last executing test programs: 10.488849665s ago: executing program 4 (id=138): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0000d5b6656360c4fc23c8bd3f58f0ffab000000", @ANYBLOB="b74500000000000400084a0000000f00a8007365636f6e646e616d6500000e0001006e657464657673696d0000000f0002006e657464657673696d"], 0x44}, 0x1, 0x0, 0x0, 0x20044041}, 0x4000040) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) msgctl$IPC_RMID(0x0, 0xb00000000000000) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) creat(&(0x7f0000000300)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f0000000000)={0x2, 0x7}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0xffffffff80000202, 0x0, 0xfffd, 0x605, 0x6}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x28, 0x0, 0x2d1a, {{0x8, 0x8a, 0x2, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x700}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 10.43112292s ago: executing program 2 (id=139): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpgid(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pidfd_send_signal(0xffffffffffffffff, 0x11, 0x0, 0x4) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$kcm(0x11, 0x2, 0x300) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 10.248737718s ago: executing program 1 (id=140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x3, 0x7, 0x45, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x4000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.356182095s ago: executing program 0 (id=143): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, 0x0) 9.18379334s ago: executing program 1 (id=144): gettid() timer_create(0x1, 0x0, &(0x7f0000bbdffc)) r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x0, 0xfffffffb}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20) 8.23815701s ago: executing program 2 (id=145): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getpgid(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pidfd_send_signal(0xffffffffffffffff, 0x11, 0x0, 0x4) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$kcm(0x11, 0x2, 0x300) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 7.1977575s ago: executing program 1 (id=146): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c0928", 0x18) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 7.087274082s ago: executing program 4 (id=147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000021c0)=0x2) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000380)={[{@usebackuproot}, {@datasum}, {@noacl}, {@space_cache_v1}, {}, {@space_cache}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@compress_force}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0xb4, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2c}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xb4}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) rename(&(0x7f0000000180)='./bus\x00', 0x0) 7.075152593s ago: executing program 3 (id=148): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x14) 6.038169169s ago: executing program 2 (id=149): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x1c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 5.978795304s ago: executing program 3 (id=150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 5.686732132s ago: executing program 0 (id=151): gettid() timer_create(0x1, 0x0, &(0x7f0000bbdffc)) r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x0, 0xfffffffb}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20) 5.447671529s ago: executing program 4 (id=152): ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x3, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f0000000000000905073e2c68"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 5.330251894s ago: executing program 1 (id=153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x3, 0x7, 0x45, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x4000, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.923128062s ago: executing program 3 (id=154): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000000980)=""/61, 0x0, 0x2000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x10000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000100), 0x109042, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161e42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000200), 0x0, r3}, 0x68) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000007000000420000004400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) 4.899554593s ago: executing program 2 (id=155): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784c", 0x1f) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 4.456927125s ago: executing program 1 (id=156): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r5, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="0b676ae7ce0aa301d6ff23b6557b3e02be56268cb67cc8df76c62092c9dc73bf02e2fbfd0d14f594db9a8faca2d1ee15bc4c2c588479eb0b462fed8714ae90e42c4c1477864b7c37d96279e5c380cb5f53b2983f7e1ec1fb074a8d4be7374be1c9b65b8587e435b5dc319cd5d25258ed81710608c0331449192c63736d71c7fbb72bd9ef8a3be726b464f445638ea32879fe12b88ebe8e141ba4b0efe8ae02c225a3c07cbd1c65a5f9a57267f88213743ea2ab323a2f8f1c50ecca7b6ee9a0fea79147e75e0eca42d7cf6d4d9a1e658e44cd8dc36a7b91cca77237962b41d760dd6e3aed631486ad0f453ef4501e60f923d992103a3845a67fca331897cac2bd51790acf2661efa41d90eda2061ce1aa53cbeab80229844f3954fe9ac6447af516907739ea3e6bbb832770194e6e655ec3a7ab80374b17059080c1fa21970d0147401a1ca1e58e3c86d77d116f4208299d7a3665898b2009c3752c786e4b45042b51366a133974ec564c9d2f0d7cbad234223a19b52e0efeccd654fd2bdd57df81cd7b478ef2b59f8446075d812f9d62e63d1b38375765aa7d63965484ef4d9b0b90ec00b39ac0430cbfee05cd73c34ad9922f50292d69194220339e3c923a9121d0e5ab3b7fc0bc6a33cc87d4cc23eb205848aa1febd8dd07bc25978ee5c6f83db659433b6187af151b76870a994fe4440c46b27fc4fae2e4ed9d711e652e6c397ccd89fc7181d168405d21d9f218508d0af65af34d43b95a83cdeb6a2bed82a8b75dcd514403aa7201818b9a0b5fe9c6ef1ce91bb73a66ee7c1a9a66b736f5556eb0d06ddef99bd96b0e9385db94623bbb509536211963e99cf3cacab5e61491086104702d8df7", 0x268}, {0x0}], 