last executing test programs: 13.539930616s ago: executing program 2 (id=408): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) pread64(r0, 0x0, 0x0, 0x0) 12.851608304s ago: executing program 1 (id=411): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x1e79, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 12.659625994s ago: executing program 3 (id=412): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, 0x0, 0x6a) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x8ec3, 0x0) fcntl$setpipe(r3, 0x407, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x800, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00'}, 0x10) madvise(&(0x7f000068b000/0x2000)=nil, 0x2000, 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @empty}, 0x1c) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="9b43a409aa81", @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_request}}}}, 0x0) mremap(&(0x7f00008a8000/0x3000)=nil, 0x3000, 0x800000, 0x2, &(0x7f0000130000/0x800000)=nil) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0002000000008100000008004500002c0000000000119078ac1414000000000000000000001890780400"/62], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0xc0a85320, &(0x7f00000000c0)={0x1080}) 12.432125702s ago: executing program 2 (id=413): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a56009c29fffe8000000000000000000000000000aaff0300000000000000000000000000015e01000000000000c204000000090401070000d0848b270339e8c4a27030054276000000000089060403"], 0xda) 12.202576342s ago: executing program 0 (id=414): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) creat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000019c0)) 11.311131899s ago: executing program 1 (id=416): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000000c0)="650f1ff80f01d12e3e0f35660f38809a08000f01c566b9a30b000066b80600000066ba000000000f3066660f1eeaf2af660fc7b2002866b9800000c00f326635008000000f30", 0x46}], 0x1, 0x42, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 11.282103459s ago: executing program 3 (id=417): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x2000082, &(0x7f0000000800)=ANY=[@ANYBLOB='nonumtail=0,utf8=0,iocharset=cp1250,uni_xlate=1,codepage=865,shortname=mixed,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c756e695f786c6174653d312c757466383d302c756e695f786c6174653d302c696f636861727365743d69736f383835392d332c00d89132ca783eea021e619d8395cf95970c1c9dca000020d62121b5661c1433dfedc74f07e4559e223ea40ad1465049f8ac7d080753c6e693f4baec6455a64f0d76c29c82b9ff67ea97ec4b3cc3a4270c2fcb9e2fecb263aeaa9ddb231afba37a485e4395093a6bb18a56ed35eea11377bb8ce99ec6"], 0x26, 0x358, &(0x7f0000000480)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0x2004}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETA(r1, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 11.219631496s ago: executing program 0 (id=418): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)='l', 0x1) syz_usb_disconnect(r0) 11.03989268s ago: executing program 2 (id=419): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0xfff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = gettid() prlimit64(r1, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) lseek(0xffffffffffffffff, 0x1000000, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r7, 0xae80, 0x0) bind$alg(r2, &(0x7f00000023c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r8 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="63f32d6c78c0d208", 0x8}], 0x1}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)=""/4096, 0x34000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001380)="2eeda30fcf3bf6318b194aff6784f08a82c5521a97487f502bf9c9d7411c3a633d9dab6d6cd079c7e938219ff7dcc4a34acf258ec027fd94b2ab0102f9dc02576de25d976ed76b69a2294d5ad6d4f2064eefe6d8696ab920c7f2196a4a28f44649d8a6ad36486536ec17301993af91257650090e084a6eab4b38d26e5e219e0e143673f2ff3a03a4474af0b8cc040081946249d92024bd4466c0e6ac5f20c10f19fcb011e6572316b60275f700720cce321bf5451238dbf09c5f919769d790b306322f77a805456e48f1c3d9e30a4498cf2826ee8be572", 0xd7}], 0x1}, 0x20000051) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4b, 0xdc, 0xad, 0x40, 0xa766, 0x7cb5, 0x553a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x2, 0x50}}]}}]}}, 0x0) 9.907540537s ago: executing program 1 (id=421): syz_usb_connect(0x0, 0x4f, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000150109023d00020000000009049c00030103510009050a000000ec000009050313010000000007250125"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b0000080039"], 0x15) dup(r2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000300)={[], [{@appraise_type}, {@permit_directio}]}, 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) 9.625148932s ago: executing program 3 (id=422): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000064d564b"]) 8.535458618s ago: executing program 4 (id=423): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x76, &(0x7f0000000140)=@assoc_value, 0x8) 8.247634386s ago: executing program 0 (id=424): r0 = io_uring_setup(0x177f, &(0x7f0000000140)) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 7.816948999s ago: executing program 3 (id=425): socket(0x10, 0x3, 0x0) creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000019840)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @timestamp={0x44, 0x2c, 0xee, 0x0, 0x2, [0x72a35bda, 0x1, 0x7fff, 0x6, 0x7, 0x8, 0x1, 0x9, 0x181cd3cd, 0x696d]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x3a}}, {@remote}, {@multicast2}, {@private}, {}, {@broadcast}, {@multicast2}]}, @noop, @cipso={0x86, 0x6}, @noop, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) syz_io_uring_setup(0x2ee1, &(0x7f0000000080)={0x0, 0x401, 0x1, 0x0, 0x161, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = epoll_create1(0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20002) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_pwait2(r1, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r4, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2f996b239c53"}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0), &(0x7f0000019c40)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7}, @device_a, @device_b, @from_mac=@broadcast, {0xc, 0x4c}}, 0x8, 0x65, @random=0xfffb, @void, @val={0x2d, 0x1a, {0x300, 0x2, 0x6, 0x0, {0x8001, 0x5a, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xde9, 0x6}}, [{0xdd, 0x30, "ddff9bf38d79866557f7a9004bbaa831f06b7900df77288eaef2442a08d386eb4864a987f0202c9f5512b7de08ed484d"}, {0xdd, 0x6, "e767cc2f27c0"}, {0xdd, 0x7f, "61bfb88bd0763c7640d3a85fef407286e413d2a9f6d929df09ae77208afbfa6f28a1fd905690cc33b2fd656b11d51157f8f35b9773089a1d9d5a44174befe524b91bc78224a01d341224ebdb964c076815483ddde1f4b452daec3209078c95250ab538532420b9fd6d6d0c23dd8c832d2e4c23359a98d35223ff80a0a3c1d5"}, {0xdd, 0x60, "b71a42dd4fde05eeacd6587e4020b558ce511ea364e70969ed81e11e8d7e5d32f4e233312e0bfd7ddd5d6f98eead0d4c4bbbe2b00afd25bde02d50fcd8e78abecb84527f59b47a6df1c71faaac08a364547a0930340172eb8bac0c469a72a534"}, {0xdd, 0x7a, "a64a105856cead9631b7d544bce02715ac7b02a990d0a93ad34ab6578d866f5027c0069262c6ec1391abf9eeac093e71425bc41e55f1f21093c33af04f6074f1cbd4c7b35e3b85a0ac3ffdd602c6e3395c613e2fb80dd80c001bfdfc840a66366100337bec0973aa5876ba5eaa47d55a89bd9bf9641dfdaa744b"}]}, 0x1d3) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000200)={0x20000006}) syz_emit_ethernet(0x5a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "623eebe039a1f617fd02722e3486ebd9"}, @md5sig={0x1d, 0x12}]}}}}}}}, 0x0) 4.990356091s ago: executing program 1 (id=426): socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3c) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/consoles\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0) read$hiddev(r0, &(0x7f0000001100)=""/234, 0xea) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000001400)=ANY=[@ANYBLOB="0001d80000800080000700070000e80004f5d618aa1a48c1174bd1a069e20ce473393ab3b6853189f2f439c86cd0358072a584ffce513e95e0001d713d087ef012f1565fe00409c64e70c6c64e820b4fd66611f14a2446cef0aee66e6b7f647ad0492a5065d4bedc300f7788093e2f429fedd6d779288b071838418c0a1c54a82c70898bdc6ae8d602bbf984847b88ef49eda52abae38cc9fb8b38583d1e04158023c4ae17a88dc39c28f512337610bdc491c940f835e838a106720956076ee0666af6ac4fbfc551455c46"]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f00000010c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000001200)=""/93, 0x5d}], 0x2, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20000000d, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x15, 0x1, 0x0, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800"}) fanotify_init(0x0, 0x101000) r3 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="100c060863e57fd1b9b242fa6a73", 0xe, 0x0) syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x13) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000003c0)={0x1, @vbi}) keyctl$set_reqkey_keyring(0xe, 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYRESDEC=r0], 0xa4}}, 0x40054) request_key(&(0x7f00000013c0)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', r3) r5 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r5, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='auto_da_alloc', 0x0, 0x0) writev(r5, &(0x7f0000001340)=[{&(0x7f0000000380)="a989d7b184832e98", 0x8}], 0x1) prctl$PR_SET_THP_DISABLE(0x42, 0x0) 4.856364578s ago: executing program 4 (id=427): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r4, 0x0, 0x6a) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) fcntl$setpipe(r4, 0x407, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x800, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00'}, 0x10) madvise(&(0x7f000068b000/0x2000)=nil, 0x2000, 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @empty}, 0x1c) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="9b43a409aa81", @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_request}}}}, 0x0) mremap(&(0x7f00008a8000/0x3000)=nil, 0x3000, 0x800000, 0x2, &(0x7f0000130000/0x800000)=nil) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0002000000008100000008004500002c0000000000119078ac1414000000000000000000001890780400"/62], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0xc0a85320, &(0x7f00000000c0)={0x1080}) 4.503434208s ago: executing program 0 (id=428): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) creat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f00000019c0)) 4.029296846s ago: executing program 2 (id=429): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a56009c29fffe8000000000000000000000000000aaff0300000000000000000000000000015e01000000000000c204000000090401070000d0848b270339e8c4a27030054276000000000089060403"], 0xda) 3.298591869s ago: executing program 0 (id=430): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x0, 0x4}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x401], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xf]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.821716043s ago: executing program 1 (id=431): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'geneve0\x00', 0x200}) syz_emit_vhci(&(0x7f0000000300)=ANY=[], 0x5) socket$kcm(0x2, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f00002ab000/0x4000)=nil, 0x4000, 0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x14) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffffffffe57, &(0x7f0000000140)}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x108000, 0x0, 0x0, 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000004c0)='./file0\x00', 0x92000800) inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x80000000) madvise(&(0x7f000036c000/0x1000)=nil, 0x1000, 0x16) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x800}) r4 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000001c0), 0x2) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f0000000080)={0x1, 0x2, 0xffffffff}) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000200), 0x2) 2.775776201s ago: executing program 4 (id=432): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x2000082, &(0x7f0000000800)=ANY=[@ANYBLOB='nonumtail=0,utf8=0,iocharset=cp1250,uni_xlate=1,codepage=865,shortname=mixed,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c756e695f786c6174653d312c757466383d302c756e695f786c6174653d302c696f636861727365743d69736f383835392d332c00d89132ca783eea021e619d8395cf95970c1c9dca000020d62121b5661c1433dfedc74f07e4559e223ea40ad1465049f8ac7d080753c6e693f4baec6455a64f0d76c29c82b9ff67ea97ec4b3cc3a4270c2fcb9e2fecb263aeaa9ddb231afba37a485e4395093a6bb18a56ed35eea11377bb8ce99ec6"], 0x26, 0x358, &(0x7f0000000480)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0x2004}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETA(r1, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 2.616774922s ago: executing program 2 (id=433): r0 = socket$inet(0x2b, 0x801, 0x0) accept4$inet(r0, 0x0, &(0x7f0000000080), 0x80000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x0) r2 = syz_io_uring_setup(0x770e, &(0x7f0000000200), 0x0, &(0x7f0000000300)) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000007940), 0x55, 0x0, 0x0) io_uring_enter(r3, 0xb15, 0x0, 0x0, 0x0, 0x0) connect$inet(r1, 0x0, 0xffffffe3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x40}}, 0x0) 2.060236031s ago: executing program 0 (id=434): syz_io_uring_setup(0x5c90, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000600), &(0x7f0000000100)) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x110, 0xd, {[@noop]}}}, @ip_ttl={{0x14, 0x110}}], 0x30}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) io_submit(0x0, 0x11, 0x0) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) r2 = dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x98, 0x0, 'client0\x00', 0x0, "3f1af4a740812e3a", "5a79d5ab1a5dc91bdf033940fff4267c71a6349ebc4fb5480bdf6452ae9d2a14"}) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x400) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x21) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(0xffffffffffffffff, &(0x7f0000003800)={0x2020}, 0x2020) r5 = socket(0x1e, 0x1, 0x0) sendmsg$tipc(r5, &(0x7f0000000300)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000840)="c502f136174c7d701f1a97c6cb18f46ca8963fa33e07fc3868f843da810a883575ecab0ff21bb9e1ccb846799334691ff41339b1fbde877bc6273b74be7959bd5a7c852934489ef19b4e276f8e38343d3ebfcaa1a0a25064c65af12f9db54a57452cb2dc56a230b6e85d0f34e6cfa895989c5bf1f7e5440370b10f252e1fc328a68c1074eae8ad5b01f95c8b88766314039c29b3b2312323657f34280ef779aab15adaebeada901f2c223a9925d89e08a200ef0913f483ab17eb1790341d4291ec14dfc8f3550d3baba657d3899306e41cd708b476bd45ccead4c818eb1f3fbc", 0xe0}], 0x1, 0x0, 0x0, 0x4}, 0x8000) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x40045b17, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x0) write$binfmt_aout(r7, &(0x7f0000000300)=ANY=[], 0x6b1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 1.910426628s ago: executing program 3 (id=435): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000064d564b"]) 1.461396639s ago: executing program 1 (id=436): syz_usb_connect(0x0, 0x4f, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000150109023d00020000000009049c00030103510009050a000000ec000009050313010000000007250125"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b0000080039"], 