last executing test programs: 8.285944858s ago: executing program 3 (id=2736): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x3bc}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f021}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r7, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0xfb, 0xa, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x2}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x62050c00) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x80000008, 0xffff8001, 0x5, 0x30003900, 0x6, 0x2, 0x9}]}) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) 6.980220669s ago: executing program 1 (id=2739): r0 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5, 0x0, r1}, 0x0, 0x0, 0x0) io_uring_setup(0x7ef2, &(0x7f0000000540)={0x0, 0x8a3d, 0x8, 0x3, 0x84}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$netlink(0x10, 0x3, 0x4) socket(0x10, 0x803, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x40802) syz_open_procfs(0x0, &(0x7f0000000680)='mountinfo\x00') socket(0x10, 0x803, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800080000020000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) 6.703279998s ago: executing program 1 (id=2741): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r1, 0x800799c) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) lseek(r1, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6.702923248s ago: executing program 0 (id=2742): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0]) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a198", 0x3e, 0x5, 0xffffffff}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d2", 0xa3}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca5", 0x6e}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.489262236s ago: executing program 1 (id=2743): keyctl$set_reqkey_keyring(0xe, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$eJzKKC4s5mdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE4YjdbYNriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oi4BIPTQsH/MiBjEhoayjTWMi21XfClSOOvhNdqY6cMBnd7pmWwAGVpAJEroTxZsJ6E5BUeOpqaRinJCQ2bJBKS3AoMlRm27uFcLdDAgBRtKgwMDNsZYXELAddgjFEwCkbBKBgFo2AUjIJRMApGwSgYBSMCAAIAAP//wHCY0w==") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x600}, 0x90) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xe, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, 0x0}, 0x94) listen(r1, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xf0f009, 0x2}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x402002, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e21, @local}, 0x210, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000580)='pim6reg\x00', 0x1, 0x0, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000680)={'ip6gre0\x00', 0x6}) 4.927267654s ago: executing program 3 (id=2745): lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) 4.305316903s ago: executing program 1 (id=2746): socket$netlink(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000000)='jffs2\x00', 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000040)=0x9, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$int_in(r4, 0x5452, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 4.258444135s ago: executing program 3 (id=2748): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8018000480140006"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 4.019139473s ago: executing program 3 (id=2749): r0 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000100)='environ\x00') syz_usb_disconnect(0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.892865416s ago: executing program 0 (id=2751): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext4\x00', 0x10, &(0x7f0000000100)='barrier') creat(0x0, 0x6) sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x4) shutdown(r0, 0x1) 2.413343573s ago: executing program 2 (id=2752): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffdfffffffffff, 0x9, 0x93a, 0x200, 0x4a, 0x28, 0x90000005, 0x2}) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000080)=0x2) 2.293976477s ago: executing program 0 (id=2753): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000040)={0xc4, 0x0, 0x6}) 1.988097637s ago: executing program 3 (id=2754): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9rVNceAPBzb/KeiU998cfCBw/ewBPeoy0hcdU2QjVGY6KpxVYp3YyTZNS0k4wkk9KFi3QndFXoQrqQFrrLSrLo1v4J3XRp10K76KZQkKbMzJ0492aGTCXXVPl8wJzc8zvznXvmzOJ64kTt1sJKYWGlUFoqVOdurJwsfFytrC6WQ/yc7PX49CaPOIn93rl89vy7106G8N38D483Nzc3Q11/6Gi07fdff7kz1562xJk29X4797ZbPgghHNs2r7q+EML734YQhRDOJHnjSToYQjgUmmXX7nx2vbBLs3nwqHyq+GTm7sbYien1+xvd//YohC8r/3rt5uJP/+0b+/GVXRoeAAAAAAAAAAAAAAAAAIAX3OSVy1ffGRkND6PQvx5tf153Mkm7PR+7uWv+k/8fCwAAAAAAAAAAAAAAAAAAAH9RT5//L0RHOjz/P5Gkp7u033wr/zmSn6m3L0+cGxlNzn+PtpW/nmT9fKYvHO5w7nv2/Pczmfadz3/fPs6zas2vNe5QiOLh1HUcDw+H8HVy8PvxaH9cqa7UXr1RXV2a37VpvLDS8W+e3p+KTnKgf6/xH8/0n//5/0e3vZvq19d37y32UkvHv69rvW8+jXqK/9l0s3s5TbvN0fyHeIml49/fyBtsr7CvmdTj/3n/zvGfyPSf1/1/KIRQiOpzLaRWgPoepp7fbb9CWjr+f2vkpZbO5IXsdv//lon/uUz/e7X+r2U/iOgoHf+/N/IGUjWaG4BG/OOd7//zmf73Iv71+a/5/O9JOv7JYt+fqtJ4JXtd/ycz/ecV/6txMs9DUeodsB4187v9f3WkpeM/sK386fe/uKf934VM++f1/a81buv7X2v5/3/U/P5HZ+n4D3at1+v9P5Vpl/f6f7qx/+NZpeO/v5GX3jsPNX72Gv/pTP95xb+xKxloxf/pevL7vmb+V/Z/PUnH/x/NzLi9xlrjZ2P/F+28/7+Y6X8v9n/1+a/F+Y76skjH/0DXevX4f9/D5/+lTLv84x/CiL3+M0vH/2DXeo37f2Dn+M9k2uUd///l2TkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC2A8SYdCFA+nruN4eDiEs8n18bA/mi3NF2cr1bmPVkKYSPIL4Uh0s1KdLVWKC0vV+XKxVKlU50I4l5QfCwPRSqVaKy6Wbp/f6mswulUuLddmy6VaCGEyyf93ONjqa3ahtli6HUK4sFX2z7i6fPtWaak4v7D85sjIyEiY2prD4aj8Sa28VGuO3iwNYXqr7VDUNrlG8cWtuRyIPqyuLi+VKo38S21tKtW5UqWtzUxS9kU4HNWWV5fmSrVysVK92RpvL51O0ompK+9duTS6rfx61EzHn++0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHo69cS+E0N+8ikMIhSj5JUr+pTx4VD5VfDJzd2PsxPT6/Y3HneoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl/5RIgaiOAC/GQUtPYZVSDrbiCJaGBE8gR7Dw+hRvIR3sLCwtVgWdiew5A+EwHbf1zyYH2/ewDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgubvn7uWpbiJSnG/OIr7evn8O84dSP66n+09WzDxd0cNx3D92N7d1U/49jfKrcvTb5l36//f+GhO19znYk+E+7Y3nDM3t29z7+rkXkXIVEW3JL1POVbXsLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDLDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91FH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//4w3HM8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000080)='\v', 0x1, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) ioctl$FITRIM(r1, 0x40406f06, &(0x7f00000000c0)={0xf, 0xfffffffffffffffb, 0x1000100}) 1.912908889s ago: executing program 0 (id=2755): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0x7, &(0x7f0000000200)="952bb3e006ae9a"}) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000000c0)=""/43) 1.851241271s ago: executing program 1 (id=2756): lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) 1.785653723s ago: executing program 1 (id=2757): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000402609333340000102030109022d0001010000090904000d020301010509210500770122b10f090581032000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) 1.719939155s ago: executing program 0 (id=2758): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000440), 0x0) 1.715800175s ago: executing program 2 (id=2759): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) fsopen(0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) 1.56324156s ago: executing program 0 (id=2760): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 572.749582ms ago: executing program 2 (id=2761): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x30, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 268.408691ms ago: executing program 2 (id=2762): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x40, 0x8, 0x7, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0x10000000, @mcast2, 0xe049}}]}, 0x38}, 0x1, 0x7}, 0x0) 133.870505ms ago: executing program 2 (id=2763): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 27.161179ms ago: executing program 3 (id=2764): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x4, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r3, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="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", 0x1c1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) accept4$unix(r3, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000000), 0x8) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xff}, {0x1000, 0x5000, 0x3, 0x10, 0x8, 0x0, 0x1, 0x64, 0xe, 0x0, 0x3, 0xfc}, {0xdddd1000, 0x25000, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x40, 0x6, 0x1, 0x4, 0x2}, {0x4000, 0xffff1000, 0xf, 0x1, 0x0, 0x8, 0x3, 0x7, 0x0, 0x0, 0x2}, {0x6000, 0xffff1000, 0xa, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x6, 0xfc}, {0x4000, 0x10000, 0xf, 0x3, 0x9b, 0x1, 0xfc, 0x4, 0x9, 0x7, 0xc0, 0x9}, {0x3000, 0x0, 0x10, 0x0, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x42}, {0x30000, 0x3000, 0xe, 0xa, 0x2, 0x6f, 0x9, 0xed, 0x0, 0x9, 0x1, 0x5}, {0x2000, 0xb}, {}, 0x9df9ffdf, 0x0, 0x0, 0x3, 0x5, 0x8000, 0x70000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) r7 = io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x6a7, 0x40000, 0x6, 0x23}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="137c0300231a05002c0012800e000100697036677265746170"], 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x20040840) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) r8 = syz_open_dev$dvb_dvr(&(0x7f0000000380), 0x0, 0x800) preadv2(r8, &(0x7f0000000300)=[{&(0x7f0000000000)=""/71, 0x47}], 0x1, 0x800, 0xc23, 0x1) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xffffffffffffffff, 0x407ffffffffffe, 0x800000000000002}, 0xfffffffc, 0x0, 0x1, 0x1, 0x2}}, 0xb8}}, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x239, 0x0, 0x0, {0xa, 0x0, 0xd6cf026a8b753ac6}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) r11 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r11, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) 0s ago: executing program 2 (id=2765): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0xc02) ioctl$FE_GET_INFO(r0, 0x80a86f3d, &(0x7f0000000140)) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000200)=ANY=[@ANYBLOB="0303050000000900c21183e7179f4bf5219c5646fa67c39b6e55fe3230a93b7738585c0f22551ce6b9da98f5ae192fec919b0a4d106b4c869bc05a5aec1ababd8ba6cf7727cecd3526992e00ad1d8d2864d3aed2caf52423e941feb34c4c99d8fbf3d0b5480aa637b866d29fc6fdbcb40a5e06cfc10bb4a0caca55acdab3834665af7896dee9bfdbc378028cdfe45f8acd20a10e88c5a6d605f13c3c7d4fa1b79fa456414ee0cf6dd12cd2cbd159e67931c6"], 0xcb, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x1000000}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x60080c1}, 0x0) socket(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) kernel console output (not intermixed with test programs): acket: 8 [ 214.977304][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 214.987065][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.995188][ T9] usb 3-1: Product: syz [ 214.999490][ T9] usb 3-1: Manufacturer: syz [ 215.004119][ T9] usb 3-1: SerialNumber: syz [ 215.013838][ T9] usb 3-1: config 0 descriptor?? [ 215.022881][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.039850][ T787] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 215.051237][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.062218][ T787] usb 1-1: config 0 descriptor?? [ 215.226854][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 215.711588][ T9247] syzkaller1: entered promiscuous mode [ 215.725380][ T9247] syzkaller1: entered allmulticast mode [ 216.008757][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 274 [ 216.123322][ T787] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 216.133558][ T787] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 216.464515][ T9] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 216.477444][ T787] usb 1-1: USB disconnect, device number 9 [ 216.483435][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 216.485543][ T9] usb 3-1: USB disconnect, device number 11 [ 216.812684][ T9277] syzkaller1: entered promiscuous mode [ 216.818354][ T9277] syzkaller1: entered allmulticast mode [ 217.262015][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1260'. [ 217.575764][ T9306] binder: BINDER_SET_CONTEXT_MGR already set [ 217.582794][ T9306] binder: 9295:9306 ioctl 4018620d 200000004a80 returned -16 [ 217.839228][ T787] IPVS: starting estimator thread 0... [ 217.958716][ T9313] IPVS: using max 35 ests per chain, 84000 per kthread [ 219.709829][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1283'. [ 219.764664][ T9352] netlink: 'syz.0.1282': attribute type 4 has an invalid length. [ 219.772788][ T9352] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1282'. [ 219.830995][ T9352] .`: renamed from bond0 (while UP) [ 220.266912][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1292'. [ 220.298185][ T9377] vlan2: entered allmulticast mode [ 220.326968][ T9377] bond0: entered allmulticast mode [ 220.333683][ T9377] bond_slave_0: entered allmulticast mode [ 220.343780][ T9377] bond_slave_1: entered allmulticast mode [ 220.576828][ T9384] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1294'. [ 221.136332][ T9410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1299'. [ 221.797422][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1305'. [ 222.473820][ T9449] bridge_slave_0: left allmulticast mode [ 222.482737][ T9449] bridge_slave_0: left promiscuous mode [ 222.490900][ T9449] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.716378][ T9462] binder: 9454:9462 ioctl c0306201 200000000000 returned -14 [ 223.484423][ T9487] syzkaller1: entered promiscuous mode [ 223.490283][ T9487] syzkaller1: entered allmulticast mode [ 223.548671][ T9489] warning: `syz.3.1331' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 223.895649][ T9506] binder: BINDER_SET_CONTEXT_MGR already set [ 223.905288][ T9506] binder: 9494:9506 ioctl 4018620d 200000004a80 returned -16 [ 224.171433][ T9514] binder: 9511:9514 ioctl c0306201 200000000000 returned -14 [ 224.186864][ T9515] binder: BINDER_SET_CONTEXT_MGR already set [ 224.197412][ T9515] binder: 9513:9515 ioctl 4018620d 200000004a80 returned -16 [ 224.207642][ T9515] binder: 9513:9515 ioctl c0306201 200000000380 returned -22 [ 225.003990][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1349'. [ 225.897870][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'. [ 225.947890][ T9554] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.955355][ T9554] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.277585][ T9563] binder: 9559:9563 ioctl c0306201 200000000000 returned -14 [ 226.683600][ T9572] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1362'. [ 226.804766][ T5837] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 227.008661][ T5837] usb 1-1: Using ep0 maxpacket: 32 [ 227.020487][ T5837] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 227.056958][ T5837] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 227.066609][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 227.081499][ T5837] usb 1-1: Product: syz [ 227.085820][ T5837] usb 1-1: Manufacturer: syz [ 227.092849][ T5837] usb 1-1: SerialNumber: syz [ 227.102744][ T5837] usb 1-1: config 0 descriptor?? [ 227.116414][ T9570] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 227.144361][ T5837] hub 1-1:0.0: bad descriptor, ignoring hub [ 227.157103][ T5837] hub: probe of 1-1:0.0 failed with error -5 [ 227.867176][ T5837] usb 1-1: USB disconnect, device number 10 [ 228.088710][ T5837] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 228.300320][ T5837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 228.325568][ T5837] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 228.348976][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 228.363656][ T5837] usb 1-1: Product: syz [ 228.370312][ T5837] usb 1-1: Manufacturer: syz [ 228.374972][ T5837] usb 1-1: SerialNumber: syz [ 228.406627][ T5837] usb 1-1: config 0 descriptor?? [ 228.425650][ T9583] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 228.449553][ T5837] hub 1-1:0.0: bad descriptor, ignoring hub [ 228.458768][ T5837] hub: probe of 1-1:0.0 failed with error -5 [ 228.908684][ T787] usb 1-1: USB disconnect, device number 11 [ 229.820597][ T9629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1380'. [ 230.288644][ T42] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 