1xrvKF49dOuVg5YUdmzaV37zQuLwBqWRLdrAHRH+aDP3n/L5Q51PVaFCy81XoCyuC8XS2NLf6RFmYHK+20nDUfEgYV/z2ZLrNA4BABAsy+mvt4/GBEfX/nu9azvMRQR5XjQg/nPP/Ofm4s5lC0RcV9EbI2I+yNiW0Q8UJR9KCIeXmZ9buz/pOeX+ZE3lfX/Xizmtq7v/5W9v9jSV+Q25fEPJAdn6rXdsS7/m4zEwLosP36TY/z4yrkv221r7v9lS3b8si9Y1ON8f2WAbnpyfjLvlHbAhdMRO/pbxZ9cnQlIImJ7ROxY2kdvLhMzT3+7s12h1vFfOntbR+jAPNPiN1l4C1n8C1GJv5Q0z0/O3DA/ObY+6rXdY42zopXffv/8rXbHv3X7r6wLtcbvpvavFtmSNM/XznX2+P/z/E8Hk3fyeebBYt1Hk/Pzx8YjBpP9ef669RPX9i3zZfns/B/Z1fr631rsk8X/SERkJ/GjEfFYRDxe1P2JiHgyInbdJMZfXr51/JF2qf1PR0y3vP9dPf8r7b/0RN/hn39od/zba/+9eWqkWJPf/26hVXWy20W1gsv52wEAAMDdIs3/Bz5JR6+m03R0tPE//NvinrQ+Ozf/zMHZD45Ox7nNjfHPtBzpGirGQ+sz9dp4slB8YmN8dKIYKy7HS/cU48Zf9W3I86NTs/XpLscOvW5jm+s/81dft2sHrLANLddODN7xigBdUJ1HT6/Pnnoz3AxgrfJ9behd5fXf5n2/+XswwBrj+Q+9q9X1f6qSNxcAa5PnP/Qu1z/0qPSnZezsrQDudp7/0JOW873+FUysXx3V6E5itTZKnogoE+mqqI/ECiW6fWcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADojP8CAAD//68e5+k=") r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) kernel console output (not intermixed with test programs): ][ T4336] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.207496][ T4317] usb 1-1: USB disconnect, device number 61 [ 828.249363][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 828.260153][ T4336] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 828.279635][T14473] device veth0_macvtap entered promiscuous mode [ 828.301283][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 828.302303][ T4336] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 828.317690][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 828.392706][ T4336] usb 2-1: Product: syz [ 828.396942][ T4336] usb 2-1: Manufacturer: syz [ 828.401505][T14638] device syzkaller0 entered promiscuous mode [ 828.418660][T14473] device veth1_macvtap entered promiscuous mode [ 828.431706][ T4336] hub 2-1:4.0: USB hub found [ 828.441266][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 828.458876][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 828.488310][T14473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.500778][T14473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.516239][T14473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.525925][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 828.536039][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 828.548633][T14473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.560543][T14473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.573769][T14473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 828.630883][ T4336] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 829.932826][ T4336] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 830.114786][ T4336] usb 5-1: Using ep0 maxpacket: 16 [ 830.122211][ T4336] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 830.140355][ T4336] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 830.167150][ T4336] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 830.178015][ T4336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.186127][ T4336] usb 5-1: Product: syz [ 830.190431][ T4336] usb 5-1: Manufacturer: syz [ 830.197387][ T4336] usb 5-1: SerialNumber: syz [ 830.421409][ T4336] usb 5-1: 0:2 : does not exist [ 830.439974][ T4336] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 830.461466][ T4336] usb 5-1: USB disconnect, device number 55 [ 830.553710][ T8381] usb 2-1: reset high-speed USB device number 68 using dummy_hcd [ 830.693809][ T8305] udevd[8305]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 830.809334][ T8381] usb 2-1: device firmware changed [ 830.827350][ T8381] usb 2-1: USB disconnect, device number 68 [ 831.212784][ T8381] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 831.252747][ T4336] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 831.403082][ T8381] usb 2-1: Using ep0 maxpacket: 32 [ 831.411550][ T8381] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 831.420394][ T3770] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 831.428491][ T8381] usb 2-1: config 0 has no interface number 0 [ 831.435116][ T8381] usb 2-1: config 0 interface 184 has no altsetting 0 [ 831.445157][ T8381] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 831.454552][ T4336] usb 1-1: Using ep0 maxpacket: 16 [ 831.460044][ T8381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.468905][ T8381] usb 2-1: Product: syz [ 831.474086][ T8381] usb 2-1: Manufacturer: syz [ 831.479227][ T8381] usb 2-1: SerialNumber: syz [ 831.484872][ T4336] usb 1-1: unable to get BOS descriptor or descriptor too short [ 831.502600][ T8381] usb 2-1: config 0 descriptor?? [ 831.507883][ T4336] usb 1-1: no configurations [ 831.512507][ T4336] usb 1-1: can't read configurations, error -22 [ 831.521563][ T8381] smsc75xx v1.0.0 [ 831.548299][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 831.557610][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 831.568969][T14473] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.590818][T14473] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.608217][T14473] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.627167][T14473] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.636436][ T3770] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.657765][ T3770] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 831.668633][ T3770] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 831.678146][ T4336] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 831.687179][ T3770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.699712][ T3770] usb 5-1: config 0 descriptor?? [ 831.777603][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.793244][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.809924][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 831.843891][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.852543][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.866187][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 831.902810][ T4336] usb 1-1: Using ep0 maxpacket: 16 [ 831.918580][ T4336] usb 1-1: unable to get BOS descriptor or descriptor too short [ 831.938480][ T4336] usb 1-1: no configurations [ 831.948587][ T4336] usb 1-1: can't read configurations, error -22 [ 831.961889][ T4336] usb usb1-port1: attempt power cycle [ 832.131234][ T8381] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 832.142862][ T8381] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 832.239799][T14689] binder: 14688:14689 ioctl 4018620d 0 returned -22 [ 832.253112][ T4573] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 832.392854][ T4336] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 832.432756][ T4573] usb 4-1: Using ep0 maxpacket: 16 [ 832.438365][ T4336] usb 1-1: Using ep0 maxpacket: 16 [ 832.442566][ T4573] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 832.446339][ T4336] usb 1-1: unable to get BOS descriptor or descriptor too short [ 832.452139][ T4573] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.460344][ T4336] usb 1-1: no configurations [ 832.472323][ T4573] usb 4-1: config 0 has no interface number 0 [ 832.475193][ T4336] usb 1-1: can't read configurations, error -22 [ 832.481140][ T4573] usb 4-1: config 0 interface 34 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 832.499891][ T4573] usb 4-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 832.516354][ T4573] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 832.525847][ T4573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.535132][ T4573] usb 4-1: Product: syz [ 832.539334][ T4573] usb 4-1: Manufacturer: syz [ 832.544471][ T4573] usb 4-1: SerialNumber: syz [ 832.551724][ T4573] usb 4-1: config 0 descriptor?? [ 832.559214][ T4573] asix: probe of 4-1:0.34 failed with error -22 [ 832.642865][ T4336] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 832.683448][ T4336] usb 1-1: Using ep0 maxpacket: 16 [ 832.690493][ T4336] usb 1-1: unable to get BOS descriptor or descriptor too short [ 832.698618][ T4336] usb 1-1: no configurations [ 832.703488][ T4336] usb 1-1: can't read configurations, error -22 [ 832.710084][ T4336] usb usb1-port1: unable to enumerate USB device [ 833.209375][T14699] loop2: detected capacity change from 0 to 1024 [ 833.230947][T14699] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 833.248315][T14699] ext4 filesystem being mounted at /552/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 833.275537][T14699] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 1: comm syz.2.2923: lblock 1 mapped to illegal pblock 1 (length 1) [ 833.290408][T14699] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 833.304567][T14699] EXT4-fs (loop2): This should not happen!! Data will be lost [ 833.304567][T14699] [ 833.318841][T14699] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 1: comm syz.2.2923: lblock 1 mapped to illegal pblock 1 (length 1) [ 833.342785][T14699] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 1: comm syz.2.2923: lblock 1 mapped to illegal pblock 1 (length 1) [ 833.360120][T14699] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 1: comm syz.2.2923: lblock 1 mapped to illegal pblock 1 (length 1) [ 833.374611][ T8381] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 833.385584][ T8381] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 833.386337][T14698] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 1: comm syz.2.2923: lblock 1 mapped to illegal pblock 1 (length 1) [ 833.395373][ T8381] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 833.395515][ T8381] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 833.426830][T14698] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 1: comm syz.2.2923: lblock 1 mapped to illegal pblock 1 (length 1) [ 833.445123][T14699] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 1: comm syz.2.2923: lblock 1 mapped to illegal pblock 1 (length 1) [ 833.461003][T14699] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 1: comm syz.2.2923: lblock 1 mapped to illegal pblock 1 (length 1) [ 833.476102][T14698] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 1: comm syz.2.2923: lblock 1 mapped to illegal pblock 1 (length 1) [ 833.490921][T14698] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 1: comm syz.2.2923: lblock 1 mapped to illegal pblock 1 (length 1) [ 834.233698][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 834.281896][ T4573] usb 5-1: USB disconnect, device number 56 [ 834.417329][ T4317] usb 2-1: USB disconnect, device number 69 [ 834.437161][T14717] device syzkaller0 entered promiscuous mode [ 834.605107][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 834.619688][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 834.628983][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 834.637710][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 834.648956][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 834.657988][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 834.697623][T14723] lo speed is unknown, defaulting to 1000 [ 834.788849][ T4570] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 834.807661][T14727] tipc: Enabled bearer , priority 10 [ 834.889336][T14731] binder: 14730:14731 ioctl 4018620d 0 returned -22 [ 834.904910][ T4570] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 835.021926][ T4570] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 835.078141][ T4317] usb 4-1: USB disconnect, device number 66 [ 835.138509][ T4570] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 835.164077][T14740] loop1: detected capacity change from 0 to 512 [ 835.200486][T14740] EXT4-fs: Ignoring removed mblk_io_submit option [ 835.250961][T14740] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.2933: corrupted in-inode xattr [ 835.302497][T14723] chnl_net:caif_netlink_parms(): no params data found [ 835.303755][T14740] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.2933: couldn't read orphan inode 15 (err -117) [ 835.327793][T14740] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 835.386270][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 835.442942][ T4573] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 835.609888][T14723] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.638420][T14723] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.647919][T14723] device bridge_slave_0 entered promiscuous mode [ 835.668768][ T4570] tipc: Left network mode [ 835.683921][T14723] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.703061][T14723] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.711268][T14723] device bridge_slave_1 entered promiscuous mode [ 835.739080][T14723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.748822][T10851] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 835.766142][T14723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.785428][ T4573] usb 3-1: Using ep0 maxpacket: 8 [ 835.806228][ T4573] usb 3-1: no configurations [ 835.812994][ T4573] usb 3-1: can't read configurations, error -22 [ 835.942781][T10851] usb 4-1: Using ep0 maxpacket: 32 [ 835.959834][T14723] team0: Port device team_slave_0 added [ 835.966182][T10851] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 835.975583][ T4357] tipc: Node number set to 3868636703 [ 835.985440][ T4573] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 835.996379][T10851] usb 4-1: config 0 has no interface number 0 [ 836.003886][T10851] usb 4-1: config 0 interface 184 has no altsetting 0 [ 836.036656][T10851] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 836.049448][T10851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.058628][T10851] usb 4-1: Product: syz [ 836.067638][T10851] usb 4-1: Manufacturer: syz [ 836.077702][T10851] usb 4-1: SerialNumber: syz [ 836.091755][T14723] team0: Port device team_slave_1 added [ 836.099953][T10851] usb 4-1: config 0 descriptor?? [ 836.119628][T10851] smsc75xx v1.0.0 [ 836.182757][ T4573] usb 3-1: Using ep0 maxpacket: 8 [ 836.188999][ T4573] usb 3-1: no configurations [ 836.195277][T14723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.203039][T14723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.230165][ T4573] usb 3-1: can't read configurations, error -22 [ 836.237205][ T4573] usb usb3-port1: attempt power cycle [ 836.244314][T14723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.294464][T14723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.302555][T14723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.354859][T14723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.569824][T14723] device hsr_slave_0 entered promiscuous mode [ 836.580682][T14723] device hsr_slave_1 entered promiscuous mode [ 836.589301][T14723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 836.600643][T14723] Cannot create hsr debugfs