last executing test programs: 12.93405398s ago: executing program 4 (id=861): syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1408e, &(0x7f0000000780)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@nouser_xattr}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffbc55d43d}}]}, 0x1, 0x43a, &(0x7f0000000340)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x242000, 0x135) lseek(r0, 0xfffffffffffffffc, 0x4) getdents(r0, 0x0, 0x58) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x185) open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) 8.19285298s ago: executing program 3 (id=874): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) setsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000380)=0x3, 0x4) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000180)=0x800001, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 8.102912318s ago: executing program 4 (id=875): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3549100dc5226c896b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/147, 0x93}], 0x1}, 0xfffffffe}], 0x1, 0x10002, 0x0) 7.817846268s ago: executing program 5 (id=876): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000040)="a6", 0x100b20, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.053623718s ago: executing program 1 (id=879): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0x1, 0x6, 0xffffffff, 0x4}) socket(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x5, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x9, 0xfffffff7, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) sendmmsg(r2, &(0x7f0000000380)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f0000001900)}}, {{&(0x7f0000000200)=@nl=@proc={0x10, 0x0, 0x0, 0x200}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x1}}], 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000001480)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000050, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000000)='./control\x00', 0x40000000) inotify_add_watch(r4, &(0x7f00000003c0)='./control\x00', 0x40000d04) lseek(0xffffffffffffffff, 0x1000, 0x3) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 6.66177805s ago: executing program 5 (id=882): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0x1, 0x6, 0xffffffff, 0x4}) socket(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x5, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x9, 0xfffffff7, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) lseek(0xffffffffffffffff, 0x1000, 0x3) 6.468750266s ago: executing program 4 (id=884): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r1 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x401, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0x10a5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x81}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 5.810580395s ago: executing program 1 (id=885): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, &(0x7f0000000500)}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000006c0)=ANY=[], 0x1000f) 5.641630871s ago: executing program 0 (id=886): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) write$sndseq(r0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0xfffffffffffffffe}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 5.641271911s ago: executing program 5 (id=887): socket$kcm(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x10) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc25c4110, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) 5.62129655s ago: executing program 1 (id=888): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="000000160100000018001200080001"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x40083}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xb}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 5.421323722s ago: executing program 4 (id=890): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x3c}}, 0x8000) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="2ab50e65cd6b"}, 0x14) 5.105758297s ago: executing program 4 (id=891): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@bsdgroups}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2e, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb93bcf0feeee4dc036d567596cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a00"}, 0xfd) socket$igmp(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f00000003c0), 0x1, 0x520, &(0x7f00000010c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0x208e24b) 4.536231311s ago: executing program 0 (id=892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000019c0)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) close(0xffffffffffffffff) 4.464241051s ago: executing program 1 (id=893): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x257c, &(0x7f0000000000)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 4.357741372s ago: executing program 0 (id=894): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000000040)="a6", 0x100b20, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.330970094s ago: executing program 5 (id=895): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4800, 0xfffffffe, 0x1, 0x4}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3a}, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80}, {0x0, 0x1, 0x1, 0x0, 0x5, 0xfffffffffffffff8}, {0x2, 0x0, 0x9}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4d6, 0x32}, 0x2, @in=@multicast2, 0xffffffff, 0x4, 0x0, 0x0, 0x1}}, 0xe8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc8}]}, 0x2c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x205, 0x0, 0x2}, 0x10) 3.834676875s ago: executing program 5 (id=897): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x40, 0x7, 0x28, "3b53ec3d8a23028150a405fad965dae1455b4f60a5c4163a846bb5613497edb04f7757b3daac0e40"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x18, &(0x7f0000000080)={0x0, 0x31, 0x28, "6610417f6d9c56bec730a3db123204a088788e426b3988fdffcc200586942339c751bd558e5c525f"}, 0x0, 0x0, 0x0, 0x0}) 3.690827701s ago: executing program 1 (id=898): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0x1, 0x6, 0xffffffff, 0x4}) socket(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x5, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x9, 0xfffffff7, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) sendmmsg(r2, &(0x7f0000000380)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f0000001900)}}, {{&(0x7f0000000200)=@nl=@proc={0x10, 0x0, 0x0, 0x200}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x1}}], 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000001480)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000050, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000000)='./control\x00', 0x40000000) inotify_add_watch(r4, &(0x7f00000003c0)='./control\x00', 0x40000d04) lseek(0xffffffffffffffff, 0x1000, 0x3) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 3.570292115s ago: executing program 2 (id=899): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3549100dc5226c896b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/147, 0x93}], 0x1}, 0xfffffffe}], 0x1, 0x10002, 0x0) 3.207969487s ago: executing program 0 (id=900): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, &(0x7f0000000500)}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000006c0)=ANY=[], 0x1000f) 3.168546184s ago: executing program 3 (id=901): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0x1, 0x6, 0xffffffff, 0x4}) socket(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x5, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x9, 0xfffffff7, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) socket$inet_sctp(0x2, 0x5, 0x84) lseek(0xffffffffffffffff, 0x1000, 0x3) 2.890208373s ago: executing program 0 (id=902): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r1 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x401, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0x10a5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x81}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 2.836910338s ago: executing program 1 (id=903): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d00"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.537757525s ago: executing program 3 (id=904): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 2.437164697s ago: executing program 2 (id=905): socket(0x1e, 0x4, 0x0) 2.258118522s ago: executing program 3 (id=906): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 2.196521524s ago: executing program 2 (id=907): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_sctp(0x2, 0x400000000001, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 1.7882918s ago: executing program 3 (id=908): syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x8000, 0x0, 0x5, 0x1, 0x0, "000100"}) ioctl$TIOCSTI(r1, 0x5412, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.782097987s ago: executing program 0 (id=909): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d010300010009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 845.871072ms ago: executing program 2 (id=910): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="000000160100000018001200080001"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x40083}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xb}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 819.332995ms ago: executing program 3 (id=911): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 519.792366ms ago: executing program 5 (id=912): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) socket$xdp(0x2c, 0x3, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x17, 0x20060054, 0x0, 0xffffff9d) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept4(r2, 0x0, 0x0, 0x0) 381.427476ms ago: executing program 4 (id=913): socket$kcm(0xa, 0x1, 0x106) r0 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc25c4110, &(0x7f0000000980)={0x0, [[0x1, 0x401, 0x7ffe, 0x0, 0x0, 0x0, 0x80000], [0x2, 0x1, 0x9, 0x0, 0x0, 0x68c0f053], [0x2, 0xfffffff7, 0x0, 0x4, 0x9b]], '\x00', [{}, {0x0, 0x2}, {0x10000, 0x8}, {}, {0x0, 0x1}, {0x2ea}, {}, {}, {}, {0x8}], '\x00', 0x4, 0x0, 0x0, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) 367.229677ms ago: executing program 2 (id=914): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, &(0x7f0000000500)}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000006c0)=ANY=[], 0x1000f) 0s ago: executing program 2 (id=915): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3549100dc5226c896b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/147, 0x93}], 0x1}, 0xfffffffe}], 0x1, 0x10002, 0x0) kernel console output (not intermixed with test programs): slave bond_slave_0): Enslaving as an active interface with an up link [ 87.761395][ T5832] team0: Port device team_slave_0 added [ 87.769743][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.782801][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.795976][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.804285][ T5843] Bluetooth: hci5: command tx timeout [ 87.805873][ T5838] Bluetooth: hci4: command tx timeout [ 87.819131][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.838347][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.845730][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.872086][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.888377][ T5826] hsr_slave_0: entered promiscuous mode [ 87.895206][ T5826] hsr_slave_1: entered promiscuous mode [ 87.903895][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.924558][ T5832] team0: Port device team_slave_1 added [ 87.957868][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.965345][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.991446][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.032742][ T5841] team0: Port device team_slave_0 added [ 88.041362][ T5841] team0: Port device team_slave_1 added [ 88.075135][ T5837] team0: Port device team_slave_0 added [ 88.092059][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.099368][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.125601][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.138308][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.145487][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.171494][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.216224][ T5842] team0: Port device team_slave_0 added [ 88.225356][ T5837] team0: Port device team_slave_1 added [ 88.232863][ T5842] team0: Port device team_slave_1 added [ 88.305887][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.312892][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.339908][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.381280][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.388413][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.416208][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.441228][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.448386][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.474790][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.490158][ T5834] hsr_slave_0: entered promiscuous mode [ 88.496880][ T5834] hsr_slave_1: entered promiscuous mode [ 88.502962][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.510863][ T5834] Cannot create hsr debugfs directory [ 88.517730][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.525025][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.551270][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.564654][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.571637][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.599463][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.611556][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.618927][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.644992][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.713196][ T5832] hsr_slave_0: entered promiscuous mode [ 88.720120][ T5832] hsr_slave_1: entered promiscuous mode [ 88.726900][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.735457][ T5832] Cannot create hsr debugfs directory [ 88.889300][ T5837] hsr_slave_0: entered promiscuous mode [ 88.899705][ T5837] hsr_slave_1: entered promiscuous mode [ 88.906409][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.914012][ T5837] Cannot create hsr debugfs directory [ 88.939272][ T5841] hsr_slave_0: entered promiscuous mode [ 88.946179][ T5841] hsr_slave_1: entered promiscuous mode [ 88.952278][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.960072][ T5841] Cannot create hsr debugfs directory [ 88.969249][ T5842] hsr_slave_0: entered promiscuous mode [ 88.983158][ T5842] hsr_slave_1: entered promiscuous mode [ 88.989428][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.997328][ T5842] Cannot create hsr debugfs directory [ 89.215566][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.291606][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.336865][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.383072][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.426902][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.466312][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.484840][ T5838] Bluetooth: hci0: command tx timeout [ 89.494814][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.522293][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.576000][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.596453][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.624181][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.642715][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.680227][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.705276][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.723148][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.731093][ T5838] Bluetooth: hci1: command tx timeout [ 89.734280][ T5843] Bluetooth: hci2: command tx timeout [ 