last executing test programs: 10.392916891s ago: executing program 2 (id=189): read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x45ffffa, 0x281) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0xb, 0x7, 0x0, 0x1c, 0x5, 0x3, 0x4d, 0x2, 0xf9, 0x3, 0x80, 0x9, 0x8000000000000000}, {0x6, 0x80, 0x4, 0xc4, 0x4, 0x7, 0x6, 0x3, 0x7, 0xf9, 0x0, 0x7d}, {0xe2a5, 0xd, 0x1, 0x9, 0x2, 0xe, 0xd, 0x6, 0xff, 0x6, 0x56, 0x7}]}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) sync() 10.306951208s ago: executing program 1 (id=190): syz_usb_connect$hid(0x59c7271563034cba, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x55, &(0x7f0000000580)=@string={0x55, 0x3, "f34c2a690f9edebae6e528230fbc28a8648b019527eaa18106f93b2762db6c23ee51dd91b80c0423907b5013a6212e814d37637d351fcd98c90e4fdfaaf16079e116382e7c5d3d57b4e88f26024cfb18dce543"}}]}) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 8.916946519s ago: executing program 2 (id=192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040851}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000400)=ANY=[], 0x0) 8.537478699s ago: executing program 1 (id=194): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b09, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x3, "c2c48bc5"}, @local=@item_4={0x3, 0x2, 0xa, "c0e828b9"}, @global]}}, 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0200000004000000080000000162000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000001"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "2e20cb5922405d2b0ed7c8729548014700bdc1229e2d9a0b6002a38c4590b7b6", "70dd7d02e84babe45bd05d343a339dedd14c54f4d2f554799a09c7c256d6f061", "c50d2abf3165b9e7d620f0e3df116caeaa76d18e5e786a3a0cd313577dcdb7fb", "504fb8f6245be4989b5ebef3e7c2775f741959c7dd21cc4e1c8d657671b43cef", "93679acb84092946a1a81ee8d8afdf231fa01792631c12a2ba65e45bb2feccb3", "cbca73085d806a78916b08c1", 0x3, 0x81, 0x8, 0x81, 0x7}}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x2, 0x0, 0x0, 0x5, 0x2, 0x0, 0x80, 0x19, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x40000000000000, 0x2000000000}, 0x0, 0x6e6bb0}, [@replay_thresh={0x8}]}, 0xc0}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) io_setup(0x222, &(0x7f0000000180)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) 6.292050538s ago: executing program 1 (id=201): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000540)={0x0, 0xb3765c6765b39a42, 0x1, "d0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f00000004c0)={0x40, 0x16, 0x4, "310c17e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.89172975s ago: executing program 2 (id=203): socket$inet6_sctp(0xa, 0x801, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x80, 0x100, 0x2, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4000084) write$dsp(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) getsockopt(r9, 0x1, 0x9, 0x0, 0x0) connect$nfc_raw(r3, &(0x7f0000001080)={0x27, 0x0, 0x0, 0x6}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.028066449s ago: executing program 2 (id=208): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000002c0)=""/39, 0xffffffffffffff93, 0x142, 0x0, 0x0) 4.788979298s ago: executing program 0 (id=209): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000012c0)='./bus\x00', 0x21045e, &(0x7f0000001400), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) write$UHID_INPUT(r0, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0xc, r1}) 4.652628629s ago: executing program 0 (id=210): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b09, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x3, "c2c48bc5"}, @local=@item_4={0x3, 0x2, 0xa, "c0e828b9"}, @global]}}, 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0200000004000000080000000162000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000001"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "2e20cb5922405d2b0ed7c8729548014700bdc1229e2d9a0b6002a38c4590b7b6", "70dd7d02e84babe45bd05d343a339dedd14c54f4d2f554799a09c7c256d6f061", "c50d2abf3165b9e7d620f0e3df116caeaa76d18e5e786a3a0cd313577dcdb7fb", "504fb8f6245be4989b5ebef3e7c2775f741959c7dd21cc4e1c8d657671b43cef", "93679acb84092946a1a81ee8d8afdf231fa01792631c12a2ba65e45bb2feccb3", "cbca73085d806a78916b08c1", 0x3, 0x81, 0x8, 0x81, 0x7}}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x2, 0x0, 0x0, 0x5, 0x2, 0x0, 0x80, 0x19, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x40000000000000, 0x2000000000}, 0x0, 0x6e6bb0}, [@replay_thresh={0x8}]}, 0xc0}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) io_setup(0x222, &(0x7f0000000180)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) 4.060828866s ago: executing program 2 (id=211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040851}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000400)=ANY=[], 0x0) 3.173878437s ago: executing program 1 (id=212): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r0, 0x8201) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x280000, 0x0, 0x21, 0x0, &(0x7f0000000d40)) 3.034914208s ago: executing program 1 (id=213): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x1, "b2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x82, 0x2, "8325"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001400)={0x44, &(0x7f0000000fc0)={0x20, 0xa, 0x5, "8a22036e78"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.51145487s ago: executing program 0 (id=214): socket(0x2a, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) unshare(0x8000600) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB], 0x24, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r6 = dup3(r4, r5, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = accept4$netrom(r6, 0x0, &(0x7f0000000040), 0x800) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendto$netrom(r8, &(0x7f00000009c0)="c9fee80dfb51c8cd40dacf863116b452661331e3fd681e0671e228df2627657a04cdc6f2f326a4f8b7b2dd4084236f91e1cad9e6b8da388f0ced73e6e601a7394d409e50e924649a513e43ca130ce47a66f5e3e6b3c973dbacfac8ee82f266085e67f51705c026a2c8ad67d85ad1f13c4d9d54b4fb147ce2090457e8e401a064e91a5a4fed953d348144ed445007c25972d3de1195c1ddf4cbb9a96b7fbdc2db1b7319cc2e8a2188da9c", 0xaa, 0x44040, 0x0, 0x0) bind$802154_raw(r7, 0x0, 0x0) 1.819075525s ago: executing program 3 (id=215): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40", 0x36}], 0x1}, 0x0) 1.762387919s ago: executing program 3 (id=216): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r0, 0x0, 0x0, 0x1000000, 0x0, 0x10}]) 1.596173423s ago: executing program 3 (id=217): socket$inet6_sctp(0xa, 0x801, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x80, 0x100, 0x2, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4000084) write$dsp(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) getsockopt(r9, 0x1, 0x9, 0x0, 0x0) connect$nfc_raw(r3, &(0x7f0000001080)={0x27, 0x0, 0x0, 0x6}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.595436383s ago: executing program 0 (id=218): r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}, {0x0}], 0x2}, 0x80) 960.696163ms ago: executing program 0 (id=219): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000034000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000004008500000033"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x2, 0x5002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r3, &(0x7f0000000000), 0x0) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) syz_open_dev$usbfs(&(0x7f0000000100), 0xffff, 0x41) read$msr(r2, &(0x7f0000000300)=""/11, 0xb) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000540)={0xc}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000180000000000", @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, 0x0, 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r8, 0x0, 0x0}, 0x10) getrlimit(0xf, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="00003226d14f24d5680940db85662c17523a8880b80c868648ad72f274624dd3369ab36e3f7b42849346e3587f4f138c1c0b9abe82a36bfd1789b33d9f0912e62343eb5fcb809b963a621309973806ad4632ca6174a8f7997640f1a2", @ANYRES16=r7, @ANYBLOB="11072abd7000fcdbdf250500000008000300", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc048080}, 0x40000) 951.115034ms ago: executing program 2 (id=220): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB='\x000\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000540)={0x0, 0xb3765c6765b39a42, 0x1, "d0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f00000004c0)={0x40, 0x16, 0x4, "310c17e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 939.834585ms ago: executing program 3 (id=221): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknod$loop(0x0, 0x6000, 0x0) 428.399696ms ago: executing program 3 (id=222): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 250.57769ms ago: executing program 0 (id=223): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b09, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x3, "c2c48bc5"}, @local=@item_4={0x3, 0x2, 0xa, "c0e828b9"}, @global]}}, 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0200000004000000080000000162000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000001"], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "2e20cb5922405d2b0ed7c8729548014700bdc1229e2d9a0b6002a38c4590b7b6", "70dd7d02e84babe45bd05d343a339dedd14c54f4d2f554799a09c7c256d6f061", "c50d2abf3165b9e7d620f0e3df116caeaa76d18e5e786a3a0cd313577dcdb7fb", "504fb8f6245be4989b5ebef3e7c2775f741959c7dd21cc4e1c8d657671b43cef", "93679acb84092946a1a81ee8d8afdf231fa01792631c12a2ba65e45bb2feccb3", "cbca73085d806a78916b08c1", 0x3, 0x81, 0x8, 0x81, 0x7}}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x2, 