230.488589][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 230.501512][ T42] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 230.509715][ T42] usb 1-1: config 0 has no interface number 0 [ 230.515913][ T42] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.528550][ T42] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 230.540649][ T42] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 230.551610][ T42] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 230.578128][ T42] usb 1-1: Product: syz [ 230.582651][ T42] usb 1-1: SerialNumber: syz [ 230.609735][ T42] usb 1-1: config 0 descriptor?? [ 230.640742][ T42] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 230.679757][ T42] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input6 [ 230.855264][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 230.863077][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 230.870361][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 230.877528][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 230.884664][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 230.891842][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 230.898581][ T5837] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 230.900288][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 230.913900][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 230.921061][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 230.928175][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 230.936140][ T42] usb 1-1: USB disconnect, device number 12 [ 230.936189][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 230.979540][ T42] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 231.206803][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 231.271161][ T5837] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 231.293285][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.321513][ T5837] usb 4-1: config 0 descriptor?? [ 232.043295][ T9659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1396'. [ 232.052782][ T9659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1396'. [ 232.070790][ T5837] ath6kl: Failed to submit usb control message: -71 [ 232.077466][ T5837] ath6kl: unable to send the bmi data to the device: -71 [ 232.107433][ T5837] ath6kl: Unable to send get target info: -71 [ 232.145690][ T9659] mmap: syz.0.1396 (9659) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 232.161656][ T5837] ath6kl: Failed to init ath6kl core: -71 [ 232.167927][ T5837] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 232.201496][ T5837] usb 4-1: USB disconnect, device number 9 [ 232.394457][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1399'. [ 232.697727][ T9676] binder: BINDER_SET_CONTEXT_MGR already set [ 232.708572][ T9676] binder: 9675:9676 ioctl 4018620d 200000004a80 returned -16 [ 232.728165][ T9676] binder: 9675:9676 ioctl c0306201 200000000380 returned -22 [ 232.894594][ T9686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1408'. [ 233.832422][ T9728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1424'. [ 234.645972][ T9736] netlink: 'syz.0.1428': attribute type 4 has an invalid length. [ 235.175024][ T9756] syzkaller1: entered promiscuous mode [ 235.180769][ T9756] syzkaller1: entered allmulticast mode [ 236.246013][ T9780] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1445'. [ 236.601711][ T9793] netlink: 'syz.0.1449': attribute type 4 has an invalid length. [ 236.857347][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1453'. [ 236.883624][ T9804] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 237.551750][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1464'. [ 238.457364][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1475'. [ 239.050205][ T9886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1480'. [ 239.100535][ T9886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1480'. [ 239.852104][ T9920] netlink: 'syz.2.1491': attribute type 4 has an invalid length. [ 240.005500][ T9929] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1493'. [ 240.264135][ T9942] syzkaller1: entered promiscuous mode [ 240.270709][ T9942] syzkaller1: entered allmulticast mode [ 240.448568][ T5837] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 240.608722][ T5837] usb 4-1: device descriptor read/64, error -71 [ 240.888626][ T5837] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 241.060025][ T5837] usb 4-1: device descriptor read/64, error -71 [ 241.178858][ T5837] usb usb4-port1: attempt power cycle [ 241.181577][ T9983] syzkaller1: entered promiscuous mode [ 241.198566][ T9983] syzkaller1: entered allmulticast mode [ 241.336790][ T9988] netlink: 'syz.2.1508': attribute type 4 has an invalid length. [ 241.609453][ T5837] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 241.643170][ T5837] usb 4-1: device descriptor read/8, error -71 [ 241.777099][T10009] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 241.938604][ T5837] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 241.991490][ T5837] usb 4-1: device descriptor read/8, error -71 [ 242.120471][ T5837] usb usb4-port1: unable to enumerate USB device [ 242.757666][T10050] netlink: 'syz.2.1523': attribute type 4 has an invalid length. [ 243.595566][T10087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1533'. [ 243.654114][T10087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1533'. [ 244.183946][T10108] fuse: Unknown parameter 'grou00000000000000000000' [ 244.288619][ T42] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 244.464893][T10121] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1547'. [ 244.468751][ T42] usb 1-1: device descriptor read/64, error -71 [ 244.675249][T10130] fuse: Unknown parameter 'grou00000000000000000000' [ 244.760143][ T42] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 244.938870][ T42] usb 1-1: device descriptor read/64, error -71 [ 245.070330][ T42] usb usb1-port1: attempt power cycle [ 245.448175][T10154] fuse: Unknown parameter 'grou00000000000000000000' [ 245.510219][ T42] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 245.578638][ T42] usb 1-1: device descriptor read/8, error -71 [ 245.864111][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'. [ 245.874742][ T42] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 245.909862][ T42] usb 1-1: device descriptor read/8, error -71 [ 245.926328][T10169] netlink: 'syz.1.1567': attribute type 4 has an invalid length. [ 245.954051][T10174] fuse: Unknown parameter 'group_i00000000000000000000' [ 246.039057][ T42] usb usb1-port1: unable to enumerate USB device [ 246.105214][T10180] syzkaller1: entered promiscuous mode [ 246.110910][T10180] syzkaller1: entered allmulticast mode [ 246.358576][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1578'. [ 246.452971][T10194] fuse: Unknown parameter 'group_i00000000000000000000' [ 247.159409][T10209] syzkaller1: entered promiscuous mode [ 247.180460][T10209] syzkaller1: entered allmulticast mode [ 247.440020][T10215] fuse: Unknown parameter 'group_i00000000000000000000' [ 247.498085][T10217] netlink: 'syz.2.1589': attribute type 4 has an invalid length. [ 247.845657][T10238] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 247.937427][T10242] fuse: Unknown parameter 'group_id00000000000000000000' [ 248.661891][T10265] fuse: Unknown parameter 'group_id00000000000000000000' [ 248.928823][T10271] binder: 10269:10271 ioctl 4018620d 0 returned -22 [ 249.478898][T10287] fuse: Unknown parameter 'group_id00000000000000000000' [ 250.319212][T10298] binder: BINDER_SET_CONTEXT_MGR already set [ 250.352062][T10298] binder: 10297:10298 ioctl 4018620d 200000004a80 returned -16 [ 250.369395][T10298] binder: 10297:10298 ioctl c0306201 200000000380 returned -22 [ 250.857273][T10312] fuse: Bad value for 'user_id' [ 251.090878][T10322] binder: BINDER_SET_CONTEXT_MGR already set [ 251.114787][T10322] binder: 10321:10322 ioctl 4018620d 200000004a80 returned -16 [ 251.123677][T10322] binder: 10321:10322 ioctl c0306201 200000000380 returned -22 [ 251.374963][T10338] fuse: Bad value for 'user_id' [ 251.880133][T10352] binder: BINDER_SET_CONTEXT_MGR already set [ 251.891995][T10352] binder: 10349:10352 ioctl 4018620d 200000004a80 returned -16 [ 251.901496][T10352] binder: 10349:10352 ioctl c0306201 200000000380 returned -22 [ 252.091272][T10358] fuse: Bad value for 'user_id' [ 252.394669][T10366] kvm: apic: phys broadcast and lowest prio [ 252.401067][T10366] kvm: Disabled LAPIC found during irq injection [ 252.708652][ T5837] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 252.844791][T10382] binder: 10381:10382 ioctl c0306201 0 returned -14 [ 252.907114][T10386] fuse: Bad value for 'fd' [ 252.958033][ T5837] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 253.093750][ T5837] usb 3-1: config 0 has no interface number 0 [ 253.110747][T10393] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 253.188277][ T5837] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 253.292159][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.307206][ T5837] usb 3-1: Product: syz [ 253.311579][ T5837] usb 3-1: Manufacturer: syz [ 253.316260][ T5837] usb 3-1: SerialNumber: syz [ 253.332382][ T5837] usb 3-1: config 0 descriptor?? [ 253.524738][T10406] binder: 10405:10406 ioctl c0306201 0 returned -14 [ 253.571176][ T5837] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 253.708668][T10413] fuse: Bad value for 'fd' [ 253.863002][T10418] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1671'. [ 254.115581][T10425] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 254.381454][T10432] binder: 10431:10432 ioctl c0306201 0 returned -14 [ 254.448687][T10434] binder: BINDER_SET_CONTEXT_MGR already set [ 254.465253][T10434] binder: 10431:10434 ioctl 4018620d 200000004a80 returned -16 [ 254.719423][T10441] fuse: Bad value for 'fd' [ 254.726708][ T5837] gspca_m5602: Failed to find a sensor [ 254.739362][ T5837] ALi m5602 3-1:0.88: ALi m5602 webcam failed [ 254.750219][T10440] kvm: emulating exchange as write [ 254.764432][ T5837] usb 3-1: USB disconnect, device number 12 [ 254.879189][T10445] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1682'. [ 254.983183][T10450] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 255.468512][ T5816] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 255.673275][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 255.700958][ T5816] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 255.717249][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.737187][ T5816] usb 2-1: Product: syz [ 255.747781][ T5816] usb 2-1: Manufacturer: syz [ 255.762648][ T5816] usb 2-1: SerialNumber: syz [ 255.774532][ T5816] usb 2-1: config 0 descriptor?? [ 256.040930][ T5816] dvb_usb_dtv5100: probe of 2-1:0.0 failed with error -71 [ 256.071923][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.078322][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.089207][ T5816] usb 2-1: USB disconnect, device number 9 [ 256.657649][T10503] kvm: apic: phys broadcast and lowest prio [ 256.664187][T10503] kvm: Disabled LAPIC found during irq injection [ 256.751357][T10513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1709'. [ 256.948788][ T8] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 257.132969][ T8] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 257.152637][ T8] usb 3-1: config 0 has no interface number 0 [ 257.161780][ T8] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 257.175500][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.198514][ T8] usb 3-1: Product: syz [ 257.202753][ T8] usb 3-1: Manufacturer: syz [ 257.207383][ T8] usb 3-1: SerialNumber: syz [ 257.231111][ T8] usb 3-1: config 0 descriptor?? [ 257.443161][ T8] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 258.468681][ T8] gspca_m5602: Failed to find a sensor [ 258.476772][ T8] ALi m5602 3-1:0.88: ALi m5602 webcam failed [ 258.496660][ T8] usb 3-1: USB disconnect, device number 13 [ 260.030449][T10621] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1751'. [ 261.020746][T10666] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 261.578993][ T788] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 261.790635][ T788] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 261.803179][T10694] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 261.810948][ T788] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 261.833756][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.861290][ T788] usb 1-1: config 0 descriptor?? [ 262.183863][ T788] ath6kl: Failed to submit usb control message: -71 [ 262.202351][ T788] ath6kl: unable to send the bmi data to the device: -71 [ 262.209827][ T788] ath6kl: Unable to send get target info: -71 [ 262.221963][ T788] ath6kl: Failed to init ath6kl core: -71 [ 262.228299][ T788] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 262.245936][ T788] usb 1-1: USB disconnect, device number 17 [ 262.358685][ T5815] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 262.558676][ T5815] usb 3-1: Using ep0 maxpacket: 16 [ 262.582294][ T5815] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 262.591638][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 262.608484][ T5815] usb 3-1: Product: syz [ 262.612743][ T5815] usb 3-1: Manufacturer: syz [ 262.628647][ T5815] usb 3-1: SerialNumber: syz [ 263.063184][T10723] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 263.447690][ T5815] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 263.471462][ T5815] usb 3-1: USB disconnect, device number 14 [ 264.032982][ T5815] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 264.251349][ T5815] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 264.278559][ T5815] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 264.298322][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.359663][ T5815] usb 2-1: config 0 descriptor?? [ 264.659679][ T5815] ath6kl: Failed to submit usb control message: -71 [ 264.679634][ T5815] ath6kl: unable to send the bmi data to the device: -71 [ 264.687252][ T5815] ath6kl: Unable to send get target info: -71 [ 264.699591][ T5815] ath6kl: Failed to init ath6kl core: -71 [ 264.705892][ T5815] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 264.731349][ T5815] usb 2-1: USB disconnect, device number 10 [ 265.086984][T10773] kvm: apic: phys broadcast and lowest prio [ 265.096263][T10773] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 265.716153][ T787] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 265.828216][T10802] kvm: apic: phys broadcast and lowest prio [ 265.840853][T10802] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 265.933562][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 265.940860][ T787] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 265.958501][ T787] usb 2-1: config 0 has no interface number 0 [ 265.964724][ T787] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 265.988481][ T787] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 266.010414][ T787] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 266.028327][ T787] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 266.043332][ T787] usb 2-1: Product: syz [ 266.051819][ T787] usb 2-1: SerialNumber: syz [ 266.069838][ T787] usb 2-1: config 0 descriptor?? [ 266.081959][ T787] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 266.100384][ T787] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input7 [ 266.310602][ C1] cm109_urb_ctl_callback: 6 callbacks suppressed [ 266.310625][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.324221][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.331440][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.338694][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.345898][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.353186][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.360440][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.367427][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 266.376899][ T42] usb 2-1: USB disconnect, device number 11 [ 266.407182][ T42] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 266.860455][T10820] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 267.691343][T10849] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 267.888653][ T5815] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 268.078501][ T5815] usb 1-1: Using ep0 maxpacket: 16 [ 268.089575][ T5815] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 268.107891][ T5815] usb 1-1: config 0 has no interface number 0 [ 268.114845][ T5815] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 268.131990][T10870] vlan2: entered allmulticast mode [ 268.137310][T10870] team0: entered allmulticast mode [ 268.146479][T10870] team_slave_0: entered allmulticast mode [ 268.147462][ T5815] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 268.153841][T10870] team_slave_1: entered allmulticast mode [ 268.183436][ T5815] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 268.193182][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 268.208163][ T5815] usb 1-1: Product: syz [ 268.216171][ T5815] usb 1-1: SerialNumber: syz [ 268.229365][ T5815] usb 1-1: config 0 descriptor?? [ 268.247362][ T5815] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 268.263180][ T5815] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input8 [ 268.468903][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 268.476130][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 268.483327][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 268.490821][ T5815] usb 1-1: USB disconnect, device number 18 [ 268.490858][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 268.532063][ T5815] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 269.009181][T10878] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 270.889043][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1867'. [ 271.691355][T10938] binder: 10937:10938 ioctl c0306201 0 returned -14 [ 272.365746][T10951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1876'. [ 272.815281][T10960] kvm: apic: phys broadcast and lowest prio [ 272.838570][ T42] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 273.062488][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 273.082892][ T42] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 273.099962][ T42] usb 3-1: config 0 has no interface number 0 [ 273.129460][ T42] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 273.161175][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.192583][ T42] usb 3-1: Product: syz [ 273.219004][ T42] usb 3-1: Manufacturer: syz [ 273.232116][ T42] usb 3-1: SerialNumber: syz [ 273.305479][ T42] usb 3-1: config 0 descriptor?? [ 273.366445][ T42] smsc95xx v2.0.0 [ 273.767444][ T42] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 273.821401][ T42] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 274.270556][ T42] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 274.299120][ T42] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 274.328169][ T42] usb 3-1: USB disconnect, device number 15 [ 275.994791][T11012] netlink: 'syz.2.1897': attribute type 1 has an invalid length. [ 276.194277][T11012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 276.285266][T11016] bond2: (slave ip6gretap1): making interface the new active one [ 276.321457][T11016] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 278.089053][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1911'. [ 279.039611][T11068] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 281.455533][T11112] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1932'. [ 282.065061][T11135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1939'. [ 282.095062][T11135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1939'. [ 282.153993][T11125] syz.1.1937 (11125): drop_caches: 2 [ 282.709927][ T42] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 282.908485][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 282.921545][ T42] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 282.948476][ T42] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 282.978488][ T42] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.998497][ T42] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.012034][ T5816] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 283.028869][ T42] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 283.038079][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.218528][ T5816] usb 1-1: Using ep0 maxpacket: 32 [ 283.226491][ T5816] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 283.244860][ T5816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.267678][ T5816] usb 1-1: config 0 has no interface number 0 [ 283.281199][ T42] usb 2-1: GET_CAPABILITIES returned 0 [ 283.288623][ T5816] usb 1-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 283.304723][ T42] usbtmc 2-1:16.0: can't read capabilities [ 283.319327][ T5816] usb 1-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 283.348560][ T5816] usb 1-1: config 0 interface 8 has no altsetting 0 [ 283.367845][ T5816] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 283.377289][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.385957][ T5816] usb 1-1: Product: syz [ 283.390444][ T5816] usb 1-1: Manufacturer: syz [ 283.395066][ T5816] usb 1-1: SerialNumber: syz [ 283.402808][ T5816] usb 1-1: config 0 descriptor?? [ 283.504652][ T42] usb 2-1: USB disconnect, device number 12 [ 283.637655][ T5816] ath6kl: Failed to submit usb control message: -71 [ 283.644624][ T5816] ath6kl: unable to send the bmi data to the device: -71 [ 283.652396][ T5816] ath6kl: Unable to send get target info: -71 [ 283.660858][ T5816] ath6kl: Failed to init ath6kl core: -71 [ 283.668259][ T5816] ath6kl_usb: probe of 1-1:0.8 failed with error -71 [ 283.683090][ T5816] usb 1-1: USB disconnect, device number 19 [ 284.254476][T11164] binder: 11163:11164 ioctl c0306201 0 returned -14 [ 284.391401][T11167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1950'. [ 284.422869][T11167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1950'. [ 284.570874][T11168] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 286.163743][T11197] binder: 11195:11197 ioctl c0306201 0 returned -14 [ 286.279511][T11198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1959'. [ 286.300162][T11198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1959'. [ 287.550813][T11227] fuse: Unknown parameter '0x0000000000000004' [ 287.588996][T11228] binder: 11226:11228 ioctl c0306201 0 returned -14 [ 288.598721][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 288.788603][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 288.802116][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 288.832651][ T8] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 288.847792][ T8] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 289.029091][ T8] usb 3-1: Product: syz [ 289.033292][ T8] usb 3-1: Manufacturer: syz [ 289.037900][ T8] usb 3-1: SerialNumber: syz [ 289.116770][ T8] usb 3-1: config 0 descriptor?? [ 289.133790][T11242] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 289.164519][ T8] hub 3-1:0.0: bad descriptor, ignoring hub [ 289.216446][ T8] hub: probe of 3-1:0.0 failed with error -5 [ 289.237516][T11251] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 289.278721][T11253] fuse: Unknown parameter '0x0000000000000004' [ 290.018835][ T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 290.240947][ T8] usb 1-1: config 0 has no interfaces? [ 290.265055][ T8] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 290.306493][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.336404][ T8] usb 1-1: Product: syz [ 290.340873][ T8] usb 1-1: Manufacturer: syz [ 290.348350][ T8] usb 1-1: SerialNumber: syz [ 290.364764][ T8] usb 1-1: config 0 descriptor?? [ 290.609067][ T5816] usb 1-1: USB disconnect, device number 20 [ 290.904368][T11261] syz.3.1982 (11261): drop_caches: 2 [ 291.286047][T11284] fuse: Unknown parameter '0x0000000000000004' [ 293.108561][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 293.300611][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.339091][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.366054][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.408354][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.431195][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.453608][ T8] usb 4-1: config 0 descriptor?? [ 293.743921][ T5837] usb 3-1: USB disconnect, device number 16 [ 293.908062][ T8] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 293.947908][ T8] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 294.023758][ T8] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 294.191758][ T8] usb 4-1: USB disconnect, device number 14 [ 295.148209][T11348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2015'. [ 295.177058][ T42] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 295.389568][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 295.410769][ T42] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 295.431569][ T42] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 295.443702][ T42] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 295.452842][ T42] usb 1-1: Product: syz [ 295.457179][ T42] usb 1-1: Manufacturer: syz [ 295.461875][ T42] usb 1-1: SerialNumber: syz [ 295.474444][ T42] usb 1-1: config 0 descriptor?? [ 295.489944][T11342] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 295.498973][ T42] hub 1-1:0.0: bad descriptor, ignoring hub [ 295.505556][ T42] hub: probe of 1-1:0.0 failed with error -5 [ 295.679472][ T5815] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 295.766289][T11361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.794143][T11361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.868639][ T5815] usb 2-1: Using ep0 maxpacket: 16 [ 295.875939][ T5815] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 295.889682][ T5815] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 295.902610][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.911448][ T5815] usb 2-1: Product: syz [ 295.915824][ T5815] usb 2-1: Manufacturer: syz [ 295.920983][ T5815] usb 2-1: SerialNumber: syz [ 295.927638][ T5815] usb 2-1: config 0 descriptor?? [ 296.885198][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2025'. [ 298.028939][ T5816] usb 1-1: USB disconnect, device number 21 [ 298.561228][ T5816] usb 2-1: USB disconnect, device number 13 [ 299.738547][ T5816] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 299.802081][T11432] binder: 11431:11432 ioctl c0306201 0 returned -14 [ 299.928596][ T5816] usb 4-1: Using ep0 maxpacket: 32 [ 299.951985][ T5816] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 299.976106][ T5816] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 299.993792][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 300.003209][ T5816] usb 4-1: Product: syz [ 300.007445][ T5816] usb 4-1: Manufacturer: syz [ 300.012515][ T5816] usb 4-1: SerialNumber: syz [ 300.025087][ T5816] usb 4-1: config 0 descriptor?? [ 300.031945][T11425] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 300.056545][ T5816] hub 4-1:0.0: bad descriptor, ignoring hub [ 300.077724][ T5816] hub: probe of 4-1:0.0 failed with error -5 [ 300.145202][T11442] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 300.318183][T11445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.346065][T11445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.367371][T11466] binder: 11465:11466 ioctl c0306201 0 returned -14 [ 302.476270][ T8] usb 4-1: USB disconnect, device number 15 [ 302.891797][ T5815] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 303.100691][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.114531][ T5815] usb 3-1: config 0 has no interfaces? [ 303.147895][ T5815] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 303.182776][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.244163][ T5815] usb 3-1: Product: syz [ 303.261779][ T5815] usb 3-1: Manufacturer: syz [ 303.284134][ T5815] usb 3-1: SerialNumber: syz [ 303.349767][ T5815] usb 3-1: config 0 descriptor?? [ 303.608823][ T5815] usb 3-1: USB disconnect, device number 17 [ 303.805969][T11477] syz.3.2058 (11477): drop_caches: 2 [ 304.927646][T11498] binder: 11495:11498 ioctl c0306201 0 returned -14 [ 305.138667][ T5815] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 305.348979][ T5815] usb 1-1: Using ep0 maxpacket: 32 [ 305.360604][ T5815] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 305.390714][ T5815] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 305.404774][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 305.423545][ T5815] usb 1-1: Product: syz [ 305.433440][ T5815] usb 1-1: Manufacturer: syz [ 305.443820][ T5815] usb 1-1: SerialNumber: syz [ 305.461307][ T5815] usb 1-1: config 0 descriptor?? [ 305.475006][T11497] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 305.489996][ T5815] hub 1-1:0.0: bad descriptor, ignoring hub [ 305.518501][ T5815] hub: probe of 1-1:0.0 failed with error -5 [ 305.786397][T11511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.841728][T11511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.959256][T11512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2066'. [ 306.597289][T11524] syz.3.2069 (11524): drop_caches: 2 [ 307.888808][ T8] usb 1-1: USB disconnect, device number 22 [ 308.891665][T11550] syz.1.2078 (11550): drop_caches: 2 [ 309.144476][T11556] kvm: apic: phys broadcast and lowest prio [ 313.967017][T11599] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 316.466761][T11624] netlink: 'syz.2.2103': attribute type 28 has an invalid length. [ 316.477580][T11624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2103'. [ 316.628641][ T5815] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 316.892921][ T5815] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.903282][ T5815] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 316.927227][ T5815] usb 1-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x55, skipping [ 317.066201][ T5815] usb 1-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40 [ 317.082650][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.128466][ T5815] usb 1-1: Product: syz [ 317.135163][ T5815] usb 1-1: Manufacturer: syz [ 317.150048][ T5815] usb 1-1: SerialNumber: syz [ 317.512979][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.519840][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.778754][ T5815] usb 1-1: unit 4 not found! [ 319.806270][ T5815] usb 1-1: 6:0: failed to get current value for ch 0 (-71) [ 319.874187][ T5815] usb 1-1: USB disconnect, device number 23 [ 321.139313][T11657] netlink: 'syz.0.2114': attribute type 28 has an invalid length. [ 321.168820][T11657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2114'. [ 321.218600][ T42] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 321.378838][ T42] usb 3-1: device descriptor read/64, error -71 [ 321.688537][ T42] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 321.858553][ T42] usb 3-1: device descriptor read/64, error -71 [ 321.988935][ T42] usb usb3-port1: attempt power cycle [ 322.161473][T11668] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2119'. [ 322.428579][ T42] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 322.479316][ T42] usb 3-1: device descriptor read/8, error -71 [ 322.778501][ T42] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 322.841144][ T42] usb 3-1: device descriptor read/8, error -71 [ 322.999747][ T42] usb usb3-port1: unable to enumerate USB device [ 323.383469][T11679] netlink: 'syz.3.2123': attribute type 28 has an invalid length. [ 323.402494][T11679] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2123'. [ 323.661435][T11682] syzkaller1: entered promiscuous mode [ 323.745152][T11682] syzkaller1: entered allmulticast mode [ 323.752395][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 323.928675][ T9] usb 1-1: device descriptor read/64, error -71 [ 324.218665][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 324.448557][ T9] usb 1-1: device descriptor read/64, error -71 [ 324.598701][ T9] usb usb1-port1: attempt power cycle [ 325.012355][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 325.059864][ T9] usb 1-1: device descriptor read/8, error -71 [ 325.328660][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 325.415222][ T9] usb 1-1: device descriptor read/8, error -71 [ 325.596835][ T9] usb usb1-port1: unable to enumerate USB device [ 325.798183][T11714] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 325.806050][T11714] IPv6: NLM_F_CREATE should be set when creating new route [ 325.838611][ T42] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 325.998521][ T42] usb 4-1: device descriptor read/64, error -71 [ 326.289921][ T42] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 326.386344][T11714] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.394060][T11714] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.468645][ T42] usb 4-1: device descriptor read/64, error -71 [ 326.609413][ T42] usb usb4-port1: attempt power cycle [ 327.038796][ T42] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 327.079762][ T42] usb 4-1: device descriptor read/8, error -71 [ 327.142429][T11714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.212358][T11714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.379078][ T42] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 327.440204][ T42] usb 4-1: device descriptor read/8, error -71 [ 327.577096][ T42] usb usb4-port1: unable to enumerate USB device [ 327.849103][T11714] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.869168][T11714] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.878288][T11714] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.894791][T11714] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.283715][T11744] bridge1: entered promiscuous mode [ 329.302258][T11744] bridge1: entered allmulticast mode [ 329.324255][T11744] team0: Port device bridge1 added [ 329.452926][T11746] bridge0: port 3(team0) entered blocking state [ 329.478795][T11746] bridge0: port 3(team0) entered disabled state [ 329.497128][T11746] team0: entered allmulticast mode [ 329.509130][T11746] team_slave_0: entered allmulticast mode [ 329.524826][T11746] team_slave_1: entered allmulticast mode [ 329.547689][T11746] team0: entered promiscuous mode [ 329.559813][T11746] team_slave_0: entered promiscuous mode [ 329.572698][T11746] team_slave_1: entered promiscuous mode [ 329.603793][T11746] bridge0: port 3(team0) entered blocking state [ 329.610740][T11746] bridge0: port 3(team0) entered forwarding state [ 330.498326][T11777] bridge1: entered promiscuous mode [ 330.506220][T11777] bridge1: entered allmulticast mode [ 330.515410][T11777] team0: Port device bridge1 added [ 330.538150][T11777] bridge0: port 3(team0) entered blocking state [ 330.547125][T11777] bridge0: port 3(team0) entered disabled state [ 330.555812][T11777] team0: entered promiscuous mode [ 330.561219][T11777] team_slave_0: entered promiscuous mode [ 330.567788][T11777] team_slave_1: entered promiscuous mode [ 333.008520][ T5837] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 333.178664][ T5837] usb 2-1: device descriptor read/64, error -71 [ 333.468613][ T5837] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 333.678572][ T5837] usb 2-1: device descriptor read/64, error -71 [ 333.800033][ T5837] usb usb2-port1: attempt power cycle [ 334.218708][ T5837] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 334.279777][ T5837] usb 2-1: device descriptor read/8, error -71 [ 334.568591][ T5837] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 334.697454][ T5837] usb 2-1: device descriptor read/8, error -71 [ 334.930758][ T5837] usb usb2-port1: unable to enumerate USB device [ 335.333339][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2180'. [ 336.259180][T11852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2186'. [ 336.608647][ T5816] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 336.798795][ T5816] usb 1-1: Using ep0 maxpacket: 32 [ 336.805723][ T5816] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.816242][ T5816] usb 1-1: too many endpoints for config 1 interface 2 altsetting 242: 255, using maximum allowed: 30 [ 336.827412][ T5816] usb 1-1: config 1 interface 2 altsetting 242 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 336.841192][ T5816] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 336.852914][ T5816] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 336.862982][ T5816] usb 1-1: config 1 interface 2 has no altsetting 0 [ 336.873118][ T5816] usb 1-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 336.882409][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.890598][ T5816] usb 1-1: Product: syz [ 336.894901][ T5816] usb 1-1: Manufacturer: syz [ 336.899864][ T5816] usb 1-1: SerialNumber: syz [ 337.179785][ T5816] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 337.198632][ T5816] usb 1-1: unit 4 not found! [ 337.203306][ T5816] usb 1-1: unit 144 not found! [ 337.257510][ T5816] usb 1-1: USB disconnect, device number 28 [ 337.334201][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.165592][T11881] binder: BINDER_SET_CONTEXT_MGR already set [ 338.172915][T11881] binder: 11880:11881 ioctl 4018620d 200000004a80 returned -16 [ 339.138643][ T42] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 339.218539][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 339.328555][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 339.337357][ T42] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 339.355359][ T42] usb 3-1: New USB device found, idVendor=0499, idProduct=500e, bcdDevice= 0.40 [ 339.365176][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.373517][ T42] usb 3-1: Product: syz [ 339.381477][ T42] usb 3-1: Manufacturer: syz [ 339.387636][ T42] usb 3-1: SerialNumber: syz [ 339.399289][T11891] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 339.409428][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.428949][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 339.438073][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.450557][ T9] usb 1-1: config 0 descriptor?? [ 339.460192][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 339.664768][ T42] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 339.678972][ T42] usb 3-1: invalid MIDI in EP 0 [ 339.810263][ T42] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 339.831106][ T42] usb 3-1: USB disconnect, device number 22 [ 339.882472][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.105381][ T9] pwc: recv_control_msg error -71 req 02 val 2700 [ 340.113940][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 340.128927][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 340.148994][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 340.155988][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 340.168930][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 340.188600][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 340.195649][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 340.209172][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 340.218565][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 340.226636][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 340.249029][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 340.256039][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 340.269137][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 340.288990][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 340.319323][ T9] pwc: Registered as video103. [ 340.332346][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 340.387569][ T9] usb 1-1: USB disconnect, device number 29 [ 340.644943][T11911] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 341.357462][T11915] binder_alloc: 11914: binder_alloc_buf, no vma [ 342.366514][T11935] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 342.623582][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.635483][ T5784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.646545][ T5784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.672099][ T5784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.681860][ T5784] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.694215][ T5784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.812271][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 342.916750][T11940] chnl_net:caif_netlink_parms(): no params data found [ 343.008639][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 343.044538][ T9] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 343.054064][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.062289][ T9] usb 1-1: Product: syz [ 343.066571][ T9] usb 1-1: Manufacturer: syz [ 343.087527][ T9] usb 1-1: SerialNumber: syz [ 343.180966][T11940] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.202974][T11940] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.233832][T11940] bridge_slave_0: entered allmulticast mode [ 343.259204][T11940] bridge_slave_0: entered promiscuous mode [ 343.294251][T11940] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.325733][T11940] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.348731][T11940] bridge_slave_1: entered allmulticast mode [ 343.368656][ T27] audit: type=1326 audit(1781937809.733:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11943 comm="syz.3.2218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732fb9ce59 code=0x7ffc0000 [ 343.375675][T11940] bridge_slave_1: entered promiscuous mode [ 343.392615][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.418343][ T27] audit: type=1326 audit(1781937809.733:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11943 comm="syz.3.2218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732fb9ce59 code=0x7ffc0000 [ 343.442485][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.442505][ T5782] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 343.456632][ T27] audit: type=1326 audit(1781937809.783:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11943 comm="syz.3.2218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f732fb9ce59 code=0x7ffc0000 [ 343.480580][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.499748][T11938] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2217'. [ 343.529384][T11940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.534120][ T27] audit: type=1326 audit(1781937809.783:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11943 comm="syz.3.2218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732fb9ce59 code=0x7ffc0000 [ 343.562466][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.583826][T11940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.599915][ T27] audit: type=1326 audit(1781937809.783:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11943 comm="syz.3.2218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732fb9ce59 code=0x7ffc0000 [ 343.663528][T11938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.686999][ T27] audit: type=1326 audit(1781937809.783:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11943 comm="syz.3.2218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f732fb9ce59 code=0x7ffc0000 [ 343.710853][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.719336][T11938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.752449][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 343.779253][ T27] audit: type=1326 audit(1781937809.783:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11943 comm="syz.3.2218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732fb9ce59 code=0x7ffc0000 [ 343.780336][T11940] team0: Port device team_slave_0 added [ 343.821375][T11940] team0: Port device team_slave_1 added [ 343.868215][ T27] audit: type=1326 audit(1781937809.783:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11943 comm="syz.3.2218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732fb9ce59 code=0x7ffc0000 [ 343.869961][ T9] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 343.892145][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.931345][T11940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.938582][ T27] audit: type=1326 audit(1781937809.783:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11943 comm="syz.3.2218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f732fb9ce59 code=0x7ffc0000 [ 343.972909][T11940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.984846][ T9] usb 1-1: USB disconnect, device number 30 [ 344.026645][ T27] audit: type=1326 audit(1781937809.783:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11943 comm="syz.3.2218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732fb9ce59 code=0x7ffc0000 [ 344.061723][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.070014][T11940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.111456][T11940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.128813][T11940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.185831][T11940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.294181][T11940] hsr_slave_0: entered promiscuous mode [ 344.330773][T11940] hsr_slave_1: entered promiscuous mode [ 344.350531][T11940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.358145][T11940] Cannot create hsr debugfs directory [ 344.519081][T11961] binder_alloc: 11960: binder_alloc_buf, no vma [ 344.789229][ T5782] Bluetooth: hci4: command tx timeout [ 345.152415][T11940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 345.163010][T11940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 345.185225][T11940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 345.205598][T11940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 345.411752][T11940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.451016][T11940] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.475773][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.482999][ T2927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.494855][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.502103][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.686243][T11983] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2228'. [ 345.712822][T11983] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2228'. [ 345.737671][T11983] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2228'. [ 345.822410][T11940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.892008][T11940] veth0_vlan: entered promiscuous mode [ 345.914113][T11940] veth1_vlan: entered promiscuous mode [ 345.952844][T11940] veth0_macvtap: entered promiscuous mode [ 345.973926][T11940] veth1_macvtap: entered promiscuous mode [ 346.016494][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.049211][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.065566][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.108386][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.126969][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.150144][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.210739][T11940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.288938][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.354210][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.394754][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.437481][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.462672][T11940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.484130][T11940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.496116][T11940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.530886][T11940] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.553940][T11940] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.581429][T11940] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.647549][T11940] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.881994][ T5782] Bluetooth: hci4: command tx timeout [ 346.959303][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.016286][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.137001][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.165465][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.444057][T11994] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 348.558647][ T5815] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 348.637259][T12028] raw_sendmsg: syz.2.2245 forgot to set AF_INET. Fix it! [ 348.768601][ T5815] usb 4-1: Using ep0 maxpacket: 8 [ 348.781396][ T5815] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.803652][ T5815] usb 4-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 348.818862][ T5815] usb 4-1: config 0 interface 0 has no altsetting 0 [ 348.825612][ T5815] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 348.852226][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.882183][ T5815] usb 4-1: config 0 descriptor?? [ 348.949446][ T5782] Bluetooth: hci4: command tx timeout [ 349.313018][ T5815] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 