89.744557][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.804802][ T5843] Bluetooth: hci3: command tx timeout [ 89.809442][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.890148][ T5843] Bluetooth: hci5: command tx timeout [ 89.890232][ T5838] Bluetooth: hci4: command tx timeout [ 89.902487][ T5842] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.917777][ T5842] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.933107][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.968091][ T5842] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.989769][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.003513][ T5842] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.038116][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.045492][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.061936][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.087572][ T1808] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.094778][ T1808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.118510][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.135964][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.151470][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.183904][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.226785][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.233908][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.265228][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.280618][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.305643][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.312944][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.328745][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.410648][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.449808][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.493139][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.500383][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.552291][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.559491][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.572021][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.579227][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.606204][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.643107][ T1808] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.650297][ T1808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.718704][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.839285][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.923531][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.015011][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.033623][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.048235][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.102597][ T1808] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.109935][ T1808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.143060][ T1808] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.150326][ T1808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.160590][ T5826] veth0_vlan: entered promiscuous mode [ 91.201942][ T1808] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.209216][ T1808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.219550][ T1808] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.226679][ T1808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.273756][ T5826] veth1_vlan: entered promiscuous mode [ 91.322663][ T5834] veth0_vlan: entered promiscuous mode [ 91.349901][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.388724][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.407912][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.453961][ T5834] veth1_vlan: entered promiscuous mode [ 91.566648][ T5838] Bluetooth: hci0: command tx timeout [ 91.572470][ T5834] veth0_macvtap: entered promiscuous mode [ 91.586465][ T971] cfg80211: failed to load regulatory.db [ 91.598480][ T5826] veth0_macvtap: entered promiscuous mode [ 91.643353][ T5834] veth1_macvtap: entered promiscuous mode [ 91.653270][ T5826] veth1_macvtap: entered promiscuous mode [ 91.768403][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.784834][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.797319][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.807705][ T5838] Bluetooth: hci2: command tx timeout [ 91.807715][ T5843] Bluetooth: hci1: command tx timeout [ 91.822505][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.845981][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.854582][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.868589][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.879643][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.887257][ T5838] Bluetooth: hci3: command tx timeout [ 91.906080][ T5837] veth0_vlan: entered promiscuous mode [ 91.916256][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.925627][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.934830][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.943566][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.964610][ T5838] Bluetooth: hci4: command tx timeout [ 91.965462][ T5843] Bluetooth: hci5: command tx timeout [ 91.986423][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.997824][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.007269][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.017253][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.041492][ T5837] veth1_vlan: entered promiscuous mode [ 92.058043][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.089458][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.172728][ T5832] veth0_vlan: entered promiscuous mode [ 92.209863][ T5832] veth1_vlan: entered promiscuous mode [ 92.285556][ T5837] veth0_macvtap: entered promiscuous mode [ 92.321949][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.330265][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.361501][ T5837] veth1_macvtap: entered promiscuous mode [ 92.403754][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.412190][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.445619][ T5841] veth0_vlan: entered promiscuous mode [ 92.498759][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.511155][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.521640][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.532888][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.544318][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.569107][ T5832] veth0_macvtap: entered promiscuous mode [ 92.583912][ T5841] veth1_vlan: entered promiscuous mode [ 92.601321][ T1808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.612699][ T1808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.629257][ T5832] veth1_macvtap: entered promiscuous mode [ 92.638155][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.649599][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.659993][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.671378][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.683555][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.692901][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.708420][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.742059][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.752454][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.761555][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.771801][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.790358][ T5842] veth0_vlan: entered promiscuous mode [ 92.838686][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.845509][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.857689][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.873946][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.884552][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.894505][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.906384][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.917463][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.928669][ T5841] veth0_macvtap: entered promiscuous mode [ 92.939938][ T5842] veth1_vlan: entered promiscuous mode [ 92.956922][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.968211][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.978871][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.989725][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.000207][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.011817][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.031562][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.058643][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.100999][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.129394][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.140503][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.172252][ T5841] veth1_macvtap: entered promiscuous mode [ 93.227053][ T5934] loop2: detected capacity change from 0 to 512 [ 93.319237][ T5934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.347223][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.362683][ T5934] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.378575][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.401934][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.566233][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.576183][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.586681][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.604750][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.660974][ T5843] Bluetooth: hci0: command tx timeout [ 93.728582][ T5942] hub 2-0:1.0: USB hub found [ 93.735916][ T5942] hub 2-0:1.0: 1 port detected [ 94.387194][ T5843] Bluetooth: hci1: command tx timeout [ 94.392698][ T5843] Bluetooth: hci2: command tx timeout [ 94.398210][ T5838] Bluetooth: hci3: command tx timeout [ 94.403737][ T5838] Bluetooth: hci5: command tx timeout [ 94.409300][ T5838] Bluetooth: hci4: command tx timeout [ 94.720335][ T5944] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 94.734959][ T5944] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 94.744590][ T5944] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.7: Failed to acquire dquot type 0 [ 94.759373][ T5943] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 94.784749][ T5943] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 94.794557][ T5943] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.7: Failed to acquire dquot type 0 [ 94.930051][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.181269][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.233993][ T5842] veth0_macvtap: entered promiscuous mode [ 95.248504][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.279550][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.290766][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.350778][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.374318][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.404926][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.430504][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.447891][ T5946] loop2: detected capacity change from 0 to 512 [ 95.454948][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.474415][ T5946] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.492519][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.514926][ T5946] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.531493][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.549511][ T5946] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.8: bad orphan inode 131083 [ 95.561527][ T5946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.601000][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.667207][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.693202][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.852214][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.861412][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.872001][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.968688][ T5842] veth1_macvtap: entered promiscuous mode [ 96.993471][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.010197][ T5954] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.301025][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.922868][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.933552][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.943540][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.954639][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.969149][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.980497][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.991003][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.001711][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.128112][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.152623][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.283888][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.320159][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.328980][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.349047][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.357570][ T1808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.376600][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.387183][ T1808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.397202][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.430932][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.464181][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.474687][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.489124][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.499189][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.517712][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.531347][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.025517][ T5964] xt_connbytes: Forcing CT accounting to be enabled [ 99.521561][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.535715][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.745580][ T5842] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.784287][ T5842] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.822108][ T5842] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.832316][ T5842] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.682148][ T5971] loop3: detected capacity change from 0 to 512 [ 101.780836][ T5971] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.873370][ T5971] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.13: bad orphan inode 131083 [ 101.902679][ T5971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.910622][ T5974] loop1: detected capacity change from 0 to 512 [ 101.966409][ T5974] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.292697][ T5974] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.2: bad orphan inode 131083 [ 102.311550][ T5974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.311431][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.354447][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.765040][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.987638][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.007817][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.922275][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.996380][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.051770][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.078448][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.102544][ T5993] loop3: detected capacity change from 0 to 512 [ 105.130206][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.275919][ T5993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.312271][ T5993] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.819752][ T6006] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 105.830542][ T6006] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 105.840120][ T6006] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.15: Failed to acquire dquot type 0 [ 105.900808][ T6007] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 105.912219][ T6007] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 105.922598][ T6007] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.15: Failed to acquire dquot type 0 [ 106.691996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 106.702219][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.797111][ T6014] loop5: detected capacity change from 0 to 512 [ 106.813906][ T6014] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 107.003660][ T6014] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.6: bad orphan inode 131083 [ 107.866037][ T6014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.229080][ T6027] syz.2.24 (6027) used greatest stack depth: 18224 bytes left [ 109.262920][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.312879][ T29] audit: type=1326 audit(1737882704.378:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6035 comm="syz.4.30" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdeec98cd29 code=0x0 [ 109.315665][ T6038] netlink: 408 bytes leftover after parsing attributes in process `syz.1.28'. [ 109.699023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.434854][ T6056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.36'. [ 110.720732][ T6061] netlink: 40 bytes leftover after parsing attributes in process `syz.1.39'. [ 110.882245][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.111664][ T6061] bridge_slave_0 (unregistering): left allmulticast mode [ 111.137397][ T6061] bridge_slave_0 (unregistering): left promiscuous mode [ 111.145989][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.644217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 111.811500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.820139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.829043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.837619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.936623][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 112.024706][ T5966] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.074482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.395788][ T5966] usb 5-1: config 0 has no interfaces? [ 112.444448][ T5966] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 112.458117][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.517476][ T5966] usb 5-1: Product: syz [ 112.524567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 112.524733][ T5966] usb 5-1: Manufacturer: syz [ 112.562764][ T5966] usb 5-1: SerialNumber: syz [ 112.615010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.370002][ T5966] usb 5-1: config 0 descriptor?? [ 113.474621][ T6101] IPv6: NLM_F_CREATE should be specified when creating new route [ 113.772458][ T29] audit: type=1326 audit(1737882708.858:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9598cd29 code=0x7ffc0000 [ 114.140795][ T29] audit: type=1326 audit(1737882708.908:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f6e9598cd29 code=0x7ffc0000 [ 114.337372][ T29] audit: type=1326 audit(1737882708.908:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9598cd29 code=0x7ffc0000 [ 114.399110][ T29] audit: type=1326 audit(1737882708.908:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9598cd29 code=0x7ffc0000 [ 114.674801][ T6119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.59'. [ 114.934295][ T5966] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.091571][ T5965] usb 5-1: USB disconnect, device number 2 [ 115.254452][ T5966] usb 3-1: Using ep0 maxpacket: 16 [ 115.276204][ T5966] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 115.306905][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 115.367321][ T5966] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 115.401945][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.443967][ T5966] usb 3-1: Product: syz [ 115.463452][ T5966] usb 3-1: Manufacturer: syz [ 115.483967][ T5966] usb 3-1: SerialNumber: syz [ 115.503835][ T5966] usb 3-1: config 0 descriptor?? [ 115.525691][ T5965] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.549099][ T5966] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 115.577925][ T5966] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 115.744292][ T5965] usb 5-1: Using ep0 maxpacket: 16 [ 115.758319][ T5965] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 115.778786][ T5965] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 115.792167][ T5965] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.807686][ T5965] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.818143][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.838638][ T5965] usb 5-1: Product: syz [ 115.858658][ T5965] usb 5-1: Manufacturer: syz [ 115.871233][ T5965] usb 5-1: SerialNumber: syz [ 116.102696][ T5965] usb 5-1: 0:2 : does not exist [ 116.160856][ T5966] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 116.170996][ T5966] em28xx 3-1:0.0: Config register raw data: 0xd8 [ 116.269678][ T5965] usb 5-1: USB disconnect, device number 3 [ 116.585533][ T5966] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 116.592544][ T5966] em28xx 3-1:0.0: No AC97 audio processor [ 116.685519][ T5966] usb 3-1: USB disconnect, device number 2 [ 116.731861][ T5966] em28xx 3-1:0.0: Disconnecting em28xx [ 116.788111][ T5966] em28xx 3-1:0.0: Freeing device [ 116.838855][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.101092][ T971] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.294211][ T971] usb 5-1: Using ep0 maxpacket: 8 [ 117.329598][ T971] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.345139][ T971] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 117.384277][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.415949][ T971] usb 5-1: config 0 descriptor?? [ 117.443727][ T971] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 117.470257][ T6148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.70'. [ 117.480121][ T6148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.70'. [ 117.506413][ T6150] syz.0.71 uses obsolete (PF_INET,SOCK_PACKET) [ 118.456106][ T971] gspca_vc032x: reg_r err -71 [ 118.460922][ T971] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 118.484758][ T971] usb 5-1: USB disconnect, device number 4 [ 119.123038][ T6109] Set syz1 is full, maxelem 65536 reached [ 119.462170][ T6148] bond0: entered promiscuous mode [ 119.467707][ T6148] bond_slave_0: entered promiscuous mode [ 119.473597][ T6148] bond_slave_1: entered promiscuous mode [ 119.503422][ T6148] bridge0: entered promiscuous mode [ 119.534210][ T971] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.764228][ T971] usb 5-1: Using ep0 maxpacket: 16 [ 119.784240][ T971] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 119.816247][ T971] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.870795][ T971] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.892909][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.921961][ T971] usb 5-1: Product: syz [ 119.936054][ T971] usb 5-1: Manufacturer: syz [ 119.978397][ T971] usb 5-1: SerialNumber: syz [ 120.285507][ T971] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 120.320009][ T971] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 120.380725][ T29] audit: type=1326 audit(1737882715.448:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818eb8cd29 code=0x7ffc0000 [ 120.424492][ T971] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 120.479698][ T971] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 120.491205][ T29] audit: type=1326 audit(1737882715.448:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818eb8cd29 code=0x7ffc0000 [ 120.513500][ T971] usb 5-1: failed to enable PITCH for EP 0x82 [ 120.519809][ T29] audit: type=1326 audit(1737882715.528:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f818eb8cd29 code=0x7ffc0000 [ 120.570940][ T29] audit: type=1326 audit(1737882715.528:10): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818eb8cd29 code=0x7ffc0000 [ 120.647987][ T29] audit: type=1326 audit(1737882715.528:11): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818eb8cd29 code=0x7ffc0000 [ 120.678718][ T971] usb 5-1: USB disconnect, device number 5 [ 121.303445][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.684295][ T6212] netlink: 'syz.2.91': attribute type 3 has an invalid length. [ 122.695143][ T6221] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 123.192624][ T29] audit: type=1326 audit(1737882718.278:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.3.99" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b7778cd29 code=0x0 [ 123.492880][ T6244] netlink: 36 bytes leftover after parsing attributes in process `syz.2.105'. [ 123.531548][ T6244] netlink: 16 bytes leftover after parsing attributes in process `syz.2.105'. [ 123.550632][ T6244] netlink: 36 bytes leftover after parsing attributes in process `syz.2.105'. [ 123.576687][ T6244] netlink: 36 bytes leftover after parsing attributes in process `syz.2.105'. [ 125.183622][ T6267] process 'syz.3.113' launched './file1' with NULL argv: empty string added [ 126.354175][ T5965] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 126.393882][ T6286] IPv6: Can't replace route, no match found [ 126.486979][ T6288] loop0: detected capacity change from 0 to 512 [ 126.530729][ T6282] netlink: 96 bytes leftover after parsing attributes in process `syz.4.118'. [ 126.549433][ T5965] usb 6-1: Using ep0 maxpacket: 8 [ 126.563351][ T6288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.581448][ T5965] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.584392][ T6288] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.627762][ T5965] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 126.705007][ T5965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.788317][ T5965] usb 6-1: config 0 descriptor?? [ 127.133976][ T6299] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 127.145019][ T6299] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 127.154849][ T6299] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.121: Failed to acquire dquot type 0 [ 127.217029][ T6300] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 127.227750][ T6300] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 127.237394][ T6300] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.121: Failed to acquire dquot type 0 [ 127.854913][ T5965] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 127.885467][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.496848][ T5965] gspca_vc032x: reg_w err -71 [ 128.527534][ T5965] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 128.606292][ T5965] usb 6-1: USB disconnect, device number 2 [ 129.108080][ T6320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.130'. [ 129.167019][ T6320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.130'. [ 129.282698][ T6320] erspan0: entered promiscuous mode [ 129.351625][ T6320] erspan0: left promiscuous mode [ 129.551099][ T6325] netlink: 'syz.0.134': attribute type 2 has an invalid length. [ 129.559318][ T6325] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.134'. [ 130.019785][ T6340] capability: warning: `syz.3.138' uses 32-bit capabilities (legacy support in use) [ 130.335678][ T5890] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 130.552440][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 130.597711][ T5890] usb 6-1: config 0 has no interfaces? [ 130.609036][ T5890] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 130.619489][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.628127][ T5890] usb 6-1: Product: syz [ 130.632519][ T5890] usb 6-1: Manufacturer: syz [ 130.637952][ T5890] usb 6-1: SerialNumber: syz [ 130.645612][ T5890] usb 6-1: config 0 descriptor?? [ 131.115121][ T6361] netlink: 96 bytes leftover after parsing attributes in process `syz.4.144'. [ 131.336919][ T6364] netlink: 36 bytes leftover after parsing attributes in process `syz.1.146'. [ 131.607323][ T6364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.146'. [ 131.656405][ T6364] netlink: 36 bytes leftover after parsing attributes in process `syz.1.146'. [ 131.738773][ T6364] netlink: 36 bytes leftover after parsing attributes in process `syz.1.146'. [ 132.528096][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.538204][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.808016][ T6353] netlink: 32 bytes leftover after parsing attributes in process `syz.2.140'. [ 133.166287][ T5966] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 133.234284][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 133.335910][ T5966] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.346155][ T5966] usb 4-1: config 0 has no interface number 0 [ 133.352303][ T5966] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 133.416701][ T5966] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 133.444535][ T5966] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 133.454168][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 133.474537][ T5966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.489485][ T25] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 133.505342][ T5966] usb 4-1: config 0 descriptor?? [ 133.510503][ T25] usb 5-1: config 0 has no interface number 0 [ 133.521981][ T6380] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 133.535140][ T25] usb 5-1: config 0 interface 41 has no altsetting 0 [ 133.573080][ T5966] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 133.615890][ T25] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 133.654215][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.754190][ T25] usb 5-1: Product: syz [ 133.758564][ T25] usb 5-1: Manufacturer: syz [ 133.765140][ T25] usb 5-1: SerialNumber: syz [ 133.778829][ T25] usb 5-1: config 0 descriptor?? [ 133.798387][ T25] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 133.829366][ T5966] usb 4-1: USB disconnect, device number 2 [ 134.077819][ T25] usb 6-1: USB disconnect, device number 3 [ 134.515824][ T6403] loop9: detected capacity change from 0 to 8 [ 134.583126][ T6403] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 134.669692][ T6403] loop9: partition table partially beyond EOD, truncated [ 134.720298][ T6403] loop9: p1 size 81768186 extends beyond EOD, truncated [ 134.793601][ T6138] udevd[6138]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 134.887832][ T6415] netlink: 36 bytes leftover after parsing attributes in process `syz.3.162'. [ 134.922001][ T6415] netlink: 16 bytes leftover after parsing attributes in process `syz.3.162'. [ 135.015185][ T6415] netlink: 36 bytes leftover after parsing attributes in process `syz.3.162'. [ 135.101642][ T6415] netlink: 36 bytes leftover after parsing attributes in process `syz.3.162'. [ 135.195318][ T5890] usb 5-1: USB disconnect, device number 6 [ 135.607773][ T29] audit: type=1326 audit(1737882730.698:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.5.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864eb8cd29 code=0x7ffc0000 [ 135.688349][ T29] audit: type=1326 audit(1737882730.718:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.5.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f864eb8cd29 code=0x7ffc0000 [ 135.726912][ T29] audit: type=1326 audit(1737882730.718:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.5.