0x0, 0x0, 0x5, 0x2, 0x0, 0x80, 0x19, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x40000000000000, 0x2000000000}, 0x0, 0x6e6bb0}, [@replay_thresh={0x8}]}, 0xc0}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) io_setup(0x222, &(0x7f0000000180)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) 42.673016ms ago: executing program 1 (id=224): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc40102030109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 0s ago: executing program 3 (id=225): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb3", 0x38}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. [ 62.984610][ T5779] cgroup: Unknown subsys name 'net' [ 63.114127][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.478677][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.487428][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.502603][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.511193][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.519375][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.527621][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.547528][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.555512][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.567550][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.571874][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.577092][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.582252][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.590057][ T5803] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.597122][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.604358][ T5803] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.612399][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.617957][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.631634][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.636871][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.671476][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.681291][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.688747][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.700321][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.720216][ T5803] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.728710][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.153136][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 67.210157][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 67.241137][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 67.324097][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 67.356886][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.364576][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.372161][ T5791] bridge_slave_0: entered allmulticast mode [ 67.379430][ T5791] bridge_slave_0: entered promiscuous mode [ 67.413775][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.421081][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.428373][ T5791] bridge_slave_1: entered allmulticast mode [ 67.435080][ T5791] bridge_slave_1: entered promiscuous mode [ 67.489652][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.497447][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.504608][ T5788] bridge_slave_0: entered allmulticast mode [ 67.512063][ T5788] bridge_slave_0: entered promiscuous mode [ 67.551777][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.559105][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.566277][ T5788] bridge_slave_1: entered allmulticast mode [ 67.573646][ T5788] bridge_slave_1: entered promiscuous mode [ 67.594459][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.603773][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.611761][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.619086][ T5792] bridge_slave_0: entered allmulticast mode [ 67.625755][ T5792] bridge_slave_0: entered promiscuous mode [ 67.633327][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.640739][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.648305][ T5792] bridge_slave_1: entered allmulticast mode [ 67.654998][ T5792] bridge_slave_1: entered promiscuous mode [ 67.684520][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.728458][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.741108][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.762344][ T5791] team0: Port device team_slave_0 added [ 67.783120][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.792558][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.799993][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.807230][ T5789] bridge_slave_0: entered allmulticast mode [ 67.813871][ T5789] bridge_slave_0: entered promiscuous mode [ 67.822753][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.829955][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.837284][ T5789] bridge_slave_1: entered allmulticast mode [ 67.844295][ T5789] bridge_slave_1: entered promiscuous mode [ 67.860882][ T5791] team0: Port device team_slave_1 added [ 67.880081][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.954933][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.968533][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.981528][ T5788] team0: Port device team_slave_0 added [ 67.988365][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.995328][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.022104][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.037463][ T5792] team0: Port device team_slave_0 added [ 68.056152][ T5788] team0: Port device team_slave_1 added [ 68.069821][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.077222][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.103237][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.122484][ T5792] team0: Port device team_slave_1 added [ 68.151088][ T5789] team0: Port device team_slave_0 added [ 68.181371][ T5789] team0: Port device team_slave_1 added [ 68.221892][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.229575][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.256376][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.270924][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.278113][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.304069][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.327411][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.334404][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.360722][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.373941][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.380957][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.406949][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.435130][ T5791] hsr_slave_0: entered promiscuous mode [ 68.441735][ T5791] hsr_slave_1: entered promiscuous mode [ 68.448914][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.455878][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.482507][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.499641][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.506671][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.532810][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.615169][ T5789] hsr_slave_0: entered promiscuous mode [ 68.622668][ T5789] hsr_slave_1: entered promiscuous mode [ 68.629071][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.638028][ T5789] Cannot create hsr debugfs directory [ 68.667586][ T5793] Bluetooth: hci0: command tx timeout [ 68.678084][ T5788] hsr_slave_0: entered promiscuous mode [ 68.684452][ T5788] hsr_slave_1: entered promiscuous mode [ 68.691137][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.698815][ T5788] Cannot create hsr debugfs directory [ 68.735770][ T5792] hsr_slave_0: entered promiscuous mode [ 68.742203][ T5792] hsr_slave_1: entered promiscuous mode [ 68.747994][ T5793] Bluetooth: hci2: command tx timeout [ 68.753664][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.761381][ T5793] Bluetooth: hci3: command tx timeout [ 68.761430][ T5803] Bluetooth: hci1: command tx timeout [ 68.767185][ T5792] Cannot create hsr debugfs directory [ 69.118049][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.133739][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.143613][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.153846][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.228222][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.249196][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.265565][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.279940][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.349496][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.384271][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.414692][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.440099][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.461573][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.476464][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.490262][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.500599][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.591165][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.636152][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.658589][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.665943][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.693556][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.700756][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.771175][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.806250][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.823736][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.843167][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.861169][ T1067] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.868326][ T1067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.898470][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.905618][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.919227][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.947762][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.958206][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.965372][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.004640][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.011797][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.025045][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.032177][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.062660][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.069818][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.215433][ T5792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.543499][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.600419][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.661399][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.681754][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.719160][ T5791] veth0_vlan: entered promiscuous mode [ 70.747253][ T5803] Bluetooth: hci0: command tx timeout [ 70.783209][ T5788] veth0_vlan: entered promiscuous mode [ 70.795897][ T5789] veth0_vlan: entered promiscuous mode [ 70.804472][ T5791] veth1_vlan: entered promiscuous mode [ 70.826148][ T5788] veth1_vlan: entered promiscuous mode [ 70.832195][ T5803] Bluetooth: hci3: command tx timeout [ 70.838349][ T5803] Bluetooth: hci2: command tx timeout [ 70.843789][ T5803] Bluetooth: hci1: command tx timeout [ 70.846407][ T5792] veth0_vlan: entered promiscuous mode [ 70.862996][ T5789] veth1_vlan: entered promiscuous mode [ 70.893851][ T5792] veth1_vlan: entered promiscuous mode [ 70.939829][ T5788] veth0_macvtap: entered promiscuous mode [ 70.949840][ T5789] veth0_macvtap: entered promiscuous mode [ 70.959513][ T5791] veth0_macvtap: entered promiscuous mode [ 70.967896][ T5789] veth1_macvtap: entered promiscuous mode [ 70.978850][ T5788] veth1_macvtap: entered promiscuous mode [ 71.000196][ T5791] veth1_macvtap: entered promiscuous mode [ 71.031952][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.048631][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.059926][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.074004][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.094268][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.104658][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.116010][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.126099][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.137341][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.149098][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.159836][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.170596][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.181853][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.197825][ T5792] veth0_macvtap: entered promiscuous mode [ 71.206508][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.217568][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.226279][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.235918][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.250027][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.261445][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.271623][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.282148][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.293611][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.304337][ T5792] veth1_macvtap: entered promiscuous mode [ 71.313788][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.322995][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.332151][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.344254][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.361854][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.370739][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.379980][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.393801][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.442112][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.453375][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.463513][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.475716][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.485727][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.496233][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.508341][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.518976][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.529571][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.540136][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.550696][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.560754][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.571332][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.582444][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.610067][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.620859][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.630048][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.640876][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.713998][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.726747][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.765174][ T1067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.773350][ T1067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.857801][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.876829][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.880351][ T3542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.900764][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.910552][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.915706][ T3542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.990740][ T3542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.019833][ T3542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.067913][ T3542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.081641][ T3542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.108785][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.128225][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.153897][ T5882] syz.1.2[5882]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 72.165672][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.174014][ T5882] loop1: detected capacity change from 0 to 764 [ 72.182011][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.259396][ T5882] Symlink component flag not implemented [ 72.265508][ T5882] Symlink component flag not implemented [ 72.310108][ T5882] Symlink component flag not implemented (129) [ 72.348684][ T5882] Symlink component flag not implemented (6) [ 72.399499][ T5882] rock: directory entry would overflow storage [ 72.405855][ T5882] rock: sig=0x4f50, size=4, remaining=3 [ 72.514932][ T5882] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 72.572084][ T5887] loop2: detected capacity change from 0 to 64 [ 72.645328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 72.654512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 72.663216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.767910][ T5891] Zero length message leads to an empty skb [ 72.850041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 72.872224][ T5799] Bluetooth: hci0: command tx timeout [ 72.952581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 72.992048][ T5799] Bluetooth: hci1: command tx timeout [ 72.999340][ T5799] Bluetooth: hci2: command tx timeout [ 73.005829][ T5799] Bluetooth: hci3: command tx timeout [ 73.124394][ T28] audit: type=1800 audit(1754369915.866:2): pid=5887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="bus" dev="loop2" ino=21 res=0 errno=0 [ 73.156793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.268616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.362024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.622499][ T5895] fuse: Bad value for 'user_id' [ 73.857079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.873954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.271973][ T5907] loop6: detected capacity change from 0 to 7 [ 74.377910][ T5907] Dev loop6: unable to read RDB block 7 [ 74.425180][ T5907] loop6: unable to read partition table [ 74.478883][ T5907] loop6: partition table beyond EOD, truncated [ 74.522197][ T5907] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 74.705879][ T5911] loop1: detected capacity change from 0 to 128 [ 74.737536][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.899364][ T5915] loop1: detected capacity change from 0 to 2048 [ 74.907364][ T23] usb 4-1: device descriptor read/64, error -71 [ 74.911186][ T5803] Bluetooth: hci0: command tx timeout [ 74.961507][ T5916] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.011049][ T5915] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 75.030396][ T5915] Remounting filesystem read-only [ 75.067291][ T5803] Bluetooth: hci3: command tx timeout [ 75.072763][ T5803] Bluetooth: hci2: command tx timeout [ 75.078334][ T5799] Bluetooth: hci1: command tx timeout [ 75.092132][ T5843] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.118034][ T5918] loop1: detected capacity change from 0 to 128 [ 