349.326205][ T5815] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 349.340772][ T5815] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 349.358530][ T5815] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 349.368178][ T5815] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 349.379377][ T5815] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 349.386831][ T5815] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 349.410692][ T5815] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 349.418137][ T5815] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 349.430073][ T5815] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 349.439924][ T5815] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 349.447295][ T5815] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 349.462431][ T5815] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 349.470344][ T5815] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 349.485490][ T5815] magicmouse 0003:05AC:0324.0002: hidraw0: USB HID v0.01 Device [HID 05ac:0324] on usb-dummy_hcd.3-1/input0 [ 349.549751][ T5815] usb 4-1: USB disconnect, device number 20 [ 349.652518][T12054] fido_id[12054]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 351.029647][ T5784] Bluetooth: hci4: command tx timeout [ 351.293040][T12088] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 352.381737][T12110] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 352.591266][T12108] binder: BINDER_SET_CONTEXT_MGR already set [ 352.603502][T12108] binder: 12107:12108 ioctl 4018620d 200000004a80 returned -16 [ 352.691647][T12117] overlayfs: missing 'lowerdir' [ 353.101067][T12131] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 353.109054][ T5784] Bluetooth: hci4: command tx timeout [ 353.492240][T12139] kvm: kvm [12138]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 353.510460][T12139] kvm: kvm [12138]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 353.606397][T12142] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2291'. [ 354.170104][T12157] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 354.550836][T12159] binder: BINDER_SET_CONTEXT_MGR already set [ 354.557054][T12159] binder: 12158:12159 ioctl 4018620d 200000004a80 returned -16 [ 354.686574][T12166] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2300'. [ 354.769254][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2301'. [ 355.073988][T12174] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 355.259209][T12181] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 355.478541][ T5837] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 355.658691][ T5837] usb 4-1: Using ep0 maxpacket: 16 [ 355.683859][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.705406][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.717279][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 355.733176][ T5837] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 355.738659][ T5815] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 355.742561][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.763272][ T5837] usb 4-1: config 0 descriptor?? [ 355.781295][ T788] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 355.830645][ T788] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 355.958502][ T5815] usb 2-1: Using ep0 maxpacket: 16 [ 355.975351][ T5815] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.995800][ T5815] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 356.010267][ T5815] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.023273][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.032287][ T5815] usb 2-1: Product: syz [ 356.036495][ T5815] usb 2-1: Manufacturer: syz [ 356.046646][ T5815] usb 2-1: SerialNumber: syz [ 356.200476][T12188] hid-generic 0000:0000:0000.0003: pid 12188 passed too short report [ 356.266408][ T5815] usb 2-1: 0:2 : does not exist [ 356.291147][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.303681][ T5815] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 356.311461][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.328678][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.352246][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.374626][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.380787][ T5815] usb 2-1: USB disconnect, device number 18 [ 356.395057][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.427980][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.445052][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.457061][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.483855][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.511990][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.529974][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.555851][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.583736][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.601826][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.624292][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.646414][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.654631][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.662438][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.678093][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.691890][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x4 [ 356.705538][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.720148][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.736901][ T5837] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 356.752598][ T5837] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 356.776278][ T5837] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 356.799531][ T5837] microsoft 0003:045E:07DA.0004: no inputs found [ 356.805939][ T5837] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 356.831530][ T5837] usb 4-1: USB disconnect, device number 21 [ 356.922695][T12198] fido_id[12198]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 357.393216][T12204] binder: BINDER_SET_CONTEXT_MGR already set [ 357.408664][T12204] binder: 12203:12204 ioctl 4018620d 200000004a80 returned -16 [ 357.575589][T12211] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 357.706090][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2318'. [ 357.804176][T12220] binder: 12219:12220 unknown command 0 [ 357.817934][T12220] binder: 12219:12220 ioctl c0306201 200000000080 returned -22 [ 357.968256][T12228] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2324'. [ 358.131623][T12232] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 358.148620][ T787] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 358.348593][ T787] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.366177][ T787] usb 3-1: config 0 has no interfaces? [ 358.376874][ T787] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 358.399669][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.422117][ T787] usb 3-1: config 0 descriptor?? [ 358.912108][ T787] usb 3-1: USB disconnect, device number 23 [ 358.951469][T12261] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 359.633380][T12273] syz.1.2344 (12273) used greatest stack depth: 17896 bytes left [ 359.823558][T12282] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 360.049123][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.060543][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.075742][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.097334][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.109007][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 360.116405][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.455548][T12300] cgroup: subsys name conflicts with all [ 360.605903][ T49] hsr_slave_0: left promiscuous mode [ 360.623681][ T49] hsr_slave_1: left promiscuous mode [ 360.630648][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.641663][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.650453][ T49] bridge_slave_1: left allmulticast mode [ 360.656125][ T49] bridge_slave_1: left promiscuous mode [ 360.664015][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.674100][ T49] bridge_slave_0: left allmulticast mode [ 360.680539][ T49] bridge_slave_0: left promiscuous mode [ 360.687646][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.746596][ T49] bond2 (unregistering): Released all slaves [ 360.778869][ T5837] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 360.785989][ T49] bond1 (unregistering): Released all slaves [ 360.978757][ T5837] usb 3-1: Using ep0 maxpacket: 8 [ 360.987113][ T5837] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.999018][ T5837] usb 3-1: config 0 interface 0 has no altsetting 0 [ 361.005706][ T5837] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 361.015390][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.030548][ T5837] usb 3-1: config 0 descriptor?? [ 361.481669][ T5837] logitech 0003:046D:C295.0005: unknown main item tag 0x0 [ 361.498718][ T5837] logitech 0003:046D:C295.0005: unknown main item tag 0x0 [ 361.507380][ T5837] logitech 0003:046D:C295.0005: unknown main item tag 0x0 [ 361.518573][ T5837] logitech 0003:046D:C295.0005: unknown main item tag 0x0 [ 361.537960][ T5837] logitech 0003:046D:C295.0005: unknown main item tag 0x0 [ 361.545998][ T5837] logitech 0003:046D:C295.0005: unknown main item tag 0x0 [ 361.560912][ T5837] logitech 0003:046D:C295.0005: unknown main item tag 0x0 [ 361.570149][ T5837] logitech 0003:046D:C295.0005: unknown main item tag 0x0 [ 361.594415][ T5837] logitech 0003:046D:C295.0005: hidraw0: USB HID v0.03 Device [HID 046d:c295] on usb-dummy_hcd.2-1/input0 [ 361.607361][ T49] team0 (unregistering): Port device team_slave_1 removed [ 361.638187][ T5837] logitech 0003:046D:C295.0005: no inputs found [ 361.684316][ T9] usb 3-1: USB disconnect, device number 24 [ 361.693336][ T49] team0 (unregistering): Port device team_slave_0 removed [ 361.763655][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.766795][T12312] fido_id[12312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 361.787406][ T49] bond_slave_1 (unregistering): left allmulticast mode [ 361.850034][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.861085][ T49] bond_slave_0 (unregistering): left allmulticast mode [ 361.970096][ T5837] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 362.154886][ T5784] Bluetooth: hci0: command tx timeout [ 362.169370][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 362.198956][ T5837] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 362.230772][ T5837] usb 2-1: config 0 has no interface number 0 [ 362.247735][ T5837] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 362.248050][ T49] bond0 (unregistering): Released all slaves [ 362.273685][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.287284][ T5837] usb 2-1: Product: syz [ 362.293030][ T5837] usb 2-1: Manufacturer: syz [ 362.298194][ T5837] usb 2-1: SerialNumber: syz [ 362.314139][ T5837] usb 2-1: config 0 descriptor?? [ 362.334776][ T5837] smsc95xx v2.0.0 [ 362.791838][ T5837] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 362.796357][T12287] chnl_net:caif_netlink_parms(): no params data found [ 362.816229][ T5837] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 363.049415][T12287] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.065398][T12287] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.073592][T12287] bridge_slave_0: entered allmulticast mode [ 363.086253][T12287] bridge_slave_0: entered promiscuous mode [ 363.101429][T12287] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.109327][T12287] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.116660][T12287] bridge_slave_1: entered allmulticast mode [ 363.124579][T12287] bridge_slave_1: entered promiscuous mode [ 363.182033][T12287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.197353][T12287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.326156][T12287] team0: Port device team_slave_0 added [ 363.404616][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.436678][T12287] team0: Port device team_slave_1 added [ 363.527322][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.587270][T12287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.618340][T12287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.653755][T12287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.690852][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.710898][T12287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.717986][T12287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.745435][T12287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.792678][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.842310][T12287] hsr_slave_0: entered promiscuous mode [ 363.849515][T12287] hsr_slave_1: entered promiscuous mode [ 363.859258][T12287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.866893][T12287] Cannot create hsr debugfs directory [ 364.240498][ T5784] Bluetooth: hci0: command tx timeout [ 364.665951][ T5837] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 364.716399][ T5837] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 364.749800][ T5837] usb 2-1: USB disconnect, device number 19 [ 365.144084][T12287] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 365.164572][T12287] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 365.182465][T12287] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 365.212332][T12287] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 365.493637][T12287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.588213][T12287] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.616509][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.624555][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.727670][ T49] hsr_slave_0: left promiscuous mode [ 365.765900][ T49] hsr_slave_1: left promiscuous mode [ 365.773122][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.789118][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.809763][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.817434][T12391] binder: BINDER_SET_CONTEXT_MGR already set [ 365.828972][T12391] binder: 12390:12391 ioctl 4018620d 200000004a80 returned -16 [ 365.848901][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.858257][ T49] bridge_slave_1: left allmulticast mode [ 365.869692][ T49] bridge_slave_1: left promiscuous mode [ 365.875506][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.916398][ T49] veth1_macvtap: left promiscuous mode [ 365.925954][ T49] veth0_macvtap: left promiscuous mode [ 365.937042][ T49] veth1_vlan: left promiscuous mode [ 365.946821][ T49] veth0_vlan: left promiscuous mode [ 366.277681][ T49] bond2 (unregistering): Released all slaves [ 366.319078][ T5784] Bluetooth: hci0: command tx timeout [ 366.337349][ T49] bond1 (unregistering): Released all slaves [ 366.466804][T12419] Invalid argument reading file caps for ./file0 [ 366.722753][T12422] ======================================================= [ 366.722753][T12422] WARNING: The mand mount option has been deprecated and [ 366.722753][T12422] and is ignored by this kernel. Remove the mand [ 366.722753][T12422] option from the mount to silence this warning. [ 366.722753][T12422] ======================================================= [ 367.264475][ T49] team0 (unregistering): Port device team_slave_1 removed [ 367.354192][ T49] team0 (unregistering): Port device team_slave_0 removed [ 367.421715][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.483462][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.712118][T12444] binder: BINDER_SET_CONTEXT_MGR already set [ 367.725259][T12444] binder: 12443:12444 ioctl 4018620d 200000004a80 returned -16 [ 367.900754][ T49] bond0 (unregistering): Released all slaves [ 368.016143][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2396'. [ 368.032230][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.039508][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.394493][ T5784] Bluetooth: hci0: command tx timeout [ 368.498956][ T5815] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 368.590623][T12462] capability: warning: `syz.1.2400' uses deprecated v2 capabilities in a way that may be insecure [ 368.606484][T12464] binder: 12463:12464 ioctl c0306201 200000000780 returned -14 [ 368.608324][T12287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.651832][T12462] 