directory [ 836.703150][ T4278] Bluetooth: hci2: command 0x0409 tx timeout [ 836.755288][ T4573] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 836.767673][T10851] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 836.832858][T14781] loop1: detected capacity change from 0 to 256 [ 836.896123][T14781] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 837.016340][ T4573] usb 3-1: Using ep0 maxpacket: 8 [ 837.038252][T10851] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 837.099541][ T4573] usb 3-1: no configurations [ 837.212288][ T4573] usb 3-1: can't read configurations, error -22 [ 837.492424][T10851] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 837.538698][T10851] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 837.592884][ T4573] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 837.604832][T10851] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 837.649273][T10851] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 837.658537][ T4573] usb 3-1: Using ep0 maxpacket: 8 [ 837.667506][ T4573] usb 3-1: no configurations [ 837.693877][ T4573] usb 3-1: can't read configurations, error -22 [ 837.747934][ T4573] usb usb3-port1: unable to enumerate USB device [ 838.245914][T10851] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 838.457452][T10851] usb 5-1: Using ep0 maxpacket: 16 [ 838.484386][T10851] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 838.492559][T10851] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.559103][T10851] usb 5-1: config 0 has no interface number 0 [ 838.572335][T10851] usb 5-1: config 0 interface 34 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 838.582174][ T8381] usb 4-1: USB disconnect, device number 67 [ 838.609939][T10851] usb 5-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 838.657905][T10851] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 838.683490][T10851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.691556][T10851] usb 5-1: Product: syz [ 838.712094][T10851] usb 5-1: Manufacturer: syz [ 838.736255][T10851] usb 5-1: SerialNumber: syz [ 838.749003][T10851] usb 5-1: config 0 descriptor?? [ 838.792770][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 838.794086][T10851] asix: probe of 5-1:0.34 failed with error -22 [ 839.188944][T14819] binder: 14816:14819 ioctl 4018620d 0 returned -22 [ 839.729011][ T4570] device hsr_slave_0 left promiscuous mode [ 839.737772][ T4570] device hsr_slave_1 left promiscuous mode [ 839.748905][ T4570] device bridge_slave_1 left promiscuous mode [ 839.760565][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.776686][ T4570] device bridge_slave_0 left promiscuous mode [ 839.786430][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.971678][ T4570] bond2 (unregistering): Released all slaves [ 839.997421][ T4570] bond1 (unregistering): (slave geneve2): Releasing active interface [ 840.243805][ T4570] bond1 (unregistering): Released all slaves [ 840.872888][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 841.044179][ T8381] usb 5-1: USB disconnect, device number 57 [ 841.134700][ T4570] team0 (unregistering): Port device team_slave_1 removed [ 841.269298][ T4570] team0 (unregistering): Port device team_slave_0 removed [ 841.321940][ T4570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.380081][ T4570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.512889][ T4336] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 841.633089][ T8381] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 841.712769][ T4336] usb 4-1: Using ep0 maxpacket: 8 [ 841.719733][ T4336] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.733825][ T4336] usb 4-1: config 0 has no interfaces? [ 841.733966][ T4570] bond0 (unregistering): Released all slaves [ 841.739338][ T4336] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 841.758519][ T4336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.776166][ T4336] usb 4-1: config 0 descriptor?? [ 841.832708][ T8381] usb 5-1: Using ep0 maxpacket: 32 [ 841.840547][ T8381] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 841.848988][ T8381] usb 5-1: config 0 has no interface number 0 [ 841.856819][ T8381] usb 5-1: config 0 interface 184 has no altsetting 0 [ 841.873652][T14836] netlink: 'syz.1.2952': attribute type 1 has an invalid length. [ 841.888284][ T8381] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 841.902292][ T8381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.913759][ T8381] usb 5-1: Product: syz [ 841.917982][ T8381] usb 5-1: Manufacturer: syz [ 841.923026][ T8381] usb 5-1: SerialNumber: syz [ 841.935628][ T8381] usb 5-1: config 0 descriptor?? [ 841.945790][ T8381] smsc75xx v1.0.0 [ 841.964955][T14723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 842.011465][T14723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 842.046415][T14723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 842.097168][T14723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 842.471623][T14723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.509931][T13044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 842.520498][T13044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 842.561534][ T8381] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 842.579893][ T8381] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 842.585828][T14723] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.637032][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 842.663654][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 842.677659][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.684844][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.703660][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 842.712299][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 842.745781][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 842.775846][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.783061][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.814349][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 842.855891][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 842.867119][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 842.888552][T14871] binder: BINDER_SET_CONTEXT_MGR already set [ 842.894977][T14871] binder: 14870:14871 ioctl 4018620d 200000004a80 returned -16 [ 842.899570][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 842.917393][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 842.944660][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 842.953085][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 842.968917][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 842.980624][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 842.992094][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 843.008063][T14723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 843.020933][T14723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 843.033052][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 843.044039][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 843.611784][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 843.636647][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 843.657765][T14723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.688722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 843.748086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 843.807710][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 843.823078][ T8381] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 843.851465][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 843.857326][ T8381] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 843.879017][T14723] device veth0_vlan entered promiscuous mode [ 843.886941][ T8381] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 843.892564][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 843.902797][ T8381] smsc75xx: probe of 5-1:0.184 failed with error -32 [ 843.910465][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 843.919418][T14723] device veth1_vlan entered promiscuous mode [ 843.920102][T14895] binder: BINDER_SET_CONTEXT_MGR already set [ 843.930133][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 843.943227][T14895] binder: 14894:14895 ioctl 4018620d 200000004a80 returned -16 [ 843.985783][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 843.997217][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 844.013933][T14723] device veth0_macvtap entered promiscuous mode [ 844.036028][T14723] device veth1_macvtap entered promiscuous mode [ 844.057302][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.068672][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.081256][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.095496][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.110014][T14723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.119986][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 844.129303][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 844.137819][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 844.149553][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 844.163228][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.174937][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.186449][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.197725][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.216674][T14723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.224103][ T4317] usb 4-1: USB disconnect, device number 68 [ 844.230326][T14723] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.252676][T14723] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.261421][T14723] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.282029][T14723] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.297671][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 844.306871][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 844.377187][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.391372][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.403737][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 844.425157][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.433294][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.440966][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 844.642946][ T4317] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 844.756635][ T4336] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 844.833022][ T4317] usb 4-1: Using ep0 maxpacket: 16 [ 844.857185][ T4317] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 844.886221][ T4317] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.917326][ T4317] usb 4-1: config 0 has no interface number 0 [ 844.968481][ T4317] usb 4-1: config 0 interface 34 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 845.003478][ T4336] usb 1-1: device descriptor read/64, error -71 [ 845.010756][ T4317] usb 4-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 845.069645][ T4357] usb 5-1: USB disconnect, device number 58 [ 845.081675][ T4317] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 845.111748][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.138163][ T4317] usb 4-1: Product: syz [ 845.146896][ T4317] usb 4-1: Manufacturer: syz [ 845.151900][ T4317] usb 4-1: SerialNumber: syz [ 845.181337][ T4317] usb 4-1: config 0 descriptor?? [ 845.205852][ T4317] asix: probe of 4-1:0.34 failed with error -22 [ 845.315734][ T4336] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 845.402656][T10512] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 845.415455][T10512] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 845.429222][T10512] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 845.442212][T10512] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 845.458481][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 845.467321][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 845.502901][ T4336] usb 1-1: device descriptor read/64, error -71 [ 845.546211][T14918] lo speed is unknown, defaulting to 1000 [ 845.702193][ T4336] usb usb1-port1: attempt power cycle [ 845.785712][T14918] chnl_net:caif_netlink_parms(): no params data found [ 845.806897][T14926] binder: BINDER_SET_CONTEXT_MGR already set [ 845.813885][T14926] binder: 14925:14926 ioctl 4018620d 200000004a80 returned -16 [ 845.866102][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.877075][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 845.919142][T14918] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.927603][T14918] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.936063][T14918] device bridge_slave_0 entered promiscuous mode [ 845.975776][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.995513][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 846.024150][T14918] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.037603][T14918] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.046819][T14918] device bridge_slave_1 entered promiscuous mode [ 846.107566][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.118465][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 846.129759][ T4336] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 846.146640][T14918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.159583][T14918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.169938][ T4336] usb 1-1: device descriptor read/8, error -71 [ 846.215025][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.226096][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 846.245955][T14918] team0: Port device team_slave_0 added [ 846.263963][T14918] team0: Port device team_slave_1 added [ 846.313645][T14918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.325251][T14918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.357011][T14918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.369610][T14918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.379445][T14918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.408223][T14918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.452835][ T4336] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 846.465508][T14918] device hsr_slave_0 entered promiscuous mode [ 846.472608][T14918] device hsr_slave_1 entered promiscuous mode [ 846.480137][T14918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 846.488043][T14918] Cannot create hsr debugfs directory [ 846.493841][ T4336] usb 1-1: device descriptor read/8, error -71 [ 846.614448][ T4336] usb usb1-port1: unable to enumerate USB device [ 847.062554][T14941] device syzkaller0 entered promiscuous mode [ 847.339098][ T4317] usb 4-1: USB disconnect, device number 69 [ 847.582942][T10512] Bluetooth: hci5: command 0x0409 tx timeout [ 847.619717][T14967] binder: BINDER_SET_CONTEXT_MGR already set [ 847.651021][T14967] binder: 14966:14967 ioctl 4018620d 200000004a80 returned -16 [ 849.676397][T10512] Bluetooth: hci5: command 0x041b tx timeout [ 849.908666][T14986] binder: BINDER_SET_CONTEXT_MGR already set [ 849.923437][T14986] binder: 14985:14986 ioctl 4018620d 200000004a80 returned -16 [ 851.186103][ T4317] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 851.389031][ T4317] usb 4-1: Using ep0 maxpacket: 32 [ 851.430926][ T4317] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 851.449829][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.469418][ T4317] usb 4-1: config 0 descriptor?? [ 851.487074][ T4317] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 851.744255][ T4278] Bluetooth: hci5: command 0x040f tx timeout [ 853.110815][ T4317] gspca_vc032x: reg_w err -71 [ 853.119304][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 853.129996][T15005] binder: 15003:15005 ioctl 4018620d 0 returned -22 [ 853.149706][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 853.159830][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 853.178458][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 853.190055][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 853.217826][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 853.227953][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 853.242794][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 853.248236][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 853.263071][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 853.280422][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 853.290551][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 853.300667][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 853.310237][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 853.316180][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 853.323002][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 853.328565][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 853.334298][ T4317] gspca_vc032x: I2c Bus Busy Wait 00 [ 853.339886][ T4317] gspca_vc032x: Unknown sensor... [ 853.348068][ T4317] vc032x: probe of 4-1:0.0 failed with error -22 [ 853.371062][ T4317] usb 4-1: USB disconnect, device number 70 [ 853.612159][T14918] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 853.653610][T14918] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 853.798986][T14918] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 853.823045][ T4278] Bluetooth: hci5: command 0x0419 tx timeout [ 853.855527][T15038] binder: 15036:15038 ioctl c0306201 0 returned -14 [ 853.914819][T15026] device syzkaller0 entered promiscuous mode [ 853.922298][T14918] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 856.180073][T15061] binder: 15060:15061 ioctl 4018620d 0 returned -22 [ 857.313022][T11545] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 857.547891][T11545] usb 4-1: Using ep0 maxpacket: 16 [ 857.601626][T11545] usb 4-1: unable to get BOS descriptor or descriptor too short [ 857.611283][T11545] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.636689][T11545] usb 4-1: config 0 has no interfaces? [ 857.654559][T11545] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 857.667442][T11545] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.677091][T11545] usb 4-1: Product: syz [ 857.681305][T11545] usb 4-1: Manufacturer: syz [ 857.686333][T11545] usb 4-1: SerialNumber: syz [ 857.698581][T11545] usb 4-1: config 0 descriptor?? [ 859.221843][T14918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.289073][T13044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 859.307401][T13044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 859.384440][T11545] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 859.460629][T14918] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.479007][T13044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 859.490205][T13044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 859.505755][T13044] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.512991][T13044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.555419][T13044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 859.566199][T13044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 859.576583][T13044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 859.585076][T11545] usb 3-1: Using ep0 maxpacket: 16 [ 859.594119][T11545] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 859.603166][T13044] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.610333][T13044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.619045][T11545] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 859.630081][T13044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 859.642498][T11545] usb 3-1: config 1 has no interface number 0 [ 859.651841][T11545] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 859.668970][T11545] usb 3-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 859.686278][T11545] usb 3-1: config 1 interface 105 has no altsetting 0 [ 859.703224][ T46] device hsr_slave_0 left promiscuous mode [ 859.711238][T11545] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 859.725648][T11545] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 859.735469][T11545] usb 3-1: Product: syz [ 859.739772][T11545] usb 3-1: Manufacturer: syz [ 859.745770][T11545] usb 3-1: SerialNumber: syz [ 859.755001][T15071] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 859.762473][ T46] device hsr_slave_1 left promiscuous mode [ 859.770147][ T46] device bridge_slave_1 left promiscuous mode [ 859.779142][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.790760][ T46] device bridge_slave_0 left promiscuous mode [ 859.797531][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.805676][ T4573] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 859.885871][ T46] device veth1_macvtap left promiscuous mode [ 859.902919][ T46] device veth0_macvtap left promiscuous mode [ 859.909133][ T46] device veth1_vlan left promiscuous mode [ 859.923357][ T46] device veth0_vlan left promiscuous mode [ 859.980994][T11545] aqc111: probe of 3-1:1.105 failed with error -22 [ 859.992942][ T4573] usb 2-1: Using ep0 maxpacket: 16 [ 860.003315][ T4573] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 860.027809][ T4573] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.042579][ T4573] usb 2-1: config 0 has no interface number 0 [ 860.050326][ T4573] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 860.055910][T11545] usb 4-1: USB disconnect, device number 71 [ 860.065743][ T4573] usb 2-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 860.114644][ T4573] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 860.124495][ T4573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.137892][ T4573] usb 2-1: Product: syz [ 860.142112][ T4573] usb 2-1: Manufacturer: syz [ 860.151787][T15082] binder: 15081:15082 ioctl c0306201 0 returned -14 [ 860.158832][ T4573] usb 2-1: SerialNumber: syz [ 860.169069][ T4573] usb 2-1: config 0 descriptor?? [ 860.175522][T15080] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 860.188591][ T4573] asix: probe of 2-1:0.34 failed with error -22 [ 860.259733][ T46] bond3 (unregistering): Released all slaves [ 860.274900][ T46] bond2 (unregistering): Released all slaves [ 860.300120][ T46] bond1 (unregistering): (slave geneve2): Releasing active interface [ 860.315198][ T46] bond1 (unregistering): Released all slaves [ 860.985159][ T46] team0 (unregistering): Port device team_slave_1 removed [ 861.077282][ T46] team0 (unregistering): Port device team_slave_0 removed [ 861.131773][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.220560][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.664598][ T46] bond0 (unregistering): Released all slaves [ 861.774135][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 861.787873][T15098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 861.840363][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 861.914250][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 861.929588][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 861.939680][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 861.954201][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 862.092209][T14918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 862.125412][ T4573] usb 3-1: USB disconnect, device number 78 [ 862.490314][T14918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 863.905365][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 863.933194][ T4359] usb 2-1: USB disconnect, device number 70 [ 863.943381][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 864.266977][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 864.430196][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 864.906300][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 865.077371][T15132] sch_tbf: burst 33 is lower than device syzkaller0 mtu (1500) ! [ 865.087746][T15132] device syzkaller0 entered promiscuous mode [ 865.489377][T15142] binder: 15141:15142 ioctl c0306201 0 returned -14 [ 865.511205][T15143] loop2: detected capacity change from 0 to 512 [ 865.580396][T15143] EXT4-fs (loop2): 1 truncate cleaned up [ 865.606831][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 865.614689][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 865.642573][T15143] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 865.659387][T14918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.667900][ T27] audit: type=1800 audit(1776467102.588:2076): pid=15143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3020" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 865.714455][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 865.985412][ T4359] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 866.048328][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 866.057934][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 866.086685][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 866.095947][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 866.105478][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 866.114025][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 866.124833][T14918] device veth0_vlan entered promiscuous mode [ 866.138695][T14918] device veth1_vlan entered promiscuous mode [ 866.162421][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 866.171006][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 866.180032][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 866.183554][ T4359] usb 1-1: Using ep0 maxpacket: 16 [ 866.189848][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 866.200232][ T4359] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 866.213178][T14918] device veth0_macvtap entered promiscuous mode [ 866.222246][T14918] device veth1_macvtap entered promiscuous mode [ 866.229485][ T4359] usb 1-1: config 1 has no interface number 0 [ 866.237993][ T4359] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 866.254867][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.265960][ T4359] usb 1-1: config 1 interface 105 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 866.276732][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.286627][ T4359] usb 1-1: config 1 interface 105 has no altsetting 0 [ 866.294427][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.315238][ T4359] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 866.325674][ T4359] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 866.335556][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.346464][ T4359] usb 1-1: Product: syz [ 866.350684][ T4359] usb 1-1: Manufacturer: syz [ 866.359059][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.370574][ T4359] usb 1-1: SerialNumber: syz [ 866.387257][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.408022][T15166] binder: BINDER_SET_CONTEXT_MGR already set [ 866.409208][T15151] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 866.415093][T15166] binder: 15165:15166 ioctl 4018620d 200000000100 returned -16 [ 866.438734][T14918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 866.451106][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 866.463864][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 866.483008][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 866.492239][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 866.515345][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.541478][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.552201][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.563901][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.574952][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.585877][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.598661][T14918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 866.608768][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 866.620267][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 866.644855][ T4357] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 866.645827][ T4359] aqc111: probe of 1-1:1.105 failed with error -22 [ 866.662175][T14918] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.695824][T14918] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.705008][T14918] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.714894][T14918] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.832823][ T4357] usb 4-1: Using ep0 maxpacket: 16 [ 866.840634][ T4357] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 866.851515][ T4357] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.863575][ T4357] usb 4-1: config 0 has no interface number 0 [ 866.869713][ T4357] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 866.880063][ T4357] usb 4-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 866.898534][ T4357] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 866.909949][ T4357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.919497][ T4357] usb 4-1: Product: syz [ 866.924006][ T4357] usb 4-1: Manufacturer: syz [ 866.928636][ T4357] usb 4-1: SerialNumber: syz [ 866.935387][ T4357] usb 4-1: config 0 descriptor?? [ 866.941114][T15164] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 866.952318][ T4357] asix: probe of 4-1:0.34 failed with error -22 [ 868.736967][T14916] usb 1-1: USB disconnect, device number 70 [ 868.808732][T15154] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 868.901150][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.916011][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.954719][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 