0x15) dup(r2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000300)={[], [{@appraise_type}, {@permit_directio}]}, 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) 1.442139965s ago: executing program 4 (id=437): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100000000000000001c0000", @ANYRES32=r0], 0x30}}, 0x0) 1.163061517s ago: executing program 3 (id=438): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e71, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x5, 0x5, 0x2}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 934.745653ms ago: executing program 2 (id=439): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 779.857628ms ago: executing program 4 (id=440): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) creat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f00000019c0)) 0s ago: executing program 4 (id=441): unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e05"], 0x8) shutdown(0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.267964][ T4550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.630323][ T4550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.639019][ T4550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.113571][ T5794] loop0: detected capacity change from 0 to 512 [ 290.230040][ T5794] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 290.244217][ T5794] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 290.490767][ T5658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.835019][ T5658] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.990501][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.998292][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.105925][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.113696][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.197466][ T1589] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 293.490419][ T1589] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 293.499694][ T1589] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.510379][ T1589] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 293.519692][ T1589] usb 3-1: config 0 has no interface number 0 [ 293.526186][ T1589] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 293.536634][ T1589] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 293.553122][ T1589] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.657735][ T1589] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 293.667448][ T1589] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 293.676261][ T1589] usb 3-1: SerialNumber: syz [ 293.745734][ T1589] usb 3-1: config 0 descriptor?? [ 293.813319][ T1589] gspca_main: spca561-2.14.0 probing abcd:cdee [ 294.140999][ T5658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.234865][ T5817] loop2: detected capacity change from 0 to 512 [ 294.280211][ T5817] ext4: Unknown parameter 'appraise_type' [ 294.407186][ T1589] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 294.419323][ T1589] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 294.426884][ T1589] usb 3-1: MIDIStreaming interface descriptor not found [ 295.839744][ T5658] veth0_vlan: entered promiscuous mode [ 296.581223][ T5658] veth1_vlan: entered promiscuous mode [ 297.564532][ T5658] veth0_macvtap: entered promiscuous mode [ 297.662567][ T5253] usb 3-1: USB disconnect, device number 3 [ 297.733382][ T5658] veth1_macvtap: entered promiscuous mode [ 298.060794][ T5658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.072898][ T5658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.083659][ T5658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.094786][ T5658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.105082][ T5658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.116102][ T5658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.126421][ T5658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.137424][ T5658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.162058][ T5658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.202984][ T5658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.213855][ T5658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.224250][ T5658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.235382][ T5658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.245673][ T5658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.264442][ T5658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.276715][ T5658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.287566][ T5658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.303212][ T5658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.476385][ T5658] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.485860][ T5658] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.495647][ T5658] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.504801][ T5658] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.820618][ T5851] loop2: detected capacity change from 0 to 512 [ 300.900662][ T5871] ptrace attach of "./syz-executor exec"[5529] was attempted by "./syz-executor exec"[5871] [ 305.076870][ T5903] sctp: failed to load transform for md5: -2 [ 306.102116][ T5247] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 306.372162][ T5247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.383622][ T5247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.393811][ T5247] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 306.407238][ T5247] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 306.416833][ T5247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.484686][ T5247] usb 3-1: config 0 descriptor?? [ 307.007226][ T5247] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 307.041129][ T5247] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 307.109077][ T5247] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 307.760521][ T5939] ax25_connect(): syz.0.77 uses autobind, please contact jreuter@yaina.de [ 307.838984][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.847750][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.054842][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.064043][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.245415][ T5247] usb 3-1: USB disconnect, device number 4 [ 311.101315][ T2823] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 311.317658][ T2823] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 311.327019][ T2823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.337613][ T2823] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 311.346935][ T2823] usb 1-1: config 0 has no interface number 0 [ 311.353476][ T2823] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 311.370263][ T2823] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 311.384155][ T2823] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.482845][ T2823] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 311.492361][ T2823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 311.500809][ T2823] usb 1-1: SerialNumber: syz [ 311.560455][ T2823] usb 1-1: config 0 descriptor?? [ 311.594548][ T2823] gspca_main: spca561-2.14.0 probing abcd:cdee [ 311.742282][ T44] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 311.907362][ T5966] loop0: detected capacity change from 0 to 512 [ 311.944644][ T5966] ext4: Unknown parameter 'appraise_type' [ 312.020492][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 312.303795][ T2823] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 312.315606][ T2823] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 312.323088][ T2823] usb 1-1: MIDIStreaming interface descriptor not found [ 312.706375][ T44] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 312.716014][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.775428][ T44] usb 3-1: config 0 descriptor?? [ 314.795885][ T44] wacom 0003:056A:0028.0002: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 314.949921][ T5292] usb 1-1: USB disconnect, device number 2 [ 315.136166][ T44] wacom 0003:056A:0028.0002: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.2-1/input0 [ 315.157640][ T44] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0028.0002/input/input6 [ 315.444181][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.472306][ T44] usb 3-1: USB disconnect, device number 5 [ 317.134731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 317.550231][ T5999] loop3: detected capacity change from 0 to 128 [ 317.829168][ T5997] loop1: detected capacity change from 0 to 2048 [ 317.843628][ T5999] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 317.912259][ T5999] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 317.970868][ T5997] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 318.289100][ T6003] loop4: detected capacity change from 0 to 256 [ 318.298537][ T6003] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615ÿ0x0000000000000000' [ 318.508253][ T5531] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 318.600978][ T5997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.94'. [ 318.651284][ T6007] warning: `syz.0.96' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 322.656554][ T6041] loop1: detected capacity change from 0 to 512 [ 322.703202][ T6041] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 323.398549][ T6041] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 324.337284][ T6051] loop1: detected capacity change from 0 to 128 [ 324.384254][ T6051] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 328.202476][ T6072] loop1: detected capacity change from 0 to 512 [ 328.245936][ T6072] EXT4-fs: Ignoring removed i_version option [ 328.326646][ T6072] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 328.388881][ T6072] System zones: 1-12 [ 328.448739][ T6072] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.120: bg 0: block 131: padding at end of block bitmap is not set [ 328.503076][ T6072] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 328.530688][ T6072] EXT4-fs (loop1): 1 truncate cleaned up [ 328.538584][ T6072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.914661][ T6090] loop3: detected capacity change from 0 to 256 [ 331.237637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 331.466053][ T6090] FAT-fs (loop3): Directory bread(block 64) failed [ 331.473199][ T6090] FAT-fs (loop3): Directory bread(block 65) failed [ 331.480319][ T6090] FAT-fs (loop3): Directory bread(block 66) failed [ 331.487573][ T6090] FAT-fs (loop3): Directory bread(block 67) failed [ 331.494634][ T6090] FAT-fs (loop3): Directory bread(block 68) failed [ 331.501592][ T6090] FAT-fs (loop3): Directory bread(block 69) failed [ 331.508927][ T6090] FAT-fs (loop3): Directory bread(block 70) failed [ 331.516010][ T6090] FAT-fs (loop3): Directory bread(block 71) failed [ 331.522986][ T6090] FAT-fs (loop3): Directory bread(block 72) failed [ 331.529784][ T6090] FAT-fs (loop3): Directory bread(block 73) failed [ 332.501513][ T5658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.757186][ T5190] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.779889][ T5190] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.792880][ T5190] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.812227][ T5190] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.829246][ T5190] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 333.843553][ T5190] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.002666][ T6128] loop3: detected capacity change from 0 to 128 [ 335.193200][ T6128] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 335.277635][ T6128] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 335.516197][ T6128] syz.3.136 (pid 6128) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 335.817107][ T6112] chnl_net:caif_netlink_parms(): no params data found [ 335.932122][ T5197] Bluetooth: hci1: command tx timeout [ 336.054344][ T5531] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 336.332693][ T5197] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 336.341290][ T5197] Bluetooth: hci4: Injecting HCI hardware error event [ 336.353759][ T5190] Bluetooth: hci4: hardware error 0x00 [ 336.782051][ T6144] loop3: detected capacity change from 0 to 128 [ 336.945919][ T6144] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 337.016941][ T6144] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 337.524116][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.533284][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.541425][ T6112] bridge_slave_0: entered allmulticast mode [ 337.551757][ T6112] bridge_slave_0: entered promiscuous mode [ 337.654658][ T5531] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 337.682679][ T3895] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.794452][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.802993][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.810835][ T6112] bridge_slave_1: entered allmulticast mode [ 337.820835][ T6112] bridge_slave_1: entered promiscuous mode [ 338.008679][ T3895] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.031555][ T5197] Bluetooth: hci1: command tx timeout [ 338.425804][ T5190] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 338.537318][ T3895] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.638540][ T6112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.788277][ T3895] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.923399][ T6112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.338823][ T6112] team0: Port device team_slave_0 added [ 339.415997][ T6112] team0: Port device team_slave_1 added [ 339.605629][ T3895] bridge_slave_1: left allmulticast mode [ 339.611901][ T3895] bridge_slave_1: left promiscuous mode [ 339.618606][ T3895] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.682676][ T3895] bridge_slave_0: left allmulticast mode [ 339.688712][ T3895] bridge_slave_0: left promiscuous mode [ 339.696002][ T3895] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.092972][ T5190] Bluetooth: hci1: command tx timeout [ 340.433612][ T3895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.511263][ T3895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.584679][ T3895] bond0 (unregistering): Released all slaves [ 340.756615][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.764093][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.791997][ T6112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.917591][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.925147][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.952006][ T6112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.741881][ T3895] hsr_slave_0: left promiscuous mode [ 341.784363][ T3895] hsr_slave_1: left promiscuous mode [ 341.822080][ T3895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.829852][ T3895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.944954][ T3895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.952886][ T3895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.997704][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.004900][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.112795][ T3895] veth1_macvtap: left promiscuous mode [ 342.118591][ T3895] veth0_macvtap: left promiscuous mode [ 342.125276][ T3895] veth1_vlan: left promiscuous mode [ 342.130857][ T3895] veth0_vlan: left promiscuous mode [ 342.174988][ T5190] Bluetooth: hci1: command tx timeout [ 342.696165][ T5247] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 342.943430][ T5247] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 342.952103][ T5247] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.962737][ T5247] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 342.972118][ T5247] usb 1-1: config 0 has no interface number 0 [ 342.978598][ T5247] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 342.988884][ T5247] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 343.000496][ T5247] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.116037][ T5247] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 343.125766][ T5247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 343.134384][ T5247] usb 1-1: SerialNumber: syz [ 343.180037][ T3895] team0 (unregistering): Port device team_slave_1 removed [ 343.189080][ T5247] usb 1-1: config 0 descriptor?? [ 343.244408][ T3895] team0 (unregistering): Port device team_slave_0 removed [ 343.258680][ T5247] gspca_main: spca561-2.14.0 probing abcd:cdee [ 343.638917][ T6177] loop0: detected capacity change from 0 to 512 [ 343.680432][ T6177] ext4: Unknown parameter 'appraise_type' [ 343.807445][ T6112] hsr_slave_0: entered promiscuous mode [ 343.871617][ T5247] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 343.883082][ T5247] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 343.889770][ T6112] hsr_slave_1: entered promiscuous mode [ 343.890291][ T5247] usb 1-1: MIDIStreaming interface descriptor not found [ 343.969363][ T6112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.977371][ T6112] Cannot create hsr debugfs directory [ 346.854013][ T5253] usb 1-1: USB disconnect, device number 3 [ 347.991891][ T6200] loop0: detected capacity change from 0 to 512 [ 348.133597][ T6200] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 348.143379][ T6200] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 348.222555][ T6200] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 348.245902][ T6200] System zones: 0-2, 18-18, 34-34 [ 348.267833][ T6200] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 348.353676][ T6112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 348.373041][ T6200] EXT4-fs (loop0): 1 truncate cleaned up [ 348.380911][ T6200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.479795][ T6112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 348.575764][ T6112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 348.687950][ T6112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 349.172016][ T1589] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 349.374908][ T1589] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 349.383571][ T1589] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.394227][ T1589] usb 2-1: config 0 has no interface number 0 [ 349.510121][ T1589] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 349.520167][ T1589] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.528596][ T1589] usb 2-1: Product: syz [ 349.533352][ T1589] usb 2-1: Manufacturer: syz [ 349.538249][ T1589] usb 2-1: SerialNumber: syz [ 349.586770][ T1589] usb 2-1: config 0 descriptor?? [ 349.669939][ T1589] ims_pcu 2-1:0.41: Zero length descriptor [ 349.678221][ T1589] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22 [ 349.704386][ T6214] loop3: detected capacity change from 0 to 512 [ 349.889970][ T6214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.904352][ T6214] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 349.935498][ T6218] loop2: detected capacity change from 0 to 512 [ 350.269331][ T6223] loop2: detected capacity change from 0 to 256 [ 350.348903][ T5494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.373180][ T1589] usb 2-1: USB disconnect, device number 2 [ 350.433672][ T6223] exfat: Unknown parameter 'me' [ 350.564168][ T5531] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.700339][ T6112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.756656][ T6223] loop2: detected capacity change from 0 to 512 [ 350.936879][ T6112] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.111348][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.119407][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.265767][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.273680][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.833787][ T29] audit: type=1800 audit(1724650506.479:3): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.162" name="/" dev="fuse" ino=1 res=0 errno=0 [ 352.273060][ T6239] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 353.203436][ T6248] loop3: detected capacity change from 0 to 512 [ 353.295060][ T6248] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 353.462402][ T1589] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 353.679279][ T6252] loop1: detected capacity change from 0 to 512 [ 353.796949][ T6252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.810611][ T6252] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.832149][ T1589] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.843510][ T1589] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.853761][ T1589] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 353.866979][ T1589] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.996236][ T1589] usb 3-1: config 0 descriptor?? [ 354.023803][ T6252] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.287292][ T6112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.474334][ T6257] loop0: detected capacity change from 0 to 1024 [ 354.569486][ T6257] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 354.619090][ T1589] apple 0003:05AC:0262.0003: unbalanced collection at end of report description [ 354.681808][ T6257] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 354.705253][ T1589] apple 0003:05AC:0262.0003: parse failed [ 354.711920][ T1589] apple 0003:05AC:0262.0003: probe with driver apple failed with error -22 [ 354.753449][ T6257] EXT4-fs (loop0): orphan cleanup on readonly fs [ 354.802965][ T6257] EXT4-fs error (device loop0): ext4_free_blocks:6590: comm syz.0.171: Freeing blocks not in datazone - block = 0, count = 4096 [ 354.912819][ T6257] EXT4-fs (loop0): 1 orphan inode deleted [ 354.920456][ T6257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 354.935420][ T5247] usb 3-1: USB disconnect, device number 6 [ 355.338768][ T5494] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.380520][ T6265] loop1: detected capacity change from 0 to 512 [ 355.529748][ T6265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.543112][ T6265] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.603524][ T6265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.005485][ T1589] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 356.274581][ T1589] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 356.283486][ T1589] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.295203][ T1589] usb 1-1: config 0 has no interface number 0 [ 356.354787][ T1589] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 356.364394][ T1589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.373416][ T1589] usb 1-1: Product: syz [ 356.377813][ T1589] usb 1-1: Manufacturer: syz [ 356.382752][ T1589] usb 1-1: SerialNumber: syz [ 356.439138][ T1589] usb 1-1: config 0 descriptor?? [ 356.477362][ T1589] ims_pcu 1-1:0.41: Zero length descriptor [ 356.483690][ T1589] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 356.852566][ T6284] loop1: detected capacity change from 0 to 512 [ 357.075017][ T6284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.086599][ T44] usb 1-1: USB disconnect, device number 4 [ 357.089433][ T6284] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.359600][ T6112] veth0_vlan: entered promiscuous mode [ 357.369013][ T6284] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.175: Directory hole found for htree leaf block 0 [ 357.504607][ T6112] veth1_vlan: entered promiscuous mode [ 357.835698][ T6112] veth0_macvtap: entered promiscuous mode [ 357.951054][ T6112] veth1_macvtap: entered promiscuous mode [ 358.235298][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.246254][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.256680][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.272301][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.285912][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.296995][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.307153][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.317929][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.333811][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.601238][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.613210][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.624892][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.635668][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.645823][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.656619][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.666899][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.682620][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.698977][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.807121][ T6112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.816536][ T6112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.826110][ T6112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.835495][ T6112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.539968][ T6303] loop3: detected capacity change from 0 to 512 [ 359.768413][ T6303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.783265][ T6303] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.880468][ T6303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.643047][ T5658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.853041][ T5190] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 361.861862][ T5190] Bluetooth: hci6: Injecting HCI hardware error event [ 361.869387][ T5190] Bluetooth: hci6: hardware error 0x00 [ 361.904950][ T44] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 362.131384][ T44] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 362.140100][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.152697][ T44] usb 3-1: config 0 has no interface number 0 [ 362.211241][ T44] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 362.220997][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.229439][ T44] usb 3-1: Product: syz [ 362.234039][ T44] usb 3-1: Manufacturer: syz [ 362.238874][ T44] usb 3-1: SerialNumber: syz [ 362.322167][ T44] usb 3-1: config 0 descriptor?? [ 362.364084][ T44] ims_pcu 3-1:0.41: Zero length descriptor [ 362.370316][ T44] ims_pcu 3-1:0.41: probe with driver ims_pcu failed with error -22 [ 362.946359][ T5252] usb 3-1: USB disconnect, device number 7 [ 363.936584][ T5190] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 364.314830][ T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 364.595358][ T44] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 364.605755][ T44] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 364.690134][ T44] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 364.700067][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.708725][ T44] usb 2-1: Product: syz [ 364.714945][ T44] usb 2-1: Manufacturer: syz [ 364.719876][ T44] usb 2-1: SerialNumber: syz [ 364.749303][ T44] usb 2-1: config 0 descriptor?? [ 364.758412][ T6355] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 364.817393][ T6355] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 365.108306][ T6355] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 365.142082][ T6355] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 365.208865][ T3895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.220259][ T3895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.440284][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.448603][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.666232][ T44] dm9601: No valid MAC address in EEPROM, using ee:5f:99:ac:fe:94 [ 365.912242][ T44] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 365.990546][ T44] usb 2-1: USB disconnect, device number 3 [ 368.032294][ T1589] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 368.249826][ T1589] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 368.258608][ T1589] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.269384][ T1589] usb 2-1: config 0 has no interface number 0 [ 368.337210][ T1589] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 368.346995][ T1589] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.355426][ T1589] usb 2-1: Product: syz [ 368.359834][ T1589] usb 2-1: Manufacturer: syz [ 368.365145][ T1589] usb 2-1: SerialNumber: syz [ 368.444735][ T1589] usb 2-1: config 0 descriptor?? [ 368.480294][ T1589] ims_pcu 2-1:0.41: Zero length descriptor [ 368.487268][ T1589] ims_pcu 2-1:0.41: probe with driver ims_pcu failed with error -22 [ 368.954598][ T1589] usb 2-1: USB disconnect, device number 4 [ 369.614752][ T5197] Bluetooth: hci5: command 0x0406 tx timeout [ 371.140505][ T5197] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 371.158116][ T5197] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 371.257514][ T5197] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 371.299483][ T5197] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 371.343091][ T5197] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 371.381267][ T5197] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.540436][ T6392] loop1: detected capacity change from 0 to 4096 [ 371.558067][ T6392] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 371.947947][ T6392] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 372.428285][ T1589] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 372.503937][ T6392] syz.1.207 (6392) used greatest stack depth: 5096 bytes left [ 372.842887][ T1589] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 372.853623][ T1589] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 372.992564][ T1589] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 373.002310][ T1589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.015196][ T1589] usb 3-1: Product: syz [ 373.019653][ T1589] usb 3-1: Manufacturer: syz [ 373.026326][ T1589] usb 3-1: SerialNumber: syz [ 373.122108][ T1589] usb 3-1: config 0 descriptor?? [ 373.130233][ T6399] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 373.173329][ T6399] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 373.523534][ T6399] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 373.535292][ T5190] Bluetooth: hci2: command tx timeout [ 373.542344][ T6399] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 373.651337][ T6395] chnl_net:caif_netlink_parms(): no params data found [ 374.020091][ T1589] dm9601: No valid MAC address in EEPROM, using ee:5f:99:ac:fe:94 [ 374.370524][ T1589] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 374.480444][ T1589] usb 3-1: USB disconnect, device number 8 [ 374.497800][ T4421] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.550449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 374.693074][ T4421] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.896859][ T4421] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.138986][ T4421] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.497276][ T4421] bridge_slave_1: left allmulticast mode [ 375.503336][ T4421] bridge_slave_1: left promiscuous mode [ 375.509968][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.613534][ T4421] bridge_slave_0: left allmulticast mode [ 375.619822][ T4421] bridge_slave_0: left promiscuous mode [ 375.626711][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.638737][ T5190] Bluetooth: hci2: command tx timeout [ 375.639102][ T1589] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 376.025056][ T1589] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 376.033432][ T1589] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.043809][ T1589] usb 5-1: config 0 has no interface number 0 [ 376.223744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 376.258578][ T1589] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 376.269552][ T1589] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.278006][ T1589] usb 5-1: Product: syz [ 376.285919][ T1589] usb 5-1: Manufacturer: syz [ 376.290782][ T1589] usb 5-1: SerialNumber: syz [ 376.386788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 376.498864][ T1589] usb 5-1: config 0 descriptor?? [ 376.516370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 376.677477][ T1589] ims_pcu 5-1:0.41: Zero length descriptor [ 376.684392][ T1589] ims_pcu 5-1:0.41: probe with driver ims_pcu failed with error -22 [ 376.688427][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.786293][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.836458][ T4421] bond0 (unregistering): Released all slaves [ 377.145776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 377.239006][ T5247] usb 5-1: USB disconnect, device number 2 [ 377.358653][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.366452][ T6395] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.378981][ T6395] bridge_slave_0: entered allmulticast mode [ 377.387307][ T6395] bridge_slave_0: entered promiscuous mode [ 377.693625][ T5190] Bluetooth: hci2: command tx timeout [ 377.780817][ T6395] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.788983][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.797081][ T6395] bridge_slave_1: entered allmulticast mode [ 377.806625][ T6395] bridge_slave_1: entered promiscuous mode [ 378.062114][ T4421] hsr_slave_0: left promiscuous mode [ 378.143176][ T4421] hsr_slave_1: left promiscuous mode [ 378.184585][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.192688][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.260331][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.268541][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.381177][ T4421] veth1_macvtap: left promiscuous mode [ 378.387084][ T4421] veth0_macvtap: left promiscuous mode [ 378.393744][ T4421] veth1_vlan: left promiscuous mode [ 378.399489][ T4421] veth0_vlan: left promiscuous mode [ 378.722336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 378.733759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 378.746418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 379.351371][ T4421] team0 (unregistering): Port device team_slave_1 removed [ 379.453765][ T4421] team0 (unregistering): Port device team_slave_0 removed [ 379.775827][ T5190] Bluetooth: hci2: command tx timeout [ 380.256014][ T6433] loop1: detected capacity change from 0 to 4096 [ 380.298208][ T6395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.372917][ T6433] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 380.385533][ T6395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.710635][ T6433] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 380.926981][ T6395] team0: Port device team_slave_0 added [ 381.024523][ T6395] team0: Port device team_slave_1 added [ 381.307756][ T6395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.315398][ T6395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.342161][ T6395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.489069][ T6395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.496510][ T6395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.526320][ T6395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.176681][ T29] audit: type=1326 audit(1724650536.819:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 382.199367][ T29] audit: type=1326 audit(1724650536.819:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 382.224479][ T29] audit: type=1326 audit(1724650536.889:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 382.247367][ T29] audit: type=1326 audit(1724650536.889:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 382.269829][ T29] audit: type=1326 audit(1724650536.899:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 382.292130][ T29] audit: type=1326 audit(1724650536.899:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 382.314903][ T29] audit: type=1326 audit(1724650536.949:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 382.460448][ T6395] hsr_slave_0: entered promiscuous mode [ 382.518287][ T6395] hsr_slave_1: entered promiscuous mode [ 382.617739][ T6395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.626763][ T6395] Cannot create hsr debugfs directory [ 382.872354][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 383.813035][ T1589] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 383.852273][ T5253] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 384.048484][ T1589] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 384.060055][ T1589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.074429][ T1589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.085949][ T1589] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 384.102202][ T1589] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 384.112962][ T1589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.165322][ T1589] usb 4-1: config 0 descriptor?? [ 384.189939][ T5253] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 384.200975][ T5253] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 384.309729][ T5253] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 384.319567][ T5253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.328535][ T5253] usb 5-1: Product: syz [ 384.333287][ T5253] usb 5-1: Manufacturer: syz [ 384.338277][ T5253] usb 5-1: SerialNumber: syz [ 384.405391][ T5253] usb 5-1: config 0 descriptor?? [ 384.414032][ T6473] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 384.446092][ T6473] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 384.454252][ T5247] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 384.491753][ C0] hrtimer: interrupt took 174301 ns [ 384.685357][ T5292] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 384.725369][ T1589] nintendo 0003:057E:2009.0004: unknown main item tag 0x0 [ 384.733627][ T1589] nintendo 0003:057E:2009.0004: unknown main item tag 0x0 [ 384.739769][ T5247] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 384.741434][ T1589] nintendo 0003:057E:2009.0004: item fetching failed at offset 2/5 [ 384.749801][ T5247] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.768183][ T5247] usb 3-1: config 0 has no interface number 0 [ 384.776015][ T1589] nintendo 0003:057E:2009.0004: HID parse failed [ 384.796846][ T1589] nintendo 0003:057E:2009.0004: probe - fail = -22 [ 384.804685][ T1589] nintendo 0003:057E:2009.0004: probe with driver nintendo failed with error -22 [ 384.837973][ T6473] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 384.845571][ T5247] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 384.852717][ T6473] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 384.855266][ T5247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.870327][ T5247] usb 3-1: Product: syz [ 384.876608][ T5247] usb 3-1: Manufacturer: syz [ 384.881447][ T5247] usb 3-1: SerialNumber: syz [ 384.937016][ T5292] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 384.939814][ T5247] usb 3-1: config 0 descriptor?? [ 384.947362][ T5292] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 384.955357][ T1589] usb 4-1: USB disconnect, device number 2 [ 385.011422][ T5247] ims_pcu 3-1:0.41: Zero length descriptor [ 385.018154][ T5247] ims_pcu 3-1:0.41: probe with driver ims_pcu failed with error -22 [ 385.050117][ T5292] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 385.063228][ T5292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.072023][ T5292] usb 2-1: Product: syz [ 385.076579][ T5292] usb 2-1: Manufacturer: syz [ 385.081570][ T5292] usb 2-1: SerialNumber: syz [ 385.158617][ T5292] usb 2-1: config 0 descriptor?? [ 385.198638][ T6480] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 385.232586][ T6480] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 385.358507][ T5253] dm9601: No valid MAC address in EEPROM, using ee:5f:99:ac:fe:94 [ 385.569223][ T6479] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 385.582423][ T6395] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 385.604801][ T5253] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 385.661415][ T6395] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 385.684795][ T6479] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 385.687084][ T5253] usb 5-1: USB disconnect, device number 3 [ 385.795742][ T6395] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 385.849323][ T6395] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 385.926208][ T2823] usb 3-1: USB disconnect, device number 9 [ 386.326278][ T5292] Error reading MAC address [ 387.076515][ T6493] loop3: detected capacity change from 0 to 512 [ 387.144415][ T6493] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 387.153658][ T6493] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 387.328807][ T6497] loop2: detected capacity change from 0 to 512 [ 387.388093][ T6395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.418154][ T6497] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 387.427408][ T6497] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent [ 387.665955][ T6395] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.773865][ T4421] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.781801][ T4421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.900856][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.908686][ T4421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.957039][ T5247] usb 2-1: USB disconnect, device number 5 [ 390.668658][ T6395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.064162][ T44] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 391.138890][ T6395] veth0_vlan: entered promiscuous mode [ 391.312071][ T6395] veth1_vlan: entered promiscuous mode [ 391.363656][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 391.374842][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 391.477039][ T44] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 391.486719][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.495162][ T44] usb 4-1: Product: syz [ 391.499573][ T44] usb 4-1: Manufacturer: syz [ 391.504702][ T44] usb 4-1: SerialNumber: syz [ 391.574697][ T44] usb 4-1: config 0 descriptor?? [ 391.586150][ T6530] loop1: detected capacity change from 0 to 256 [ 391.610591][ T6527] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 391.624620][ T6527] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 391.785835][ T6395] veth0_macvtap: entered promiscuous mode [ 391.891584][ T6395] veth1_macvtap: entered promiscuous mode [ 391.929270][ T6527] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 391.974487][ T6527] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 392.081038][ T6530] FAT-fs (loop1): Directory bread(block 64) failed [ 392.088352][ T6530] FAT-fs (loop1): Directory bread(block 65) failed [ 392.096722][ T6530] FAT-fs (loop1): Directory bread(block 66) failed [ 392.103833][ T6530] FAT-fs (loop1): Directory bread(block 67) failed [ 392.111051][ T6530] FAT-fs (loop1): Directory bread(block 68) failed [ 392.118691][ T6530] FAT-fs (loop1): Directory bread(block 69) failed [ 392.126080][ T6530] FAT-fs (loop1): Directory bread(block 70) failed [ 392.133174][ T6530] FAT-fs (loop1): Directory bread(block 71) failed [ 392.135796][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.140150][ T6530] FAT-fs (loop1): Directory bread(block 72) failed [ 392.151017][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.151078][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.151165][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.162605][ T6530] FAT-fs (loop1): Directory bread(block 73) failed [ 392.172449][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.209973][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.221822][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.232695][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.248111][ T6395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.411066][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.425134][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.436704][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.447546][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.457884][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.472751][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.483846][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.494702][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.509863][ T6395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.586162][ T44] dm9601: No valid MAC address in EEPROM, using ee:5f:99:ac:fe:94 [ 392.724196][ T5253] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 392.754762][ T6395] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.764209][ T6395] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.777507][ T6395] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.787620][ T6395] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.857683][ T44] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 392.940774][ T5253] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 392.949696][ T5253] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.961190][ T5253] usb 5-1: config 0 has no interface number 0 [ 392.977494][ T44] usb 4-1: USB disconnect, device number 3 [ 393.021377][ T5253] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 393.032072][ T5253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.040343][ T5253] usb 5-1: Product: syz [ 393.044951][ T5253] usb 5-1: Manufacturer: syz [ 393.049776][ T5253] usb 5-1: SerialNumber: syz [ 393.156288][ T5253] usb 5-1: config 0 descriptor?? [ 393.210502][ T5253] ims_pcu 5-1:0.41: Zero length descriptor [ 393.217988][ T5253] ims_pcu 5-1:0.41: probe with driver ims_pcu failed with error -22 [ 393.812165][ T5253] usb 5-1: USB disconnect, device number 4 [ 394.247722][ T6553] loop1: detected capacity change from 0 to 256 [ 394.285828][ T6553] exfat: Deprecated parameter 'namecase' [ 394.292464][ T6553] exfat: Deprecated parameter 'namecase' [ 394.475533][ T6553] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 395.947596][ T6569] syzkaller0: entered promiscuous mode [ 395.953575][ T6569] syzkaller0: entered allmulticast mode [ 397.801329][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 398.187040][ T6590] loop4: detected capacity change from 0 to 256 [ 398.595587][ T6590] FAT-fs (loop4): Directory bread(block 64) failed [ 398.602640][ T6590] FAT-fs (loop4): Directory bread(block 65) failed [ 398.612722][ T6590] FAT-fs (loop4): Directory bread(block 66) failed [ 398.619516][ T6590] FAT-fs (loop4): Directory bread(block 67) failed [ 398.629034][ T6590] FAT-fs (loop4): Directory bread(block 68) failed [ 398.636025][ T6590] FAT-fs (loop4): Directory bread(block 69) failed [ 398.643176][ T6590] FAT-fs (loop4): Directory bread(block 70) failed [ 398.650045][ T6590] FAT-fs (loop4): Directory bread(block 71) failed [ 398.653964][ T5253] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 398.657185][ T6590] FAT-fs (loop4): Directory bread(block 72) failed [ 398.671264][ T6590] FAT-fs (loop4): Directory bread(block 73) failed [ 398.982029][ T5253] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 398.992636][ T5253] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 399.052572][ T5253] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 399.063038][ T5253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.071390][ T5253] usb 3-1: Product: syz [ 399.076236][ T5253] usb 3-1: Manufacturer: syz [ 399.081154][ T5253] usb 3-1: SerialNumber: syz [ 399.124732][ T5253] usb 3-1: config 0 descriptor?? [ 399.133598][ T6593] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 399.142397][ T6593] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 399.465407][ T6593] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 399.517372][ T6593] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 399.581035][ T4421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.589721][ T4421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.769784][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.778200][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.988674][ T5253] dm9601: No valid MAC address in EEPROM, using ee:5f:99:ac:fe:94 [ 400.209081][ T5253] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 400.303279][ T5253] usb 3-1: USB disconnect, device number 10 [ 400.332564][ T5197] Bluetooth: hci0: command 0x0406 tx timeout [ 400.972222][ T5253] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 401.233910][ T5253] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 401.242639][ T5253] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.253468][ T5253] usb 5-1: config 0 has no interface number 0 [ 401.351134][ T5253] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 401.361384][ T5253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.373195][ T5253] usb 5-1: Product: syz [ 401.380202][ T5253] usb 5-1: Manufacturer: syz [ 401.385435][ T5253] usb 5-1: SerialNumber: syz [ 401.425017][ T5253] usb 5-1: config 0 descriptor?? [ 401.464354][ T5253] ims_pcu 5-1:0.41: Zero length descriptor [ 401.470871][ T5253] ims_pcu 5-1:0.41: probe with driver ims_pcu failed with error -22 [ 401.968596][ T6613] loop2: detected capacity change from 0 to 128 [ 402.040147][ T5253] usb 5-1: USB disconnect, device number 5 [ 402.100391][ T6613] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 402.175815][ T6613] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 402.368540][ T6617] loop0: detected capacity change from 0 to 1024 [ 402.424313][ T6617] hfsplus: invalid extent max_key_len 0 [ 402.442767][ T6617] hfsplus: failed to load extents file [ 402.782677][ T5529] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 403.406029][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.413457][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.779810][ T6629] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 403.819021][ T6623] loop4: detected capacity change from 0 to 2048 [ 403.922868][ T6621] kvm: pic: single mode not supported [ 403.923290][ T6621] kvm: pic: non byte read [ 403.973662][ T6621] kvm: pic: level sensitive irq not supported [ 403.974095][ T6621] kvm: pic: non byte read [ 404.084896][ T6623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.092654][ T6621] kvm: pic: level sensitive irq not supported [ 404.098000][ T6621] kvm: pic: non byte read [ 404.185572][ T6621] kvm: pic: non byte read [ 404.224602][ T6621] kvm: pic: non byte read [ 404.329723][ T6621] kvm: pic: level sensitive irq not supported [ 404.330080][ T6621] kvm: pic: non byte read [ 404.388051][ T6621] kvm: pic: level sensitive irq not supported [ 404.388636][ T6621] kvm: pic: non byte read [ 404.466549][ T6621] kvm: pic: single mode not supported [ 404.466654][ T6621] kvm: pic: level sensitive irq not supported [ 404.916955][ T5197] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 404.962202][ T5197] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 404.982936][ T5197] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 405.022921][ T5197] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 405.040180][ T5197] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 405.051239][ T5197] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 405.551361][ T6637] loop0: detected capacity change from 0 to 512 [ 405.817523][ T6637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.831249][ T6637] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 406.464139][ T6395] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.743756][ T6634] chnl_net:caif_netlink_parms(): no params data found [ 407.132220][ T5197] Bluetooth: hci3: command tx timeout [ 407.285762][ T6112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.417979][ T1659] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 407.669922][ T1659] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 407.680117][ T1659] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 407.763884][ T1659] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 407.773469][ T1659] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.782075][ T1659] usb 1-1: Product: syz [ 407.786482][ T1659] usb 1-1: Manufacturer: syz [ 407.791327][ T1659] usb 1-1: SerialNumber: syz [ 407.856570][ T1659] usb 1-1: config 0 descriptor?? [ 407.865845][ T6646] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 407.891060][ T6646] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 407.948412][ T5190] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 407.974401][ T5190] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 407.992453][ T5190] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 408.036836][ T5190] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 408.089350][ T5190] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 408.098717][ T5190] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 408.270157][ T6646] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 408.326714][ T6652] loop4: detected capacity change from 0 to 256 [ 408.352751][ T6646] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 408.651481][ T6652] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 408.663282][ T6652] FAT-fs (loop4): Filesystem has been set read-only [ 409.016967][ T1659] dm9601: No valid MAC address in EEPROM, using ee:5f:99:ac:fe:94 [ 409.216829][ T5190] Bluetooth: hci3: command tx timeout [ 409.233722][ T1659] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 409.378292][ T6659] Zero length message leads to an empty skb [ 409.394820][ T1659] usb 1-1: USB disconnect, device number 5 [ 409.439392][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 409.537709][ T6634] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.546747][ T6634] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.555960][ T6634] bridge_slave_0: entered allmulticast mode [ 409.570390][ T6634] bridge_slave_0: entered promiscuous mode [ 409.823639][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.831493][ T6634] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.839979][ T6634] bridge_slave_1: entered allmulticast mode [ 409.891214][ T6634] bridge_slave_1: entered promiscuous mode [ 410.260836][ T6662] loop2: detected capacity change from 0 to 128 [ 410.262950][ T5190] Bluetooth: hci5: command tx timeout [ 410.425671][ T6634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.450370][ T6662] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 410.497080][ T6662] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 410.570385][ T6667] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 410.599445][ T6634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.888643][ T6634] team0: Port device team_slave_0 added [ 410.926636][ T6669] loop0: detected capacity change from 0 to 512 [ 410.975809][ T6669] EXT4-fs: Ignoring removed i_version option [ 410.982190][ T6669] EXT4-fs: Ignoring removed nobh option [ 411.021169][ T6634] team0: Port device team_slave_1 added [ 411.037746][ T6650] chnl_net:caif_netlink_parms(): no params data found [ 411.054185][ T6669] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 411.078123][ T6669] EXT4-fs (loop0): 1 truncate cleaned up [ 411.086437][ T6669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.291912][ T5190] Bluetooth: hci3: command tx timeout [ 411.376516][ T5529] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 411.481099][ T6634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.488740][ T6634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.520749][ T6634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.555012][ T6671] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 411.804852][ T6634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.811923][ T5292] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 411.824843][ T6634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.852843][ T6634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.032910][ T5292] usb 5-1: Using ep0 maxpacket: 16 [ 412.102207][ T5292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.115094][ T5292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.129303][ T5292] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 412.143581][ T5292] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 412.153214][ T5292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.220734][ T6395] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.238835][ T5292] usb 5-1: config 0 descriptor?? [ 412.334899][ T5190] Bluetooth: hci5: command tx timeout [ 412.552582][ T6634] hsr_slave_0: entered promiscuous mode [ 412.620649][ T6634] hsr_slave_1: entered promiscuous mode [ 412.640882][ T6678] syz.4.275 uses obsolete (PF_INET,SOCK_PACKET) [ 412.698698][ T6634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.706668][ T6634] Cannot create hsr debugfs directory [ 412.848487][ T4421] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.120038][ T4421] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.372355][ T5190] Bluetooth: hci3: command tx timeout [ 413.699691][ T4421] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.766664][ T5292] usbhid 5-1:0.0: can't add hid device: -71 [ 413.773447][ T5292] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 413.865284][ T5292] usb 5-1: USB disconnect, device number 6 [ 414.117422][ T4421] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.373153][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.385756][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.393877][ T6650] bridge_slave_0: entered allmulticast mode [ 414.403680][ T6650] bridge_slave_0: entered promiscuous mode [ 414.411953][ T5190] Bluetooth: hci5: command tx timeout [ 414.647579][ T6650] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.655587][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.663789][ T6650] bridge_slave_1: entered allmulticast mode [ 414.673264][ T6650] bridge_slave_1: entered promiscuous mode [ 414.823351][ T4421] bridge_slave_1: left allmulticast mode [ 414.829258][ T4421] bridge_slave_1: left promiscuous mode [ 414.836061][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.902413][ T4421] bridge_slave_0: left allmulticast mode [ 414.908332][ T4421] bridge_slave_0: left promiscuous mode [ 414.915157][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.490247][ T6688] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 415.821486][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.865627][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.894569][ T4421] bond0 (unregistering): Released all slaves [ 416.386971][ T6686] netlink: 'syz.4.278': attribute type 12 has an invalid length. [ 416.410345][ T6650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.502025][ T5190] Bluetooth: hci5: command tx timeout [ 416.576526][ T6650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.133080][ T6650] team0: Port device team_slave_0 added [ 417.226252][ T6650] team0: Port device team_slave_1 added [ 417.444007][ T6697] serio: Serial port ptm0 [ 417.499226][ T6634] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.907891][ T6634] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.955528][ T6650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.965724][ T6650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.993520][ T6650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.132151][ T6634] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.257736][ T4421] hsr_slave_0: left promiscuous mode [ 418.298877][ T4421] hsr_slave_1: left promiscuous mode [ 418.318253][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.326381][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.358159][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.368824][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.459521][ T4421] veth1_macvtap: left promiscuous mode [ 418.466034][ T4421] veth0_macvtap: left promiscuous mode [ 418.476159][ T4421] veth1_vlan: left promiscuous mode [ 418.481987][ T4421] veth0_vlan: left promiscuous mode [ 418.694051][ T6713] loop2: detected capacity change from 0 to 128 [ 418.937787][ T6713] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 419.013700][ T6713] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 419.584153][ T4421] team0 (unregistering): Port device team_slave_1 removed [ 419.615019][ T4421] team0 (unregistering): Port device team_slave_0 removed [ 419.709007][ T5529] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 420.056492][ T6650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.063896][ T6650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.090570][ T6650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.209072][ T6634] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.840908][ T6650] hsr_slave_0: entered promiscuous mode [ 420.903509][ T6650] hsr_slave_1: entered promiscuous mode [ 420.932316][ T6650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.940122][ T6650] Cannot create hsr debugfs directory [ 421.285801][ T6634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 421.573881][ T6634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 421.661461][ T4421] bridge_slave_1: left allmulticast mode [ 421.667618][ T4421] bridge_slave_1: left promiscuous mode [ 