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864eb8cd29 code=0x7ffc0000 [ 136.480640][ T6459] team_slave_0: entered promiscuous mode [ 136.486736][ T6459] team_slave_1: entered promiscuous mode [ 136.555029][ T6459] macsec1: entered promiscuous mode [ 136.569614][ T6459] team0: entered promiscuous mode [ 136.595284][ T6459] macsec1: entered allmulticast mode [ 136.623247][ T6459] team0: entered allmulticast mode [ 136.643818][ T6459] team_slave_0: entered allmulticast mode [ 136.671755][ T6459] team_slave_1: entered allmulticast mode [ 136.691502][ T6450] Zero length message leads to an empty skb [ 136.745134][ T6459] team0: left allmulticast mode [ 136.756651][ T6450] program syz.3.175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.780498][ T6459] team_slave_0: left allmulticast mode [ 136.790697][ T6459] team_slave_1: left allmulticast mode [ 136.813337][ T6459] team0: left promiscuous mode [ 136.841765][ T6459] team_slave_0: left promiscuous mode [ 136.847391][ T6459] team_slave_1: left promiscuous mode [ 137.157981][ T6448] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 137.194251][ T6448] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 137.247717][ T6448] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 137.583647][ T6483] netlink: 272 bytes leftover after parsing attributes in process `syz.4.190'. [ 137.629678][ T29] audit: type=1326 audit(1737882732.718:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585a58cd29 code=0x7ffc0000 [ 137.704158][ T29] audit: type=1326 audit(1737882732.748:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f585a58cd29 code=0x7ffc0000 [ 137.726803][ T29] audit: type=1326 audit(1737882732.748:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585a58cd29 code=0x7ffc0000 [ 137.749289][ T29] audit: type=1326 audit(1737882732.748:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585a58cd29 code=0x7ffc0000 [ 137.775410][ T29] audit: type=1326 audit(1737882732.748:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f585a58cd29 code=0x7ffc0000 [ 137.804993][ T29] audit: type=1326 audit(1737882732.748:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585a58cd29 code=0x7ffc0000 [ 137.828973][ T29] audit: type=1326 audit(1737882732.748:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585a58cd29 code=0x7ffc0000 [ 138.161949][ T6476] netlink: 32 bytes leftover after parsing attributes in process `syz.0.185'. [ 139.118833][ T6532] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 140.324263][ T971] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 140.504219][ T971] usb 1-1: Using ep0 maxpacket: 32 [ 140.536745][ T971] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 140.551375][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.571298][ T971] usb 1-1: config 0 descriptor?? [ 140.592889][ T971] gspca_main: sunplus-2.14.0 probing 041e:400b [ 141.192934][ T971] gspca_sunplus: reg_r err -32 [ 141.207468][ T971] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 141.229580][ T971] usb 1-1: USB disconnect, device number 2 [ 142.322270][ T6598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.508373][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 143.623230][ T5966] hid-generic 0000:0004:00FF.0001: unknown main item tag 0x0 [ 143.643019][ T5966] hid-generic 0000:0004:00FF.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 143.677481][ T6624] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 143.699154][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 143.709785][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 143.726728][ T25] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 143.736624][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.752285][ T25] usb 4-1: Product: syz [ 143.757638][ T25] usb 4-1: Manufacturer: syz [ 143.763496][ T25] usb 4-1: SerialNumber: syz [ 143.820551][ T25] usb 4-1: config 0 descriptor?? [ 143.834948][ T6613] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 143.843639][ T6613] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.076923][ T6613] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.124702][ T6613] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.494252][ T5965] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 144.572041][ T25] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 144.664168][ T5965] usb 3-1: Using ep0 maxpacket: 16 [ 144.673828][ T5965] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 144.701796][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 144.736791][ T5965] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 144.746076][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.755178][ T5965] usb 3-1: Product: syz [ 144.759591][ T5965] usb 3-1: Manufacturer: syz [ 144.765078][ T5965] usb 3-1: SerialNumber: syz [ 144.775949][ T5965] usb 3-1: config 0 descriptor?? [ 144.789484][ T25] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 144.806100][ T5965] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 144.823393][ T25] usb 4-1: USB disconnect, device number 3 [ 144.846622][ T5965] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 145.432550][ T5965] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 145.470844][ T5965] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 145.570294][ T6654] input: syz1 as /devices/virtual/input/input5 [ 145.893770][ T5965] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 145.912238][ T5965] em28xx 3-1:0.0: No AC97 audio processor [ 145.954150][ T5965] usb 3-1: USB disconnect, device number 3 [ 145.995343][ T5965] em28xx 3-1:0.0: Disconnecting em28xx [ 146.037981][ T5965] em28xx 3-1:0.0: Freeing device [ 146.163058][ T6665] loop0: detected capacity change from 0 to 4096 [ 146.202465][ T6665] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 146.417984][ T6665] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 146.484278][ T5965] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.639218][ T5841] ntfs3(loop0): ino=1a, ntfs_sync_fs failed, -22. [ 146.752154][ T5965] usb 4-1: Using ep0 maxpacket: 32 [ 146.790315][ T5965] usb 4-1: config 0 interface 0 has no altsetting 0 [ 146.817121][ T5965] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 146.837436][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.852604][ T5965] usb 4-1: Product: syz [ 146.873818][ T5965] usb 4-1: Manufacturer: syz [ 146.893691][ T5965] usb 4-1: SerialNumber: syz [ 146.912416][ T5965] usb 4-1: config 0 descriptor?? [ 146.925613][ T5965] gs_usb 4-1:0.0: Required endpoints not found [ 147.152816][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 147.169345][ T6679] bond_slave_0: entered promiscuous mode [ 147.175574][ T6679] bond_slave_1: entered promiscuous mode [ 147.205773][ T6679] macvtap1: entered promiscuous mode [ 147.264597][ T6679] bond0: entered promiscuous mode [ 147.282387][ T6679] macvtap1: entered allmulticast mode [ 147.314935][ T6679] bond0: entered allmulticast mode [ 147.343273][ T6679] bond_slave_0: entered allmulticast mode [ 147.374433][ T5890] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 147.390941][ T6679] bond_slave_1: entered allmulticast mode [ 147.505845][ T6679] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 147.563502][ T5889] usb 4-1: USB disconnect, device number 4 [ 147.584345][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 147.604605][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 147.645486][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 147.673027][ T5890] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 147.693222][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.738403][ T5890] usb 1-1: Product: syz [ 147.757099][ T5890] usb 1-1: Manufacturer: syz [ 147.775731][ T5890] usb 1-1: SerialNumber: syz [ 147.789990][ T5890] usb 1-1: config 0 descriptor?? [ 147.805279][ T5890] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 147.815074][ T5890] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 148.412746][ T5890] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 148.465302][ T5890] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 148.971881][ T6695] loop4: detected capacity change from 0 to 32768 [ 149.026896][ T6720] loop1: detected capacity change from 0 to 256 [ 149.044684][ T6695] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.268 (6695) [ 149.094728][ T5890] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 149.106549][ T5890] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 149.145330][ T5890] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 149.351117][ T5890] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 149.364809][ T5890] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 149.376945][ T5890] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 149.389447][ T5890] usb 1-1: USB disconnect, device number 3 [ 150.484014][ T6728] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 150.695461][ T6734] netlink: 36 bytes leftover after parsing attributes in process `syz.1.279'. [ 150.731455][ T6734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.279'. [ 150.794190][ T6734] netlink: 36 bytes leftover after parsing attributes in process `syz.1.279'. [ 150.803364][ T6734] netlink: 36 bytes leftover after parsing attributes in process `syz.1.279'. [ 151.283500][ T5965] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 151.464259][ T5965] usb 5-1: Using ep0 maxpacket: 32 [ 151.484025][ T5965] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 151.507381][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.534636][ T5965] usb 5-1: config 0 descriptor?? [ 151.558096][ T5965] gspca_main: sunplus-2.14.0 probing 041e:400b [ 152.033408][ T6775] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 152.151901][ T5965] gspca_sunplus: reg_r err -71 [ 152.161824][ T5965] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 152.184629][ T5965] usb 5-1: USB disconnect, device number 7 [ 152.344021][ T6784] netlink: 20 bytes leftover after parsing attributes in process `syz.5.301'. [ 153.144954][ T5889] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 153.304206][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 153.337144][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 153.369431][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 153.395526][ T5889] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 153.408177][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.439940][ T5889] usb 6-1: Product: syz [ 153.458630][ T5889] usb 6-1: Manufacturer: syz [ 153.475060][ T5889] usb 6-1: SerialNumber: syz [ 153.496303][ T6820] netlink: 20 bytes leftover after parsing attributes in process `syz.2.316'. [ 153.496999][ T5889] usb 6-1: config 0 descriptor?? [ 153.527257][ T5889] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 153.544363][ T5889] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 153.580763][ T6806] loop1: detected capacity change from 0 to 32768 [ 153.623582][ T6806] (syz.1.311,6806,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "" or missing value [ 153.676503][ T6806] (syz.1.311,6806,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 153.809125][ T6822] netlink: 36 bytes leftover after parsing attributes in process `syz.2.318'. [ 153.848893][ T6822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.318'. [ 153.884196][ T6822] netlink: 36 bytes leftover after parsing attributes in process `syz.2.318'. [ 153.936616][ T6822] netlink: 36 bytes leftover after parsing attributes in process `syz.2.318'. [ 154.131131][ T5889] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 154.155151][ T5889] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 154.208453][ T6806] warning: `syz.1.311' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 154.396335][ T5889] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 154.413294][ T5889] em28xx 6-1:0.0: No AC97 audio processor [ 154.459310][ T5889] usb 6-1: USB disconnect, device number 4 [ 154.484544][ T5889] em28xx 6-1:0.0: Disconnecting em28xx [ 154.513631][ T5889] em28xx 6-1:0.0: Freeing device [ 154.686245][ T6843] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 154.875986][ T6851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.330'. [ 154.927251][ T5965] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 155.114221][ T5965] usb 4-1: Using ep0 maxpacket: 32 [ 155.121664][ T5965] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.131378][ T5965] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 155.166396][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.193511][ T5965] usb 4-1: Product: syz [ 155.223467][ T5965] usb 4-1: Manufacturer: syz [ 155.233362][ T5965] usb 4-1: SerialNumber: syz [ 155.257483][ T5965] usb 4-1: config 0 descriptor?? [ 155.576983][ T6868] netlink: 36 bytes leftover after parsing attributes in process `syz.1.335'. [ 155.735300][ T6868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.335'. [ 155.745579][ T5965] gs_usb 4-1:0.0: Configuring for 3 interfaces [ 155.801052][ T6868] netlink: 36 bytes leftover after parsing attributes in process `syz.1.335'. [ 156.160321][ T5965] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 156.328197][ T5965] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 156.398778][ T5965] usb 4-1: USB disconnect, device number 5 [ 156.924961][ T8] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 157.166710][ T8] usb 3-1: config 0 has no interfaces? [ 157.190201][ T6900] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 157.212462][ T8] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 157.241037][ T8] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 157.256934][ T6905] loop3: detected capacity change from 0 to 128 [ 157.261313][ T8] usb 3-1: Manufacturer: syz [ 157.281554][ T8] usb 3-1: SerialNumber: syz [ 157.292685][ T8] usb 3-1: config 0 descriptor?? [ 157.531759][ T29] audit: type=1800 audit(1737882752.608:23): pid=6906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.349" name="bus" dev="loop3" ino=1048605 res=0 errno=0 [ 157.559558][ T6909] __nla_validate_parse: 4 callbacks suppressed [ 157.559588][ T6909] netlink: 36 bytes leftover after parsing attributes in process `syz.0.351'. [ 157.625294][ T6909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.351'. [ 157.669072][ T6911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.352'. [ 157.678187][ T6911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.352'. [ 157.690600][ T6909] netlink: 36 bytes leftover after parsing attributes in process `syz.0.351'. [ 157.741111][ T6909] netlink: 36 bytes leftover after parsing attributes in process `syz.0.351'. [ 157.960236][ T25] usb 3-1: USB disconnect, device number 4 [ 158.326332][ T6926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.358'. [ 159.134659][ T5909] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 159.244628][ T6944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.366'. [ 159.257290][ T6944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.366'. [ 159.304657][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 159.320464][ T5909] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 159.344156][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.357147][ T5909] usb 1-1: config 0 descriptor?? [ 159.396767][ T5909] gspca_main: sunplus-2.14.0 probing 041e:400b [ 159.649025][ T6952] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 159.800641][ T5909] gspca_sunplus: reg_w_riv err -71 [ 159.817633][ T5909] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 159.893669][ T5909] usb 1-1: USB disconnect, device number 4 [ 159.943681][ T6963] netlink: 20 bytes leftover after parsing attributes in process `syz.5.374'. [ 162.586229][ T6993] netlink: 36 bytes leftover after parsing attributes in process `syz.5.387'. [ 162.606589][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.5.387'. [ 162.623984][ T6993] netlink: 36 bytes leftover after parsing attributes in process `syz.5.387'. [ 162.645813][ T6993] netlink: 36 bytes leftover after parsing attributes in process `syz.5.387'. [ 162.981021][ T6971] loop2: detected capacity change from 0 to 32768 [ 163.041890][ T6971] (syz.2.378,6971,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "" or missing value [ 163.099885][ T6971] (syz.2.378,6971,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 163.375056][ T7012] Set syz1 is full, maxelem 65536 reached [ 