9pnet_fd: p9_fd_create_tcp (12462): problem binding to privport [ 368.693028][T12287] veth0_vlan: entered promiscuous mode [ 368.698660][ T5815] usb 3-1: device descriptor read/64, error -71 [ 368.727238][T12287] veth1_vlan: entered promiscuous mode [ 368.793287][T12287] veth0_macvtap: entered promiscuous mode [ 368.809846][T12287] veth1_macvtap: entered promiscuous mode [ 368.836444][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.848626][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.862067][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.882637][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.892851][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.903555][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.915740][T12287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.927087][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.944692][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.956250][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.968602][ T5815] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 368.972477][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.986351][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.997131][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.016123][T12287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.041986][T12287] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.056793][T12287] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.069381][T12287] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.078140][T12287] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.148601][ T5815] usb 3-1: device descriptor read/64, error -71 [ 369.197328][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.214592][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.272361][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.281558][ T5815] usb usb3-port1: attempt power cycle [ 369.285818][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.529815][T12481] binder: BINDER_SET_CONTEXT_MGR already set [ 369.535993][T12481] binder: 12480:12481 ioctl 4018620d 200000004a80 returned -16 [ 369.703049][ T5815] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 369.754859][ T5815] usb 3-1: device descriptor read/8, error -71 [ 370.048916][ T5815] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 370.093367][ T5815] usb 3-1: device descriptor read/8, error -71 [ 370.247036][ T5815] usb usb3-port1: unable to enumerate USB device [ 370.295333][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.315410][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.333389][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.346301][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.355754][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 370.363168][T10433] .`: (slave syz_tun): Releasing backup interface [ 370.370123][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.504565][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.642075][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.789812][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.864581][T12523] binder: 12522:12523 ioctl 4018620d 0 returned -22 [ 370.888293][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.913303][T12492] chnl_net:caif_netlink_parms(): no params data found [ 370.999327][T12492] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.006652][T12492] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.014377][T12492] bridge_slave_0: entered allmulticast mode [ 371.022218][T12492] bridge_slave_0: entered promiscuous mode [ 371.034057][T12492] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.041842][T12492] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.049673][T12492] bridge_slave_1: entered allmulticast mode [ 371.057127][T12492] bridge_slave_1: entered promiscuous mode [ 371.133365][T12492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.150485][T12492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.198095][T12532] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 371.222023][T12492] team0: Port device team_slave_0 added [ 371.280403][T12492] team0: Port device team_slave_1 added [ 371.372650][T12492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.393403][T12492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.448942][T12492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.586354][T12492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.610281][T12492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.653606][T12492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.908134][T12492] hsr_slave_0: entered promiscuous mode [ 371.940963][T12492] hsr_slave_1: entered promiscuous mode [ 372.258622][ T42] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 372.418607][ T42] usb 2-1: device descriptor read/64, error -71 [ 372.469254][ T5784] Bluetooth: hci1: command tx timeout [ 372.478840][T12570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2429'. [ 372.709006][ T42] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 372.868779][ T42] usb 2-1: device descriptor read/64, error -71 [ 372.896514][ T41] .`: left promiscuous mode [ 372.916731][ T41] bond_slave_0: left promiscuous mode [ 372.929397][ T41] bond_slave_1: left promiscuous mode [ 372.937203][ T41] batadv0: left promiscuous mode [ 372.950349][ T41] hsr_slave_0: left promiscuous mode [ 372.966080][ T41] hsr_slave_1: left promiscuous mode [ 372.985722][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.003665][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.011470][ T42] usb usb2-port1: attempt power cycle [ 373.019449][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.037162][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.052761][ T41] team0: left allmulticast mode [ 373.061915][ T41] team_slave_0: left allmulticast mode [ 373.073487][ T41] team_slave_1: left allmulticast mode [ 373.079763][ T41] team0: left promiscuous mode [ 373.084590][ T41] team_slave_0: left promiscuous mode [ 373.090974][ T41] team_slave_1: left promiscuous mode [ 373.096871][ T41] bridge0: port 3(team0) entered disabled state [ 373.119538][ T41] bridge_slave_1: left allmulticast mode [ 373.128498][ T41] bridge_slave_1: left promiscuous mode [ 373.136003][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.163123][ T41] bridge_slave_0: left allmulticast mode [ 373.177079][ T41] bridge_slave_0: left promiscuous mode [ 373.193464][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.266610][ T41] veth1_macvtap: left promiscuous mode [ 373.283017][ T41] veth0_macvtap: left promiscuous mode [ 373.295019][ T41] veth1_vlan: left promiscuous mode [ 373.300939][ T41] veth0_vlan: left promiscuous mode [ 373.459379][ T42] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 373.519785][ T42] usb 2-1: device descriptor read/8, error -71 [ 373.654267][ T41] team0 (unregistering): Port device bridge1 removed [ 373.706930][ T41] bond0 (unregistering): Released all slaves [ 373.830871][ T42] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 373.899871][ T42] usb 2-1: device descriptor read/8, error -71 [ 374.128711][ T42] usb usb2-port1: unable to enumerate USB device [ 374.487981][ T41] team0 (unregistering): Port device team_slave_1 removed [ 374.546467][ T41] team0 (unregistering): Port device team_slave_0 removed [ 374.554588][ T5784] Bluetooth: hci1: command tx timeout [ 374.606869][ T41] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.656437][ T41] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.097248][ T41] .` (unregistering): Released all slaves [ 375.913759][T12492] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 375.947951][T12492] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 376.031024][T12492] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 376.065094][T12492] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 376.108749][ T787] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 376.300659][ T787] usb 3-1: device descriptor read/64, error -71 [ 376.312890][ T41] IPVS: stop unused estimator thread 0... [ 376.580838][T12492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.632516][ T5784] Bluetooth: hci1: command tx timeout [ 376.639695][T12492] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.679817][ T787] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 376.702720][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.709972][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.759639][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.766873][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.848565][ T787] usb 3-1: device descriptor read/64, error -71 [ 376.897078][T12492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.978818][ T787] usb usb3-port1: attempt power cycle [ 377.381403][T12492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.399001][ T787] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 377.443426][ T787] usb 3-1: device descriptor read/8, error -71 [ 377.507870][T12492] veth0_vlan: entered promiscuous mode [ 377.539837][T12492] veth1_vlan: entered promiscuous mode [ 377.635140][T12492] veth0_macvtap: entered promiscuous mode [ 377.664243][T12492] veth1_macvtap: entered promiscuous mode [ 377.718663][ T787] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 377.723094][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.753829][ T787] usb 3-1: device descriptor read/8, error -71 [ 377.757849][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.791652][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.811476][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.838855][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.861316][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.888737][ T787] usb usb3-port1: unable to enumerate USB device [ 377.900033][T12492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.930802][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.957721][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.995391][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.016181][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.026504][T12492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.044253][T12492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.067901][T12492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.094778][T12492] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.110452][T12492] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.132957][T12492] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.151642][T12492] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.295103][T12505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.318572][T12505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.397539][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.412638][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.711490][ T5784] Bluetooth: hci1: command tx timeout [ 378.952533][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.959070][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.858992][ T5815] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 380.048716][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 380.067193][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.088267][ T5815] usb 3-1: config 0 has no interfaces? [ 380.101651][ T5815] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 380.113702][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 380.131789][ T5815] usb 3-1: Product: syz [ 380.146364][ T5815] usb 3-1: Manufacturer: syz [ 380.151421][ T5815] usb 3-1: SerialNumber: syz [ 380.167487][ T5815] usb 3-1: config 0 descriptor?? [ 380.430826][ T5837] usb 3-1: USB disconnect, device number 33 [ 381.009405][ T5837] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 381.200231][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.212423][ T5837] usb 3-1: config 0 has no interfaces? [ 381.222512][ T5837] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 381.234058][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 381.244784][ T5837] usb 3-1: Product: syz [ 381.252159][ T5837] usb 3-1: Manufacturer: syz [ 381.256832][ T5837] usb 3-1: SerialNumber: syz [ 381.275637][ T5837] usb 3-1: config 0 descriptor?? [ 381.495405][ T5815] usb 3-1: USB disconnect, device number 34 [ 382.153534][ T5815] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 382.349499][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 382.420221][T12769] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 382.493908][ T5815] usb 4-1: unable to get BOS descriptor or descriptor too short [ 382.511970][ T5815] usb 4-1: no configurations [ 382.516767][ T5815] usb 4-1: can't read configurations, error -22 [ 383.128960][ T5837] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 383.318509][ T5837] usb 1-1: Using ep0 maxpacket: 32 [ 383.327630][ T5837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.342094][ T5837] usb 1-1: config 0 has no interfaces? [ 383.362173][ T5837] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 383.378733][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 383.397236][ T5837] usb 1-1: Product: syz [ 383.401594][ T5837] usb 1-1: Manufacturer: syz [ 383.406224][ T5837] usb 1-1: SerialNumber: syz [ 383.434992][ T5837] usb 1-1: config 0 descriptor?? [ 383.652378][ T5837] usb 1-1: USB disconnect, device number 31 [ 384.228811][ T5837] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 384.247665][T12821] overlayfs: failed to resolve './bus': -2 [ 384.420469][ T5837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.430882][ T5837] usb 1-1: config 0 has no interfaces? [ 384.439483][ T5837] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 384.448984][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 384.457242][ T5837] usb 1-1: Product: syz [ 384.461507][ T5837] usb 1-1: Manufacturer: syz [ 384.466148][ T5837] usb 1-1: SerialNumber: syz [ 384.482746][ T5837] usb 1-1: config 0 descriptor?? [ 384.698126][ T42] usb 1-1: USB disconnect, device number 32 [ 385.818508][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 386.028630][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 386.037491][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.049319][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.059692][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 386.111630][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 386.123224][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.149409][ T9] usb 3-1: config 0 descriptor?? [ 386.753281][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 386.767010][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 386.792350][ T9] usb 3-1: USB disconnect, device number 35 [ 388.412549][T12913] binder: BINDER_SET_CONTEXT_MGR already set [ 388.419701][T12913] binder: 12912:12913 ioctl 4018620d 200000000040 returned -16 [ 388.524324][T12916] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2534'. [ 389.334245][T12940] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2544'. [ 389.804457][T12962] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2554'. [ 390.586051][T12990] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2565'. [ 390.731887][T12998] binder: 12997:12998 ioctl 4018620d 0 returned -22 [ 390.897216][T13005] binder: BINDER_SET_CONTEXT_MGR already set [ 390.903516][T13005] binder: 13004:13005 ioctl 4018620d 200000000040 returned -16 [ 391.275432][T13017] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2578'. [ 391.625475][T13029] binder: 13027:13029 unknown command 0 [ 391.653526][T13029] binder: 13027:13029 ioctl c0306201 200000000080 returned -22 [ 391.775156][T13036] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2588'. [ 392.304799][T13064] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2599'. [ 392.658806][T13074] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 392.998213][T13088] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2608'. [ 394.038556][ T787] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 394.220573][ T787] usb 3-1: config 0 has no interfaces? [ 394.232491][ T787] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 394.251538][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.273318][ T787] usb 3-1: config 0 descriptor?? [ 394.360239][T13111] syzkaller0: entered promiscuous mode [ 