75.125743][ T5918] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.139923][ T5918] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.188701][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.316179][ T5843] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 75.350998][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.367530][ T23] usb 4-1: device descriptor read/64, error -71 [ 75.381833][ T5843] usb 1-1: Product: syz [ 75.389925][ T5843] usb 1-1: Manufacturer: syz [ 75.394579][ T5843] usb 1-1: SerialNumber: syz [ 75.425093][ T5843] usb 1-1: config 0 descriptor?? [ 75.497367][ T23] usb usb4-port1: attempt power cycle [ 76.361269][ T2951] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.572792][ T5932] fuse: Bad value for 'user_id' [ 76.736771][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 77.238707][ T23] usb 4-1: device not accepting address 4, error -71 [ 77.655585][ T5843] usb 1-1: f81604_read: reg: 100e failed: -EPROTO [ 77.996293][ T5843] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 78.017556][ T5843] usb 1-1: USB disconnect, device number 2 [ 78.182318][ T5946] loop1: detected capacity change from 0 to 128 [ 78.189437][ T28] audit: type=1326 audit(1754369921.026:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5943 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612dd8eb69 code=0x7ffc0000 [ 78.207269][ T5948] loop6: detected capacity change from 0 to 7 [ 78.229861][ T5843] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 78.245556][ T28] audit: type=1326 audit(1754369921.026:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5943 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612dd8eb69 code=0x7ffc0000 [ 78.278819][ T5948] Dev loop6: unable to read RDB block 7 [ 78.297950][ T5948] loop6: unable to read partition table [ 78.302479][ T5457] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 78.304489][ T5948] loop6: partition table beyond EOD, truncated [ 78.348204][ T28] audit: type=1326 audit(1754369921.036:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5943 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f612dd8d4d0 code=0x7ffc0000 [ 78.348254][ T28] audit: type=1326 audit(1754369921.036:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5943 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f612dd8d4d0 code=0x7ffc0000 [ 78.348288][ T28] audit: type=1326 audit(1754369921.036:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5943 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612dd8eb69 code=0x7ffc0000 [ 78.348322][ T28] audit: type=1326 audit(1754369921.076:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5943 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f612dd8eb69 code=0x7ffc0000 [ 78.348354][ T28] audit: type=1326 audit(1754369921.076:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5943 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612dd8eb69 code=0x7ffc0000 [ 78.348387][ T28] audit: type=1326 audit(1754369921.076:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5943 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612dd8eb69 code=0x7ffc0000 [ 78.348420][ T28] audit: type=1326 audit(1754369921.076:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5943 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f612dd8eb69 code=0x7ffc0000 [ 78.348452][ T28] audit: type=1326 audit(1754369921.076:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5943 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612dd8eb69 code=0x7ffc0000 [ 78.358269][ T5843] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 78.365382][ T5948] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 78.715025][ T5954] Bluetooth: MGMT ver 1.22 [ 78.772388][ T5949] loop2: detected capacity change from 0 to 1764 [ 79.596964][ T5960] fuse: Bad value for 'user_id' [ 80.283236][ T5122] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.057835][ T5122] usb 2-1: device descriptor read/64, error -71 [ 81.163940][ T5972] capability: warning: `syz.3.32' uses 32-bit capabilities (legacy support in use) [ 81.336909][ T5122] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.407001][ T5978] loop0: detected capacity change from 0 to 128 [ 81.509673][ T5122] usb 2-1: device descriptor read/64, error -71 [ 81.649038][ T5122] usb usb2-port1: attempt power cycle [ 81.939714][ T5984] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 81.997360][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.998823][ T787] cfg80211: failed to load regulatory.db [ 82.176876][ T5122] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 82.181704][ T27] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 82.194415][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.223755][ T27] usb 1-1: Product: syz [ 82.229950][ T27] usb 1-1: Manufacturer: syz [ 82.235153][ T27] usb 1-1: SerialNumber: syz [ 82.235478][ T5122] usb 2-1: device descriptor read/8, error -71 [ 82.275956][ T27] usb 1-1: config 0 descriptor?? [ 82.608471][ T5122] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 82.655195][ T5122] usb 2-1: device descriptor read/8, error -71 [ 82.780190][ T5122] usb usb2-port1: unable to enumerate USB device [ 85.806773][ T27] usb 1-1: f81604_read: reg: 100e failed: -EPROTO [ 85.845891][ T27] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 85.866953][ T27] usb 1-1: USB disconnect, device number 3 [ 85.955125][ T27] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 85.995891][ T5457] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 86.234375][ T27] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 86.552904][ T5843] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 86.920033][ T6013] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 87.046866][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 87.084001][ T5843] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 87.094016][ T5843] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.104406][ T5843] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.160575][ T5843] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.176748][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.204716][ T5843] usb 2-1: Product: syz [ 87.215384][ T5843] usb 2-1: Manufacturer: syz [ 87.224373][ T5843] usb 2-1: SerialNumber: syz [ 87.305676][ T6025] loop2: detected capacity change from 0 to 2048 [ 87.347826][ T6025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.405685][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.496994][ T5859] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.674984][ T5843] usb 2-1: 0:2 : does not exist [ 87.680507][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 87.686166][ T5859] usb 1-1: no configurations [ 87.690915][ T5859] usb 1-1: can't read configurations, error -22 [ 87.736867][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.856920][ T5859] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 88.026743][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 88.033747][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 88.046785][ T8] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 88.055850][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.089551][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 88.181763][ T5859] usb 1-1: no configurations [ 88.269806][ T5859] usb 1-1: can't read configurations, error -22 [ 88.282181][ T5843] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 88.367129][ T5859] usb usb1-port1: attempt power cycle [ 88.661625][ T8] usb 3-1: config 0 descriptor?? [ 88.756056][ T5843] usb 2-1: USB disconnect, device number 6 [ 88.845319][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.946930][ T5859] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 89.099074][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 89.195357][ T5859] usb 1-1: no configurations [ 89.282943][ T5859] usb 1-1: can't read configurations, error -22 [ 90.311792][ T8] corsair 0003:1B1C:1B09.0001: unbalanced delimiter at end of report description [ 90.446904][ T5859] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 90.906001][ T5859] usb 1-1: device descriptor read/8, error -71 [ 91.121388][ T5859] usb usb1-port1: unable to enumerate USB device [ 92.530957][ T8] corsair 0003:1B1C:1B09.0001: parse failed [ 92.537111][ T8] corsair: probe of 0003:1B1C:1B09.0001 failed with error -22 [ 92.548419][ T8] usb 3-1: USB disconnect, device number 2 [ 94.311890][ T6057] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 94.402316][ T6059] syz.2.61[6059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.402451][ T6059] syz.2.61[6059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.963706][ T6068] fuse: Bad value for 'fd' [ 95.157422][ T5859] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.316749][ T5843] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 96.127491][ T6077] loop0: detected capacity change from 0 to 128 [ 97.208972][ T5843] usb 2-1: Using ep0 maxpacket: 8 [ 97.508286][ T5859] usb 3-1: Using ep0 maxpacket: 16 [ 98.852526][ T5859] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 99.152262][ T5843] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 99.160559][ T5859] usb 3-1: can't read configurations, error -71 [ 99.176224][ T5843] usb 2-1: can't read configurations, error -71 [ 99.874937][ T6092] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.988538][ T6098] fuse: Bad value for 'fd' [ 100.164839][ T6101] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 101.887182][ T787] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.066767][ T5122] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.096726][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 103.582043][ T787] usb 3-1: no configurations [ 104.336767][ T5122] usb 4-1: Using ep0 maxpacket: 8 [ 104.714666][ T787] usb 3-1: can't read configurations, error -22 [ 106.649873][ T5122] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 106.876964][ T5122] usb 4-1: can't read configurations, error -71 [ 106.922790][ T6137] loop2: detected capacity change from 0 to 256 [ 106.991727][ T6137] exfat: Deprecated parameter 'utf8' [ 107.021330][ T6143] loop1: detected capacity change from 0 to 128 [ 107.029280][ T6137] exfat: Deprecated parameter 'utf8' [ 107.104002][ T6137] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 108.259167][ T6152] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.558344][ T5122] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 109.567268][ T787] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 109.800444][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 109.875712][ T787] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.906437][ T5122] usb 4-1: Using ep0 maxpacket: 8 [ 109.990893][ T5122] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 110.017518][ T787] usb 3-1: config 0 has no interfaces? [ 110.150055][ T5122] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 110.159804][ T5122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.171332][ T787] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 110.194083][ T5122] usb 4-1: config 0 descriptor?? [ 110.209388][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.276733][ T787] usb 3-1: Product: syz [ 110.298694][ T787] usb 3-1: Manufacturer: syz [ 110.313613][ T787] usb 3-1: SerialNumber: syz [ 110.332162][ T787] usb 3-1: config 0 descriptor?? [ 110.730422][ T6166] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.740994][ T6166] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.917892][ T5122] corsair 0003:1B1C:1B09.0002: unbalanced delimiter at end of report description [ 110.947242][ T5122] corsair 0003:1B1C:1B09.0002: parse failed [ 110.954718][ T5122] corsair: probe of 0003:1B1C:1B09.0002 failed with error -22 [ 111.194552][ T6176] loop0: detected capacity change from 0 to 128 [ 111.395841][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 111.395853][ T28] audit: type=1326 audit(1754369954.226:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad7f8eb69 code=0x7ffc0000 [ 111.479351][ T28] audit: type=1326 audit(1754369954.266:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad7f8eb69 code=0x7ffc0000 [ 111.531591][ T28] audit: type=1326 audit(1754369954.266:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4ad7f8eb69 code=0x7ffc0000 [ 111.579383][ T28] audit: type=1326 audit(1754369954.266:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad7f8eb69 code=0x7ffc0000 [ 111.649457][ T28] audit: type=1326 audit(1754369954.266:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad7f8eb69 code=0x7ffc0000 [ 111.705340][ T28] audit: type=1326 audit(1754369954.266:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4ad7f8eb69 code=0x7ffc0000 [ 111.776058][ T28] audit: type=1326 audit(1754369954.266:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad7f8eb69 code=0x7ffc0000 [ 111.898298][ T28] audit: type=1326 audit(1754369954.266:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad7f8eb69 code=0x7ffc0000 [ 111.946906][ T28] audit: type=1326 audit(1754369954.266:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f4ad7f8eb69 code=0x7ffc0000 [ 112.135583][ T28] audit: type=1326 audit(1754369954.276:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad7f8eb69 code=0x7ffc0000 [ 112.514260][ T6166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.665358][ T6166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.693626][ T5122] usb 3-1: USB disconnect, device number 7 [ 112.765285][ T6193] fuse: Invalid rootmode [ 113.142903][ T6166] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.152105][ T6166] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.161101][ T6166] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.170042][ T6166] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.291628][ T5122] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 113.601195][ T5122] usb 3-1: Using ep0 maxpacket: 32 [ 113.837340][ T5859] usb 4-1: USB disconnect, device number 8 [ 113.838805][ T5122] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 113.852863][ T5122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.872261][ T5122] usb 3-1: config 0 descriptor?? [ 114.003984][ T6202] loop3: detected capacity change from 0 to 128 [ 114.186891][ T786] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 114.217547][ T5122] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 114.495267][ T5122] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.601206][ T5122] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 114.702864][ T5122] usb 3-1: media controller created [ 115.001931][ T5122] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.044184][ T786] usb 1-1: unable to get BOS descriptor or descriptor too short [ 115.062601][ T786] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 115.076894][ T786] usb 1-1: can't read configurations, error -71 [ 115.230252][ T5122] az6027: usb out operation failed. (-71) [ 115.238154][ T5122] az6027: usb out operation failed. (-71) [ 115.244824][ T5122] stb0899_attach: Driver disabled by Kconfig [ 115.251018][ T5122] az6027: no front-end attached [ 115.251018][ T5122] [ 115.260240][ T5122] az6027: usb out operation failed. (-71) [ 115.296353][ T5122] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 115.661628][ T5122] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 115.810555][ T5122] dvb-usb: schedule remote query interval to 400 msecs. [ 115.822597][ T5122] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 115.842891][ T5122] usb 3-1: USB disconnect, device number 8 [ 115.926884][ T5859] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 115.934543][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 115.938677][ T5122] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 115.980021][ T6218] fuse: Invalid rootmode [ 116.033917][ T6220] loop6: detected capacity change from 0 to 7 [ 116.042249][ T6220] Dev loop6: unable to read RDB block 7 [ 116.048256][ T6220] loop6: unable to read partition table [ 116.054156][ T6220] loop6: partition table beyond EOD, truncated [ 116.062032][ T6220] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 116.136830][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 116.145180][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 116.158664][ T27] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 116.168691][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.180977][ T27] usb 2-1: config 0 descriptor?? [ 116.186217][ T5859] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 116.195517][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.204056][ T5859] usb 4-1: Product: syz [ 116.211993][ T5859] usb 4-1: Manufacturer: syz [ 116.228551][ T5859] usb 4-1: SerialNumber: syz [ 116.241116][ T5859] usb 4-1: config 0 descriptor?? [ 116.631830][ T27] corsair 0003:1B1C:1B09.0003: unbalanced delimiter at end of report description [ 116.653277][ T27] corsair 0003:1B1C:1B09.0003: parse failed [ 116.660081][ T27] corsair: probe of 0003:1B1C:1B09.0003 failed with error -22 [ 116.682108][ T6224] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 116.692671][ T786] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 117.661428][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 117.677258][ T786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.705593][ T786] usb 1-1: config 0 has no interfaces? [ 117.728086][ T786] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 117.763027][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.821483][ T786] usb 1-1: Product: syz [ 117.843765][ T786] usb 1-1: Manufacturer: syz [ 118.186885][ T5859] usb 4-1: f81604_read: reg: 100e failed: -EPROTO [ 118.702386][ T786] usb 1-1: SerialNumber: syz [ 118.717728][ T786] usb 1-1: config 0 descriptor?? [ 118.756673][ T5859] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 118.806346][ T5859] usb 4-1: USB disconnect, device number 9 [ 118.829759][ T5859] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 118.889333][ T5457] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 118.909985][ T5859] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 118.924912][ T6241] loop2: detected capacity change from 0 to 128 [ 119.066183][ T8] usb 2-1: USB disconnect, device number 9 [ 119.358089][ T6247] fuse: Invalid rootmode [ 120.576220][ T8] usb 1-1: USB disconnect, device number 9 [ 120.647171][ T6257] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 122.226931][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 122.390332][ T6281] fuse: Bad value for 'rootmode' [ 122.510509][ T8] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 122.577421][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.605420][ T8] usb 1-1: Product: syz [ 122.662010][ T8] usb 1-1: Manufacturer: syz [ 122.709359][ T8] usb 1-1: SerialNumber: syz [ 122.760536][ T5122] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 122.811550][ T8] usb 1-1: config 0 descriptor?? [ 123.030668][ T5122] usb 3-1: Using ep0 maxpacket: 8 [ 123.110555][ T5122] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 123.143116][ T5122] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 123.159767][ T5122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.267929][ T5122] usb 3-1: config 0 descriptor?? [ 124.587348][ T5122] corsair 0003:1B1C:1B09.0004: unbalanced delimiter at end of report description [ 124.620128][ T8] usb 1-1: f81604_read: reg: 100e failed: -EPROTO [ 124.789329][ T5122] corsair 0003:1B1C:1B09.0004: parse failed [ 125.064395][ T5122] corsair: probe of 0003:1B1C:1B09.0004 failed with error -22 [ 125.116922][ T8] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 125.539340][ T8] usb 1-1: USB disconnect, device number 10 [ 125.615694][ T8] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 125.678516][ T5457] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 125.781119][ T8] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 126.308159][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 126.732418][ T5830] usb 3-1: USB disconnect, device number 9 [ 126.806401][ T6308] loop1: detected capacity change from 0 to 2048 [ 126.836869][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 126.865036][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.896342][ T6308] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.912146][ T8] usb 1-1: config 0 has no interfaces? [ 126.931247][ T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 126.960441][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.993519][ T8] usb 1-1: Product: syz [ 127.006269][ T8] usb 1-1: Manufacturer: syz [ 127.036861][ T8] usb 1-1: SerialNumber: syz [ 127.083825][ T8] usb 1-1: config 0 descriptor?? [ 127.137889][ T6317] fuse: Bad value for 'rootmode' [ 127.797633][ T27] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 128.095994][ T27] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 128.115654][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.125460][ T27] usb 3-1: Product: syz [ 128.142476][ T27] usb 3-1: Manufacturer: syz [ 128.142853][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 128.147858][ T27] usb 3-1: SerialNumber: syz [ 128.208668][ T27] usb 3-1: config 0 descriptor?? [ 128.395121][ T6335] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 128.537139][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 128.580603][ T8] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 128.674270][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.739467][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.767393][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.790709][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.831380][ T5830] usb 1-1: USB disconnect, device number 11 [ 128.838776][ T8] usb 4-1: Product: syz [ 128.866760][ T8] usb 4-1: Manufacturer: syz [ 128.871469][ T8] usb 4-1: SerialNumber: syz [ 129.295150][ T5830] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 129.364022][ T8] usb 4-1: 0:2 : does not exist [ 129.607453][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 129.628102][ T5830] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 129.666979][ T5830] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 129.702602][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.725608][ T5830] usb 1-1: config 0 descriptor?? [ 129.751277][ T27] usb 3-1: f81604_read: reg: 100e failed: -EPROTO [ 129.798039][ T27] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 129.980764][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 130.163379][ T8] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 130.862364][ T5830] corsair 0003:1B1C:1B09.0005: unbalanced delimiter at end of report description [ 131.087451][ T5830] corsair 0003:1B1C:1B09.0005: parse failed [ 131.180726][ T27] usb 3-1: USB disconnect, device number 10 [ 131.254557][ T5830] corsair: probe of 0003:1B1C:1B09.0005 failed with error -22 [ 131.491783][ T8] usb 4-1: USB disconnect, device number 10 [ 131.649445][ T27] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 131.672843][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.753817][ T6362] loop2: detected capacity change from 0 to 1024 [ 131.776902][ T6362] hfsplus: session requires an argument [ 131.790380][ T6362] hfsplus: unable to parse mount options [ 131.806140][ T6362] process 'syz.2.151' launched './file0' with NULL argv: empty string added [ 131.830844][ T27] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 131.853282][ T6366] fuse: Bad value for 'rootmode' [ 133.164034][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.238657][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.250314][ T5830] usb 1-1: USB disconnect, device number 12 [ 133.794813][ T6375] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 133.967368][ T27] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 134.399695][ T27] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.535491][ T27] usb 4-1: config 0 has no interface number 0 [ 134.643360][ T27] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 134.652967][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.661731][ T27] usb 4-1: Product: syz [ 134.665952][ T27] usb 4-1: Manufacturer: syz [ 134.672067][ T27] usb 4-1: SerialNumber: syz [ 134.679399][ T27] usb 4-1: config 0 descriptor?? [ 134.747526][ T5830] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 134.943044][ T5830] usb 1-1: Using ep0 maxpacket: 16 [ 134.966788][ T5843] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 134.976068][ T5830] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 135.000682][ T5830] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.036189][ T5830] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.110673][ T5830] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.142796][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.174340][ T5830] usb 1-1: Product: syz [ 135.189987][ T5830] usb 1-1: Manufacturer: syz [ 135.205296][ T5830] usb 1-1: SerialNumber: syz [ 135.412269][ T27] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 135.656820][ T27] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 135.667585][ T27] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 135.675674][ T27] usb 4-1: media controller created [ 135.698523][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.752831][ T27] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 135.756988][ T6398] fuse: Unknown parameter 'use00000000000000000000' [ 135.779870][ T5830] usb 1-1: 0:2 : does not exist [ 135.840931][ T27] usb 4-1: USB disconnect, device number 11 [ 135.869600][ T5843] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 135.878939][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.893003][ T5843] usb 2-1: Product: syz [ 135.909820][ T5843] usb 2-1: Manufacturer: syz [ 135.923396][ T5843] usb 2-1: SerialNumber: syz [ 135.941403][ T5843] usb 2-1: config 0 descriptor?? [ 136.057870][ T6406] loop2: detected capacity change from 0 to 256 [ 136.091768][ T6406] FAT-fs (loop2): Directory bread(block 1285) failed [ 136.122812][ T6406] FAT-fs (loop2): Directory bread(block 1285) failed [ 136.131765][ T6406] FAT-fs (loop2): Directory bread(block 1285) failed [ 136.162908][ T6406] FAT-fs (loop2): Directory bread(block 1285) failed [ 136.170408][ T6406] FAT-fs (loop2): Directory bread(block 1285) failed [ 136.181595][ T6406] FAT-fs (loop2): Directory bread(block 1285) failed [ 136.190807][ T6406] FAT-fs (loop2): Directory bread(block 1285) failed [ 136.197813][ T6406] FAT-fs (loop2): Directory bread(block 1285) failed [ 136.204662][ T6406] FAT-fs (loop2): Directory bread(block 1285) failed [ 136.213296][ T6406] FAT-fs (loop2): Directory bread(block 1285) failed [ 136.685557][ T5843] usb 2-1: f81604_read: reg: 105 failed: -EPIPE [ 136.737092][ T5843] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 136.812055][ T5843] f81604: probe of 2-1:0.0 failed with error -32 [ 137.056692][ T5830] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 137.122027][ T5830] usb 1-1: USB disconnect, device number 13 [ 137.215194][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.435930][ T5830] usb 2-1: USB disconnect, device number 10 [ 138.704964][ T6429] fuse: Unknown parameter 'use00000000000000000000' [ 139.507656][ T28] audit: type=1326 audit(1754369982.346:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad178eb69 code=0x7ffc0000 [ 139.566117][ T28] audit: type=1326 audit(1754369982.346:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad178eb69 code=0x7ffc0000 [ 139.629403][ T28] audit: type=1326 audit(1754369982.366:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fbad178eb69 code=0x7ffc0000 [ 139.652799][ T28] audit: type=1326 audit(1754369982.366:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad178eb69 code=0x7ffc0000 [ 139.677378][ T28] audit: type=1326 audit(1754369982.366:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad178eb69 code=0x7ffc0000 [ 139.701338][ T5843] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 139.760704][ T6444] loop1: detected capacity change from 0 to 64 [ 139.837613][ T6444] Trying to free block not in datazone [ 139.854401][ T6444] Trying to free block not in datazone [ 139.871527][ T6444] Trying to free block not in datazone [ 139.897223][ T5843] usb 1-1: Using ep0 maxpacket: 16 [ 139.908213][ T5843] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 139.917138][ T5843] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.936204][ T5843] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.973590][ T5843] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.998684][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.026927][ T5843] usb 1-1: Product: syz [ 140.031155][ T5843] usb 1-1: Manufacturer: syz [ 140.053898][ T5843] usb 1-1: SerialNumber: syz [ 140.477113][ T5859] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 140.539877][ T5843] usb 1-1: 0:2 : does not exist [ 140.919638][ T5859] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 140.936786][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.946465][ T5859] usb 4-1: Product: syz [ 140.951910][ T5859] usb 4-1: Manufacturer: syz [ 140.963480][ T5859] usb 4-1: SerialNumber: syz [ 140.972113][ T6452] fuse: Unknown parameter 'use00000000000000000000' [ 140.980681][ T5859] usb 4-1: config 0 descriptor?? [ 141.266829][ T5843] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 141.433089][ T6459] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 141.483086][ T5843] usb 1-1: USB disconnect, device number 14 [ 141.659497][ T5859] usb 4-1: f81604_read: reg: 105 failed: -EPIPE [ 141.680560][ T5859] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 141.689927][ T5859] f81604: probe of 4-1:0.0 failed with error -32 [ 141.904332][ T6215] udevd[6215]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.614558][ T5122] usb 4-1: USB disconnect, device number 12 [ 144.124297][ T6478] fuse: Unknown parameter 'user_i00000000000000000000' [ 144.458608][ T786] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 144.478375][ T5859] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 144.566780][ T5122] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 144.619515][ T786] usb 3-1: device descriptor read/64, error -71 [ 144.666943][ T5859] usb 2-1: Using ep0 maxpacket: 8 [ 144.673566][ T5859] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 144.686497][ T5859] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 144.695607][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.706124][ T5859] usb 2-1: config 0 descriptor?? [ 144.746876][ T5122] usb 4-1: Using ep0 maxpacket: 16 [ 144.756476][ T5122] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 144.769287][ T5122] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.779530][ T5122] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.791159][ T5122] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.802553][ T5122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.810714][ T5122] usb 4-1: Product: syz [ 144.814896][ T5122] usb 4-1: Manufacturer: syz [ 144.821151][ T5122] usb 4-1: SerialNumber: syz [ 144.896890][ T786] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 145.056829][ T786] usb 3-1: device descriptor read/64, error -71 [ 145.122806][ T5859] corsair 0003:1B1C:1B09.0006: unbalanced delimiter at end of report description [ 145.133958][ T5859] corsair 0003:1B1C:1B09.0006: parse failed [ 145.140475][ T5859] corsair: probe of 0003:1B1C:1B09.0006 failed with error -22 [ 145.176963][ T786] usb usb3-port1: attempt power cycle [ 145.236519][ T5122] usb 4-1: 0:2 : does not exist [ 145.563053][ T5859] usb 2-1: USB disconnect, device number 11 [ 145.596980][ T786] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 145.673147][ T786] usb 3-1: device descriptor read/8, error -71 [ 145.972085][ T786] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 146.049518][ T786] usb 3-1: device descriptor read/8, error -71 [ 146.159806][ T5122] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 146.218123][ T786] usb usb3-port1: unable to enumerate USB device [ 146.277623][ T5122] usb 4-1: USB disconnect, device number 13 [ 146.526737][ T786] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 146.702851][ T6505] fuse: Unknown parameter 'user_i00000000000000000000' [ 146.778130][ T786] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 146.796448][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.805068][ T786] usb 2-1: Product: syz [ 146.818344][ T786] usb 2-1: Manufacturer: syz [ 146.823244][ T786] usb 2-1: SerialNumber: syz [ 146.856246][ T786] usb 2-1: config 0 descriptor?? [ 147.354798][ T6508] loop0: detected capacity change from 0 to 256 [ 147.362412][ T6508] ======================================================= [ 147.362412][ T6508] WARNING: The mand mount option has been deprecated and [ 147.362412][ T6508] and is ignored by this kernel. Remove the mand [ 147.362412][ T6508] option from the mount to silence this warning. [ 147.362412][ T6508] ======================================================= [ 147.492108][ T6508] FAT-fs (loop0): Directory bread(block 64) failed [ 147.523540][ T6508] FAT-fs (loop0): Directory bread(block 65) failed [ 147.535760][ T6508] FAT-fs (loop0): Directory bread(block 66) failed [ 147.552711][ T6508] FAT-fs (loop0): Directory bread(block 67) failed [ 147.565414][ T6508] FAT-fs (loop0): Directory bread(block 68) failed [ 147.578134][ T6508] FAT-fs (loop0): Directory bread(block 69) failed [ 147.584804][ T6508] FAT-fs (loop0): Directory bread(block 70) failed [ 147.592044][ T6508] FAT-fs (loop0): Directory bread(block 71) failed [ 147.599016][ T6508] FAT-fs (loop0): Directory bread(block 72) failed [ 147.606311][ T6508] FAT-fs (loop0): Directory bread(block 73) failed [ 147.625293][ T786] usb 2-1: f81604_read: reg: 105 failed: -EPIPE [ 147.633319][ T786] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 147.654257][ T786] f81604: probe of 2-1:0.0 failed with error -32 [ 147.727431][ T6518] loop0: detected capacity change from 0 to 512 [ 147.761032][ T6518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.779357][ T6518] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.828028][ T5859] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 147.862994][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.016746][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 148.024168][ T5859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.034921][ T5859] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 148.046398][ T5859] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 148.055528][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.063656][ T5859] usb 4-1: Product: syz [ 148.067911][ T5859] usb 4-1: Manufacturer: syz [ 148.072532][ T5859] usb 4-1: SerialNumber: syz [ 148.079365][ T5859] usb 4-1: config 0 descriptor?? [ 148.197013][ T786] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 148.386747][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 148.394083][ T786] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 148.416787][ T786] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 148.426272][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.438952][ T786] usb 1-1: config 0 descriptor?? [ 148.907332][ T5122] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 148.994692][ T786] corsair 0003:1B1C:1B09.0007: unbalanced delimiter at end of report description [ 149.009881][ T786] corsair 0003:1B1C:1B09.0007: parse failed [ 149.016553][ T786] corsair: probe of 0003:1B1C:1B09.0007 failed with error -22 [ 149.126749][ T5122] usb 3-1: device descriptor read/64, error -71 [ 149.315176][ T8] usb 2-1: USB disconnect, device number 12 [ 149.358415][ T9] usb 1-1: USB disconnect, device number 15 [ 149.390272][ T6532] loop1: detected capacity change from 0 to 128 [ 149.406840][ T5122] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 149.566831][ T5122] usb 3-1: device descriptor read/64, error -71 [ 149.686971][ T5122] usb usb3-port1: attempt power cycle [ 149.886819][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 150.129913][ T5122] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 150.560014][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 150.576386][ T8] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 150.597111][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.597954][ T5122] usb 3-1: device descriptor read/8, error -71 [ 150.614726][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.633584][ T5830] usb 4-1: USB disconnect, device number 14 [ 150.643257][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.654701][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.665769][ T8] usb 2-1: Product: syz [ 150.690528][ T8] usb 2-1: Manufacturer: syz [ 150.702278][ T8] usb 2-1: SerialNumber: syz [ 150.917267][ T5122] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 151.179313][ T5122] usb 3-1: device descriptor read/8, error -71 [ 151.214599][ T8] usb 2-1: 0:2 : does not exist [ 151.387621][ T5122] usb usb3-port1: unable to enumerate USB device [ 151.844331][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 151.907089][ T786] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 151.969357][ T8] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 152.159013][ T786] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 152.168533][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.176915][ T786] usb 3-1: Product: syz [ 152.196829][ T786] usb 3-1: Manufacturer: syz [ 152.197392][ T8] usb 2-1: USB disconnect, device number 13 [ 152.201461][ T786] usb 3-1: SerialNumber: syz [ 152.210291][ T6559] loop3: detected capacity change from 0 to 512 [ 152.249192][ T786] usb 3-1: config 0 descriptor?? [ 152.267750][ T6559] EXT4-fs: Ignoring removed i_version option [ 152.272530][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.291414][ T6559] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 152.318168][ T6559] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 152.371758][ T6559] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 152.392815][ T6559] EXT4-fs (loop3): 1 truncate cleaned up [ 152.400319][ T6559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.512420][ T5792] EXT4-fs warning (device loop3): ext4_xattr_inode_create:1486: refuse to create EA inode when umounting [ 152.531258][ T5792] ------------[ cut here ]------------ [ 152.537222][ T5792] WARNING: CPU: 1 PID: 5792 at fs/ext4/xattr.c:1487 ext4_xattr_inode_lookup_create+0x5be/0x1d80 [ 152.548281][ T5792] Modules linked in: [ 152.552234][ T5792] CPU: 1 PID: 5792 Comm: syz-executor Not tainted 6.6.101-syzkaller #0 [ 152.560864][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.571513][ T5792] RIP: 0010:ext4_xattr_inode_lookup_create+0x5be/0x1d80 [ 152.579085][ T5792] Code: 4c 8b 7c 24 10 e9 12 0a 00 00 e8 bd e9 43 ff 48 89 df 48 c7 c6 82 eb 5b 8c ba ce 05 00 00 48 c7 c1 60 d0 be 8a e8 52 56 fc ff <0f> 0b 49 c7 c6 ea ff ff ff 48 8b 5c 24 08 e9 fe 09 00 00 48 8d 78 [ 152.599167][ T5792] RSP: 0018:ffffc900044df3e0 EFLAGS: 00010246 [ 152.605741][ T5792] RAX: 2cc7968ff4ce8900 RBX: ffff88802685e000 RCX: 2cc7968ff4ce8900 [ 152.613820][ T5792] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 152.622247][ T5792] RBP: ffffc900044df5b0 R08: ffffc900044defa7 R09: 1ffff9200089bdf4 [ 152.630433][ T5792] R10: dffffc0000000000 R11: fffff5200089bdf5 R12: ffff88805ac78ce8 [ 152.638519][ T5792] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805ac78cb0 [ 152.646555][ T5792] FS: 000055557c47e500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 152.655593][ T5792] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.662235][ T5792] CR2: 00007f5c87fec000 CR3: 000000006183a000 CR4: 00000000003506e0 [ 152.670468][ T5792] Call Trace: [ 152.673807][ T5792] [ 152.676849][ T5792] ? mark_lock+0x94/0x320 [ 152.681254][ T5792] ? ext4_xattr_ibody_set+0x6a0/0x6a0 [ 152.686807][ T5792] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 152.692930][ T5792] ? ext4_xattr_block_set+0xd6/0x32a0 [ 152.698381][ T5792] ext4_xattr_block_set+0x23e/0x32a0 [ 152.703701][ T5792] ? write_boundary_block+0xb0/0xb0 [ 152.708978][ T5792] ? __might_sleep+0xe0/0xe0 [ 152.713618][ T5792] ? __getblk_gfp+0x54/0x660 [ 152.718290][ T5792] ? ext4_xattr_block_find+0x350/0x350 [ 152.724147][ T5792] ? ext4_xattr_block_find+0x2d4/0x350 [ 152.729782][ T5792] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 152.735743][ T5792] __ext4_expand_extra_isize+0x306/0x400 [ 152.741520][ T5792] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 152.747184][ T5792] ext4_dirty_inode+0xcb/0x110 [ 152.751969][ T5792] ? __ext4_expand_extra_isize+0x400/0x400 [ 152.757866][ T5792] __mark_inode_dirty+0x2b4/0xc80 [ 152.763001][ T5792] iput+0x1cc/0x920 [ 152.766959][ T5792] __dentry_kill+0x431/0x650 [ 152.771573][ T5792] shrink_dentry_list+0x39f/0x6a0 [ 152.776719][ T5792] shrink_dcache_parent+0xac/0x3c0 [ 152.781947][ T5792] ? write_sequnlock+0x30/0x30 [ 152.786797][ T5792] ? down_read_trylock+0x1d6/0x370 [ 152.791939][ T5792] ? __init_rwsem+0x160/0x160 [ 152.796671][ T5792] do_one_tree+0x23/0xe0 [ 152.800956][ T5792] shrink_dcache_for_umount+0x69/0x110 [ 152.806421][ T5792] generic_shutdown_super+0x67/0x2b0 [ 152.806816][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 152.811786][ T5792] kill_block_super+0x44/0x90 [ 152.824755][ T5792] ext4_kill_sb+0x68/0xa0 [ 152.829225][ T5792] deactivate_locked_super+0x97/0x100 [ 152.834624][ T5792] cleanup_mnt+0x429/0x4c0 [ 152.839100][ T5792] task_work_run+0x1ce/0x250 [ 152.843700][ T5792] ? task_work_cancel+0x240/0x240 [ 152.848825][ T5792] ? exit_to_user_mode_loop+0x3b/0x110 [ 152.854314][ T5792] exit_to_user_mode_loop+0xe6/0x110 [ 152.859671][ T5792] exit_to_user_mode_prepare+0xb1/0x140 [ 152.865235][ T5792] syscall_exit_to_user_mode+0x1a/0x50 [ 152.870750][ T5792] do_syscall_64+0x61/0xb0 [ 152.875180][ T5792] ? clear_bhb_loop+0x40/0x90 [ 152.879947][ T5792] ? clear_bhb_loop+0x40/0x90 [ 152.884640][ T5792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.890598][ T5792] RIP: 0033:0x7fc78578fe97 [ 152.895034][ T5792] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 152.914816][ T5792] RSP: 002b:00007ffcba15ea38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 152.923299][ T5792] RAX: 0000000000000000 RBX: 00007fc785811bdd RCX: 00007fc78578fe97 [ 152.932073][ T5792] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcba15eaf0 [ 152.940233][ T5792] RBP: 00007ffcba15eaf0 R08: 0000000000000000 R09: 0000000000000000 [ 152.948318][ T5792] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcba15fb80 [ 152.956308][ T5792] R13: 00007fc785811bdd R14: 0000000000025387 R15: 00007ffcba15fbc0 [ 152.964529][ T5792] [ 152.967617][ T5792] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 152.974904][ T5792] CPU: 1 PID: 5792 Comm: syz-executor Not tainted 6.6.101-syzkaller #0 [ 152.983481][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.993551][ T5792] Call Trace: [ 152.996835][ T5792] [ 152.999765][ T5792] dump_stack_lvl+0x16c/0x230 [ 153.004446][ T5792] ? show_regs_print_info+0x20/0x20 [ 153.006953][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 153.012256][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 153.014390][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 153.014422][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.014439][ T8] usb 2-1: Product: syz [ 153.014450][ T8] usb 2-1: Manufacturer: syz [ 153.014462][ T8] usb 2-1: SerialNumber: syz [ 153.028083][ T8] usb 2-1: config 0 descriptor?? [ 153.058799][ T5792] ? load_image+0x3b0/0x3b0 [ 153.063322][ T5792] panic+0x2c0/0x710 [ 153.067270][ T5792] ? bpf_jit_dump+0xd0/0xd0 [ 153.071790][ T5792] __warn+0x2e0/0x470 [ 153.076122][ T5792] ? ext4_xattr_inode_lookup_create+0x5be/0x1d80 [ 153.082466][ T5792] ? ext4_xattr_inode_lookup_create+0x5be/0x1d80 [ 153.088804][ T5792] report_bug+0x2be/0x4f0 [ 153.093220][ T5792] ? ext4_xattr_inode_lookup_create+0x5be/0x1d80 [ 153.099545][ T5792] ? ext4_xattr_inode_lookup_create+0x5be/0x1d80 [ 153.105866][ T5792] ? ext4_xattr_inode_lookup_create+0x5c0/0x1d80 [ 153.112186][ T5792] handle_bug+0xcf/0x120 [ 153.116435][ T5792] exc_invalid_op+0x1a/0x50 [ 153.120953][ T5792] asm_exc_invalid_op+0x1a/0x20 [ 153.125813][ T5792] RIP: 0010:ext4_xattr_inode_lookup_create+0x5be/0x1d80 [ 153.132752][ T5792] Code: 4c 8b 7c 24 10 e9 12 0a 00 00 e8 bd e9 43 ff 48 89 df 48 c7 c6 82 eb 5b 8c ba ce 05 00 00 48 c7 c1 60 d0 be 8a e8 52 56 fc ff <0f> 0b 49 c7 c6 ea ff ff ff 48 8b 5c 24 08 e9 fe 09 00 00 48 8d 78 [ 153.152363][ T5792] RSP: 0018:ffffc900044df3e0 EFLAGS: 00010246 [ 153.158426][ T5792] RAX: 2cc7968ff4ce8900 RBX: ffff88802685e000 RCX: 2cc7968ff4ce8900 [ 153.166390][ T5792] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 153.174351][ T5792] RBP: ffffc900044df5b0 R08: ffffc900044defa7 R09: 1ffff9200089bdf4 [ 153.182316][ T5792] R10: dffffc0000000000 R11: fffff5200089bdf5 R12: ffff88805ac78ce8 [ 153.190366][ T5792] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805ac78cb0 [ 153.198351][ T5792] ? mark_lock+0x94/0x320 [ 153.202677][ T5792] ? ext4_xattr_ibody_set+0x6a0/0x6a0 [ 153.208048][ T5792] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 153.214028][ T5792] ? ext4_xattr_block_set+0xd6/0x32a0 [ 153.219401][ T5792] ext4_xattr_block_set+0x23e/0x32a0 [ 153.224681][ T5792] ? write_boundary_block+0xb0/0xb0 [ 153.229874][ T5792] ? __might_sleep+0xe0/0xe0 [ 153.234465][ T5792] ? __getblk_gfp+0x54/0x660 [ 153.239058][ T5792] ? ext4_xattr_block_find+0x350/0x350 [ 153.244513][ T5792] ? ext4_xattr_block_find+0x2d4/0x350 [ 153.249969][ T5792] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 153.255880][ T5792] __ext4_expand_extra_isize+0x306/0x400 [ 153.261517][ T5792] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 153.266981][ T5792] ext4_dirty_inode+0xcb/0x110 [ 153.271740][ T5792] ? __ext4_expand_extra_isize+0x400/0x400 [ 153.277541][ T5792] __mark_inode_dirty+0x2b4/0xc80 [ 153.282567][ T5792] iput+0x1cc/0x920 [ 153.286376][ T5792] __dentry_kill+0x431/0x650 [ 153.290968][ T5792] shrink_dentry_list+0x39f/0x6a0 [ 153.295996][ T5792] shrink_dcache_parent+0xac/0x3c0 [ 153.301105][ T5792] ? write_sequnlock+0x30/0x30 [ 153.305861][ T5792] ? down_read_trylock+0x1d6/0x370 [ 153.310964][ T5792] ? __init_rwsem+0x160/0x160 [ 153.315637][ T5792] do_one_tree+0x23/0xe0 [ 153.319880][ T5792] shrink_dcache_for_umount+0x69/0x110 [ 153.325336][ T5792] generic_shutdown_super+0x67/0x2b0 [ 153.330621][ T5792] kill_block_super+0x44/0x90 [ 153.335291][ T5792] ext4_kill_sb+0x68/0xa0 [ 153.339623][ T5792] deactivate_locked_super+0x97/0x100 [ 153.344995][ T5792] cleanup_mnt+0x429/0x4c0 [ 153.349410][ T5792] task_work_run+0x1ce/0x250 [ 153.354000][ T5792] ? task_work_cancel+0x240/0x240 [ 153.359025][ T5792] ? exit_to_user_mode_loop+0x3b/0x110 [ 153.364483][ T5792] exit_to_user_mode_loop+0xe6/0x110 [ 153.369763][ T5792] exit_to_user_mode_prepare+0xb1/0x140 [ 153.375311][ T5792] syscall_exit_to_user_mode+0x1a/0x50 [ 153.380767][ T5792] do_syscall_64+0x61/0xb0 [ 153.385175][ T5792] ? clear_bhb_loop+0x40/0x90 [ 153.389840][ T5792] ? clear_bhb_loop+0x40/0x90 [ 153.394509][ T5792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.400834][ T5792] RIP: 0033:0x7fc78578fe97 [ 153.405240][ T5792] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 153.424839][ T5792] RSP: 002b:00007ffcba15ea38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 153.433249][ T5792] RAX: 0000000000000000 RBX: 00007fc785811bdd RCX: 00007fc78578fe97 [ 153.441213][ T5792] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcba15eaf0 [ 153.449176][ T5792] RBP: 00007ffcba15eaf0 R08: 0000000000000000 R09: 0000000000000000 [ 153.457140][ T5792] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcba15fb80 [ 153.465103][ T5792] R13: 00007fc785811bdd R14: 0000000000025387 R15: 00007ffcba15fbc0 [ 153.473076][ T5792] [ 153.476358][ T5792] Kernel Offset: disabled [ 153.480796][ T5792] Rebooting in 86400 seconds..