163.405263][ T5890] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 163.549064][ T7016] loop4: detected capacity change from 0 to 256 [ 163.584253][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 163.594408][ T7016] vfat: Unknown parameter 'shoróÆ 9Å“÷÷tname' [ 163.597185][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 163.634422][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 163.697054][ T5890] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 163.707418][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.722785][ T5890] usb 1-1: Product: syz [ 163.728510][ T5890] usb 1-1: Manufacturer: syz [ 163.733583][ T5890] usb 1-1: SerialNumber: syz [ 163.754376][ T5890] usb 1-1: config 0 descriptor?? [ 163.785256][ T5890] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 163.814706][ T5890] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 164.392413][ T5890] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 164.411942][ T5890] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 164.467667][ T7032] netlink: 36 bytes leftover after parsing attributes in process `syz.3.403'. [ 164.573847][ T7032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.403'. [ 164.588511][ T7032] netlink: 36 bytes leftover after parsing attributes in process `syz.3.403'. [ 164.598214][ T7032] netlink: 36 bytes leftover after parsing attributes in process `syz.3.403'. [ 165.091814][ T5890] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 165.093047][ T7016] loop4: detected capacity change from 0 to 32768 [ 165.133493][ T5890] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 165.152585][ T5890] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 165.172854][ T7016] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.398 (7016) [ 165.177184][ T5890] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 165.204610][ T5890] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 165.212386][ T5890] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 165.222194][ T5890] usb 1-1: USB disconnect, device number 5 [ 165.242195][ T6138] udevd[6138]: setting mode of /dev/bus/usb/001/005 to 020664 failed: No such file or directory [ 165.285910][ T6138] udevd[6138]: setting owner of /dev/bus/usb/001/005 to uid=0, gid=0 failed: No such file or directory [ 165.287306][ T7016] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 165.312930][ T7016] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 165.520908][ T7016] BTRFS info (device loop4): rebuilding free space tree [ 165.617938][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.412'. [ 165.658362][ T7016] BTRFS info (device loop4): disabling free space tree [ 165.668256][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.412'. [ 165.685056][ T7016] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 165.706049][ T7016] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 165.944283][ T29] audit: type=1800 audit(1737882761.018:24): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.398" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 166.360035][ T5832] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 166.935131][ T7098] program syz.1.419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.961981][ T971] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 167.044616][ T5890] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 167.165052][ T971] usb 6-1: Using ep0 maxpacket: 16 [ 167.191937][ T971] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 167.201964][ T971] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 167.216935][ T971] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.246550][ T971] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.256761][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 167.261987][ T971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.270665][ T971] usb 6-1: Product: syz [ 167.276881][ T971] usb 6-1: Manufacturer: syz [ 167.283699][ T971] usb 6-1: SerialNumber: syz [ 167.289622][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.328460][ T5890] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 167.371617][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.455430][ T5890] usb 3-1: config 0 descriptor?? [ 167.480884][ T5890] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 167.557054][ T971] usb 6-1: 0:2 : does not exist [ 167.622932][ T971] usb 6-1: USB disconnect, device number 5 [ 167.733485][ T7119] __nla_validate_parse: 4 callbacks suppressed [ 167.733508][ T7119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.427'. [ 167.764618][ T7119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.427'. [ 167.906066][ T6138] udevd[6138]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.079807][ T5890] gspca_vc032x: reg_r err -32 [ 168.101182][ T5890] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 168.137595][ T5890] usb 3-1: USB disconnect, device number 5 [ 168.741207][ T7141] netlink: 36 bytes leftover after parsing attributes in process `syz.4.436'. [ 168.827416][ T7141] netlink: 16 bytes leftover after parsing attributes in process `syz.4.436'. [ 168.878690][ T7141] netlink: 36 bytes leftover after parsing attributes in process `syz.4.436'. [ 168.913112][ T7141] netlink: 36 bytes leftover after parsing attributes in process `syz.4.436'. [ 171.845532][ T7190] netlink: 36 bytes leftover after parsing attributes in process `syz.3.453'. [ 171.877381][ T7190] netlink: 16 bytes leftover after parsing attributes in process `syz.3.453'. [ 171.919570][ T7190] netlink: 36 bytes leftover after parsing attributes in process `syz.3.453'. [ 171.961586][ T7190] netlink: 36 bytes leftover after parsing attributes in process `syz.3.453'. [ 174.014744][ T7237] program syz.0.472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.167258][ T7249] program syz.2.474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.351909][ T7231] loop3: detected capacity change from 0 to 32768 [ 174.400398][ T7231] (syz.3.469,7231,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "" or missing value [ 174.476561][ T7231] (syz.3.469,7231,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 175.934726][ T5890] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 176.094178][ T5890] usb 6-1: Using ep0 maxpacket: 32 [ 176.107353][ T5890] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 176.117017][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.138039][ T5890] usb 6-1: config 0 descriptor?? [ 176.159409][ T5890] gspca_main: sunplus-2.14.0 probing 041e:400b [ 176.365037][ T7295] program syz.3.492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.549785][ T5890] gspca_sunplus: reg_w_riv err -71 [ 176.723188][ T5890] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 176.756095][ T7310] __nla_validate_parse: 2 callbacks suppressed [ 176.756119][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 177.200068][ T5890] usb 6-1: USB disconnect, device number 6 [ 177.965773][ T5890] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 178.124187][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 178.133655][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 178.152215][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 178.297682][ T5890] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 178.308005][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.316388][ T5890] usb 3-1: Product: syz [ 178.320698][ T5890] usb 3-1: Manufacturer: syz [ 178.325761][ T5890] usb 3-1: SerialNumber: syz [ 178.332701][ T5890] usb 3-1: config 0 descriptor?? [ 178.351882][ T5890] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 178.361455][ T5890] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 178.364323][ T5965] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 178.544279][ T5965] usb 1-1: Using ep0 maxpacket: 16 [ 178.553517][ T5965] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 178.634211][ T5965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 178.700075][ T5965] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 178.724207][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.732336][ T5965] usb 1-1: Product: syz [ 178.784345][ T5965] usb 1-1: Manufacturer: syz [ 178.789049][ T5965] usb 1-1: SerialNumber: syz [ 178.954776][ T5890] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 178.982338][ T5890] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 178.985496][ T5965] usb 1-1: config 0 descriptor?? [ 179.050860][ T5965] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 179.096520][ T5965] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 179.456867][ T7352] program syz.5.511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.643142][ T5965] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 179.652735][ T5965] em28xx 1-1:0.0: Config register raw data: 0x56 [ 179.744454][ T5890] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 179.764841][ T5890] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 179.780637][ T5890] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 179.794766][ T5890] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 179.804453][ T5890] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 179.824301][ T5890] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 179.848747][ T5890] usb 3-1: USB disconnect, device number 6 [ 179.857857][ T5965] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 179.889965][ T5965] em28xx 1-1:0.0: No AC97 audio processor [ 180.136685][ T5965] usb 1-1: USB disconnect, device number 6 [ 180.245363][ T5965] em28xx 1-1:0.0: Disconnecting em28xx [ 180.350048][ T5965] em28xx 1-1:0.0: Freeing device [ 182.569205][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.534'. [ 183.356059][ T7431] loop3: detected capacity change from 0 to 256 [ 184.071391][ T7423] loop2: detected capacity change from 0 to 32768 [ 184.126247][ T7423] (syz.2.541,7423,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "" or missing value [ 184.204415][ T7423] (syz.2.541,7423,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 184.914316][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 185.074539][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 185.680098][ T8] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 185.717210][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.774479][ T8] usb 1-1: config 0 descriptor?? [ 185.809982][ T8] gspca_main: sunplus-2.14.0 probing 041e:400b [ 186.118376][ T7473] netlink: 'syz.3.560': attribute type 10 has an invalid length. [ 186.878941][ T8] gspca_sunplus: reg_r err -71 [ 186.883805][ T8] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 186.893499][ T8] usb 1-1: USB disconnect, device number 7 [ 186.932680][ T7473] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 186.945264][ T7473] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 186.958450][ T7473] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 187.687867][ T7470] loop1: detected capacity change from 0 to 32768 [ 187.756941][ T7470] (syz.1.559,7470,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "" or missing value [ 187.892551][ T7470] (syz.1.559,7470,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 188.120240][ T7494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.854391][ T5889] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 190.044754][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 190.056934][ T5889] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 190.066569][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.093669][ T5889] usb 4-1: config 0 descriptor?? [ 190.135340][ T5889] gspca_main: sunplus-2.14.0 probing 041e:400b [ 190.158033][ T7504] loop1: detected capacity change from 0 to 32768 [ 190.178061][ T7504] (syz.1.568,7504,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "ÿÿÊ]­<ñÉéMÔ'ô<’ ¾`PV~n'ëdPŽÒA" or missing value [ 190.222594][ T7504] (syz.1.568,7504,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 190.726734][ T5889] gspca_sunplus: reg_r err -71 [ 190.733733][ T5889] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 190.844636][ T5889] usb 4-1: USB disconnect, device number 6 [ 192.226284][ T7562] loop5: detected capacity change from 0 to 512 [ 192.293791][ T7562] ======================================================= [ 192.293791][ T7562] WARNING: The mand mount option has been deprecated and [ 192.293791][ T7562] and is ignored by this kernel. Remove the mand [ 192.293791][ T7562] option from the mount to silence this warning. [ 192.293791][ T7562] ======================================================= [ 192.542972][ T7569] loop1: detected capacity change from 0 to 256 [ 192.575522][ T7569] exfat: Deprecated parameter 'utf8' [ 192.686243][ T7569] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d) [ 192.734421][ T7562] EXT4-fs (loop5): Test dummy encryption mode enabled [ 192.824416][ T7562] EXT4-fs error (device loop5): __ext4_iget:4984: inode #11: block 1: comm syz.5.593: invalid block [ 192.899151][ T7581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.934891][ T7562] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.593: couldn't read orphan inode 11 (err -117) [ 192.976457][ T7562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.971330][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.979934][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.243977][ T7559] loop3: detected capacity change from 0 to 32768 [ 194.307611][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.319630][ T7559] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.591 (7559) [ 194.371637][ T7559] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.406921][ T7559] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 194.426209][ T7559] BTRFS info (device loop3): using free-space-tree [ 194.737260][ T5834] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 197.913968][ T7655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.619'. [ 197.939788][ T7655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.619'. [ 199.686087][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 199.731113][ T7686] loop1: detected capacity change from 0 to 512 [ 199.791943][ T7685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.803390][ T7686] EXT4-fs: Ignoring removed orlov option [ 199.827900][ T7686] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 199.874317][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 199.884607][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 199.897576][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 199.919232][ T7686] EXT4-fs (loop1): 1 truncate cleaned up [ 199.927542][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 199.936851][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.944905][ T25] usb 1-1: Product: syz [ 199.949251][ T25] usb 1-1: Manufacturer: syz [ 199.960419][ T25] usb 1-1: SerialNumber: syz [ 199.969113][ T7686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.980654][ T25] usb 1-1: config 0 descriptor?? [ 199.989565][ T25] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 199.998926][ T25] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 200.261375][ T7653] loop5: detected capacity change from 0 to 32768 [ 200.293681][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.601943][ T7692] program syz.4.632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.634856][ T25] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 200.647512][ T25] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 200.669583][ T7653] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 200.800044][ T7672] loop3: detected capacity change from 0 to 32768 [ 200.843598][ T7653] bcachefs (loop5): initializing new filesystem [ 200.887472][ T7672] (syz.3.624,7672,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "" or missing value [ 200.927400][ T7653] bcachefs (loop5): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 200.990725][ T7653] bcachefs (loop5): going read-write [ 201.012779][ T7672] (syz.3.624,7672,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 201.124394][ T7653] bcachefs (loop5): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 201.173825][ T7653] bcachefs (loop5): going read-only [ 201.205859][ T7653] bcachefs (loop5): finished waiting for writes to stop [ 201.233567][ T7653] bcachefs (loop5): flushing journal and stopping allocators, journal seq 0 [ 201.258822][ T7653] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 0 [ 201.294657][ T25] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 201.302944][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 201.312342][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 201.319342][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 201.327841][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 201.335779][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 201.355852][ T25] usb 1-1: USB disconnect, device number 8 [ 201.417148][ T7653] bcachefs (loop5): clean shutdown complete, journal seq 1 [ 201.450375][ T7653] bcachefs (loop5): done going read-only, filesystem not clean [ 201.472647][ T7653] bcachefs (loop5): bch2_fs_initialize(): error EINTR [ 201.489997][ T7653] bcachefs (loop5): bch2_fs_start(): error starting filesystem EINTR [ 201.511217][ T7653] bcachefs (loop5): shutting down [ 201.590606][ T7653] bcachefs (loop5): shutdown complete [ 201.634220][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 201.794207][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 202.019981][ T8] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 202.035298][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.460664][ T7719] loop3: detected capacity change from 0 to 4096 [ 202.549140][ T7719] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 203.015156][ T8] usb 5-1: config 0 descriptor?? [ 203.035751][ T8] gspca_main: sunplus-2.14.0 probing 041e:400b [ 204.006200][ T8] gspca_sunplus: reg_w_riv err -110 [ 204.012233][ T8] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 205.034161][ T46] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 205.106942][ T8] usb 5-1: USB disconnect, device number 8 [ 205.194142][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 205.201721][ T46] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 205.210697][ T46] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 205.220920][ T46] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.233833][ T46] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.244424][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.252704][ T46] usb 4-1: Product: syz [ 205.257050][ T46] usb 4-1: Manufacturer: syz [ 205.261786][ T46] usb 4-1: SerialNumber: syz [ 205.660342][ T46] usb 4-1: 0:2 : does not exist [ 207.105933][ T46] usb 4-1: USB disconnect, device number 7 [ 207.384691][ T6138] udevd[6138]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.664534][ T46] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 207.866664][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 207.887023][ T7653] bcachefs: bch2_fs_get_tree() error: EINTR [ 207.907240][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 207.954899][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 207.990748][ T46] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 208.034117][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.042107][ T7751] program syz.4.647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.106519][ T46] usb 3-1: config 0 descriptor?? [ 208.333218][ T7749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.367187][ T7749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.602791][ T46] hid (null): bogus close delimiter [ 208.608352][ T46] hid (null): invalid report_size 59136 [ 208.620774][ T46] hid (null): report_id 48035 is invalid [ 208.841984][ T46] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 208.849775][ T46] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 208.857269][ T46] hid-generic 0003:0158:0100.0002: bogus close delimiter [ 208.864478][ T46] hid-generic 0003:0158:0100.0002: item 0 0 2 10 parsing failed [ 208.872908][ T46] hid-generic 0003:0158:0100.0002: probe with driver hid-generic failed with error -22 [ 208.892617][ T46] usb 3-1: USB disconnect, device number 7 [ 209.668703][ T7780] loop3: detected capacity change from 0 to 128 [ 211.564400][ T7778] Bluetooth: hci0: command 0x0406 tx timeout [ 211.572630][ T7778] Bluetooth: hci1: command 0x0406 tx timeout [ 211.579242][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 211.588021][ T7778] Bluetooth: hci3: command 0x0406 tx timeout [ 211.594219][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 211.600343][ T7778] Bluetooth: hci5: command 0x0406 tx timeout [ 212.219748][ T7820] netlink: 24 bytes leftover after parsing attributes in process `syz.2.672'. [ 212.229613][ T7817] ip6erspan0: entered promiscuous mode [ 213.514586][ T5889] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 213.684264][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 213.754533][ T7837] loop1: detected capacity change from 0 to 256 [ 213.762050][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 213.785655][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 213.807349][ T7837] exfat: Deprecated parameter 'utf8' [ 213.820256][ T5889] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 213.834562][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.879976][ T7837] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d) [ 213.900277][ T5889] usb 1-1: Product: syz [ 213.906046][ T5889] usb 1-1: Manufacturer: syz [ 213.923554][ T5889] usb 1-1: SerialNumber: syz [ 214.026818][ T5889] usb 1-1: config 0 descriptor?? [ 214.106378][ T5889] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 214.129086][ T5889] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 214.613656][ T7849] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 214.836587][ T5889] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 214.846434][ T5889] em28xx 1-1:0.0: Config register raw data: 0x56 [ 214.934264][ T971] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 215.003697][ T7848] loop1: detected capacity change from 0 to 32768 [ 215.013457][ T7848] (syz.1.682,7848,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "" or missing value [ 215.031127][ T7848] (syz.1.682,7848,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 215.048651][ T5889] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 215.076688][ T5889] em28xx 1-1:0.0: No AC97 audio processor [ 215.094582][ T971] usb 6-1: Using ep0 maxpacket: 32 [ 215.105044][ T5889] usb 1-1: USB disconnect, device number 9 [ 215.119635][ T971] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 215.143510][ T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.158169][ T5889] em28xx 1-1:0.0: Disconnecting em28xx [ 215.176206][ T971] usb 6-1: config 0 descriptor?? [ 215.185898][ T7856] netlink: 32 bytes leftover after parsing attributes in process `syz.2.685'. [ 215.195762][ T5889] em28xx 1-1:0.0: Freeing device [ 215.206856][ T971] gspca_main: sunplus-2.14.0 probing 041e:400b [ 215.637678][ T7862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.688'. [ 215.810663][ T971] gspca_sunplus: reg_r err -32 [ 215.826710][ T971] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 215.846097][ T971] usb 6-1: USB disconnect, device number 7 [ 215.864592][ T46] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 216.066276][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.077160][ T46] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 216.120381][ T46] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 216.161464][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.195876][ T46] usb 4-1: config 0 descriptor?? [ 216.862391][ T7863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.933572][ T7863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.157102][ T7863] loop3: detected capacity change from 0 to 128 [ 217.424224][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 217.573025][ T7892] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 218.534208][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 218.612036][ T8] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 218.632748][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.657152][ T8] usb 1-1: config 0 descriptor?? [ 218.667365][ T8] gspca_main: sunplus-2.14.0 probing 041e:400b [ 218.828929][ T7894] netlink: 72 bytes leftover after parsing attributes in process `syz.5.694'. [ 219.451375][ T7897] netlink: 32 bytes leftover after parsing attributes in process `syz.2.698'. [ 219.503696][ T8] gspca_sunplus: reg_r err -71 [ 219.531144][ T8] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 219.576495][ T8] usb 1-1: USB disconnect, device number 10 [ 219.619671][ T7902] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 219.747566][ T5889] usb 4-1: USB disconnect, device number 8 [ 220.138078][ T7909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.703'. [ 220.323845][ T7901] loop4: detected capacity change from 0 to 32768 [ 220.350999][ T7901] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.700 (7901) [ 220.405276][ T7901] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 220.443152][ T7901] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 220.469223][ T7901] BTRFS info (device loop4): using free-space-tree [ 220.567026][ T7904] loop2: detected capacity change from 0 to 32768 [ 220.583857][ T7904] (syz.2.701,7904,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "" or missing value [ 220.735593][ T7933] veth0_vlan: entered allmulticast mode [ 220.824650][ T7933] veth0_vlan: left promiscuous mode [ 220.837428][ T7933] veth0_vlan: entered promiscuous mode [ 221.011188][ T7904] (syz.2.701,7904,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 221.509994][ T7901] BTRFS info (device loop4): rebuilding free space tree [ 222.425563][ T5832] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.667273][ T7953] openvswitch: netlink: nsh attr 88 is out of range max 3 [ 222.699355][ T7953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.894807][ T7957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.717'. [ 223.211530][ T7962] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 223.406249][ T7970] netlink: 32 bytes leftover after parsing attributes in process `syz.4.713'. [ 223.995034][ T7971] loop5: detected capacity change from 0 to 32768 [ 224.002515][ T7971] btrfs: Deprecated parameter 'usebackuproot' [ 224.008899][ T7971] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 224.047015][ T7971] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.721 (7971) [ 224.067083][ T7971] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 224.077429][ T7971] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 224.088073][ T7971] BTRFS info (device loop5): using free-space-tree [ 224.275454][ T7997] veth0_vlan: entered allmulticast mode [ 225.135236][ T12] BTRFS error (device loop5): bad fsid on logical 5337088 mirror 1 [ 225.159065][ T35] BTRFS warning (device loop5): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0xab7744ef6fb089999f046b2054e797f432769aee67f9e497f8826f4029900388 level 0 [ 225.340684][ T2994] BTRFS warning (device loop5): checksum verify failed on logical 5267456 mirror 1 wanted 0xce6a0dc39dad9e7cbba6cc000b67b0cf7f3e351c922d08ed6fd033c276f2526b found 0x7bec8ed4b8af843b77e84b88b78fe2b4adeb7553c930f293be4f515f1e4c0cdd level 0 [ 225.458991][ T7971] BTRFS warning (device loop5): failed to read fs tree: -5 [ 225.490794][ T7971] BTRFS error (device loop5): open_ctree failed: -5 [ 227.853447][ T8041] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 228.054322][ T971] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 228.168404][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.745'. [ 228.234168][ T971] usb 1-1: Using ep0 maxpacket: 32 [ 228.241001][ T971] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 228.254131][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.285732][ T971] usb 1-1: config 0 descriptor?? [ 228.310870][ T971] gspca_main: sunplus-2.14.0 probing 041e:400b [ 228.504261][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 228.705020][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 229.126027][ T25] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 229.159021][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.273056][ T25] usb 3-1: config 0 descriptor?? [ 229.297662][ T25] gspca_main: sunplus-2.14.0 probing 041e:400b [ 229.335263][ T971] gspca_sunplus: reg_r err -32 [ 229.340159][ T971] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 229.362871][ T971] usb 1-1: USB disconnect, device number 11 [ 229.414280][ T8065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.930783][ T25] gspca_sunplus: reg_r err -71 [ 229.964850][ T25] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 230.010741][ T25] usb 3-1: USB disconnect, device number 8 [ 230.294506][ T8074] netlink: 36 bytes leftover after parsing attributes in process `syz.4.751'. [ 230.330917][ T8074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.751'. [ 230.381424][ T8074] netlink: 36 bytes leftover after parsing attributes in process `syz.4.751'. [ 230.430064][ T8074] netlink: 36 bytes leftover after parsing attributes in process `syz.4.751'. [ 231.152095][ T8084] program syz.0.755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.140930][ T5909] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 235.344465][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 235.831502][ T5909] usb 4-1: config 0 interface 0 has no altsetting 0 [ 235.847083][ T8134] netlink: 36 bytes leftover after parsing attributes in process `syz.5.772'. [ 235.856639][ T8134] netlink: 16 bytes leftover after parsing attributes in process `syz.5.772'. [ 235.880950][ T8134] netlink: 36 bytes leftover after parsing attributes in process `syz.5.772'. [ 235.900710][ T5909] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 235.924349][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.924594][ T8134] netlink: 36 bytes leftover after parsing attributes in process `syz.5.772'. [ 235.932519][ T5909] usb 4-1: Product: syz [ 235.932549][ T5909] usb 4-1: Manufacturer: syz [ 235.932570][ T5909] usb 4-1: SerialNumber: syz [ 235.945558][ T5909] usb 4-1: config 0 descriptor?? [ 236.040714][ T5909] gs_usb 4-1:0.0: Required endpoints not found [ 236.923027][ T8140] program syz.5.774 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.132225][ T8128] loop1: detected capacity change from 0 to 32768 [ 237.300343][ T8128] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 237.325331][ T8128] bcachefs (loop1): initializing new filesystem [ 237.342643][ T8128] bcachefs (loop1): going read-write [ 237.416275][ T8128] bcachefs (loop1): marking superblocks [ 237.543150][ T8128] bcachefs (loop1): initializing freespace [ 237.598522][ T8128] bcachefs (loop1): done initializing freespace [ 237.612458][ T8128] bcachefs (loop1): reading snapshots table [ 237.620949][ T8128] bcachefs (loop1): reading snapshots done [ 237.639768][ T8165] loop5: detected capacity change from 0 to 1024 [ 237.675380][ T8128] bcachefs (loop1): done starting filesystem [ 237.689705][ T8165] EXT4-fs: Ignoring removed nomblk_io_submit option [ 237.782036][ T8165] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.967405][ T8] usb 4-1: USB disconnect, device number 9 [ 238.077797][ T8128] syz.1.769 (8128) used greatest stack depth: 9904 bytes left [ 238.109261][ T5837] bcachefs (loop1): shutting down [ 238.128466][ T5837] bcachefs (loop1): going read-only [ 238.153361][ T5837] bcachefs (loop1): finished waiting for writes to stop [ 238.240740][ T5837] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 238.287753][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.599374][ T5837] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4 [ 238.698522][ T5837] bcachefs (loop1): clean shutdown complete, journal seq 5 [ 238.727878][ T8183] netlink: 28 bytes leftover after parsing attributes in process `syz.5.780'. [ 238.983527][ T5837] bcachefs (loop1): marking filesystem clean [ 239.045480][ T8183] netlink: 28 bytes leftover after parsing attributes in process `syz.5.780'. [ 239.079603][ T5837] bcachefs (loop1): shutdown complete [ 239.755626][ T8195] capability: warning: `syz.3.785' uses deprecated v2 capabilities in a way that may be insecure [ 240.500041][ T8203] netlink: 36 bytes leftover after parsing attributes in process `syz.5.786'. [ 240.543492][ T8203] netlink: 16 bytes leftover after parsing attributes in process `syz.5.786'. [ 240.580053][ T8203] netlink: 36 bytes leftover after parsing attributes in process `syz.5.786'. [ 240.632518][ T8203] netlink: 36 bytes leftover after parsing attributes in process `syz.5.786'. [ 240.662399][ T5909] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 240.824335][ T5909] usb 4-1: device descriptor read/64, error -71 [ 241.093880][ T8191] loop4: detected capacity change from 0 to 32768 [ 241.160671][ T8207] program syz.0.788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.174544][ T5909] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 241.344324][ T5909] usb 4-1: device descriptor read/64, error -71 [ 241.508929][ T5909] usb usb4-port1: attempt power cycle [ 241.561125][ T8191] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=/dev/loop4,noinodes_use_key_cache,nojournal_transaction_names [ 241.586836][ T8191] bcachefs (loop4): recovering from clean shutdown, journal seq 13 [ 241.596815][ T8191] bcachefs (loop4): Version upgrade required: [ 241.596815][ T8191] Version upgrade from 0.32: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 241.596815][ T8191] Doing incompatible version upgrade from 0.32: (unknown version) to 1.20: directory_size [ 241.596815][ T8191] running recovery passes: check_allocations,check_extents_to_backpointers,check_snapshots,check_subvols,check_inodes,check_dirents,set_fs_needs_rebalance [ 241.808621][ T8191] bcachefs (loop4): accounting_read... done [ 241.829023][ T8191] bcachefs (loop4): alloc_read... done [ 241.851611][ T5889] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 241.855397][ T8191] bcachefs (loop4): stripes_read... done [ 241.900483][ T8191] bcachefs (loop4): snapshots_read... done [ 241.919690][ T8191] bcachefs (loop4): check_allocations... [ 241.924264][ T5909] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 241.983463][ T8191] done [ 242.008712][ T8191] bcachefs (loop4): going read-write [ 242.015517][ T5909] usb 4-1: device descriptor read/8, error -71 [ 242.018546][ T8191] bcachefs (loop4): journal_replay... [ 242.029680][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 242.063761][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 242.084267][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 242.104183][ T5889] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 242.139978][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.182433][ T8191] done [ 242.187481][ T8191] bcachefs (loop4): check_extents_to_backpointers... [ 242.189538][ T8191] bcachefs (loop4): scanning for missing backpointers in 6/128 buckets [ 242.220347][ T8191] done [ 242.235854][ T5889] usb 6-1: config 0 descriptor?? [ 242.257777][ T8191] bcachefs (loop4): check_snapshots... [ 242.259350][ T8191] snapshot points to missing/incorrect tree: [ 242.259392][ T8191] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent 0 children 0 0 subvol 1 tree 0, fixing [ 242.311840][ T8191] snapshot points to missing/incorrect tree: [ 242.311878][ T8191] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent 0 children 0 0 subvol 1 tree 0, fixing [ 242.436155][ T8191] done [ 242.442214][ T8191] bcachefs (loop4): check_subvols... done [ 242.451804][ T8235] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 242.452580][ T8191] bcachefs (loop4): check_inodes... done [ 243.104723][ T5909] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 243.165536][ T8222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.174592][ T5909] usb 4-1: device descriptor read/8, error -71 [ 243.182643][ T8191] bcachefs (loop4): check_dirents... done [ 243.207671][ T8191] bcachefs (loop4): resume_logged_ops... done [ 243.217678][ T8222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.239705][ T8191] bcachefs (loop4): delete_dead_inodes... done [ 243.275413][ T8191] bcachefs (loop4): set_fs_needs_rebalance... done [ 243.316533][ T5909] usb usb4-port1: unable to enumerate USB device [ 243.375597][ T8191] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean [ 243.432061][ T8191] bcachefs (loop4): check_extents_to_backpointers... done [ 243.462705][ T8239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.794'. [ 243.474526][ T8191] bcachefs (loop4): check_snapshots... done [ 243.483094][ T5889] usbhid 6-1:0.0: can't add hid device: -71 [ 243.494559][ T8191] bcachefs (loop4): check_subvols... done [ 243.501100][ T5889] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 243.511737][ T8191] bcachefs (loop4): check_inodes... done [ 243.520837][ T5889] usb 6-1: USB disconnect, device number 8 [ 243.533422][ T8191] bcachefs (loop4): check_dirents... done [ 243.542281][ T8191] bcachefs (loop4): resume_logged_ops... done [ 243.548630][ T8191] bcachefs (loop4): delete_dead_inodes... done [ 243.556650][ T8191] bcachefs (loop4): set_fs_needs_rebalance... done [ 243.580174][ T8191] bcachefs (loop4): bch2_copygc_start(): error creating copygc thread EINTR [ 243.602875][ T8191] bcachefs (loop4): error starting copygc thread [ 243.636002][ T8191] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINTR [ 243.665386][ T8191] bcachefs (loop4): shutting down [ 243.694184][ T8191] bcachefs (loop4): going read-only [ 243.734420][ T8191] bcachefs (loop4): finished waiting for writes to stop [ 243.777697][ T8191] bcachefs (loop4): flushing journal and stopping allocators, journal seq 31 [ 243.809023][ T8191] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 31 [ 243.837912][ T8191] bcachefs (loop4): clean shutdown complete, journal seq 32 [ 243.973210][ T8191] bcachefs (loop4): marking filesystem clean [ 244.105142][ T8191] bcachefs (loop4): shutdown complete [ 244.702942][ T8255] loop5: detected capacity change from 0 to 4096 [ 244.722739][ T8263] netlink: 36 bytes leftover after parsing attributes in process `syz.1.802'. [ 244.741949][ T8263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.802'. [ 244.751768][ T8255] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 244.786928][ T8263] netlink: 36 bytes leftover after parsing attributes in process `syz.1.802'. [ 244.809491][ T8263] netlink: 36 bytes leftover after parsing attributes in process `syz.1.802'. [ 244.905392][ T8255] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 245.041027][ T8257] program syz.0.801 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.866642][ T5909] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 246.061358][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 246.102118][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.129956][ T5909] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 246.159858][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.177566][ T5909] usb 4-1: config 0 descriptor?? [ 246.222101][ T8274] loop0: detected capacity change from 0 to 32768 [ 246.266019][ T8274] (syz.0.807,8274,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 246.309005][ T8274] (syz.0.807,8274,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 246.364613][ T5889] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 246.381576][ T8274] JBD2: Ignoring recovery information on journal [ 246.466407][ T8274] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 246.525609][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 246.535539][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 246.548051][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 246.558066][ T5889] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 246.567543][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.576093][ T46] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 246.578181][ T5889] usb 6-1: config 0 descriptor?? [ 246.638752][ T5909] uclogic 0003:5543:0042.0003: unknown main item tag 0x0 [ 246.664173][ T5909] uclogic 0003:5543:0042.0003: unknown main item tag 0x0 [ 246.671640][ T5909] uclogic 0003:5543:0042.0003: unknown main item tag 0x0 [ 246.680765][ T5909] uclogic 0003:5543:0042.0003: unknown main item tag 0x0 [ 246.689610][ T5909] uclogic 0003:5543:0042.0003: unknown main item tag 0x0 [ 246.703105][ T5909] uclogic 0003:5543:0042.0003: No inputs registered, leaving [ 246.720766][ T5909] uclogic 0003:5543:0042.0003: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.3-1/input0 [ 246.723973][ T5841] ocfs2: Unmounting device (7,0) on (node local) [ 246.760457][ T8191] bcachefs: bch2_fs_get_tree() error: EINTR [ 246.766792][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 246.792714][ T46] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 246.813106][ T46] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 246.832103][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.835683][ T8286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.862262][ T46] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.868708][ T8286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.879578][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.901156][ T46] usb 3-1: Product: syz [ 246.928926][ T46] usb 3-1: Manufacturer: syz [ 247.240249][ T5889] usbhid 6-1:0.0: can't add hid device: -71 [ 247.378407][ T5889] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 247.750094][ T5889] usb 6-1: USB disconnect, device number 9 [ 247.770570][ T46] usb 3-1: SerialNumber: syz [ 247.998439][ T46] usb 3-1: 0:2 : does not exist [ 248.054956][ T46] usb 3-1: USB disconnect, device number 9 [ 248.147506][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 248.471145][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.865332][ T8305] loop5: detected capacity change from 0 to 4096 [ 249.343083][ T6138] udevd[6138]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.384215][ T8305] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 249.428670][ T46] usb 4-1: USB disconnect, device number 14 [ 249.530336][ T25] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 249.754508][ T25] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 249.808668][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.896440][ T25] usb 5-1: config 0 descriptor?? [ 250.129995][ T8296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.182887][ T8296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.402876][ T8316] netlink: 36 bytes leftover after parsing attributes in process `syz.0.821'. [ 251.187438][ T8318] netlink: 'syz.2.820': attribute type 10 has an invalid length. [ 251.391169][ T8316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.821'. [ 251.429118][ T8321] loop4: detected capacity change from 0 to 128 [ 251.474246][ T8316] netlink: 36 bytes leftover after parsing attributes in process `syz.0.821'. [ 252.056033][ T8316] netlink: 36 bytes leftover after parsing attributes in process `syz.0.821'. [ 252.121665][ T8318] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 252.204895][ T8318] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 252.267855][ T8314] program syz.1.819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.754007][ T5889] usb 5-1: USB disconnect, device number 9 [ 254.776895][ T8339] loop2: detected capacity change from 0 to 32768 [ 255.026669][ T8339] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.827 (8339) [ 255.579963][ T8364] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 255.601207][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.608257][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.439608][ T8377] netlink: 36 bytes leftover after parsing attributes in process `syz.1.837'. [ 256.495494][ T8377] netlink: 16 bytes leftover after parsing attributes in process `syz.1.837'. [ 256.531828][ T8376] loop3: detected capacity change from 0 to 2048 [ 256.557651][ T8377] netlink: 36 bytes leftover after parsing attributes in process `syz.1.837'. [ 256.625513][ T8376] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 256.656815][ T8377] netlink: 36 bytes leftover after parsing attributes in process `syz.1.837'. [ 256.793483][ T8388] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.815496][ T8396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.844'. [ 257.824668][ T8396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.844'. [ 258.550281][ T8409] loop1: detected capacity change from 0 to 8 [ 260.509858][ T8425] loop4: detected capacity change from 0 to 512 [ 260.577395][ T8410] loop0: detected capacity change from 0 to 32768 [ 260.734793][ T8425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 260.766708][ T8425] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.797708][ T8431] find_entry called with index = 0 [ 260.803977][ T8431] read_mapping_page failed! [ 260.914597][ T8431] ERROR: (device loop0): txCommit: [ 260.914597][ T8431] [ 260.948131][ T8431] ERROR: (device loop0): diFree: numfree > numinos [ 260.948131][ T8431] [ 260.969324][ T8436] netlink: 36 bytes leftover after parsing attributes in process `syz.1.858'. [ 261.014912][ T8436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.858'. [ 261.023848][ T8436] netlink: 36 bytes leftover after parsing attributes in process `syz.1.858'. [ 261.071889][ T8436] netlink: 36 bytes leftover after parsing attributes in process `syz.1.858'. [ 261.081472][ T8404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.572363][ T8445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.862'. [ 262.609958][ T8445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.862'. [ 262.763504][ T8435] loop2: detected capacity change from 0 to 32768 [ 262.971387][ T8435] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 263.029854][ T8448] program syz.0.860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.122975][ T8435] XFS (loop2): Ending clean mount [ 263.165273][ T8435] XFS (loop2): Quotacheck needed: Please wait. [ 263.323271][ T8435] XFS (loop2): Quotacheck: Done. [ 263.536646][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 263.627565][ T5826] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 264.074532][ T8470] loop4: detected capacity change from 0 to 512 [ 264.123853][ T8470] ext4: Unknown parameter 'nouser_xattr' [ 264.613636][ T8481] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 264.797509][ T5889] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 265.696309][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 265.757790][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.778244][ T5889] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 266.084988][ T5889] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 266.095105][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.564335][ T5889] usb 1-1: Product: syz [ 266.581687][ T5889] usb 1-1: Manufacturer: syz [ 266.613449][ T5889] usb 1-1: SerialNumber: syz [ 266.625128][ T5889] usb 1-1: config 0 descriptor?? [ 266.943309][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.873'. [ 267.220113][ T8496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.868'. [ 267.229973][ T8496] tipc: Started in network mode [ 267.235739][ T8496] tipc: Node identity 7, cluster identity 1 [ 267.299167][ T8496] tipc: Node number set to 7 [ 267.378224][ T8497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.139128][ T8509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.878'. [ 268.173448][ T8509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.878'. [ 268.434871][ T8] usb 