394.365998][T13111] syzkaller0: entered allmulticast mode [ 394.507095][ T8] usb 3-1: USB disconnect, device number 36 [ 394.652940][T13116] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2620'. [ 395.902879][T13140] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2630'. [ 397.241275][T13145] loop0: detected capacity change from 0 to 32768 [ 397.326244][T13145] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 397.418886][T13145] XFS (loop0): Ending clean mount [ 397.545683][ T42] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 397.558133][T12492] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 397.568659][ T42] XFS (loop0): Unmount and run xfs_repair [ 397.575283][ T42] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 397.584269][ T42] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 397.596213][ T42] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 397.605641][ T42] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 397.615323][ T42] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 397.625588][ T42] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 397.641681][ T42] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 397.653445][ T42] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 397.662482][ T42] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 397.675806][ T787] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 397.701035][ T787] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x182e/0x1df0 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 397.721947][ T787] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 399.543235][T13200] Illegal XDP return value 4294967294 on prog (id 56) dev N/A, expect packet loss! [ 400.806953][T13213] loop1: detected capacity change from 0 to 32768 [ 400.914053][T13213] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 401.060197][T13213] XFS (loop1): Ending clean mount [ 401.106965][T13213] XFS (loop1): Quotacheck needed: Please wait. [ 401.167753][T13233] loop3: detected capacity change from 0 to 8 [ 401.235760][T13213] XFS (loop1): Quotacheck: Done. [ 401.322189][T13232] loop2: detected capacity change from 0 to 4096 [ 401.351485][T13232] EXT4-fs: inline encryption not supported [ 401.372045][T13213] syz.1.2652 (13213): drop_caches: 2 [ 401.427624][T13232] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 401.449773][T13232] EXT4-fs (loop2): Test dummy encryption mode enabled [ 401.482377][T11940] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 401.565140][T13217] loop0: detected capacity change from 0 to 40427 [ 401.566472][T13232] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 401.593293][T13232] System zones: 0-5 [ 401.605737][T13217] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 401.641208][T13217] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 401.643315][T13232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.722240][ T5784] Bluetooth: hci2: unexpected event for opcode 0x0404 [ 401.742844][T13217] F2FS-fs (loop0): invalid crc value [ 401.758556][ T9] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 401.850569][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.946211][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 401.955757][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.986138][ T9] usb 4-1: Product: syz [ 402.028923][ T9] usb 4-1: Manufacturer: syz [ 402.033592][ T9] usb 4-1: SerialNumber: syz [ 402.067150][ T9] usb 4-1: config 0 descriptor?? [ 402.098623][T13217] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 402.111375][T13217] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 402.115009][T13245] binder: 13244:13245 unknown command 0 [ 402.135092][T13245] binder: 13244:13245 ioctl c0306201 200000000080 returned -22 [ 402.212767][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 402.212783][ T27] audit: type=1800 audit(1781937868.563:16): pid=13217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2655" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 402.306829][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 403.380223][T12492] syz-executor: attempt to access beyond end of device [ 403.380223][T12492] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 403.450222][T12492] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 403.473810][T12492] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 404.358361][ T9] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 404.381198][ T9] usb 4-1: USB disconnect, device number 24 [ 405.554694][T13272] ecryptfs_parse_options: eCryptfs: unrecognized option [grpquota] [ 405.562880][T13272] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 405.577758][T13272] Error parsing options; rc = [-22] [ 405.910070][T13275] binder: 13274:13275 unknown command 0 [ 405.915906][T13275] binder: 13274:13275 ioctl c0306201 200000000080 returned -22 [ 406.023185][T13278] loop5: detected capacity change from 0 to 4095 [ 406.073026][ C0] I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 406.096012][ C0] I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 406.105794][ C0] Buffer I/O error on dev loop5, logical block 480, async page read [ 406.212634][ T5784] Bluetooth: hci2: unexpected event for opcode 0x200a [ 406.511797][T13273] loop0: detected capacity change from 0 to 32768 [ 406.579060][T13273] (syz.0.2664,13273,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 406.638875][T13273] (syz.0.2664,13273,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 406.743010][T13273] JBD2: Ignoring recovery information on journal [ 406.823467][T13279] loop3: detected capacity change from 0 to 32768 [ 406.891047][T13279] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 406.988061][T13273] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 407.074346][T13279] XFS (loop3): Ending clean mount [ 407.397272][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.410136][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.419601][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.429933][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.446340][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 407.454187][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.507467][T12287] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 407.544243][T12517] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.785103][T12517] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.084583][T12517] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.986356][T12517] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.002165][T13317] binder: 13316:13317 unknown command 0 [ 409.018051][T13317] binder: 13316:13317 ioctl c0306201 200000000080 returned -22 [ 409.227454][T12492] ocfs2: Unmounting device (7,0) on (node local) [ 409.374283][T13299] chnl_net:caif_netlink_parms(): no params data found [ 409.515079][ T5784] Bluetooth: hci2: command tx timeout [ 409.679442][T12517] bond2: (slave ip6gretap1): Releasing active interface [ 410.816046][T13299] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.828839][T13299] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.837982][T13299] bridge_slave_0: entered allmulticast mode [ 410.847816][T13299] bridge_slave_0: entered promiscuous mode [ 410.931458][T13347] binder: 13346:13347 unknown command 0 [ 410.937143][T13347] binder: 13346:13347 ioctl c0306201 200000000080 returned -22 [ 410.991811][T13299] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.009628][T13299] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.016957][T13299] bridge_slave_1: entered allmulticast mode [ 411.049888][T13299] bridge_slave_1: entered promiscuous mode [ 411.304301][T13299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.361656][T13299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.567058][T13299] team0: Port device team_slave_0 added [ 411.588669][ T5782] Bluetooth: hci2: command tx timeout [ 411.652159][T13343] loop0: detected capacity change from 0 to 32768 [ 411.666674][T13299] team0: Port device team_slave_1 added [ 411.711190][T13343] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2687 (13343) [ 411.788010][T13351] loop1: detected capacity change from 0 to 40427 [ 411.824310][T13343] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 411.829113][T13351] F2FS-fs (loop1): invalid crc value [ 411.851881][T13343] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 411.898917][T13343] BTRFS info (device loop0): setting nodatasum [ 411.905199][T13343] BTRFS info (device loop0): using free space tree [ 411.921714][T13299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.929006][T13351] F2FS-fs (loop1): Found nat_bits in checkpoint [ 411.951234][T13299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.013103][T13299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.062495][T13299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.070473][T13299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.095219][T13351] F2FS-fs (loop1): Start checkpoint disabled! [ 412.096411][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.133619][T13299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.167205][T13351] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 412.251040][T13351] syz.1.2688: attempt to access beyond end of device [ 412.251040][T13351] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 412.289180][T13343] BTRFS info (device loop0): enabling ssd optimizations [ 412.296365][T13343] BTRFS info (device loop0): auto enabling async discard [ 412.466640][T13299] hsr_slave_0: entered promiscuous mode [ 412.492125][T13299] hsr_slave_1: entered promiscuous mode [ 412.520178][T13299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.538994][T13299] Cannot create hsr debugfs directory [ 412.573707][ T49] kworker/u4:3: attempt to access beyond end of device [ 412.573707][ T49] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 412.618505][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 412.628648][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 412.639769][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 412.887681][T12492] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 413.011654][T12517] hsr_slave_0: left promiscuous mode [ 413.045751][T12517] hsr_slave_1: left promiscuous mode [ 413.120472][T12517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.127954][T12517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.169613][T12517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.187400][T12517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.285312][T12517] team0: left promiscuous mode [ 413.298477][T12517] team_slave_0: left promiscuous mode [ 413.325478][T12517] team_slave_1: left promiscuous mode [ 413.350895][T12517] bridge0: port 3(team0) entered disabled state [ 413.453680][T12517] bridge_slave_1: left allmulticast mode [ 413.476726][T12517] bridge_slave_1: left promiscuous mode [ 413.491420][T12517] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.545005][T12517] bridge_slave_0: left allmulticast mode [ 413.568484][T12517] bridge_slave_0: left promiscuous mode [ 413.581591][T12517] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.676314][ T5782] Bluetooth: hci2: command tx timeout [ 413.684520][T12517] veth1_macvtap: left promiscuous mode [ 413.694338][T12517] veth0_macvtap: left promiscuous mode [ 413.701722][T12517] veth1_vlan: left promiscuous mode [ 413.707076][T12517] veth0_vlan: left promiscuous mode [ 413.980557][T13408] binder: 13407:13408 ioctl 4018620d 0 returned -22 [ 414.014769][T13408] binder: 13407:13408 unknown command 0 [ 414.029171][T13408] binder: 13407:13408 ioctl c0306201 200000000080 returned -22 [ 414.052761][T12517] team0 (unregistering): Port device bridge1 removed [ 414.411088][T12517] bond2 (unregistering): Released all slaves [ 414.464538][T12517] bond1 (unregistering): Released all slaves [ 415.091444][T12517] team_slave_1 (unregistering): left allmulticast mode [ 415.100935][T12517] team0 (unregistering): Port device team_slave_1 removed [ 415.153853][T12517] team_slave_0 (unregistering): left allmulticast mode [ 415.164235][T12517] team0 (unregistering): Port device team_slave_0 removed [ 415.211586][T12517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.265933][T12517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.768349][ T5782] Bluetooth: hci2: command tx timeout [ 415.791553][T12517] bond0 (unregistering): Released all slaves [ 417.528293][T13444] loop0: detected capacity change from 0 to 32768 [ 417.552578][T13444] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.2712 (13444) [ 417.585983][T13444] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 417.599958][T13444] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 417.609082][T13444] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 417.643206][T13444] BTRFS info (device loop0): use zstd compression, level 3 [ 417.685326][T13444] BTRFS info (device loop0): force clearing of disk cache [ 417.706846][T13444] BTRFS info (device loop0): enabling disk space caching [ 417.728600][T13444] BTRFS info (device loop0): disk space caching is enabled [ 417.891244][T13299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 417.913245][T13299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 417.940094][T13444] BTRFS info (device loop0): enabling ssd optimizations [ 417.960283][T13444] BTRFS info (device loop0): auto enabling async discard [ 417.979508][T13299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 417.993708][T13444] BTRFS info (device loop0): rebuilding free space tree [ 418.007991][T13299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 418.059603][T13444] BTRFS info (device loop0): disabling free space tree [ 418.066779][T13444] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 418.078631][T13444] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 418.267394][T13299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.306416][T13299] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.329728][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.336982][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.393559][T12511] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.400717][T12511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.465771][T12492] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 419.653307][T13299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.910851][T13299] veth0_vlan: entered promiscuous mode [ 419.968060][T13299] veth1_vlan: entered promiscuous mode [ 420.124442][T13299] veth0_macvtap: entered promiscuous mode [ 420.188043][T13299] veth1_macvtap: entered promiscuous mode [ 420.265128][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.307873][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.331643][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.368474][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.378366][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.456154][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.492808][T13299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.516932][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.573178][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.611835][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.658456][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.690805][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.718458][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.740141][T13299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.783010][T13502] loop0: detected capacity change from 0 to 40427 [ 420.798311][T13299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.807400][T13502] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 420.830450][T13299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.837698][T13502] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 420.848474][T13299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.864199][T13502] F2FS-fs (loop0): invalid crc value [ 420.866871][T13299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.912598][T13502] F2FS-fs (loop0): Found nat_bits in checkpoint [ 421.078999][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.107397][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.184571][T13502] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 