868.970325][T14984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.979555][T14984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.006550][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 869.149974][T15199] fuse: Bad value for 'fd' [ 869.244248][T14916] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 869.302297][T15206] loop1: detected capacity change from 0 to 512 [ 869.321745][T15206] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3039: invalid indirect mapped block 256 (level 2) [ 869.338532][T15206] EXT4-fs (loop1): 2 truncates cleaned up [ 869.344433][T15206] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 869.417206][ T4573] usb 4-1: USB disconnect, device number 72 [ 869.432983][T14916] usb 1-1: Using ep0 maxpacket: 16 [ 869.440763][T14916] usb 1-1: unable to get BOS descriptor or descriptor too short [ 869.453777][T14916] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 869.464588][T14916] usb 1-1: config 12 has 0 interfaces, different from the descriptor's value: 1 [ 869.466815][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 869.476917][T14916] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 869.489610][T14916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.498654][T14916] usb 1-1: Product: syz [ 869.503303][T14916] usb 1-1: Manufacturer: syz [ 869.508063][T14916] usb 1-1: SerialNumber: syz [ 869.547608][T15211] loop3: detected capacity change from 0 to 512 [ 869.563898][T15211] EXT4-fs: Ignoring removed nobh option [ 869.618884][T15214] qrtr: Invalid version 0 [ 869.632466][T15211] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 869.646922][T15211] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 869.719572][T14473] EXT4-fs (loop3): unmounting filesystem. [ 870.052807][ T4336] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 870.232868][ T4336] usb 2-1: Using ep0 maxpacket: 16 [ 870.242159][ T4336] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 870.254009][ T4336] usb 2-1: config 1 has no interface number 0 [ 870.260254][ T4336] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 870.274431][ T4336] usb 2-1: config 1 interface 105 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 870.288880][ T4336] usb 2-1: config 1 interface 105 has no altsetting 0 [ 870.301186][ T4336] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 870.317561][ T4336] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 870.326546][ T4336] usb 2-1: Product: syz [ 870.330884][ T4336] usb 2-1: Manufacturer: syz [ 870.337637][ T4336] usb 2-1: SerialNumber: syz [ 870.347973][T15217] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 870.385032][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.391477][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.578996][ T4336] aqc111: probe of 2-1:1.105 failed with error -22 [ 870.623042][T15231] loop4: detected capacity change from 0 to 2048 [ 870.670965][T15231] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 870.831426][T14918] EXT4-fs (loop4): unmounting filesystem. [ 870.838037][T15240] fuse: Unknown parameter '0x0000000000000004' [ 870.958065][T15244] qrtr: Invalid version 0 [ 871.108493][T15251] loop3: detected capacity change from 0 to 256 [ 871.172749][ T4336] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 872.102897][ T4336] usb 5-1: Using ep0 maxpacket: 16 [ 872.105410][ T4336] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 872.105436][ T4336] usb 5-1: config 0 has no interface number 0 [ 872.105466][ T4336] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 872.105490][ T4336] usb 5-1: config 0 interface 34 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 872.113592][ T4336] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 872.113620][ T4336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.113640][ T4336] usb 5-1: Product: syz [ 872.113656][ T4336] usb 5-1: Manufacturer: syz [ 872.113670][ T4336] usb 5-1: SerialNumber: syz [ 872.124242][ T4336] usb 5-1: config 0 descriptor?? [ 872.124886][T15242] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 872.147185][ T4336] asix: probe of 5-1:0.34 failed with error -22 [ 872.215571][ T4573] usb 1-1: USB disconnect, device number 71 [ 872.775435][T14916] usb 2-1: USB disconnect, device number 71 [ 872.818820][T15279] fuse: Unknown parameter '0x0000000000000004' [ 872.874222][T15281] qrtr: Invalid version 0 [ 872.972871][T12164] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 873.152825][T12164] usb 3-1: Using ep0 maxpacket: 32 [ 873.159897][T12164] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 873.169917][T12164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.180864][T12164] usb 3-1: config 0 descriptor?? [ 873.205018][T12164] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 873.293437][T14916] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 873.416550][T12164] gspca_vc032x: reg_r err -32 [ 873.423545][T12164] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.428880][T12164] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.435918][T12164] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.441373][T12164] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.447199][T12164] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.455625][T12164] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.462303][T12164] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.467860][T12164] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.475278][T12164] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.480614][T12164] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.486324][T12164] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.492117][T12164] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.498077][T12164] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.503836][T12164] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.510008][T14916] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 873.519354][T12164] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.534956][T14916] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 873.544816][T12164] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.550156][T12164] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.555805][T14916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.564302][T12164] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.569917][T14916] usb 2-1: Product: syz [ 873.574727][T12164] gspca_vc032x: Unknown sensor... [ 873.580094][T14916] usb 2-1: Manufacturer: syz [ 873.586447][T14916] usb 2-1: SerialNumber: syz [ 873.591497][T12164] vc032x: probe of 3-1:0.0 failed with error -22 [ 873.621632][T14916] usb 2-1: config 0 descriptor?? [ 873.660693][T15300] loop3: detected capacity change from 0 to 1024 [ 873.739372][T15300] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 873.749082][T15300] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 873.774530][T15300] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.3071: lblock 0 mapped to illegal pblock 0 (length 6) [ 873.812106][T15300] EXT4-fs error (device loop3): ext4_ext_remove_space:2930: inode #15: comm syz.3.3071: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 873.828021][T15309] fuse: Unknown parameter '0x0000000000000004' [ 873.912338][T14473] EXT4-fs (loop3): unmounting filesystem. [ 873.930960][ T8381] usb 5-1: USB disconnect, device number 59 [ 875.114670][T15347] loop4: detected capacity change from 0 to 256 [ 875.187247][T15349] fuse: Unknown parameter '0x0000000000000004' [ 875.189109][T15347] FAT-fs (loop4): Directory bread(block 64) failed [ 875.215556][T15347] FAT-fs (loop4): Directory bread(block 65) failed [ 875.222967][T15347] FAT-fs (loop4): Directory bread(block 66) failed [ 875.229646][T15347] FAT-fs (loop4): Directory bread(block 67) failed [ 875.236602][T15347] FAT-fs (loop4): Directory bread(block 68) failed [ 875.243407][T15347] FAT-fs (loop4): Directory bread(block 69) failed [ 875.259632][T15347] FAT-fs (loop4): Directory bread(block 70) failed [ 875.286331][T15347] FAT-fs (loop4): Directory bread(block 71) failed [ 875.293530][T15347] FAT-fs (loop4): Directory bread(block 72) failed [ 875.300239][T15347] FAT-fs (loop4): Directory bread(block 73) failed [ 875.332307][T15353] loop3: detected capacity change from 0 to 1024 [ 875.393148][T15353] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 875.407663][T15353] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 875.451034][T15347] Cannot find set identified by id 0 to match [ 875.451365][T15353] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.3086: lblock 0 mapped to illegal pblock 0 (length 6) [ 875.481629][T15353] EXT4-fs error (device loop3): ext4_ext_remove_space:2930: inode #15: comm syz.3.3086: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 875.579655][T14473] EXT4-fs (loop3): unmounting filesystem. [ 875.759927][ T4336] usb 3-1: USB disconnect, device number 79 [ 875.892727][ T4317] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 875.974942][ T8381] usb 2-1: USB disconnect, device number 72 [ 876.083801][ T4317] usb 5-1: Using ep0 maxpacket: 16 [ 876.096889][ T4317] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 876.113803][ T4317] usb 5-1: config 0 has no interface number 0 [ 876.119974][ T4317] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 876.134790][ T4317] usb 5-1: config 0 interface 34 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 876.165432][ T4317] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 876.186784][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.194988][ T4317] usb 5-1: Product: syz [ 876.199186][ T4317] usb 5-1: Manufacturer: syz [ 876.207983][ T4317] usb 5-1: SerialNumber: syz [ 876.221759][ T4317] usb 5-1: config 0 descriptor?? [ 876.243034][T15358] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 876.256735][ T4317] asix: probe of 5-1:0.34 failed with error -22 [ 876.443863][T10512] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 876.455758][T10512] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 876.471724][T10512] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 876.485640][T10512] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 876.494271][T10512] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 876.501562][T10512] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 876.567203][T15369] lo speed is unknown, defaulting to 1000 [ 876.781468][T15369] chnl_net:caif_netlink_parms(): no params data found [ 876.885130][T15369] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.902782][T15369] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.911188][T15369] device bridge_slave_0 entered promiscuous mode [ 876.936143][T15369] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.956906][T15369] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.983079][T15369] device bridge_slave_1 entered promiscuous mode [ 877.048127][T15369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.065662][T15369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.089668][T15369] team0: Port device team_slave_0 added [ 877.095690][ T4317] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 877.105835][T15369] team0: Port device team_slave_1 added [ 877.124358][T15369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.131344][T15369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.157837][T15369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.170260][T15369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.177665][T15369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.204304][T15369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.236973][T15369] device hsr_slave_0 entered promiscuous mode [ 877.244019][T15369] device hsr_slave_1 entered promiscuous mode [ 877.250581][T15369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 877.258474][T15369] Cannot create hsr debugfs directory [ 877.302978][ T4317] usb 4-1: Using ep0 maxpacket: 32 [ 877.309727][ T4317] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.332694][ T4317] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.358176][ T4317] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 877.368859][ T4317] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 877.377885][ T4317] usb 4-1: Product: syz [ 877.382167][ T4317] usb 4-1: Manufacturer: syz [ 877.386885][T15333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 877.392048][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.431870][ T4317] hub 4-1:4.0: USB hub found [ 877.628372][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.635642][ T4317] hub 4-1:4.0: 2 ports detected [ 877.718168][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.791009][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.083590][ T46] tipc: Disabling bearer [ 878.097053][ T46] tipc: Left network mode [ 878.458309][ T4317] usb 4-1: USB disconnect, device number 73 [ 878.536590][T15413] tipc: Started in network mode [ 878.545734][T15413] tipc: Node identity 2af08545e977, cluster identity 4711 [ 878.558360][T10512] Bluetooth: hci3: command 0x0409 tx timeout [ 878.566109][T15413] tipc: Enabled bearer , priority 0 [ 878.658326][T15412] tipc: Disabling bearer [ 878.727373][ T4317] usb 5-1: USB disconnect, device number 60 [ 879.269368][T15369] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 879.310591][T15369] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 879.322914][T15369] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 879.335306][T15369] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 879.700276][T15446] loop4: detected capacity change from 0 to 2048 [ 879.707367][T15448] tipc: Started in network mode [ 879.716700][T15448] tipc: Node identity ce6388f8ace5, cluster identity 4711 [ 879.745876][T15448] tipc: Enabled bearer , priority 0 [ 879.779042][T15451] sch_tbf: burst 33 is lower than device syzkaller0 mtu (1500) ! [ 879.809001][T15446] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 879.827402][T15447] tipc: Disabling bearer [ 879.847576][T15446] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #12: block 2: comm syz.4.3111: lblock 0 mapped to illegal pblock 2 (length 1) [ 879.870818][T15369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.962105][T14918] EXT4-fs (loop4): unmounting filesystem. [ 880.069127][T15460] device syzkaller0 entered promiscuous mode [ 880.083265][ T7] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 880.190642][ T46] device hsr_slave_0 left promiscuous mode [ 880.197495][ T46] device hsr_slave_1 left promiscuous mode [ 880.214639][ T46] device bridge_slave_1 left promiscuous mode [ 880.223203][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.242565][ T46] device bridge_slave_0 left promiscuous mode [ 880.250085][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.302693][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 