0x3}, 0x0) 4.203743807s ago: executing program 0 (id=157): socket(0x10, 0x3, 0x0) getpgid(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pidfd_send_signal(0xffffffffffffffff, 0x11, 0x0, 0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0x11, 0x2, 0x300) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 3.181056882s ago: executing program 2 (id=158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 2.564973088s ago: executing program 0 (id=159): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x3, 0x7, 0x45, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x4000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.421552318s ago: executing program 4 (id=160): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x14) 2.089802344s ago: executing program 2 (id=161): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, 0x0) 1.808861479s ago: executing program 3 (id=162): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 1.445271236s ago: executing program 1 (id=163): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$eJzs3M1vFOUfAPDvTLctLz9+rYgvIEgVjcSXlpYXOXjRaMJBExM9YDzVtpDKQg2tiRCi1QMeDYl3439hPOnFqBdNvOrdkBDDBdTLmtmZKUvZLVu67QL7+STTPs/M0z7Pd2ae2Wfm2d0AetZI9iOJ+F9E/B4RQ3n25gIj+a/rVy9M/X31wlQStdpbfyX1cteuXpgqi5Z/tzXP1GpFfrBJvRffjZisVmfOFvmxhdMfjM2fO//C7OnJkzMnZ85MHD166OCegSMThzsSZxbXtV0fz+3eeeydS29MHb/03k9JJfK4Y1kcnTKS792mnu50ZV22rSFd37FL9v5yI93sTKCb+iIiO1z99f4/FH2xeWnbULz2WVcbB6yrWq1WW+GqvFgD7mNJdLsFQHcUtwD1+99y2cDhR9ddeTm/Acrivl4s+ZZKpHlib/+y+9tOGomI44v/fJUtsU7PIQAAGn2XjX+ebzb+S+PhPDGQ/fh/MYcyHBEPRMT2iHgwInZExEMR9bKPRMSjq6x/+QzJreOf9PIdB9eGbPz3UjG3dfP4Ly2LDPcVuW31+PuTE7PVmQPFPtkf/YMnZpOZ8RXq+P7V375ota1x/JctWf3lWLBox+XK4Kab/mZ6cmFyTUE3uPJpxK5Ks/iTKKdxkojYGRG77rCO2WcrLbfdPv4VtP63bat9HfFMfvwXY1n8paTl/OT4i0cmDo9tiurMgbHyrLjVz79efLNV/WuKvwOy47+l6fm/FP9wsili/tz5U/X52vnV13Hxj89b3tO0d/4vZY5tK87/geTt+oqBYsNHkwsLZ8cjBpLXb10/ceO/lfmyfBb//n3N+//2uLEnHouI3RGxJyIez24Ki7Y/ERFPRsS+FeL/8ZWn3l99/BszV5rFP3274x+Nx3/1ib5TP3x7+/iza1yr43+ontpfrGnn+tduA9ey7wAAAOBekdbfA5+ko0mlSKfp6Gj+Hv4dsSWtzs0vPHdi7sMz0/l75YejPy2fdA01PA8dL54Nl/mJZfmDxXPjL/s21/OjU3PV6W4HDz1ua9n/l64Fef/P/NnX7dYB664D82jAPUr/h96l/0NvSvR/6Gn6P/SuZv3/k5alR79Z18YAG8rrP/SuNvr/Yv6r9agAuDd5/Yfepf9DT2r52fh0TR/53/DEv8X3Gd4t7bn/E5HeFc24/xOVtr/MYhWJ2lDe/7M1g03LdPvKBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BQAA///T8uXN") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/85, 0x55) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b010902"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYBLOB="000000000a000200000000000000000008000900a6"], 0x30}}, 0x0) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000cc0)={r1, r1, 0x4, 0x0, @val=@netfilter={0x0, 0x0, 0x7}}, 0x20) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f0000000d00)={0x2e97, 0x1, 0x2, 0x9, 0x3, 0x0, [{0x1, 0x5000000000, 0x6, '\x00', 0x2008}, {0xfffffffffffffffe, 0x7fffffff, 0x9, '\x00', 0x800}, {0x1, 0x284, 0x3ff, '\x00', 0x6}]}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x12, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r10 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00'}, 0x28) r11 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x8a880, 0x0) ioctl$SNDCTL_DSP_SPEED(r11, 0xc0045002, &(0x7f0000000080)=0xbb80) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x3b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20044095) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x600000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, r3, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x71}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0xfffe, 0x7, 0x8001, 0x9, 0x9, 0x7ff, 0x7fff, 0x9, 0x6, 0x8001, 0x2, 0xd, 0xfff8, 0x80, 0xd8]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="c99aa32ca367"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="dd6f83e5e674"}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000080}, 0x24080840) r12 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r12, 0xc008561c, &(0x7f0000000040)={0x980915, 0x9}) syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x235, &(0x7f0000000300)="$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") 1.389029003s ago: executing program 0 (id=164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000080) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) 1.322670554s ago: executing program 4 (id=165): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x1c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 778.345292ms ago: executing program 0 (id=166): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/85, 0x55) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b010902"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="000000000a000200000000000000000008000900a6"], 0x30}}, 0x0) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000cc0)={r1, r1, 0x4, 0x0, @val=@netfilter={0x0, 0x0, 0x7}}, 0x20) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f0000000d00)={0x2e97, 0x1, 0x2, 0x9, 0x3, 0x0, [{0x1, 0x5000000000, 0x6, '\x00', 0x2008}, {0xfffffffffffffffe, 0x7fffffff, 0x9, '\x00', 0x800}, {0x1, 0x284, 0x3ff, '\x00', 0x6}]}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x12, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r10 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00'}, 0x28) r11 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x8a880, 0x0) ioctl$SNDCTL_DSP_SPEED(r11, 0xc0045002, &(0x7f0000000080)=0xbb80) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x3b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20044095) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x600000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, r3, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x71}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0xfffe, 0x7, 0x8001, 0x9, 0x9, 0x7ff, 0x7fff, 0x9, 0x6, 0x8001, 0x2, 0xd, 0xfff8, 0x80, 0xd8]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="c99aa32ca367"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="dd6f83e5e674"}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000080}, 