1-1: USB disconnect, device number 12 [ 269.413751][ T8531] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 269.873569][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'. [ 270.683898][ T8549] loop4: detected capacity change from 0 to 1024 [ 270.825342][ T8549] EXT4-fs: Ignoring removed nomblk_io_submit option [ 270.950410][ T8553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.893'. [ 270.975552][ T8549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.997136][ T8553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.893'. [ 271.784287][ T5889] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 271.984265][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 272.024711][ T5889] usb 6-1: config 0 interface 0 has no altsetting 0 [ 272.059308][ T5889] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 272.087507][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.115235][ T5889] usb 6-1: Product: syz [ 272.119467][ T5889] usb 6-1: Manufacturer: syz [ 272.133422][ T5889] usb 6-1: SerialNumber: syz [ 272.155606][ T5889] usb 6-1: config 0 descriptor?? [ 272.568364][ T8585] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 272.581566][ T5889] gs_usb 6-1:0.0: Couldn't get device config: (err=-32) [ 272.619494][ T5889] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -32 [ 272.755121][ T8587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.904'. [ 273.205304][ T8596] netlink: 36 bytes leftover after parsing attributes in process `syz.3.906'. [ 273.219470][ T8596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.906'. [ 273.232723][ T8596] netlink: 36 bytes leftover after parsing attributes in process `syz.3.906'. [ 273.248502][ T8596] netlink: 36 bytes leftover after parsing attributes in process `syz.3.906'. [ 274.334154][ T46] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 274.447748][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.910'. [ 274.534424][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 274.555084][ T46] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.579961][ T46] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.615763][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 274.622788][ T46] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 274.631458][ T971] usb 6-1: USB disconnect, device number 10 [ 274.637365][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.671187][ T46] usb 1-1: config 0 descriptor?? [ 274.795567][ T5909] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 274.808919][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.974388][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 274.990566][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 275.006981][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 275.022047][ T5909] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 275.031814][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.041556][ T5909] usb 4-1: Product: syz [ 275.050754][ T5909] usb 4-1: Manufacturer: syz [ 275.059838][ T5909] usb 4-1: SerialNumber: syz [ 275.098132][ T5909] usb 4-1: config 0 descriptor?? [ 275.143810][ T5909] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 275.155979][ T46] hid-corsair-void 0003:1B1C:1B25.0004: unknown main item tag 0x0 [ 275.184235][ T46] hid-corsair-void 0003:1B1C:1B25.0004: unknown main item tag 0x0 [ 275.192654][ T5909] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 275.201263][ T46] hid-corsair-void 0003:1B1C:1B25.0004: unknown main item tag 0x0 [ 275.209950][ T46] hid-corsair-void 0003:1B1C:1B25.0004: unknown main item tag 0x0 [ 275.218205][ T46] hid-corsair-void 0003:1B1C:1B25.0004: unknown main item tag 0x0 [ 275.232426][ T46] hid-corsair-void 0003:1B1C:1B25.0004: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.0-1/input0 [ 275.347125][ T5966] usb 1-1: USB disconnect, device number 13 [ 275.372619][ T5966] ------------[ cut here ]------------ [ 275.378462][ T5966] ODEBUG: free active (active state 0) object: ffff88807b557160 object type: work_struct hint: corsair_void_status_work_handler+0x0/0x190 [ 275.394992][ T46] hid-corsair-void 0003:1B1C:1B25.0004: failed to request battery (reason: -19) [ 275.425330][ T5966] WARNING: CPU: 1 PID: 5966 at lib/debugobjects.c:615 debug_print_object+0x17a/0x1f0 [ 275.435301][ T5966] Modules linked in: [ 275.439209][ T5966] CPU: 1 UID: 0 PID: 5966 Comm: kworker/1:7 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 275.449867][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 275.460055][ T5966] Workqueue: usb_hub_wq hub_event [ 275.465227][ T5966] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 275.471060][ T5966] Code: e8 0b b1 37 fd 4c 8b 0b 48 c7 c7 00 33 60 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 8b b7 91 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 a8 4d 2d 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 275.491724][ T5966] RSP: 0018:ffffc9000428eeb8 EFLAGS: 00010286 [ 275.498006][ T5966] RAX: fe7f628ab00d5200 RBX: ffffffff8c09bd00 RCX: 0000000000100000 [ 275.506048][ T5966] RDX: ffffc9001d1d3000 RSI: 000000000001029d RDI: 000000000001029e [ 275.514038][ T5966] RBP: ffffffff8c603480 R08: ffffffff81802a82 R09: fffffbfff1cfa5a4 [ 275.522101][ T5966] R10: dffffc0000000000 R11: fffffbfff1cfa5a4 R12: 0000000000000000 [ 275.530161][ T5966] R13: ffffffff8c603398 R14: dffffc0000000000 R15: ffff88807b557160 [ 275.538189][ T5966] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 275.547249][ T5966] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.553855][ T5966] CR2: 000000002021f000 CR3: 0000000032904000 CR4: 0000000000350ef0 [ 275.561884][ T5966] Call Trace: [ 275.565272][ T5966] [ 275.568257][ T5966] ? __warn+0x165/0x4d0 [ 275.572446][ T5966] ? debug_print_object+0x17a/0x1f0 [ 275.577727][ T5966] ? report_bug+0x2b3/0x500 [ 275.582280][ T5966] ? debug_print_object+0x17a/0x1f0 [ 275.588898][ T5966] ? handle_bug+0x60/0x90 [ 275.593320][ T5966] ? exc_invalid_op+0x1a/0x50 [ 275.598111][ T5966] ? asm_exc_invalid_op+0x1a/0x20 [ 275.603223][ T5966] ? __warn_printk+0x292/0x360 [ 275.608104][ T5966] ? debug_print_object+0x17a/0x1f0 [ 275.613374][ T5966] ? __pfx_corsair_void_status_work_handler+0x10/0x10 [ 275.620289][ T5966] ? __pfx_corsair_void_status_work_handler+0x10/0x10 [ 275.627273][ T5966] debug_check_no_obj_freed+0x45b/0x580 [ 275.632903][ T5966] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 275.639076][ T5966] ? kasan_quarantine_put+0xdc/0x230 [ 275.644484][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.650217][ T5966] ? devres_release_group+0x328/0x350 [ 275.655684][ T5966] ? devres_release_group+0x328/0x350 [ 275.661158][ T5966] kfree+0x115/0x430 [ 275.665128][ T5966] devres_release_group+0x328/0x350 [ 275.670417][ T5966] ? __pfx_devres_release_group+0x10/0x10 [ 275.676309][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.682091][ T5966] ? kernfs_put+0x315/0x370 [ 275.686668][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.693436][ T5966] ? sysfs_remove_group+0x242/0x2c0 [ 275.698726][ T5966] ? __pfx_corsair_void_remove+0x10/0x10 [ 275.704440][ T5966] hid_device_remove+0x250/0x370 [ 275.709429][ T5966] ? __pfx_hid_device_remove+0x10/0x10 [ 275.714981][ T5966] device_release_driver_internal+0x4ab/0x7c0 [ 275.721144][ T5966] bus_remove_device+0x34f/0x420 [ 275.726186][ T5966] device_del+0x57a/0x9b0 [ 275.730565][ T5966] ? __pfx_device_del+0x10/0x10 [ 275.735483][ T5966] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.741881][ T5966] hid_destroy_device+0x6a/0x1b0 [ 275.746923][ T5966] usbhid_disconnect+0x9e/0xc0 [ 275.751744][ T5966] usb_unbind_interface+0x25d/0x940 [ 275.757025][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.762717][ T5966] ? __pfx_usb_unbind_interface+0x10/0x10 [ 275.768567][ T5966] device_release_driver_internal+0x505/0x7c0 [ 275.774735][ T5966] bus_remove_device+0x34f/0x420 [ 275.779773][ T5966] device_del+0x57a/0x9b0 [ 275.784221][ T5966] ? kobject_put+0x272/0x480 [ 275.788909][ T5966] ? __pfx_device_del+0x10/0x10 [ 275.795289][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.801048][ T5966] ? kobject_put+0x44d/0x480 [ 275.805809][ T5966] usb_disable_device+0x3bf/0x850 [ 275.811165][ T5966] usb_disconnect+0x340/0x950 [ 275.815903][ T5966] hub_event+0x1ebc/0x5150 [ 275.820379][ T5966] ? debug_object_deactivate+0x2d5/0x390 [ 275.826149][ T5966] ? do_raw_spin_unlock+0x13c/0x8b0 [ 275.831378][ T5966] ? __pfx_hub_event+0x10/0x10 [ 275.836197][ T5966] ? __pfx_lock_acquire+0x10/0x10 [ 275.841250][ T5966] ? __entry_text_end+0xfe0c5/0x1020c9 [ 275.846876][ T5966] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 275.852883][ T5966] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.859329][ T5966] ? process_scheduled_works+0x976/0x1840 [ 275.865089][ T5966] process_scheduled_works+0xa68/0x1840 [ 275.870673][ T5966] ? __pfx_process_scheduled_works+0x10/0x10 [ 275.876699][ T5966] ? assign_work+0x364/0x3d0 [ 275.881302][ T5966] worker_thread+0x870/0xd30 [ 275.886001][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.891663][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.897791][ T5966] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 275.903693][ T5966] ? __kthread_parkme+0x169/0x1d0 [ 275.909200][ T5966] ? __pfx_worker_thread+0x10/0x10 [ 275.914436][ T5966] kthread+0x7ab/0x920 [ 275.918526][ T5966] ? __pfx_kthread+0x10/0x10 [ 275.923140][ T5966] ? __pfx_worker_thread+0x10/0x10 [ 275.928280][ T5966] ? __pfx_kthread+0x10/0x10 [ 275.932879][ T5966] ? __pfx_kthread+0x10/0x10 [ 275.937524][ T5966] ? __pfx_kthread+0x10/0x10 [ 275.942136][ T5966] ? _raw_spin_unlock_irq+0x23/0x50 [ 275.947570][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 275.953231][ T5966] ? lockdep_hardirqs_on+0x99/0x150 [ 275.958485][ T5966] ? __pfx_kthread+0x10/0x10 [ 275.963099][ T5966] ret_from_fork+0x4d/0x80 [ 275.967602][ T5966] ? __pfx_kthread+0x10/0x10 [ 275.972203][ T5966] ret_from_fork_asm+0x1a/0x30 [ 275.977037][ T5966] [ 275.980057][ T5966] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 275.987352][ T5966] CPU: 1 UID: 0 PID: 5966 Comm: kworker/1:7 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 275.997769][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 276.007857][ T5966] Workqueue: usb_hub_wq hub_event [ 276.012925][ T5966] Call Trace: [ 276.016208][ T5966] [ 276.019137][ T5966] dump_stack_lvl+0x241/0x360 [ 276.023865][ T5966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.029106][ T5966] ? __pfx__printk+0x10/0x10 [ 276.033720][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.039409][ T5966] ? vscnprintf+0x5d/0x90 [ 276.043764][ T5966] panic+0x349/0x880 [ 276.047685][ T5966] ? __warn+0x174/0x4d0 [ 276.051850][ T5966] ? __pfx_panic+0x10/0x10 [ 276.056288][ T5966] ? ret_from_fork_asm+0x1a/0x30 [ 276.061234][ T5966] __warn+0x344/0x4d0 [ 276.065225][ T5966] ? debug_print_object+0x17a/0x1f0 [ 276.070428][ T5966] report_bug+0x2b3/0x500 [ 276.074768][ T5966] ? debug_print_object+0x17a/0x1f0 [ 276.079993][ T5966] handle_bug+0x60/0x90 [ 276.084244][ T5966] exc_invalid_op+0x1a/0x50 [ 276.088755][ T5966] asm_exc_invalid_op+0x1a/0x20 [ 276.093635][ T5966] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 276.099447][ T5966] Code: e8 0b b1 37 fd 4c 8b 0b 48 c7 c7 00 33 60 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 8b b7 91 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 a8 4d 2d 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 276.119067][ T5966] RSP: 0018:ffffc9000428eeb8 EFLAGS: 00010286 [ 276.125146][ T5966] RAX: fe7f628ab00d5200 RBX: ffffffff8c09bd00 RCX: 0000000000100000 [ 276.133203][ T5966] RDX: ffffc9001d1d3000 RSI: 000000000001029d RDI: 000000000001029e [ 276.141180][ T5966] RBP: ffffffff8c603480 R08: ffffffff81802a82 R09: fffffbfff1cfa5a4 [ 276.149152][ T5966] R10: dffffc0000000000 R11: fffffbfff1cfa5a4 R12: 0000000000000000 [ 276.157127][ T5966] R13: ffffffff8c603398 R14: dffffc0000000000 R15: ffff88807b557160 [ 276.165109][ T5966] ? __warn_printk+0x292/0x360 [ 276.169893][ T5966] ? __pfx_corsair_void_status_work_handler+0x10/0x10 [ 276.176675][ T5966] ? __pfx_corsair_void_status_work_handler+0x10/0x10 [ 276.183481][ T5966] debug_check_no_obj_freed+0x45b/0x580 [ 276.189072][ T5966] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 276.195157][ T5966] ? kasan_quarantine_put+0xdc/0x230 [ 276.200455][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.206138][ T5966] ? devres_release_group+0x328/0x350 [ 276.211536][ T5966] ? devres_release_group+0x328/0x350 [ 276.216931][ T5966] kfree+0x115/0x430 [ 276.220852][ T5966] devres_release_group+0x328/0x350 [ 276.226086][ T5966] ? __pfx_devres_release_group+0x10/0x10 [ 276.231809][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.237458][ T5966] ? kernfs_put+0x315/0x370 [ 276.241966][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.247606][ T5966] ? sysfs_remove_group+0x242/0x2c0 [ 276.252814][ T5966] ? __pfx_corsair_void_remove+0x10/0x10 [ 276.258459][ T5966] hid_device_remove+0x250/0x370 [ 276.263510][ T5966] ? __pfx_hid_device_remove+0x10/0x10 [ 276.268977][ T5966] device_release_driver_internal+0x4ab/0x7c0 [ 276.275059][ T5966] bus_remove_device+0x34f/0x420 [ 276.280006][ T5966] device_del+0x57a/0x9b0 [ 276.284360][ T5966] ? __pfx_device_del+0x10/0x10 [ 276.289226][ T5966] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 276.295661][ T5966] hid_destroy_device+0x6a/0x1b0 [ 276.300624][ T5966] usbhid_disconnect+0x9e/0xc0 [ 276.305392][ T5966] usb_unbind_interface+0x25d/0x940 [ 276.310614][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.316262][ T5966] ? __pfx_usb_unbind_interface+0x10/0x10 [ 276.321981][ T5966] device_release_driver_internal+0x505/0x7c0 [ 276.328068][ T5966] bus_remove_device+0x34f/0x420 [ 276.333290][ T5966] device_del+0x57a/0x9b0 [ 276.337667][ T5966] ? kobject_put+0x272/0x480 [ 276.342265][ T5966] ? __pfx_device_del+0x10/0x10 [ 276.347127][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.352777][ T5966] ? kobject_put+0x44d/0x480 [ 276.357391][ T5966] usb_disable_device+0x3bf/0x850 [ 276.362444][ T5966] usb_disconnect+0x340/0x950 [ 276.367225][ T5966] hub_event+0x1ebc/0x5150 [ 276.371673][ T5966] ? debug_object_deactivate+0x2d5/0x390 [ 276.377320][ T5966] ? do_raw_spin_unlock+0x13c/0x8b0 [ 276.382536][ T5966] ? __pfx_hub_event+0x10/0x10 [ 276.387406][ T5966] ? __pfx_lock_acquire+0x10/0x10 [ 276.392444][ T5966] ? __entry_text_end+0xfe0c5/0x1020c9 [ 276.397913][ T5966] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 276.403908][ T5966] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 276.410277][ T5966] ? process_scheduled_works+0x976/0x1840 [ 276.416002][ T5966] process_scheduled_works+0xa68/0x1840 [ 276.421584][ T5966] ? __pfx_process_scheduled_works+0x10/0x10 [ 276.427591][ T5966] ? assign_work+0x364/0x3d0 [ 276.432193][ T5966] worker_thread+0x870/0xd30 [ 276.436788][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.442433][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.448083][ T5966] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 276.453985][ T5966] ? __kthread_parkme+0x169/0x1d0 [ 276.459113][ T5966] ? __pfx_worker_thread+0x10/0x10 [ 276.464234][ T5966] kthread+0x7ab/0x920 [ 276.468310][ T5966] ? __pfx_kthread+0x10/0x10 [ 276.472931][ T5966] ? __pfx_worker_thread+0x10/0x10 [ 276.478053][ T5966] ? __pfx_kthread+0x10/0x10 [ 276.482647][ T5966] ? __pfx_kthread+0x10/0x10 [ 276.487245][ T5966] ? __pfx_kthread+0x10/0x10 [ 276.491835][ T5966] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.497056][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.502697][ T5966] ? lockdep_hardirqs_on+0x99/0x150 [ 276.507921][ T5966] ? __pfx_kthread+0x10/0x10 [ 276.512611][ T5966] ret_from_fork+0x4d/0x80 [ 276.517039][ T5966] ? __pfx_kthread+0x10/0x10 [ 276.521718][ T5966] ret_from_fork_asm+0x1a/0x30 [ 276.526513][ T5966] [ 276.529852][ T5966] Kernel Offset: disabled [ 276.534287][ T5966] Rebooting in 86400 seconds..