880.310183][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 880.312900][T14916] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 880.331160][ T7] usb 1-1: config 12 has 0 interfaces, different from the descriptor's value: 1 [ 880.347499][ T46] device veth1_macvtap left promiscuous mode [ 880.354904][ T7] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 880.360477][ T46] device veth0_macvtap left promiscuous mode [ 880.374470][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.382646][ T7] usb 1-1: Product: syz [ 880.386855][ T7] usb 1-1: Manufacturer: syz [ 880.391520][ T7] usb 1-1: SerialNumber: syz [ 880.391679][ T46] device veth1_vlan left promiscuous mode [ 880.408351][ T46] device veth0_vlan left promiscuous mode [ 880.513077][T14916] usb 4-1: Using ep0 maxpacket: 32 [ 880.521387][T14916] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.552759][T14916] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.584020][T14916] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 880.596918][T14916] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 880.605394][T14916] usb 4-1: Product: syz [ 880.609577][T14916] usb 4-1: Manufacturer: syz [ 880.623577][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 880.629226][T14916] hub 4-1:4.0: USB hub found [ 880.840113][T14916] hub 4-1:4.0: 2 ports detected [ 881.365092][ T46] team0 (unregistering): Port device team_slave_1 removed [ 881.423435][ T46] team0 (unregistering): Port device team_slave_0 removed [ 881.481960][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.543564][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.673536][T14916] usb 4-1: USB disconnect, device number 74 [ 881.965201][ T46] bond0 (unregistering): Released all slaves [ 882.080242][T15468] netlink: 'syz.4.3115': attribute type 1 has an invalid length. [ 882.088394][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 882.096707][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 882.105255][T15471] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3115'. [ 882.115087][T15472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3115'. [ 882.128038][T15475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.142775][T15475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.154028][T15475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.161499][T15475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.298826][T15369] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.324283][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 882.336953][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 882.347845][ T4570] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.355058][ T4570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.435984][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 882.450125][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 882.459723][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 882.504174][ T4570] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.511404][ T4570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.519674][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 882.559508][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 882.571236][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 882.600349][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 882.661495][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 882.682262][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 882.697046][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 882.706444][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 882.712865][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 882.740101][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 882.781417][T15369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 882.824014][T15369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 882.831909][T12164] usb 1-1: USB disconnect, device number 72 [ 882.871592][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 882.896972][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 882.966696][T15500] tipc: Started in network mode [ 882.971722][T15500] tipc: Node identity d28e4e7e70ba, cluster identity 4711 [ 883.002007][T15500] tipc: Enabled bearer , priority 0 [ 883.025695][T15503] sch_tbf: burst 33 is lower than device syzkaller0 mtu (1500) ! [ 883.121505][T15500] device syzkaller0 entered promiscuous mode [ 883.128944][T15500] tipc: Resetting bearer [ 883.136212][T15505] netlink: 'syz.3.3127': attribute type 1 has an invalid length. [ 883.228400][ T4570] tipc: Resetting bearer [ 883.237717][T15508] device syzkaller0 entered promiscuous mode [ 883.245675][T15509] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3127'. [ 883.256368][T15499] tipc: Resetting bearer [ 884.785875][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 885.876881][T15499] tipc: Disabling bearer [ 885.892276][T15505] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3127'. [ 885.904637][T15505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 885.956080][ T3770] tipc: Node number set to 2721336958 [ 886.039922][T15527] device syzkaller0 entered promiscuous mode [ 887.852742][ T8381] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 888.047909][ T8381] usb 4-1: Using ep0 maxpacket: 8 [ 888.079970][ T8381] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 888.089266][ T8381] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 888.098747][ T8381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.290079][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 889.305693][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 889.317925][T15558] tipc: Enabled bearer , priority 0 [ 889.389407][T15560] device syzkaller0 entered promiscuous mode [ 889.396439][T15560] tipc: Resetting bearer [ 889.414487][T15555] tipc: Resetting bearer [ 890.628866][T12164] usb 4-1: USB disconnect, device number 75 [ 893.314449][T15555] tipc: Disabling bearer [ 893.326282][T15369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.339292][T11545] tipc: Node number set to 3280438597 [ 893.406554][T14984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 893.441641][T14984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 893.482766][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 893.491165][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 893.526279][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 893.534975][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 893.547131][T15369] device veth0_vlan entered promiscuous mode [ 893.603168][T15369] device veth1_vlan entered promiscuous mode [ 893.811059][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 893.831247][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 893.840050][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 893.849000][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 893.869424][T15369] device veth0_macvtap entered promiscuous mode [ 893.917074][T15369] device veth1_macvtap entered promiscuous mode [ 894.173140][T11545] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 894.426416][T11545] usb 5-1: Using ep0 maxpacket: 8 [ 894.445108][T11545] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 894.602527][T11545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.910936][T11545] pvrusb2: Hardware description: Terratec Grabster AV400 [ 895.009958][T11545] pvrusb2: ********** [ 895.088625][T11545] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 895.221041][T11545] pvrusb2: Important functionality might not be entirely working. [ 895.297971][T11545] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 895.437420][T11545] pvrusb2: ********** [ 895.516814][ T2306] pvrusb2: Invalid write control endpoint [ 895.637366][T14984] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 895.691368][T14984] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 895.927856][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.086914][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.203259][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.302279][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.428125][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.522558][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.599762][T12164] usb 5-1: USB disconnect, device number 61 [ 896.627327][T15369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.635519][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 896.671525][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 896.739477][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.754644][ T2306] pvrusb2: Invalid write control endpoint [ 896.769567][ T2306] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 896.789359][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.805468][ T2306] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 896.827162][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.848601][ T2306] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 896.914703][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.926659][ T2306] pvrusb2: Device being rendered inoperable [ 896.932712][ T2306] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 896.940848][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.947710][ T2306] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 896.952043][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.962791][ T2306] pvrusb2: Attached sub-driver cx25840 [ 897.425960][ T2306] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 897.622802][ T4573] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 897.635291][T15369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.652791][ T2306] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 897.687402][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 897.698685][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 897.712768][T15682] device syzkaller0 entered promiscuous mode [ 897.743104][ T4336] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 897.804798][ T4573] usb 1-1: Using ep0 maxpacket: 8 [ 897.821811][ T4573] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xAD, skipping [ 897.852855][ T4573] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 897.878769][ T4573] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 897.905142][ T4573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.925672][ T4573] usb 1-1: Product: syz [ 897.929908][ T4573] usb 1-1: Manufacturer: syz [ 897.938289][ T4573] usb 1-1: SerialNumber: syz [ 897.958031][ T4573] usb 1-1: config 0 descriptor?? [ 897.969633][ T4573] kvaser_usb 1-1:0.0: Cannot get usb endpoint(s) [ 897.992265][T15369] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.021630][T15369] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.031082][T15369] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.044958][T15369] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.247809][ T4336] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 898.268190][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.293311][ T4336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.309121][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.334243][ T4336] usb 3-1: Product: syz [ 898.349905][T14984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.360227][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 898.381402][ T4336] usb 3-1: Manufacturer: syz [ 898.417976][ T4336] usb 3-1: SerialNumber: syz [ 898.427028][T14984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.480180][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 898.710391][ T4336] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 898.752375][ T4336] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 898.822890][ T4336] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 898.871916][ T4336] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 898.917734][ T4336] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 899.002298][ T4336] lan78xx: probe of 3-1:1.0 failed with error -32 [ 899.180140][T15697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.222478][T15697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.677010][T15708] device hsr0 entered promiscuous mode [ 899.790571][ T4336] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 899.808355][ T3770] usb 1-1: USB disconnect, device number 73 [ 899.843978][T15712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.851855][T15712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.860361][T15712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.868087][T15712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.012695][ T4336] usb 5-1: Using ep0 maxpacket: 16 [ 900.022758][ T4336] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 900.041278][ T4336] usb 5-1: config 0 has no interface number 0 [ 900.071151][ T4336] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 900.085284][ T4336] usb 5-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 900.098414][ T4336] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 900.111986][T15718] binder: 15717:15718 ioctl c0306201 0 returned -14 [ 900.119945][ T4336] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 900.132322][ T4336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.141744][ T4336] usb 5-1: Product: syz [ 900.148439][ T4336] usb 5-1: Manufacturer: syz [ 900.155891][ T4336] usb 5-1: SerialNumber: syz [ 900.162285][ T4336] usb 5-1: config 0 descriptor?? [ 900.170357][T15699] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 900.188850][ T4336] asix: probe of 5-1:0.34 failed with error -22 [ 900.347311][ T4317] usb 3-1: USB disconnect, device number 80 [ 900.728492][T15737] netlink: 'syz.3.3190': attribute type 1 has an invalid length. [ 900.761676][T15737] device bond2 entered promiscuous mode [ 900.768023][T15737] 8021q: adding VLAN 0 to HW filter on device bond2 [ 900.805521][T15737] 8021q: adding VLAN 0 to HW filter on device bond2 [ 900.816721][T15737] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 900.830039][T15737] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 900.847511][T15737] bond2: (slave vcan1): making interface the new active one [ 900.863213][T15737] device vcan1 entered promiscuous mode [ 900.870286][T15737] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 900.889089][T14984] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 901.001492][T15748] binder: 15747:15748 ioctl c0306201 0 returned -14 [ 901.166259][T15755] loop2: detected capacity change from 0 to 256 [ 901.177538][T15755] FAT-fs (loop2): bogus logical sector size 2056 [ 901.184730][T15755] FAT-fs (loop2): Can't find a valid FAT filesystem [ 901.342826][ T4573] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 