421.674729][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.732779][ T4421] bridge_slave_0: left allmulticast mode [ 421.738746][ T4421] bridge_slave_0: left promiscuous mode [ 421.746209][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.437528][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.508775][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.556498][ T4421] bond0 (unregistering): Released all slaves [ 422.632123][ T6634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 422.775087][ T6634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 423.639955][ T4421] hsr_slave_0: left promiscuous mode [ 423.700527][ T4421] hsr_slave_1: left promiscuous mode [ 423.732917][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.740830][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.784495][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.792420][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.887978][ T4421] veth1_macvtap: left promiscuous mode [ 423.895747][ T4421] veth0_macvtap: left promiscuous mode [ 423.903878][ T4421] veth1_vlan: left promiscuous mode [ 423.909502][ T4421] veth0_vlan: left promiscuous mode [ 425.264434][ T4421] team0 (unregistering): Port device team_slave_1 removed [ 425.362977][ T4421] team0 (unregistering): Port device team_slave_0 removed [ 425.995717][ T6746] netlink: 'syz.2.289': attribute type 12 has an invalid length. [ 426.812672][ T6758] Driver unsupported XDP return value 0 on prog (id 61) dev N/A, expect packet loss! [ 426.860875][ T6760] loop4: detected capacity change from 0 to 256 [ 426.987777][ T6650] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 427.074476][ T6760] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 427.183730][ T6650] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 427.268400][ T6650] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 427.350535][ T6650] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 427.496182][ T6634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.723396][ T6634] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.747609][ T6764] loop2: detected capacity change from 0 to 512 [ 427.835624][ T3829] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.843425][ T3829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.971836][ T3829] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.979546][ T3829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.103438][ T6764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.117408][ T6764] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 428.933686][ T6650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.137722][ T6650] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.258164][ T3829] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.265931][ T3829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.370596][ T3829] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.378346][ T3829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.421330][ T6634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.997131][ T6634] veth0_vlan: entered promiscuous mode [ 431.204399][ T6634] veth1_vlan: entered promiscuous mode [ 431.817403][ T6634] veth0_macvtap: entered promiscuous mode [ 431.896382][ T6634] veth1_macvtap: entered promiscuous mode [ 432.135470][ T6634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.146303][ T6634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.156535][ T6634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.167417][ T6634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.178677][ T6634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.189567][ T6634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.207991][ T6634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.243102][ T6650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.386256][ T5529] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.437798][ T6634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.449174][ T6634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.459484][ T6634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.470294][ T6634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.480521][ T6634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.491286][ T6634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.513031][ T6634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.751562][ T6634] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.761858][ T6634] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.770865][ T6634] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.780027][ T6634] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.176642][ T6650] veth0_vlan: entered promiscuous mode [ 433.346780][ T6650] veth1_vlan: entered promiscuous mode [ 433.989844][ T6650] veth0_macvtap: entered promiscuous mode [ 434.057664][ T6650] veth1_macvtap: entered promiscuous mode [ 434.326247][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.338804][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.354855][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.366421][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.376618][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.387484][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.397728][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.408614][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.426893][ T6650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.692005][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.702905][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.715003][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.725915][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.740049][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.754340][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.766882][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.778366][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.794045][ T6650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.884421][ T6800] loop0: detected capacity change from 0 to 4096 [ 434.911541][ T6800] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 435.088184][ T6650] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.097656][ T6650] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.107028][ T6650] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.116221][ T6650] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.342225][ T6800] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 436.055481][ T6822] netlink: 'syz.2.302': attribute type 12 has an invalid length. [ 437.635085][ T5197] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 437.747418][ T5197] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 437.792379][ T5197] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 437.857336][ T5197] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 437.888107][ T5197] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 437.897361][ T5197] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 439.682437][ T6842] chnl_net:caif_netlink_parms(): no params data found [ 440.116022][ T5197] Bluetooth: hci0: command tx timeout [ 441.626748][ T6842] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.634620][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.642669][ T6842] bridge_slave_0: entered allmulticast mode [ 441.652197][ T6842] bridge_slave_0: entered promiscuous mode [ 441.725247][ T4214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.733975][ T4214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.033815][ T6842] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.042149][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.050036][ T6842] bridge_slave_1: entered allmulticast mode [ 442.059815][ T6842] bridge_slave_1: entered promiscuous mode [ 442.171908][ T4214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.172171][ T5197] Bluetooth: hci0: command tx timeout [ 442.179959][ T4214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.357209][ T3829] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.532949][ T3829] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.626376][ T6895] netlink: 'syz.0.312': attribute type 12 has an invalid length. [ 442.651401][ T6842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.778441][ T3829] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.922695][ T6842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.010422][ T3829] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.339758][ T6893] loop2: detected capacity change from 0 to 4096 [ 443.417797][ T6842] team0: Port device team_slave_0 added [ 443.426648][ T6893] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 443.468822][ T6903] loop0: detected capacity change from 0 to 512 [ 443.514028][ T6842] team0: Port device team_slave_1 added [ 443.518918][ T6904] loop1: detected capacity change from 0 to 256 [ 443.578965][ T6903] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 443.690811][ T6893] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 443.724791][ T6903] EXT4-fs (loop0): 1 truncate cleaned up [ 443.797414][ T6903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.004327][ T3829] bridge_slave_1: left allmulticast mode [ 444.010283][ T3829] bridge_slave_1: left promiscuous mode [ 444.017298][ T3829] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.039309][ T6904] FAT-fs (loop1): Directory bread(block 64) failed [ 444.047241][ T6904] FAT-fs (loop1): Directory bread(block 65) failed [ 444.055114][ T6904] FAT-fs (loop1): Directory bread(block 66) failed [ 444.062897][ T6904] FAT-fs (loop1): Directory bread(block 67) failed [ 444.073942][ T6904] FAT-fs (loop1): Directory bread(block 68) failed [ 444.080736][ T6904] FAT-fs (loop1): Directory bread(block 69) failed [ 444.089633][ T6904] FAT-fs (loop1): Directory bread(block 70) failed [ 444.096668][ T6904] FAT-fs (loop1): Directory bread(block 71) failed [ 444.103771][ T6904] FAT-fs (loop1): Directory bread(block 72) failed [ 444.110557][ T6904] FAT-fs (loop1): Directory bread(block 73) failed [ 444.169755][ T6903] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.313: corrupted in-inode xattr: overlapping e_value [ 444.203814][ T3829] bridge_slave_0: left allmulticast mode [ 444.209722][ T3829] bridge_slave_0: left promiscuous mode [ 444.217373][ T3829] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.234739][ T6903] EXT4-fs (loop0): Remounting filesystem read-only [ 444.242491][ T6903] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1772: inode #15: comm syz.0.313: unable to update i_inline_off [ 444.255601][ T6903] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 444.281420][ T5197] Bluetooth: hci0: command tx timeout [ 444.675376][ T6395] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.289830][ T3829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.367577][ T3829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.417852][ T3829] bond0 (unregistering): Released all slaves [ 445.520938][ T6842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.528602][ T6842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.555376][ T6842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.573439][ T5252] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 445.589206][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.597427][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.657623][ T6842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.666624][ T6842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.694555][ T6842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.847179][ T5252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.858712][ T5252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.869146][ T5252] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 445.879414][ T5252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.961253][ T5252] usb 3-1: config 0 descriptor?? [ 446.292384][ T6842] hsr_slave_0: entered promiscuous mode [ 446.331935][ T5197] Bluetooth: hci0: command tx timeout [ 446.349663][ T6842] hsr_slave_1: entered promiscuous mode [ 446.407142][ T5252] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 446.477883][ T4214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.486127][ T4214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.563118][ T5252] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0005/input/input9 [ 446.799190][ T5252] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 446.924747][ T5252] usb 3-1: USB disconnect, device number 11 [ 447.350175][ T3829] hsr_slave_0: left promiscuous mode [ 447.404354][ T3829] hsr_slave_1: left promiscuous mode [ 447.436341][ T3829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.444240][ T3829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.535379][ T3829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.543621][ T3829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.700636][ T3829] veth1_macvtap: left promiscuous mode [ 447.706786][ T3829] veth0_macvtap: left promiscuous mode [ 447.713026][ T3829] veth1_vlan: left promiscuous mode [ 447.718603][ T3829] veth0_vlan: left promiscuous mode [ 448.422291][ T5252] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 448.672892][ T5252] usb 3-1: too many configurations: 125, using maximum allowed: 8 [ 448.820809][ T5252] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.831544][ T5252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 448.841827][ T5252] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 448.851896][ T5252] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.922043][ T5252] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.932739][ T5252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 448.943318][ T5252] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 448.953401][ T5252] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.047165][ T5252] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.058298][ T5252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 449.068953][ T5252] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 449.079158][ T5252] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.135727][ T3829] team0 (unregistering): Port device team_slave_1 removed [ 449.151165][ T5252] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.162032][ T5252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 449.171922][ T5252] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 449.181929][ T5252] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.251079][ T5252] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.261934][ T5252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 449.272212][ T5252] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 449.282233][ T5252] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.314242][ T3829] team0 (unregistering): Port device team_slave_0 removed [ 449.363223][ T5252] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.374032][ T5252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 449.384154][ T5252] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 449.397582][ T5252] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.510491][ T5252] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.521355][ T5252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 449.531476][ T5252] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 449.541702][ T5252] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.668616][ T5252] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.680644][ T5252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 449.692120][ T5252] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 449.704713][ T5252] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.845792][ T5252] usb 3-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 449.855550][ T5252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=4 [ 449.864042][ T5252] usb 3-1: Product: syz [ 449.868443][ T5252] usb 3-1: Manufacturer: syz [ 449.873448][ T5252] usb 3-1: SerialNumber: syz [ 449.985051][ T5252] usb 3-1: config 0 descriptor?? [ 450.066319][ T5252] ti_usb_3410_5052 3-1:0.0: TI USB 3410 1 port adapter converter detected [ 450.075913][ T5252] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 450.366930][ T1589] usb 3-1: USB disconnect, device number 12 [ 450.582404][ T5252] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 450.814884][ T5252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.826721][ T5252] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 450.838642][ T5252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.885717][ T5252] usb 4-1: config 0 descriptor?? [ 451.364264][ T5252] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 451.423362][ T6952] loop0: detected capacity change from 0 to 4096 [ 451.465563][ T5252] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0006/input/input10 [ 451.582220][ T6952] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 451.785456][ T5252] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 452.013803][ T6952] ntfs3: loop0: Failed to read $UpCase (-4). [ 452.037850][ T6967] ax25_connect(): syz.2.324 uses autobind, please contact jreuter@yaina.de [ 452.132515][ T5242] usb 4-1: USB disconnect, device number 4 [ 452.272968][ T6842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 452.362852][ T6842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 452.563492][ T6842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 452.723233][ T6842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 453.912090][ T5252] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 454.142768][ T5252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 454.155043][ T5252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.304818][ T5252] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 454.318114][ T5252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.327572][ T5252] usb 4-1: Product: syz [ 454.332103][ T5252] usb 4-1: Manufacturer: syz [ 454.336938][ T5252] usb 4-1: SerialNumber: syz [ 454.385946][ T5252] usb 4-1: config 0 descriptor?? [ 454.488883][ T5252] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 454.569346][ T6842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.737259][ T6985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.754565][ T6985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.839978][ T6842] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.933147][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.940860][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.051283][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.059072][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.170387][ T5242] usb 4-1: USB disconnect, device number 5 [ 455.702422][ T5252] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 456.001180][ T5252] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 456.010857][ T5252] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.021518][ T5252] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 456.030795][ T5252] usb 3-1: config 0 has no interface number 0 [ 456.037547][ T5252] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 456.047988][ T5252] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 456.061929][ T5252] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.117849][ T5252] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 456.127914][ T5252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 456.136944][ T5252] usb 3-1: SerialNumber: syz [ 456.147585][ T7009] ax25_connect(): syz.1.336 uses autobind, please contact jreuter@yaina.de [ 456.219602][ T5252] usb 3-1: config 0 descriptor?? [ 456.265913][ T5252] gspca_main: spca561-2.14.0 probing abcd:cdee [ 456.679593][ T7001] loop2: detected capacity change from 0 to 512 [ 456.756694][ T7001] ext4: Unknown parameter 'appraise_type' [ 456.875129][ T5252] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 456.889884][ T5252] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 456.900019][ T5252] usb 3-1: MIDIStreaming interface descriptor not found [ 457.615969][ T7003] loop0: detected capacity change from 0 to 4096 [ 457.861098][ T7003] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 459.477274][ T6842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.029842][ T5292] usb 3-1: USB disconnect, device number 13 [ 460.187549][ T7003] ntfs3: loop0: Failed to read $UpCase (-4). [ 462.725817][ T6842] veth0_vlan: entered promiscuous mode [ 462.869448][ T6842] veth1_vlan: entered promiscuous mode [ 463.354292][ T6842] veth0_macvtap: entered promiscuous mode [ 463.416932][ T6842] veth1_macvtap: entered promiscuous mode [ 463.576905][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.588254][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.598568][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.609338][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.619606][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.635695][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.647411][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.658893][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.676976][ T6842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.028791][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.043144][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.054461][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.065344][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.075610][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.086427][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.096726][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.107589][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.123084][ T6842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.322246][ T44] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 464.333981][ T6842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.343900][ T6842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.356573][ T6842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.366779][ T6842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.548738][ T44] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 464.561424][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.573700][ T44] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 464.582994][ T44] usb 1-1: config 0 has no interface number 0 [ 464.589356][ T44] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 464.599609][ T44] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 464.611079][ T44] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.668412][ T44] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 464.677971][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 464.686694][ T44] usb 1-1: SerialNumber: syz [ 464.715088][ T44] usb 1-1: config 0 descriptor?? [ 464.790127][ T44] gspca_main: spca561-2.14.0 probing abcd:cdee [ 464.848909][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.856005][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.050587][ T7074] loop0: detected capacity change from 0 to 512 [ 465.134791][ T7074] ext4: Unknown parameter 'appraise_type' [ 465.184773][ T7075] loop2: detected capacity change from 0 to 4096 [ 465.242276][ T7075] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 465.602279][ T7075] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 466.060922][ T44] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 466.072269][ T44] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 466.079499][ T44] usb 1-1: MIDIStreaming interface descriptor not found [ 468.445094][ T5252] usb 1-1: USB disconnect, device number 7 [ 469.493426][ T7100] hub 9-0:1.0: USB hub found [ 469.533378][ T7100] hub 9-0:1.0: 8 ports detected [ 471.592090][ T5252] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 471.854926][ T5252] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 471.863705][ T5252] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.874274][ T5252] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 471.883568][ T5252] usb 3-1: config 0 has no interface number 0 [ 471.889912][ T5252] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 471.900424][ T5252] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 471.912217][ T5252] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.967344][ T5252] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 471.977416][ T5252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 471.986343][ T5252] usb 3-1: SerialNumber: syz [ 472.044960][ T5252] usb 3-1: config 0 descriptor?? [ 472.085354][ T5252] gspca_main: spca561-2.14.0 probing abcd:cdee [ 472.370863][ T7124] loop2: detected capacity change from 0 to 512 [ 472.427988][ T7124] ext4: Unknown parameter 'appraise_type' [ 472.712828][ T5252] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 472.724342][ T5252] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 472.731719][ T5252] usb 3-1: MIDIStreaming interface descriptor not found [ 475.221078][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.229352][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.682945][ T5252] usb 3-1: USB disconnect, device number 14 [ 475.775918][ T2568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.785435][ T2568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.979585][ T5242] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 475.981199][ T7025] udevd[7025]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 476.250217][ T5242] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 476.259524][ T5242] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.270119][ T5242] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 476.279381][ T5242] usb 4-1: config 0 has no interface number 0 [ 476.285874][ T5242] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 476.296237][ T5242] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 476.307689][ T5242] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.376157][ T5242] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 476.385869][ T5242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 476.394368][ T5242] usb 4-1: SerialNumber: syz [ 476.454818][ T5242] usb 4-1: config 0 descriptor?? [ 476.557683][ T5242] gspca_main: spca561-2.14.0 probing abcd:cdee [ 476.961454][ T7147] loop3: detected capacity change from 0 to 512 [ 477.055649][ T7147] ext4: Unknown parameter 'appraise_type' [ 477.170829][ T5242] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 477.182577][ T5242] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 477.189791][ T5242] usb 4-1: MIDIStreaming interface descriptor not found [ 480.288088][ T5242] usb 4-1: USB disconnect, device number 6 [ 480.841266][ T7025] udevd[7025]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.902121][ T5252] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 482.108945][ T5252] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 482.118712][ T5252] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.129279][ T5252] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 482.138661][ T5252] usb 1-1: config 0 has no interface number 0 [ 482.145321][ T5252] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 482.155649][ T5252] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 482.170387][ T5252] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.210820][ T5252] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 482.220542][ T5252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 482.229292][ T5252] usb 1-1: SerialNumber: syz [ 482.274583][ T5252] usb 1-1: config 0 descriptor?? [ 482.324974][ T5252] gspca_main: spca561-2.14.0 probing abcd:cdee [ 482.625287][ T7184] loop0: detected capacity change from 0 to 512 [ 482.665202][ T7184] ext4: Unknown parameter 'appraise_type' [ 482.992600][ T5252] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 483.003825][ T5252] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 483.011042][ T5252] usb 1-1: MIDIStreaming interface descriptor not found [ 485.882198][ T5252] usb 1-1: USB disconnect, device number 8 [ 486.232141][ T5247] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 486.544080][ T5247] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 486.552856][ T5247] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.563423][ T5247] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 486.578863][ T5247] usb 3-1: config 0 has no interface number 0 [ 486.587817][ T5247] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 486.598151][ T5247] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 486.609559][ T5247] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.692343][ T5247] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 486.701890][ T5247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 486.710257][ T5247] usb 3-1: SerialNumber: syz [ 486.727903][ T5247] usb 3-1: config 0 descriptor?? [ 486.760508][ T5247] gspca_main: spca561-2.14.0 probing abcd:cdee [ 487.091059][ T7208] loop2: detected capacity change from 0 to 512 [ 487.113329][ T7208] ext4: Unknown parameter 'appraise_type' [ 488.272907][ T5247] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 488.284052][ T5247] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 488.291249][ T5247] usb 3-1: MIDIStreaming interface descriptor not found [ 488.645665][ T5247] usb 3-1: USB disconnect, device number 15 [ 488.868184][ T7025] udevd[7025]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.033910][ T5252] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 491.200587][ T7247] loop3: detected capacity change from 0 to 256 [ 491.332223][ T5252] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 491.340720][ T5252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.351427][ T5252] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 491.360701][ T5252] usb 2-1: config 0 has no interface number 0 [ 491.367389][ T5252] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 491.377702][ T5252] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 491.392463][ T5252] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.455858][ T5252] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 491.465417][ T5252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 491.473967][ T5252] usb 2-1: SerialNumber: syz [ 491.521001][ T7247] FAT-fs (loop3): Directory bread(block 64) failed [ 491.528051][ T7247] FAT-fs (loop3): Directory bread(block 65) failed [ 491.535743][ T7247] FAT-fs (loop3): Directory bread(block 66) failed [ 491.542710][ T7247] FAT-fs (loop3): Directory bread(block 67) failed [ 491.549632][ T7247] FAT-fs (loop3): Directory bread(block 68) failed [ 491.556556][ T7247] FAT-fs (loop3): Directory bread(block 69) failed [ 491.563727][ T7247] FAT-fs (loop3): Directory bread(block 70) failed [ 491.570503][ T7247] FAT-fs (loop3): Directory bread(block 71) failed [ 491.577833][ T7247] FAT-fs (loop3): Directory bread(block 72) failed [ 491.588904][ T7247] FAT-fs (loop3): Directory bread(block 73) failed [ 491.632965][ T5252] usb 2-1: config 0 descriptor?? [ 491.703519][ T5252] gspca_main: spca561-2.14.0 probing abcd:cdee [ 491.948271][ T7244] loop1: detected capacity change from 0 to 512 [ 491.965002][ T7244] ext4: Unknown parameter 'appraise_type' [ 492.356429][ T5252] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 492.368568][ T5252] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 492.376032][ T5252] usb 2-1: MIDIStreaming interface descriptor not found [ 495.384615][ T5252] usb 2-1: USB disconnect, device number 6 [ 495.420170][ T6911] udevd[6911]: setting owner of /dev/bus/usb/002/006 to uid=0, gid=0 failed: No such file or directory [ 496.260571][ T7025] udevd[7025]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.474552][ T7301] loop3: detected capacity change from 0 to 256 [ 497.620296][ T5190] Bluetooth: hci2: command 0x0406 tx timeout [ 497.912244][ T44] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 497.946866][ T7301] FAT-fs (loop3): Directory bread(block 64) failed [ 497.953978][ T7301] FAT-fs (loop3): Directory bread(block 65) failed [ 497.960902][ T7301] FAT-fs (loop3): Directory bread(block 66) failed [ 497.967779][ T7301] FAT-fs (loop3): Directory bread(block 67) failed [ 497.974703][ T7301] FAT-fs (loop3): Directory bread(block 68) failed [ 497.981354][ T7301] FAT-fs (loop3): Directory bread(block 69) failed [ 497.988238][ T7301] FAT-fs (loop3): Directory bread(block 70) failed [ 497.995096][ T7301] FAT-fs (loop3): Directory bread(block 71) failed [ 498.002099][ T7301] FAT-fs (loop3): Directory bread(block 72) failed [ 498.008773][ T7301] FAT-fs (loop3): Directory bread(block 73) failed [ 498.212275][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 498.231469][ T44] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 498.245217][ T44] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 498.258172][ T44] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 498.269703][ T44] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 498.283242][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 498.440022][ T44] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 498.455065][ T44] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 498.465463][ T44] usb 1-1: Product: syz [ 498.469812][ T44] usb 1-1: Manufacturer: syz [ 498.474597][ T44] usb 1-1: SerialNumber: syz [ 498.535238][ T44] usb 1-1: config 0 descriptor?? [ 498.581972][ T44] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 498.641440][ T44] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 498.822065][ T5247] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 498.835868][ T5252] usb 1-1: USB disconnect, device number 9 [ 498.962553][ T5252] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 499.091251][ T5247] usb 3-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 499.100964][ T5247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.179098][ T5247] usb 3-1: config 0 descriptor?? [ 499.252847][ T5247] usb-storage 3-1:0.0: USB Mass Storage device detected [ 499.292620][ T5242] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 499.591148][ T5242] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 499.599774][ T5242] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.610210][ T5242] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 499.620390][ T5242] usb 2-1: config 0 has no interface number 0 [ 499.627010][ T5242] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 499.637106][ T5242] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 499.648322][ T5242] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 499.741199][ T5242] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 499.752569][ T5242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 499.760823][ T5242] usb 2-1: SerialNumber: syz [ 499.856883][ T5242] usb 2-1: config 0 descriptor?? [ 499.943513][ T5242] gspca_main: spca561-2.14.0 probing abcd:cdee [ 500.274011][ T7319] loop1: detected capacity change from 0 to 512 [ 500.316909][ T7319] ext4: Unknown parameter 'appraise_type' [ 501.069607][ T5242] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 501.079820][ T5242] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 501.087047][ T5242] usb 2-1: MIDIStreaming interface descriptor not found [ 503.202974][ T1589] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 503.334139][ T5242] usb 2-1: USB disconnect, device number 7 [ 503.532241][ T1589] usb 1-1: Using ep0 maxpacket: 8 [ 503.624145][ T1589] usb 1-1: device descriptor read/all, error -71 [ 503.703128][ T44] usb 3-1: USB disconnect, device number 16 [ 503.885403][ T6911] udevd[6911]: setting owner of /dev/bus/usb/002/007 to uid=0, gid=0 failed: No such file or directory [ 503.905637][ T29] audit: type=1326 audit(1724650658.569:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 503.928738][ T29] audit: type=1326 audit(1724650658.569:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 503.951008][ T29] audit: type=1326 audit(1724650658.579:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 503.973333][ T29] audit: type=1326 audit(1724650658.579:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 504.000942][ T29] audit: type=1326 audit(1724650658.589:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 504.023380][ T29] audit: type=1326 audit(1724650658.589:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 504.045587][ T29] audit: type=1326 audit(1724650658.599:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 504.068250][ T29] audit: type=1326 audit(1724650658.599:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 504.093510][ T29] audit: type=1326 audit(1724650658.639:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=441 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 504.116922][ T29] audit: type=1326 audit(1724650658.639:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 504.758767][ T6914] udevd[6914]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 505.117039][ T7334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.617544][ T7356] input: syz0 as /devices/virtual/input/input11 [ 505.805239][ T7363] loop4: detected capacity change from 0 to 256 [ 506.188250][ T7363] FAT-fs (loop4): Directory bread(block 64) failed [ 506.196040][ T7363] FAT-fs (loop4): Directory bread(block 65) failed [ 506.203248][ T7363] FAT-fs (loop4): Directory bread(block 66) failed [ 506.210033][ T7363] FAT-fs (loop4): Directory bread(block 67) failed [ 506.217120][ T7363] FAT-fs (loop4): Directory bread(block 68) failed [ 506.224306][ T7363] FAT-fs (loop4): Directory bread(block 69) failed [ 506.234322][ T7363] FAT-fs (loop4): Directory bread(block 70) failed [ 506.241104][ T7363] FAT-fs (loop4): Directory bread(block 71) failed [ 506.249209][ T7363] FAT-fs (loop4): Directory bread(block 72) failed [ 506.256330][ T7363] FAT-fs (loop4): Directory bread(block 73) failed [ 507.192029][ T1589] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 507.362797][ T5252] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 507.432692][ T1589] usb 1-1: Using ep0 maxpacket: 8 [ 507.477884][ T1589] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 507.489784][ T1589] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 507.500288][ T1589] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 507.511747][ T1589] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.525237][ T1589] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 507.536533][ T1589] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.639415][ T5292] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 507.746222][ T5252] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 507.755175][ T5252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.770401][ T5252] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 507.780273][ T5252] usb 2-1: config 0 has no interface number 0 [ 507.786939][ T5252] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 507.797361][ T5252] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 507.809015][ T5252] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.855434][ T5252] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 507.870115][ T5252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 507.878888][ T5252] usb 2-1: SerialNumber: syz [ 507.890319][ T1589] usb 1-1: GET_CAPABILITIES returned 2f [ 507.896787][ T1589] usbtmc 1-1:16.0: can't read capabilities [ 507.910376][ T5252] usb 2-1: config 0 descriptor?? [ 507.975943][ T5252] gspca_main: spca561-2.14.0 probing abcd:cdee [ 508.032922][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.043817][ T5292] usb 4-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 508.053592][ T5292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.165793][ T5292] usb 4-1: config 0 descriptor?? [ 508.270129][ T7369] ===================================================== [ 508.288881][ T7369] BUG: KMSAN: kernel-usb-infoleak in usb_submit_urb+0x597/0x2350 [ 508.297402][ T7369] usb_submit_urb+0x597/0x2350 [ 508.303002][ T7369] usbtmc_write+0xc32/0x1220 [ 508.306869][ T7375] loop1: detected capacity change from 0 to 512 [ 508.307944][ T7369] vfs_write+0x493/0x1550 [ 508.319809][ T7369] ksys_write+0x20f/0x4c0 [ 508.324898][ T7369] __ia32_sys_write+0x91/0xe0 [ 508.330033][ T7369] ia32_sys_call+0x2e34/0x40d0 [ 508.335509][ T7369] __do_fast_syscall_32+0xb0/0x110 [ 508.340921][ T7369] do_fast_syscall_32+0x38/0x80 [ 508.346192][ T7369] do_SYSENTER_32+0x1f/0x30 [ 508.350961][ T7369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 508.357689][ T7369] [ 508.360178][ T7369] Uninit was created at: [ 508.365120][ T7369] __kmalloc_cache_noprof+0x4f0/0xb00 [ 508.370865][ T7369] usbtmc_write+0x3d3/0x1220 [ 508.376581][ T7369] vfs_write+0x493/0x1550 [ 508.390593][ T7369] ksys_write+0x20f/0x4c0 [ 508.395556][ T7369] __ia32_sys_write+0x91/0xe0 [ 508.400701][ T7369] ia32_sys_call+0x2e34/0x40d0 [ 508.406388][ T7369] __do_fast_syscall_32+0xb0/0x110 [ 508.412355][ T7369] do_fast_syscall_32+0x38/0x80 [ 508.417715][ T7369] do_SYSENTER_32+0x1f/0x30 [ 508.422910][ T7369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 508.429762][ T7369] [ 508.432674][ T7369] Bytes 1725-1727 of 1728 are uninitialized [ 508.438874][ T7369] Memory access of size 1728 starts at ffff88805883a000 [ 508.446582][ T7369] [ 508.449316][ T7369] CPU: 0 UID: 0 PID: 7369 Comm: syz.0.434 Not tainted 6.11.0-rc5-syzkaller #0 [ 508.459180][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 508.470758][ T7369] ===================================================== [ 508.478304][ T7369] Disabling lock debugging due to kernel taint [ 508.494984][ T7369] Kernel panic - not syncing: kmsan.panic set ... [ 508.501578][ T7369] CPU: 0 UID: 0 PID: 7369 Comm: syz.0.434 Tainted: G B 6.11.0-rc5-syzkaller #0 [ 508.512121][ T7369] Tainted: [B]=BAD_PAGE [ 508.516387][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 508.526609][ T7369] Call Trace: [ 508.530016][ T7369] [ 508.533054][ T7369] dump_stack_lvl+0x216/0x2d0 [ 508.537941][ T7369] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 508.543983][ T7369] dump_stack+0x1e/0x30 [ 508.548333][ T7369] panic+0x4e2/0xcd0 [ 508.552423][ T7369] ? kmsan_get_metadata+0xe1/0x1c0 [ 508.557827][ T7369] kmsan_report+0x2c7/0x2d0 [ 508.562546][ T7369] ? kmsan_get_metadata+0x13e/0x1c0 [ 508.567966][ T7369] ? kmsan_get_metadata+0x13e/0x1c0 [ 508.573381][ T7369] ? kmsan_internal_check_memory+0x48c/0x560 [ 508.579581][ T7369] ? kmsan_handle_urb+0x2c/0x40 [ 508.584642][ T7369] ? usb_submit_urb+0x597/0x2350 [ 508.589789][ T7369] ? usbtmc_write+0xc32/0x1220 [ 508.594784][ T7369] ? vfs_write+0x493/0x1550 [ 508.599468][ T7369] ? ksys_write+0x20f/0x4c0 [ 508.604149][ T7369] ? __ia32_sys_write+0x91/0xe0 [ 508.609177][ T7369] ? ia32_sys_call+0x2e34/0x40d0 [ 508.614301][ T7369] ? __do_fast_syscall_32+0xb0/0x110 [ 508.619786][ T7369] ? do_fast_syscall_32+0x38/0x80 [ 508.624978][ T7369] ? do_SYSENTER_32+0x1f/0x30 [ 508.629811][ T7369] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 508.636494][ T7369] ? kmsan_get_metadata+0x13e/0x1c0 [ 508.641915][ T7369] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 508.648426][ T7369] ? kmsan_internal_poison_memory+0x7d/0x90 [ 508.654442][ T7369] ? ia32_sys_call+0x2e34/0x40d0 [ 508.659515][ T7369] ? kmsan_internal_poison_memory+0x49/0x90 [ 508.665545][ T7369] ? kmsan_slab_alloc+0xdf/0x160 [ 508.670654][ T7369] ? __kmalloc_cache_noprof+0x4f0/0xb00 [ 508.676306][ T7369] ? usbtmc_write+0x3d3/0x1220 [ 508.681250][ T7369] ? vfs_write+0x493/0x1550 [ 508.685884][ T7369] ? ksys_write+0x20f/0x4c0 [ 508.690540][ T7369] ? __ia32_sys_write+0x91/0xe0 [ 508.695486][ T7369] ? ia32_sys_call+0x2e34/0x40d0 [ 508.700555][ T7369] ? __do_fast_syscall_32+0xb0/0x110 [ 508.705953][ T7369] ? kmsan_get_metadata+0x13e/0x1c0 [ 508.711266][ T7369] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 508.717883][ T7369] ? kmsan_get_metadata+0x13e/0x1c0 [ 508.723210][ T7369] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 508.729158][ T7369] kmsan_internal_check_memory+0x48c/0x560 [ 508.735083][ T7369] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 508.741022][ T7369] kmsan_handle_urb+0x2c/0x40 [ 508.745821][ T7369] usb_submit_urb+0x597/0x2350 [ 508.750699][ T7369] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 508.756644][ T7369] usbtmc_write+0xc32/0x1220 [ 508.761366][ T7369] ? __pfx_usbtmc_write+0x10/0x10 [ 508.766515][ T7369] vfs_write+0x493/0x1550 [ 508.770943][ T7369] ? kmsan_get_metadata+0x13e/0x1c0 [ 508.776257][ T7369] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 508.782693][ T7369] ? kmsan_get_metadata+0x13e/0x1c0 [ 508.788038][ T7369] ksys_write+0x20f/0x4c0 [ 508.792536][ T7369] __ia32_sys_write+0x91/0xe0 [ 508.797312][ T7369] ia32_sys_call+0x2e34/0x40d0 [ 508.802198][ T7369] __do_fast_syscall_32+0xb0/0x110 [ 508.807428][ T7369] do_fast_syscall_32+0x38/0x80 [ 508.812389][ T7369] do_SYSENTER_32+0x1f/0x30 [ 508.817014][ T7369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 508.823510][ T7369] RIP: 0023:0xf73cd579 [ 508.827651][ T7369] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 508.847376][ T7369] RSP: 002b:00000000f56d656c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 508.855919][ T7369] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000020000300 [ 508.863993][ T7369] RDX: 00000000000006b1 RSI: 0000000000000000 RDI: 0000000000000000 [ 508.872035][ T7369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 508.880102][ T7369] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 508.888153][ T7369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 508.896245][ T7369] [ 508.899466][ T7369] Kernel Offset: disabled [ 508.903854][ T7369] Rebooting in 86400 seconds..