421.192807][T13502] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 421.204690][T12511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.215360][T12511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.911425][T13562] loop2: detected capacity change from 0 to 40427 [ 423.947729][T13562] F2FS-fs (loop2): heap/no_heap options were deprecated [ 423.966970][T13562] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x7ffff [ 424.250582][T13577] loop0: detected capacity change from 0 to 32768 [ 424.306191][T13577] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2728 (13577) [ 424.390016][T13577] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 424.431670][T13577] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 424.463230][T13577] BTRFS info (device loop0): force clearing of disk cache [ 424.493393][T13577] BTRFS info (device loop0): enabling auto defrag [ 424.568298][T13577] BTRFS info (device loop0): max_inline at 0 [ 424.602908][T13577] BTRFS info (device loop0): enabling disk space caching [ 424.633316][T13577] BTRFS info (device loop0): disk space caching is enabled [ 424.954092][T13577] BTRFS info (device loop0): enabling ssd optimizations [ 424.973527][T13577] BTRFS info (device loop0): rebuilding free space tree [ 425.038844][T13577] BTRFS info (device loop0): disabling free space tree [ 425.088657][T13577] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 425.140778][T13577] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 425.353262][T12492] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 426.743126][T13635] loop1: detected capacity change from 0 to 8 [ 428.264877][T13668] loop2: detected capacity change from 0 to 256 [ 428.357707][T13672] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 430.472515][T13695] loop2: detected capacity change from 0 to 2048 [ 430.573264][T13695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.588884][ T5837] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 430.982559][ T5837] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.138892][ T5837] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.200171][T13701] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 431.232008][ T5837] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.247698][T13701] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 431.262141][ T5837] usb 2-1: config 1 interface 0 has no altsetting 0 [ 431.269774][T13701] EXT4-fs (loop2): This should not happen!! Data will be lost [ 431.269774][T13701] [ 431.280808][T13701] EXT4-fs (loop2): Total free blocks count 0 [ 431.283528][T13685] loop3: detected capacity change from 0 to 32768 [ 431.291138][T13701] EXT4-fs (loop2): Free/Dirty block details [ 431.303945][T13701] EXT4-fs (loop2): free_blocks=2415919104 [ 431.311570][T13701] EXT4-fs (loop2): dirty_blocks=64 [ 431.317041][T13701] EXT4-fs (loop2): Block reservation details [ 431.328107][T13701] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 431.338046][ T5837] usb 2-1: string descriptor 0 read error: -22 [ 431.344679][ T5837] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 431.356669][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.441061][T13685] JBD2: Ignoring recovery information on journal [ 431.481026][T13697] loop0: detected capacity change from 0 to 32768 [ 431.517323][T13697] (syz.0.2760,13697,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 431.517732][T12501] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 431.555751][T13685] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 431.565848][T13697] (syz.0.2760,13697,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 431.725539][T13697] JBD2: Ignoring recovery information on journal [ 431.734581][T13707] binder: BINDER_SET_CONTEXT_MGR already set [ 431.741178][T13707] binder: 13706:13707 ioctl 4018620d 200000000040 returned -16 [ 431.821812][ T5837] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 431.842568][ T5837] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:0926:3333.0006/input/input14 [ 431.897873][T13697] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 432.015281][T13697] [ 432.017677][T13697] ====================================================== [ 432.024715][T13697] WARNING: possible circular locking dependency detected [ 432.031773][T13697] syzkaller #0 Not tainted [ 432.036209][T13697] ------------------------------------------------------ [ 432.043249][T13697] syz.0.2760/13697 is trying to acquire lock: [ 432.049331][T13697] ffff88807876d118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 432.062645][T13697] [ 432.062645][T13697] but task is already holding lock: [ 432.070032][T13697] ffff88805eca4e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0 [ 432.079617][T13697] [ 432.079617][T13697] which lock already depends on the new lock. [ 432.079617][T13697] [ 432.090050][T13697] [ 432.090050][T13697] the existing dependency chain (in reverse order) is: [ 432.099096][T13697] [ 432.099096][T13697] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 432.106979][T13697] down_read+0x46/0x2e0 [ 432.111859][T13697] ocfs2_init_acl+0x30a/0x770 [ 432.117092][T13697] ocfs2_mknod+0x1427/0x2310 [ 432.122237][T13697] ocfs2_mkdir+0x196/0x430 [ 432.127209][T13697] vfs_mkdir+0x2a5/0x470 [ 432.132073][T13697] do_mkdirat+0x1dc/0x450 [ 432.136965][T13697] __x64_sys_mkdirat+0x89/0xa0 [ 432.142290][T13697] do_syscall_64+0x55/0xb0 [ 432.147326][T13697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.153917][T13697] [ 432.153917][T13697] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 432.162484][T13697] down_read+0x46/0x2e0 [ 432.167200][T13697] ocfs2_start_trans+0x3a8/0x6f0 [ 432.172714][T13697] ocfs2_modify_bh+0xe4/0x4c0 [ 432.177964][T13697] ocfs2_local_read_info+0x1433/0x17d0 [ 432.184002][T13697] dquot_load_quota_sb+0x734/0xb30 [ 432.189732][T13697] dquot_load_quota_inode+0x2d7/0x5c0 [ 432.195673][T13697] ocfs2_enable_quotas+0x1c4/0x4a0 [ 432.201360][T13697] ocfs2_fill_super+0x4187/0x5030 [ 432.206957][T13697] mount_bdev+0x21c/0x2c0 [ 432.211890][T13697] legacy_get_tree+0xea/0x180 [ 432.217161][T13697] vfs_get_tree+0x8c/0x280 [ 432.222132][T13697] do_new_mount+0x24a/0xa40 [ 432.227199][T13697] __se_sys_mount+0x2e7/0x3d0 [ 432.232431][T13697] do_syscall_64+0x55/0xb0 [ 432.237405][T13697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.243865][T13697] [ 432.243865][T13697] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 432.251387][T13697] ocfs2_start_trans+0x2a9/0x6f0 [ 432.256883][T13697] ocfs2_mknod+0xf33/0x2310 [ 432.261947][T13697] ocfs2_mkdir+0x196/0x430 [ 432.266939][T13697] vfs_mkdir+0x2a5/0x470 [ 432.271742][T13697] do_mkdirat+0x1dc/0x450 [ 432.276623][T13697] __x64_sys_mkdirat+0x89/0xa0 [ 432.281943][T13697] do_syscall_64+0x55/0xb0 [ 432.286925][T13697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.293391][T13697] [ 432.293391][T13697] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 432.303956][T13697] down_write+0x97/0x200 [ 432.308774][T13697] ocfs2_reserve_local_alloc_bits+0x120/0x2620 [ 432.315493][T13697] ocfs2_reserve_clusters_with_limit+0x1ba/0xc20 [ 432.322388][T13697] ocfs2_mknod+0xed1/0x2310 [ 432.327456][T13697] ocfs2_mkdir+0x196/0x430 [ 432.332428][T13697] vfs_mkdir+0x2a5/0x470 [ 432.337224][T13697] do_mkdirat+0x1dc/0x450 [ 432.342197][T13697] __x64_sys_mkdirat+0x89/0xa0 [ 432.347520][T13697] do_syscall_64+0x55/0xb0 [ 432.352503][T13697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.358972][T13697] [ 432.358972][T13697] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 432.369984][T13697] __lock_acquire+0x37ef/0x7d80 [ 432.375449][T13697] lock_acquire+0x19e/0x420 [ 432.380503][T13697] down_write+0x97/0x200 [ 432.385295][T13697] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 432.391740][T13697] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 432.398618][T13697] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 432.404809][T13697] ocfs2_xattr_set+0xc75/0x13a0 [ 432.410215][T13697] ocfs2_set_acl+0x4d4/0x580 [ 432.415353][T13697] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 432.420837][T13697] vfs_set_acl+0x80f/0xa70 [ 432.425810][T13697] do_set_acl+0xf5/0x180 [ 432.430632][T13697] path_setxattr+0x362/0x590 [ 432.435777][T13697] __x64_sys_lsetxattr+0xb8/0xd0 [ 432.441248][T13697] do_syscall_64+0x55/0xb0 [ 432.446186][T13697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.452609][T13697] [ 432.452609][T13697] other info that might help us debug this: [ 432.452609][T13697] [ 432.462857][T13697] Chain exists of: [ 432.462857][T13697] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 432.462857][T13697] [ 432.479843][T13697] Possible unsafe locking scenario: [ 432.479843][T13697] [ 432.487310][T13697] CPU0 CPU1 [ 432.492670][T13697] ---- ---- [ 432.498058][T13697] lock(&oi->ip_xattr_sem); [ 432.502655][T13697] lock(&journal->j_trans_barrier); [ 432.510469][T13697] lock(&oi->ip_xattr_sem); [ 432.517610][T13697] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 432.525027][T13697] [ 432.525027][T13697] *** DEADLOCK *** [ 432.525027][T13697] [ 432.533218][T13697] 3 locks held by syz.0.2760/13697: [ 432.538417][T13697] #0: ffff88806d9da418 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 432.547692][T13697] #1: ffff88805eca5118 (&type->i_mutex_dir_key#14){+.+.}-{3:3}, at: vfs_set_acl+0x368/0xa70 [ 432.557901][T13697] #2: ffff88805eca4e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0 [ 432.567861][T13697] [ 432.567861][T13697] stack backtrace: [ 432.574030][T13697] CPU: 1 PID: 13697 Comm: syz.0.2760 Not tainted syzkaller #0 [ 432.581496][T13697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 432.591580][T13697] Call Trace: [ 432.594868][T13697] [ 432.597809][T13697] dump_stack_lvl+0x18c/0x250 [ 432.602499][T13697] ? load_image+0x420/0x420 [ 432.607067][T13697] ? show_regs_print_info+0x20/0x20 [ 432.612332][T13697] ? print_circular_bug+0x12b/0x1a0 [ 432.617552][T13697] check_noncircular+0x2fc/0x400 [ 432.622531][T13697] ? look_up_lock_class+0x75/0x140 [ 432.627664][T13697] ? print_deadlock_bug+0x5d0/0x5d0 [ 432.632902][T13697] ? lockdep_lock+0xf5/0x230 [ 432.637520][T13697] ? _find_first_zero_bit+0xd6/0x100 [ 432.642907][T13697] __lock_acquire+0x37ef/0x7d80 [ 432.647796][T13697] ? verify_lock_unused+0x140/0x140 [ 432.653033][T13697] ? __lock_acquire+0x7d80/0x7d80 [ 432.658075][T13697] ? verify_lock_unused+0x140/0x140 [ 432.663289][T13697] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 432.668959][T13697] ? do_raw_spin_lock+0x11f/0x2b0 [ 432.674010][T13697] ? mutex_unlock+0x10/0x10 [ 432.678534][T13697] lock_acquire+0x19e/0x420 [ 432.683065][T13697] ? ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 432.689192][T13697] ? ocfs2_get_system_file_inode+0x1f1/0x820 [ 432.695194][T13697] ? __might_sleep+0xe0/0xe0 [ 432.699846][T13697] ? read_lock_is_recursive+0x20/0x20 [ 432.705280][T13697] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 432.711499][T13697] ? verify_lock_unused+0x140/0x140 [ 432.716733][T13697] ? check_noncircular+0x18a/0x400 [ 432.722009][T13697] down_write+0x97/0x200 [ 432.726286][T13697] ? ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 432.732391][T13697] ? down_read_killable+0x340/0x340 [ 432.737608][T13697] ? deref_stack_reg+0x1ab/0x230 [ 432.742605][T13697] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 432.748515][T13697] ? mark_lock+0x94/0x320 [ 432.752874][T13697] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 432.758870][T13697] ? __lock_acquire+0x7d80/0x7d80 [ 432.763937][T13697] ? lock_chain_count+0x20/0x20 [ 432.768826][T13697] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 432.774732][T13697] ? lockdep_hardirqs_on+0x98/0x150 [ 432.779973][T13697] ? ocfs2_block_group_search+0x470/0x470 [ 432.785718][T13697] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 432.791635][T13697] ? _raw_spin_unlock+0x40/0x40 [ 432.796608][T13697] ? stack_trace_save+0xaa/0x100 [ 432.801595][T13697] ? stack_trace_snprint+0xf0/0xf0 [ 432.806820][T13697] ? __stack_depot_save+0x575/0x660 [ 432.812125][T13697] ? kasan_set_track+0x5f/0x70 [ 432.816901][T13697] ? kasan_set_track+0x4e/0x70 [ 432.821695][T13697] ? __kasan_kmalloc+0x8f/0xa0 [ 432.826479][T13697] ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0 [ 432.833008][T13697] ? ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 432.838829][T13697] ? ocfs2_xattr_set+0xc75/0x13a0 [ 432.843886][T13697] ? ocfs2_set_acl+0x4d4/0x580 [ 432.848652][T13697] ? ocfs2_iop_set_acl+0x1b2/0x2b0 [ 432.853773][T13697] ? vfs_set_acl+0x80f/0xa70 [ 432.858400][T13697] ? do_set_acl+0xf5/0x180 [ 432.862841][T13697] ? path_setxattr+0x362/0x590 [ 432.867632][T13697] ? __x64_sys_lsetxattr+0xb8/0xd0 [ 432.872796][T13697] ? do_syscall_64+0x55/0xb0 [ 432.877409][T13697] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.883537][T13697] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 432.889887][T13697] ? ocfs2_init_steal_slots+0x160/0x160 [ 432.895441][T13697] ? ocfs2_xattr_block_set+0x2dc0/0x2dc0 [ 432.901097][T13697] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 432.906755][T13697] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 432.912843][T13697] ? ocfs2_truncate_log_needs_flush+0x130/0x310 [ 432.919160][T13697] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 432.925092][T13697] ? down_write+0x16e/0x200 [ 432.929632][T13697] ? down_read_killable+0x340/0x340 [ 432.934864][T13697] ? up_write+0x1be/0x410 [ 432.939223][T13697] ocfs2_xattr_set+0xc75/0x13a0 [ 432.944104][T13697] ? _raw_spin_unlock+0x40/0x40 [ 432.949001][T13697] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 432.954744][T13697] ? ocfs2_set_acl+0xe6/0x580 [ 432.959447][T13697] ? vfs_set_acl+0x80f/0xa70 [ 432.964056][T13697] ? do_set_acl+0xf5/0x180 [ 432.968476][T13697] ? path_setxattr+0x362/0x590 [ 432.973262][T13697] ? do_syscall_64+0x55/0xb0 [ 432.977863][T13697] ? from_kgid+0x153/0x6a0 [ 432.982343][T13697] ? make_kgid+0x650/0x650 [ 432.986783][T13697] ? ocfs2_set_acl+0xe6/0x580 [ 432.991466][T13697] ? rcu_is_watching+0x15/0xb0 [ 432.996243][T13697] ? ocfs2_set_acl+0xe6/0x580 [ 433.000924][T13697] ? __kmalloc+0xe5/0x240 [ 433.005323][T13697] ocfs2_set_acl+0x4d4/0x580 [ 433.009925][T13697] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 433.014872][T13697] ? ocfs2_xattr_get+0x260/0x260 [ 433.020007][T13697] ? evm_inode_set_acl+0xbc/0x430 [ 433.025144][T13697] ? from_kgid+0x153/0x6a0 [ 433.029612][T13697] ? make_kgid+0x650/0x650 [ 433.034068][T13697] ? down_read_killable+0x340/0x340 [ 433.039306][T13697] ? make_kgid+0x1c8/0x650 [ 433.043775][T13697] ? evm_revalidate_status+0x4f/0xb0 [ 433.049234][T13697] ? posix_acl_valid+0x3ba/0x430 [ 433.054203][T13697] vfs_set_acl+0x80f/0xa70 [ 433.058657][T13697] do_set_acl+0xf5/0x180 [ 433.062958][T13697] path_setxattr+0x362/0x590 [ 433.067577][T13697] ? simple_xattrs_free+0x150/0x150 [ 433.072806][T13697] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 433.078810][T13697] ? lock_chain_count+0x20/0x20 [ 433.083695][T13697] __x64_sys_lsetxattr+0xb8/0xd0 [ 433.088677][T13697] do_syscall_64+0x55/0xb0 [ 433.093119][T13697] ? clear_bhb_loop+0x40/0x90 [ 433.097799][T13697] ? clear_bhb_loop+0x40/0x90 [ 433.102508][T13697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 433.108438][T13697] RIP: 0033:0x7f8f0259ce59 [ 433.112878][T13697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.132770][T13697] RSP: 002b:00007f8f007f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 433.141209][T13697] RAX: ffffffffffffffda RBX: 00007f8f02815fa0 RCX: 00007f8f0259ce59 [ 433.149204][T13697] RDX: 00002000000000c0 RSI: 0000200000000440 RDI: 0000200000000400 [ 433.157196][T13697] RBP: 00007f8f02632e6f R08: 0000000000000000 R09: 0000000000000000 [ 433.165169][T13697] R10: 000000000000005c R11: 0000000000000246 R12: 0000000000000000 [ 433.173157][T13697] R13: 00007f8f02816038 R14: 00007f8f02815fa0 R15: 00007ffc56874668 [ 433.181142][T13697] [ 433.218847][T12287] ocfs2: Unmounting device (7,3) on (node local) [ 433.265962][ T5837] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 433.310121][ T5837] usb 2-1: USB disconnect, device number 24 [ 433.365436][T12492] ocfs2: Unmounting device (7,0) on (node local) [ 433.420070][T13721] fido_id[13721]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 440.391010][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.397360][ T1290] ieee802154 phy1 wpan1: encryption failed: -22