901.522814][ T4573] usb 1-1: Using ep0 maxpacket: 16 [ 901.530916][ T4573] usb 1-1: unable to get BOS descriptor or descriptor too short [ 901.564529][ T4573] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 901.594682][ T4573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.605957][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3202'. [ 901.622701][ T4573] usb 1-1: Product: syz [ 901.632690][ T4573] usb 1-1: Manufacturer: syz [ 901.647682][ T4573] usb 1-1: SerialNumber: syz [ 901.676143][T15769] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.683338][T15769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.878572][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 901.886146][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 901.893712][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 901.903656][ T4573] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 901.910287][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 901.932792][ T4573] gspca_vc032x: reg_w err -32 [ 901.937532][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 901.965987][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 901.971347][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 902.007180][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 902.032798][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 902.038266][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 902.070489][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 902.082746][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 902.088137][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 902.116802][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 902.122175][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 902.149231][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 902.154668][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 902.169221][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 902.189060][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 902.194573][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 902.200060][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 902.205822][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 902.211252][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 902.217002][ T4573] gspca_vc032x: Unknown sensor... [ 902.222283][ T4573] vc032x: probe of 1-1:12.0 failed with error -22 [ 902.236599][ T4573] usb 1-1: USB disconnect, device number 74 [ 902.253909][T10512] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 902.271023][T10512] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 902.280195][T10512] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 902.290488][T10512] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 902.299404][T10512] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 902.311371][T10512] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 902.360099][T15787] loop3: detected capacity change from 0 to 256 [ 902.374897][T15781] lo speed is unknown, defaulting to 1000 [ 902.414825][T15787] FAT-fs (loop3): bogus logical sector size 2056 [ 902.433234][T15787] FAT-fs (loop3): Can't find a valid FAT filesystem [ 902.596221][ T129] usb 5-1: USB disconnect, device number 62 [ 902.880284][T15781] chnl_net:caif_netlink_parms(): no params data found [ 903.153339][T15807] loop3: detected capacity change from 0 to 512 [ 903.490829][T15807] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.3212: inode has both inline data and extents flags [ 903.506052][T15807] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.3212: couldn't read orphan inode 15 (err -117) [ 903.521254][T15807] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 904.026271][T15781] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.163222][T15781] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.284096][T15781] device bridge_slave_0 entered promiscuous mode [ 904.375004][T15781] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.383512][T10512] Bluetooth: hci1: command 0x0409 tx timeout [ 904.488930][T15781] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.571584][T15781] device bridge_slave_1 entered promiscuous mode [ 904.899314][T15781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.002085][T15781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.033368][T14473] EXT4-fs (loop3): unmounting filesystem. [ 905.289933][ T4285] device syz_tun left promiscuous mode [ 905.300978][ T4285] bridge0: port 3(syz_tun) entered disabled state [ 905.408470][T15781] team0: Port device team_slave_0 added [ 905.454599][T15781] team0: Port device team_slave_1 added [ 905.641699][ T4571] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.682494][ T4571] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 905.757917][T15781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.787821][T15781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 905.868528][T15781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.478217][T15781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.485773][T15781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.532573][T15781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.567596][T10512] Bluetooth: hci1: command 0x041b tx timeout [ 906.643587][ T4571] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.654958][ T4571] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 906.742944][ T129] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 906.778592][ T4571] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.789298][ T4571] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 906.858492][T15781] device hsr_slave_0 entered promiscuous mode [ 906.876012][T15781] device hsr_slave_1 entered promiscuous mode [ 906.884581][T15781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 906.886790][T15869] loop1: detected capacity change from 0 to 512 [ 906.892273][T15781] Cannot create hsr debugfs directory [ 906.941409][T15878] siw: device registration error -23 [ 906.951598][ T129] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 906.965840][ T4571] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.977181][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.985561][ T4571] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 906.998753][T15878] random: crng reseeded on system resumption [ 907.012791][ T129] usb 4-1: Product: syz [ 907.017107][ T129] usb 4-1: Manufacturer: syz [ 907.042383][ T129] usb 4-1: SerialNumber: syz [ 907.049128][T15869] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.3228: inode has both inline data and extents flags [ 907.064554][T15869] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.3228: couldn't read orphan inode 15 (err -117) [ 907.081548][T15869] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 907.286652][ T129] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 907.300204][ T129] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 907.317136][ T129] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 907.317184][ T129] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 907.317446][ T129] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 907.320997][ T129] lan78xx: probe of 4-1:1.0 failed with error -32 [ 907.612798][ T4571] tipc: Left network mode [ 907.720882][T15887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.743076][T15887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.270963][T15903] loop4: detected capacity change from 0 to 512 [ 908.419843][T15903] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 908.474490][T15903] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 908.537153][T15781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 908.627953][T10512] Bluetooth: hci1: command 0x040f tx timeout [ 908.655487][T15781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 908.693697][T14918] EXT4-fs (loop4): unmounting filesystem. [ 908.796903][T15781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 908.884237][T15781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 908.913918][ T4317] usb 4-1: USB disconnect, device number 76 [ 909.249891][T15930] tipc: Enabled bearer , priority 0 [ 909.252946][ T4573] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 909.374065][T15930] device syzkaller0 entered promiscuous mode [ 909.391162][T15930] tipc: Resetting bearer [ 909.462919][ T4573] usb 1-1: Using ep0 maxpacket: 16 [ 909.470193][ T4573] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.493686][T15929] tipc: Resetting bearer [ 909.503320][ T4573] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 909.525506][ T4573] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 909.552658][ T4573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.560723][ T4573] usb 1-1: Product: syz [ 909.572797][ T4573] usb 1-1: Manufacturer: syz [ 909.577458][ T4573] usb 1-1: SerialNumber: syz [ 909.582887][ T7] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 909.606796][ T4573] usb 1-1: config 0 descriptor?? [ 909.793183][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 909.831629][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 909.849486][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 909.912824][ T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 909.921956][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.938247][ T7] usb 5-1: Product: syz [ 909.942947][ T7] usb 5-1: Manufacturer: syz [ 909.947589][ T7] usb 5-1: SerialNumber: syz [ 910.182522][ T7] usb 5-1: 0:2 : does not exist [ 910.273553][ T7] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 910.370677][ T7] usb 5-1: USB disconnect, device number 63 [ 910.635244][ T8305] udevd[8305]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 910.708833][T10512] Bluetooth: hci1: command 0x0419 tx timeout [ 910.795043][T15369] EXT4-fs (loop1): unmounting filesystem. [ 911.134071][T15959] loop4: detected capacity change from 0 to 256 [ 911.173460][T15959] FAT-fs (loop4): bogus logical sector size 2056 [ 911.180413][T15959] FAT-fs (loop4): Can't find a valid FAT filesystem [ 912.057107][T12164] usb 1-1: USB disconnect, device number 75 [ 913.629577][T15929] tipc: Disabling bearer [ 913.641273][ T4336] tipc: Node number set to 1652984056 [ 913.658327][T15980] netlink: 'syz.0.3254': attribute type 1 has an invalid length. [ 913.686918][T15981] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3254'. [ 913.696490][T15982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3254'. [ 913.710635][T15982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 913.753180][ T4571] device hsr_slave_0 left promiscuous mode [ 913.759830][ T4571] device hsr_slave_1 left promiscuous mode [ 913.766616][ T4571] device bridge_slave_1 left promiscuous mode [ 913.787265][ T4571] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.812407][ T4571] device bridge_slave_0 left promiscuous mode [ 913.823111][ T4571] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.901162][ T4571] device veth1_macvtap left promiscuous mode [ 913.921598][ T4571] device veth0_macvtap left promiscuous mode [ 913.942443][ T4571] device veth1_vlan left promiscuous mode [ 913.953991][ T4571] device veth0_vlan left promiscuous mode [ 914.440894][T12164] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 914.674150][T12164] usb 1-1: Using ep0 maxpacket: 16 [ 914.694482][T12164] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 914.912034][T12164] usb 1-1: config 0 has no interface number 0 [ 915.079507][T12164] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 915.163805][T12164] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 915.268462][T12164] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 915.288038][T12164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.306876][T12164] usb 1-1: Product: syz [ 915.311952][T12164] usb 1-1: Manufacturer: syz [ 915.328388][T12164] usb 1-1: SerialNumber: syz [ 915.352555][T12164] usb 1-1: config 0 descriptor?? [ 915.370960][T16005] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 915.396193][T16005] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 915.617695][ T4571] bond5 (unregistering): Released all slaves [ 915.628567][T16005] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 915.638472][T16005] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 915.772701][ T4571] bond4 (unregistering): Released all slaves [ 915.785129][ T4571] bond3 (unregistering): Released all slaves [ 915.862246][T12164] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 915.873670][T12164] asix: probe of 1-1:0.34 failed with error -32 [ 915.964409][ T4571] bond2 (unregistering): Released all slaves [ 915.987974][ T4571] bond1 (unregistering): (slave geneve2): Releasing active interface [ 916.144483][ T4571] bond1 (unregistering): Released all slaves [ 916.751625][ T4571] team0 (unregistering): Port device team_slave_1 removed [ 916.806574][ T4571] team0 (unregistering): Port device team_slave_0 removed [ 916.853039][ T4571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 916.905221][ T4571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 917.167619][ T3770] usb 1-1: USB disconnect, device number 76 [ 917.336389][ T4571] bond0 (unregistering): Released all slaves [ 917.445207][T15781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.452131][T15996] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3259'. [ 917.487232][T16035] tipc: Enabling of bearer rejected, failed to enable media [ 917.530528][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 917.557074][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 917.622825][T15781] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.673378][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 917.682464][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 917.727924][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.735244][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.819295][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 917.839196][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 917.859400][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 917.869464][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.876661][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.909113][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 917.930158][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 917.955590][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 918.043926][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 918.086923][ T129] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 918.107224][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 918.127887][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 918.139001][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 918.170077][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 918.185893][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 918.225733][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 918.243489][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 918.282711][ T129] usb 2-1: Using ep0 maxpacket: 32 [ 918.289679][ T129] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.289765][T15781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 918.352986][ T129] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.375002][ T129] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 918.412720][ T129] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 918.421217][ T129] usb 2-1: Product: syz [ 918.439898][ T129] usb 2-1: Manufacturer: syz [ 918.464620][ T4359] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 918.476148][T16077] loop4: detected capacity change from 0 to 256 [ 918.505057][ T129] hub 2-1:4.0: USB hub found [ 918.521966][T16077] FAT-fs (loop4): bogus logical sector size 2056 [ 918.535771][T16077] FAT-fs (loop4): Can't find a valid FAT filesystem [ 918.662702][ T4359] usb 4-1: Using ep0 maxpacket: 16 [ 918.669560][ T4359] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 918.695183][ T129] hub 2-1:4.0: 2 ports detected [ 918.717974][ T4359] usb 4-1: config 0 has no interface number 0 [ 918.741708][ T4359] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 918.763446][ T4359] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 918.777261][ T4359] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 918.790562][ T4359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.799006][ T4359] usb 4-1: Product: syz [ 918.803898][ T4359] usb 4-1: Manufacturer: syz [ 918.808527][ T4359] usb 4-1: SerialNumber: syz [ 918.825652][ T4359] usb 4-1: config 0 descriptor?? [ 918.831509][T16068] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 918.840355][T16068] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 918.877705][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 918.885831][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 918.905816][T15781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.930730][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 918.941100][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 918.967851][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 918.977434][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 918.987877][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 918.996415][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 919.009584][T15781] device veth0_vlan entered promiscuous mode [ 919.028960][T15781] device veth1_vlan entered promiscuous mode [ 919.054639][ T4336] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 919.063157][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 919.069201][T16068] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 919.072501][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 919.083379][T16068] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 919.086895][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 919.103502][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 919.115826][T15781] device veth0_macvtap entered promiscuous mode [ 919.129045][T15781] device veth1_macvtap entered promiscuous mode [ 919.151414][T15781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.162301][T15781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.173887][T15781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.185043][T15781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.195269][T15781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.206048][T15781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.217882][T15781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 919.227816][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 919.238506][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 919.248106][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 919.259170][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 919.273229][ T4336] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 919.282334][ T4336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.290751][ T4336] usb 5-1: Product: syz [ 919.293419][T15781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.301192][ T4359] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 919.305992][T15781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.325566][ T4336] usb 5-1: Manufacturer: syz [ 919.325589][ T4336] usb 5-1: SerialNumber: syz [ 919.331061][T15781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.346345][T15781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.349884][ T4359] asix: probe of 4-1:0.34 failed with error -32 [ 919.357602][T15781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.375808][T15781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.388153][T15781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.402321][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 919.411563][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 919.425982][T15781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.435603][T15781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.444444][T15781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.454190][T15781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.553552][ T4530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.561469][ T4530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.573142][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 919.586034][ T4336] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 919.611552][ T4564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.620506][ T4336] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 919.639906][ T4564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.648355][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 919.747121][T16087] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3281'. [ 919.761670][T16087] device syzkaller0 entered promiscuous mode [ 919.937679][ T129] hub 2-1:4.0: activate --> -90 [ 920.019566][T16098] program syz.0.3285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 920.139127][ T3770] usb 2-1: USB disconnect, device number 73 [ 920.612824][ T129] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 920.796645][ T129] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 920.809878][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.818676][ T129] usb 3-1: Product: syz [ 920.826212][ T129] usb 3-1: Manufacturer: syz [ 920.830931][ T129] usb 3-1: SerialNumber: syz [ 920.869348][ T4336] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 920.891659][ T4336] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 920.905462][ T4336] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 920.920719][ T4336] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 920.928576][T16127] device xfrm1 entered promiscuous mode [ 920.933929][ T4336] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 920.952505][ T4336] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 920.964965][ T4336] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 920.977736][ T4336] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 921.006160][ T4336] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 921.017741][ T4336] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 921.032425][ T4336] lan78xx: probe of 5-1:1.0 failed with error -71 [ 921.051963][ T129] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 921.057927][ T4336] usb 5-1: USB disconnect, device number 64 [ 921.081326][ T129] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 921.099452][ T129] lan78xx: probe of 3-1:1.0 failed with error -32 [ 921.177314][ T129] usb 4-1: USB disconnect, device number 77 [ 921.348608][T16137] tipc: Started in network mode [ 921.357187][T16137] tipc: Node identity 2a908586662c, cluster identity 4711 [ 921.364609][T16137] tipc: Enabled bearer , priority 0 [ 921.372348][T16137] device syzkaller0 entered promiscuous mode [ 921.405201][T16137] tipc: Resetting bearer [ 921.425001][T16133] tipc: Resetting bearer [ 921.529290][T16133] tipc: Disabling bearer [ 921.529541][T16142] loop3: detected capacity change from 0 to 512 [ 921.563932][T16142] EXT4-fs (loop3): 1 truncate cleaned up [ 921.569868][T16142] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 921.601965][ T27] audit: type=1800 audit(1776467158.518:2077): pid=16142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3301" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 921.689108][T14473] EXT4-fs (loop3): unmounting filesystem. [ 921.798089][ T129] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 921.807829][ T4573] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 922.002730][ T4573] usb 1-1: Using ep0 maxpacket: 16 [ 922.008042][ T129] usb 5-1: Using ep0 maxpacket: 32 [ 922.016410][ T4573] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 922.025351][ T129] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.036500][ T4573] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 922.045065][ T129] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.054900][ T4573] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 922.063394][ T4573] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.073845][ T4573] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 922.083260][ T4573] usb 1-1: config 0 has no interface number 0 [ 922.089688][ T4573] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 922.092723][ T4336] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 922.101045][ T4573] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 922.119259][ T129] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 922.129580][ T129] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 922.138031][ T4573] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 922.148761][ T129] usb 5-1: Product: syz [ 922.153166][ T129] usb 5-1: Manufacturer: syz [ 922.158695][ T4573] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 922.180683][ T4573] usb 1-1: config 0 interface 125 has no altsetting 0 [ 922.189489][ T129] hub 5-1:4.0: USB hub found [ 922.196064][ T4573] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 922.205722][ T4573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.215703][ T4573] usb 1-1: Product: syz [ 922.219937][ T4573] usb 1-1: Manufacturer: syz [ 922.228743][ T4573] usb 1-1: SerialNumber: syz [ 922.244663][ T4573] usb 1-1: config 0 descriptor?? [ 922.322731][ T4336] usb 2-1: Using ep0 maxpacket: 16 [ 922.331129][ T4336] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 922.341244][ T4336] usb 2-1: config 0 has no interface number 0 [ 922.349237][ T4336] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 922.361895][ T4336] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 922.376276][ T4336] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 922.388026][ T4336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.399668][ T129] hub 5-1:4.0: 2 ports detected [ 922.402570][ T4336] usb 2-1: Product: syz [ 922.408827][ T4336] usb 2-1: Manufacturer: syz [ 922.413944][ T4336] usb 2-1: SerialNumber: syz [ 922.425186][ T4336] usb 2-1: config 0 descriptor?? [ 922.431130][T16157] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 922.438952][T16157] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 922.652403][T16157] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 922.660239][T16157] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 922.868766][ T4336] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 922.880152][ T4336] asix: probe of 2-1:0.34 failed with error -32 [ 923.246800][T16173] random: crng reseeded on system resumption [ 923.395100][ T4573] usb 3-1: USB disconnect, device number 81 [ 923.614561][ T129] hub 5-1:4.0: activate --> -90 [ 923.817903][ T7] usb 5-1: USB disconnect, device number 65 [ 923.922781][ T3770] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 924.087009][ T3770] usb 3-1: device descriptor read/64, error -71 [ 924.114303][T16188] binder: 16187:16188 ioctl 4018620d 0 returned -22 [ 924.383235][ T3770] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 924.541139][ T4359] usb 1-1: USB disconnect, device number 77 [ 924.549246][ T3770] usb 3-1: device descriptor read/64, error -71 [ 924.628054][T16198] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3320'. [ 924.639913][T16198] device syzkaller0 entered promiscuous mode [ 924.692860][ T4573] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 924.697540][ T3770] usb usb3-port1: attempt power cycle [ 924.835460][ T129] usb 2-1: USB disconnect, device number 74 [ 924.873256][ T4573] usb 5-1: Using ep0 maxpacket: 16 [ 924.890007][ T4573] usb 5-1: unable to get BOS descriptor or descriptor too short [ 924.905438][ T4573] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 924.915994][ T4573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.925459][ T4573] usb 5-1: Product: syz [ 924.929651][ T4573] usb 5-1: Manufacturer: syz [ 924.936032][ T4573] usb 5-1: SerialNumber: syz [ 925.112780][ T3770] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 925.153462][ T3770] usb 3-1: device descriptor read/8, error -71 [ 925.169628][ T4573] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 925.200334][T16212] loop3: detected capacity change from 0 to 512 [ 925.219674][T16212] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a840c01c, mo2=0002] [ 925.228744][T16212] System zones: 0-2, 18-18, 34-34 [ 925.235835][T16212] EXT4-fs (loop3): orphan cleanup on readonly fs [ 925.242843][ T129] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 925.247946][T16212] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 925.275899][T16212] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 925.283432][T16212] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.3326: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 925.304447][T16212] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.3326: couldn't read orphan inode 13 (err -117) [ 925.316946][T16212] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 925.336316][T16212] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 925.353640][T16212] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a840c01c, mo2=0002] [ 925.377322][T16212] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 925.421635][T14473] EXT4-fs (loop3): unmounting filesystem. [ 925.427541][ T129] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 925.427576][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.427597][ T129] usb 2-1: Product: syz [ 925.427637][ T129] usb 2-1: Manufacturer: syz [ 925.427653][ T129] usb 2-1: SerialNumber: syz [ 925.477083][ T3770] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 925.523353][ T3770] usb 3-1: device descriptor read/8, error -71 [ 925.636418][ T129] net_ratelimit: 5 callbacks suppressed [ 925.636442][ T129] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 925.655418][ T129] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 925.666720][ T3770] usb usb3-port1: unable to enumerate USB device [ 925.668582][ T129] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 925.685824][ T129] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 925.704095][ T129] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 925.725657][ T129] lan78xx: probe of 2-1:1.0 failed with error -32 [ 925.760496][T16221] random: crng reseeded on system resumption [ 925.770793][ T4573] gspca_vc032x: reg_r err -71 [ 925.781159][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 925.787488][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 925.793264][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 925.799112][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 925.805239][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 925.810621][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 925.816990][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 925.822395][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 925.828470][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 925.834174][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 925.836524][T16223] loop3: detected capacity change from 0 to 512 [ 925.839667][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 925.851960][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 925.857525][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 925.863600][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 925.868906][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 925.874751][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 925.880067][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 925.886658][T16223] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 925.886934][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 925.904970][ T4573] gspca_vc032x: I2c Bus Busy Wait 00 [ 925.911257][ T4573] gspca_vc032x: Unknown sensor... [ 925.926520][ T4573] vc032x: probe of 5-1:12.0 failed with error -22 [ 925.961462][T16223] EXT4-fs (loop3): 1 truncate cleaned up [ 925.967844][T16223] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 925.976795][ T4573] usb 5-1: USB disconnect, device number 66 [ 925.991709][T16223] EXT4-fs (loop3): unmounting filesystem. [ 926.142815][ T129] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 926.334863][ T129] usb 1-1: Using ep0 maxpacket: 16 [ 926.345547][ T129] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 926.365860][ T129] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 926.378184][T16233] binder: 16232:16233 ioctl 4018620d 0 returned -22 [ 926.379304][ T129] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 926.393569][ T129] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.404144][ T129] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 926.413670][ T129] usb 1-1: config 0 has no interface number 0 [ 926.419841][ T129] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 926.430960][ T129] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 926.440975][ T129] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 926.451315][ T129] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 926.464609][ T129] usb 1-1: config 0 interface 125 has no altsetting 0 [ 926.476433][ T129] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 926.486116][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.496942][ T129] usb 1-1: Product: syz [ 926.501126][ T129] usb 1-1: Manufacturer: syz [ 926.505911][ T129] usb 1-1: SerialNumber: syz [ 926.519703][ T129] usb 1-1: config 0 descriptor?? [ 926.602825][ T3770] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 926.775265][ T4530] tipc: Left network mode [ 926.807312][T16238] device syzkaller0 entered promiscuous mode [ 926.816478][ T3770] usb 4-1: Using ep0 maxpacket: 16 [ 926.825178][ T3770] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 926.837575][ T3770] usb 4-1: config 0 has no interface number 0 [ 926.845620][ T3770] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 926.858245][ T3770] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 926.873934][ T3770] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 926.883155][ T3770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.891190][ T3770] usb 4-1: Product: syz [ 926.895922][ T3770] usb 4-1: Manufacturer: syz [ 926.904654][ T3770] usb 4-1: SerialNumber: syz [ 926.918434][ T3770] usb 4-1: config 0 descriptor?? [ 926.936058][T16231] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 926.944235][T16231] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 927.165210][T16231] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 927.179361][T16231] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 927.393766][ T3770] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 927.404685][ T3770] asix: probe of 4-1:0.34 failed with error -32 [ 927.437455][T16249] device syzkaller0 entered promiscuous mode [ 927.590745][T16254] loop2: detected capacity change from 0 to 512 [ 927.604689][T16254] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 927.644725][T16254] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3340: bg 0: block 127: padding at end of block bitmap is not set [ 927.685605][T16254] ------------[ cut here ]------------ [ 927.691562][T16254] EA inode 11 i_nlink=0 [ 927.691707][T16254] WARNING: CPU: 1 PID: 16254 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4e7/0x540 [ 927.706546][T16254] Modules linked in: [ 927.710440][T16254] CPU: 1 PID: 16254 Comm: syz.2.3340 Not tainted syzkaller #0 [ 927.717957][T16254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 927.728207][T16254] RIP: 0010:ext4_xattr_inode_update_ref+0x4e7/0x540 [ 927.734889][T16254] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 0a c8 9b ff 49 8b 37 48 c7 c7 40 a1 a0 8a 89 da e8 99 2b 16 ff <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 13 3c f6 07 [ 927.754781][ C1] vkms_vblank_simulate: vblank timer overrun [ 927.760899][T16254] RSP: 0018:ffffc90004b3f300 EFLAGS: 00010246 [ 927.767159][T16254] RAX: 3081b894e4e3db00 RBX: 0000000000000000 RCX: 0000000000080000 [ 927.775229][T16254] RDX: ffffc9001236e000 RSI: 000000000001af59 RDI: 000000000001af5a [ 927.783298][T16254] RBP: ffffc90004b3f3f0 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 927.791330][T16254] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: ffff888070795cf8 [ 927.799397][T16254] R13: 1ffff1100e0f2bde R14: dffffc0000000000 R15: ffff888070795d38 [ 927.807436][T16254] FS: 00007f4b37bf66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 927.816531][T16254] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 927.823299][T16254] CR2: 00007fd544ea2000 CR3: 000000007c0d7000 CR4: 00000000003506e0 [ 927.831301][T16254] Call Trace: [ 927.834681][T16254] [ 927.837682][T16254] ? ext4_xattr_block_csum+0x560/0x560 [ 927.843246][T16254] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 927.849358][T16254] ext4_xattr_inode_dec_ref_all+0xb03/0x1060 [ 927.855450][T16254] ? errseq_check+0x3c/0x70 [ 927.859988][T16254] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 927.865899][T16254] ? __ext4_journal_ensure_credits+0x450/0x450 [ 927.872105][T16254] ext4_xattr_delete_inode+0xad1/0xca0 [ 927.877669][T16254] ? up_write+0x1bb/0x420 [ 927.882048][T16254] ? ext4_expand_extra_isize_ea+0x1dc0/0x1dc0 [ 927.888248][T16254] ext4_evict_inode+0xc45/0x1110 [ 927.893291][T16254] ? _raw_spin_unlock+0x24/0x40 [ 927.898188][T16254] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 927.904208][T16254] ? do_raw_spin_unlock+0x11d/0x230 [ 927.909453][T16254] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 927.915458][T16254] evict+0x4c9/0x8d0 [ 927.919433][T16254] ? proc_nr_inodes+0x2f0/0x2f0 [ 927.924384][T16254] ? do_raw_spin_unlock+0x11d/0x230 [ 927.929627][T16254] ? _raw_spin_unlock+0x24/0x40 [ 927.934579][T16254] ? iput+0x768/0x980 [ 927.935514][ T3770] usb 2-1: USB disconnect, device number 75 [ 927.938624][T16254] ext4_orphan_cleanup+0xbeb/0x1420 [ 927.949842][T16254] ? ext4_orphan_del+0xbf0/0xbf0 [ 927.954916][T16254] ? ext4_register_sysfs+0x27e/0x2c0 [ 927.960247][T16254] ? errseq_check_and_advance+0x62/0x120 [ 927.966004][T16254] ext4_fill_super+0x6ee3/0x78c0 [ 927.971041][T16254] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 927.977425][T16254] ? set_blocksize+0x1d0/0x470 [ 927.982260][T16254] ? sb_set_blocksize+0xa5/0xe0 [ 927.987329][T16254] get_tree_bdev+0x3f1/0x610 [ 927.991976][T16254] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 927.998325][T16254] vfs_get_tree+0x88/0x270 [ 928.002891][T16254] do_new_mount+0x24a/0xa40 [ 928.007447][T16254] __se_sys_mount+0x2e3/0x3d0 [ 928.012159][T16254] ? __x64_sys_mount+0xc0/0xc0 [ 928.017014][T16254] ? lockdep_hardirqs_on+0x94/0x140 [ 928.022509][T16254] ? __x64_sys_mount+0x1c/0xc0 [ 928.027395][T16254] do_syscall_64+0x4c/0xa0 [ 928.031859][T16254] ? clear_bhb_loop+0x60/0xb0 [ 928.036642][T16254] ? clear_bhb_loop+0x60/0xb0 [ 928.041391][T16254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 928.047376][T16254] RIP: 0033:0x7f4b3999da8a [ 928.051863][T16254] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.071575][ C1] vkms_vblank_simulate: vblank timer overrun [ 928.077710][T16254] RSP: 002b:00007f4b37bf5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 928.086327][T16254] RAX: ffffffffffffffda RBX: 00007f4b37bf5ee0 RCX: 00007f4b3999da8a [ 928.094402][T16254] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f4b37bf5ea0 [ 928.102438][T16254] RBP: 0000200000000180 R08: 00007f4b37bf5ee0 R09: 0000000000000000 [ 928.110486][T16254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 928.118545][T16254] R13: 00007f4b37bf5ea0 R14: 000000000000047a R15: 00002000000001c0 [ 928.126647][T16254] [ 928.129795][T16254] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 928.137073][T16254] CPU: 1 PID: 16254 Comm: syz.2.3340 Not tainted syzkaller #0 [ 928.144541][T16254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 928.155135][T16254] Call Trace: [ 928.158803][T16254] [ 928.161931][T16254] dump_stack_lvl+0x188/0x24e [ 928.166740][T16254] ? memcpy+0x3c/0x60 [ 928.170759][T16254] ? show_regs_print_info+0x12/0x12 [ 928.176085][T16254] ? load_image+0x400/0x400 [ 928.180893][T16254] panic+0x2e5/0x730 [ 928.184988][T16254] ? bpf_jit_dump+0xd0/0xd0 [ 928.189724][T16254] __warn+0x2f8/0x4f0 [ 928.193735][T16254] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 928.199748][T16254] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 928.205913][T16254] report_bug+0x2ba/0x4f0 [ 928.210251][T16254] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 928.216325][T16254] handle_bug+0x3a/0x70 [ 928.220485][T16254] exc_invalid_op+0x16/0x40 [ 928.224993][T16254] asm_exc_invalid_op+0x16/0x20 [ 928.229849][T16254] RIP: 0010:ext4_xattr_inode_update_ref+0x4e7/0x540 [ 928.236446][T16254] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 0a c8 9b ff 49 8b 37 48 c7 c7 40 a1 a0 8a 89 da e8 99 2b 16 ff <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 13 3c f6 07 [ 928.256067][T16254] RSP: 0018:ffffc90004b3f300 EFLAGS: 00010246 [ 928.262161][T16254] RAX: 3081b894e4e3db00 RBX: 0000000000000000 RCX: 0000000000080000 [ 928.270145][T16254] RDX: ffffc9001236e000 RSI: 000000000001af59 RDI: 000000000001af5a [ 928.278207][T16254] RBP: ffffc90004b3f3f0 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 928.286275][T16254] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: ffff888070795cf8 [ 928.294244][T16254] R13: 1ffff1100e0f2bde R14: dffffc0000000000 R15: ffff888070795d38 [ 928.302239][T16254] ? ext4_xattr_block_csum+0x560/0x560 [ 928.307735][T16254] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 928.313821][T16254] ext4_xattr_inode_dec_ref_all+0xb03/0x1060 [ 928.319820][T16254] ? errseq_check+0x3c/0x70 [ 928.324505][T16254] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 928.330332][T16254] ? __ext4_journal_ensure_credits+0x450/0x450 [ 928.336498][T16254] ext4_xattr_delete_inode+0xad1/0xca0 [ 928.341966][T16254] ? up_write+0x1bb/0x420 [ 928.346300][T16254] ? ext4_expand_extra_isize_ea+0x1dc0/0x1dc0 [ 928.352378][T16254] ext4_evict_inode+0xc45/0x1110 [ 928.357339][T16254] ? _raw_spin_unlock+0x24/0x40 [ 928.362196][T16254] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 928.368187][T16254] ? do_raw_spin_unlock+0x11d/0x230 [ 928.373381][T16254] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 928.379278][T16254] evict+0x4c9/0x8d0 [ 928.383180][T16254] ? proc_nr_inodes+0x2f0/0x2f0 [ 928.388114][T16254] ? do_raw_spin_unlock+0x11d/0x230 [ 928.393396][T16254] ? _raw_spin_unlock+0x24/0x40 [ 928.398243][T16254] ? iput+0x768/0x980 [ 928.402227][T16254] ext4_orphan_cleanup+0xbeb/0x1420 [ 928.407437][T16254] ? ext4_orphan_del+0xbf0/0xbf0 [ 928.412384][T16254] ? ext4_register_sysfs+0x27e/0x2c0 [ 928.417695][T16254] ? errseq_check_and_advance+0x62/0x120 [ 928.423647][T16254] ext4_fill_super+0x6ee3/0x78c0 [ 928.428614][T16254] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 928.434873][T16254] ? set_blocksize+0x1d0/0x470 [ 928.439667][T16254] ? sb_set_blocksize+0xa5/0xe0 [ 928.444519][T16254] get_tree_bdev+0x3f1/0x610 [ 928.449130][T16254] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 928.455371][T16254] vfs_get_tree+0x88/0x270 [ 928.459790][T16254] do_new_mount+0x24a/0xa40 [ 928.464392][T16254] __se_sys_mount+0x2e3/0x3d0 [ 928.469157][T16254] ? __x64_sys_mount+0xc0/0xc0 [ 928.473930][T16254] ? lockdep_hardirqs_on+0x94/0x140 [ 928.479132][T16254] ? __x64_sys_mount+0x1c/0xc0 [ 928.483898][T16254] do_syscall_64+0x4c/0xa0 [ 928.488316][T16254] ? clear_bhb_loop+0x60/0xb0 [ 928.492991][T16254] ? clear_bhb_loop+0x60/0xb0 [ 928.497669][T16254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 928.503581][T16254] RIP: 0033:0x7f4b3999da8a [ 928.508029][T16254] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.527668][T16254] RSP: 002b:00007f4b37bf5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 928.536087][T16254] RAX: ffffffffffffffda RBX: 00007f4b37bf5ee0 RCX: 00007f4b3999da8a [ 928.544064][T16254] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f4b37bf5ea0 [ 928.552293][T16254] RBP: 0000200000000180 R08: 00007f4b37bf5ee0 R09: 0000000000000000 [ 928.560263][T16254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 928.568253][T16254] R13: 00007f4b37bf5ea0 R14: 000000000000047a R15: 00002000000001c0 [ 928.576251][T16254] [ 928.579659][T16254] Kernel Offset: disabled [ 928.584193][T16254] Rebooting in 86400 seconds..