0x24080840) r12 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r12, 0xc008561c, &(0x7f0000000040)={0x980915, 0x9}) syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x235, &(0x7f0000000300)="$eJzs3c9qE1EUx/HfvYkabanTPyK4rBZcSVs34kaQPIQrUZsIxVBBK6grcS0+gHtfwYdwJb6Arlz5ANmN3DM3zTRmMmk1ubT9fiBh2rln5pzOTO89gVIBOLPut398vv0rvJzUUEPSXclLaklNSVd0tfVqb393v9ftTDpQwyLCy6mIdH+N2dnrjgsNcRYRZeGrphbL38Ns5Hme/0ydBJKzp38ML12IT6ftb809s9l4lzqBxFxffb3WUuo8AABpxfnfx3l+Ma7fvZc24rR/qub/fuoEEivN/9Zl5S5c38u2a9jvWQsX9vtBl3icc51XcWcdWmC6uq7ScvEXn+72urd2nvc6Xu91LyoNW7P3TnHrDtRkuz6mN53g+LUvWA3nQg3bFfmv/t8z1nNf3Tf30GX6pM7B+q+Zu3CZ7EplI1eqyH+z+ohWZVaMqqhy2U5yLZ4hqqmyNb4j0eCOWtbhDwiyujwtamUkqqhuqyZqdWzUdk3U2mjU8G6ujpw199E9cOv6rS9ql9b/Pvy0NzTNkxnG2Mh4Z0ysp2kjsykS80cqA//mg57ojpZevnn77HGv133BBhtssHGwkfoXFOZheNFTZ4JEwrrLFf1fqV/ZtBYpvGUT1ul53cFLR9yq6A1W7P3SkTq4heoObtqe6/pN6cb0Z8xinqeEa+u7HvH5PwAAAAAAAAAAAAAAAAAAwEkzjz8nSF0jAAAAAAAAAAAAAAAAAAAAAAAnHf//Fzi7/gQAAP//6oSCGA==") 724.417536ms ago: executing program 4 (id=167): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpgid(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pidfd_send_signal(0xffffffffffffffff, 0x11, 0x0, 0x4) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$kcm(0x11, 0x2, 0x300) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 631.349ms ago: executing program 3 (id=168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 0s ago: executing program 3 (id=169): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x10000, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'cp869'}}, {@errors_continue}, {@utf8}]}, 0x1, 0x1535, &(0x7f00000001c0)="$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") sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(r2, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. [ 153.785908][ T5562] cgroup: Unknown subsys name 'net' [ 153.929249][ T5562] cgroup: Unknown subsys name 'cpuset' [ 153.945051][ T5562] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 159.498409][ T5562] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 164.920843][ T5584] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.931552][ T5584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.938261][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.940871][ T5584] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.947796][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.959035][ T5584] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.961989][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.970910][ T5584] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.988073][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.003405][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.049376][ T5587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.061715][ T5587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.071248][ T5587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.078784][ T4875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.094558][ T4875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.105969][ T4875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.118249][ T4875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.127476][ T4875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.150010][ T5584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.163102][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.220842][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.233128][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.244448][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.269237][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.289691][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.063495][ T48] Bluetooth: hci1: command tx timeout [ 167.066047][ T5584] Bluetooth: hci0: command tx timeout [ 167.222296][ T5584] Bluetooth: hci2: command tx timeout [ 167.222371][ T48] Bluetooth: hci3: command tx timeout [ 167.382149][ T5584] Bluetooth: hci4: command tx timeout [ 169.142421][ T5584] Bluetooth: hci1: command tx timeout [ 169.142634][ T48] Bluetooth: hci0: command tx timeout [ 169.217418][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.241361][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.253497][ T5581] bridge_slave_0: entered allmulticast mode [ 169.276415][ T5581] bridge_slave_0: entered promiscuous mode [ 169.301527][ T48] Bluetooth: hci3: command tx timeout [ 169.301662][ T5584] Bluetooth: hci2: command tx timeout [ 169.370830][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.378809][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.386760][ T5581] bridge_slave_1: entered allmulticast mode [ 169.396164][ T5581] bridge_slave_1: entered promiscuous mode [ 169.440091][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.460781][ T5584] Bluetooth: hci4: command tx timeout [ 169.462850][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.491165][ T5580] bridge_slave_0: entered allmulticast mode [ 169.506397][ T5580] bridge_slave_0: entered promiscuous mode [ 169.575903][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.583699][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.591931][ T5580] bridge_slave_1: entered allmulticast mode [ 169.601078][ T5580] bridge_slave_1: entered promiscuous mode [ 169.682916][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.739497][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.747735][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.755861][ T5585] bridge_slave_0: entered allmulticast mode [ 169.764748][ T5585] bridge_slave_0: entered promiscuous mode [ 169.782235][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.838542][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.846884][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.854965][ T5593] bridge_slave_0: entered allmulticast mode [ 169.863712][ T5593] bridge_slave_0: entered promiscuous mode [ 169.874690][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.882580][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.889975][ T5585] bridge_slave_1: entered allmulticast mode [ 169.898857][ T5585] bridge_slave_1: entered promiscuous mode [ 169.939904][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.972611][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.980143][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.988154][ T5593] bridge_slave_1: entered allmulticast mode [ 169.996653][ T5593] bridge_slave_1: entered promiscuous mode [ 170.057931][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.067615][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.075160][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.082995][ T5588] bridge_slave_0: entered allmulticast mode [ 170.091469][ T5588] bridge_slave_0: entered promiscuous mode [ 170.154887][ T5581] team0: Port device team_slave_0 added [ 170.185448][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.193247][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.201189][ T5588] bridge_slave_1: entered allmulticast mode [ 170.209478][ T5588] bridge_slave_1: entered promiscuous mode [ 170.248548][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.293451][ T5581] team0: Port device team_slave_1 added [ 170.413233][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.430009][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.467791][ T5580] team0: Port device team_slave_0 added [ 170.505242][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.539464][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.547006][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.573334][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.592850][ T5580] team0: Port device team_slave_1 added [ 170.605989][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.660329][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.667868][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.694133][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.734431][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.773836][ T5585] team0: Port device team_slave_0 added [ 170.845533][ T5593] team0: Port device team_slave_0 added [ 170.858366][ T5585] team0: Port device team_slave_1 added [ 170.897541][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.904999][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.931293][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.974603][ T5593] team0: Port device team_slave_1 added [ 171.007538][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.015001][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.041283][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.054928][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.062510][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.088935][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.107898][ T5588] team0: Port device team_slave_0 added [ 171.181831][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.188869][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.215066][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.225995][ T5584] Bluetooth: hci1: command tx timeout [ 171.231812][ T5584] Bluetooth: hci0: command tx timeout [ 171.252561][ T5588] team0: Port device team_slave_1 added [ 171.348839][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.356756][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.383623][ T5584] Bluetooth: hci2: command tx timeout [ 171.384215][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.391008][ T5584] Bluetooth: hci3: command tx timeout [ 171.415036][ T5581] hsr_slave_0: entered promiscuous mode [ 171.423481][ T5581] hsr_slave_1: entered promiscuous mode [ 171.463017][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.470432][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.497333][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.538633][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.547379][ T5584] Bluetooth: hci4: command tx timeout [ 171.547895][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.579618][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.659169][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.666902][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.693209][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.763800][ T5580] hsr_slave_0: entered promiscuous mode [ 171.772779][ T5580] hsr_slave_1: entered promiscuous mode [ 171.780160][ T5580] debugfs: 'hsr0' already exists in 'hsr' [ 171.786265][ T5580] Cannot create hsr debugfs directory [ 171.839352][ T5585] hsr_slave_0: entered promiscuous mode [ 171.847954][ T5585] hsr_slave_1: entered promiscuous mode [ 171.855968][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 171.862215][ T5585] Cannot create hsr debugfs directory [ 172.120370][ T5593] hsr_slave_0: entered promiscuous mode [ 172.129937][ T5593] hsr_slave_1: entered promiscuous mode [ 172.142569][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 172.148727][ T5593] Cannot create hsr debugfs directory [ 172.221582][ T5588] hsr_slave_0: entered promiscuous mode [ 172.230061][ T5588] hsr_slave_1: entered promiscuous mode [ 172.238247][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 172.244146][ T5588] Cannot create hsr debugfs directory [ 173.302238][ T5584] Bluetooth: hci0: command tx timeout [ 173.307920][ T48] Bluetooth: hci1: command tx timeout [ 173.321683][ T5581] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 173.342724][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.352896][ T5581] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 173.372084][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.382530][ T5581] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 173.403670][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.424978][ T5581] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 173.442054][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.462379][ T5584] Bluetooth: hci3: command tx timeout [ 173.468046][ T48] Bluetooth: hci2: command tx timeout [ 173.536189][ T5580] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.567911][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.577893][ T5580] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.594899][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.606362][ T5580] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.624156][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.631499][ T5584] Bluetooth: hci4: command tx timeout [ 173.634541][ T5580] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.655674][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.857575][ T5585] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.876015][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.915236][ T5585] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.936644][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.971743][ T5585] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.990976][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.001567][ T5585] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.017593][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.167274][ T5593] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 174.189128][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.199080][ T5593] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.216253][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.226585][ T5593] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.246109][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.256523][ T5593] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.275607][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.492989][ T5588] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.513097][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.528259][ T5588] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.545971][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.555943][ T5588] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.575255][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.602879][ T5588] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.620031][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.793837][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.979570][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.017912][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.109151][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.116819][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.170763][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.186061][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.193465][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.319164][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.326530][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.403942][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.411369][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.458305][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.571908][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.638359][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.697430][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.705000][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.786535][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.794134][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.861147][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.914435][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.957849][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.965220][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.039309][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.046879][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.339148][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.435249][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.442863][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.528084][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.535727][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.025555][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.159246][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.649401][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.828601][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.839226][ T5580] veth0_vlan: entered promiscuous mode [ 179.891720][ T5581] veth0_vlan: entered promiscuous mode [ 179.919568][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.967716][ T5580] veth1_vlan: entered promiscuous mode [ 180.082213][ T5581] veth1_vlan: entered promiscuous mode [ 180.503507][ T5580] veth0_macvtap: entered promiscuous mode [ 180.525090][ T5585] veth0_vlan: entered promiscuous mode [ 180.553055][ T5593] veth0_vlan: entered promiscuous mode [ 180.614779][ T5580] veth1_macvtap: entered promiscuous mode [ 180.634668][ T5581] veth0_macvtap: entered promiscuous mode [ 180.674696][ T5581] veth1_macvtap: entered promiscuous mode [ 180.723123][ T5585] veth1_vlan: entered promiscuous mode [ 180.743829][ T5593] veth1_vlan: entered promiscuous mode [ 180.810868][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.892534][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.909906][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.972636][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.043523][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.053748][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.096582][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.108844][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.166229][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.179545][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.293024][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.326413][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.347208][ T5585] veth0_macvtap: entered promiscuous mode [ 181.434716][ T5593] veth0_macvtap: entered promiscuous mode [ 181.495690][ T5585] veth1_macvtap: entered promiscuous mode [ 181.531552][ T5588] veth0_vlan: entered promiscuous mode [ 181.547091][ T5593] veth1_macvtap: entered promiscuous mode [ 181.689273][ T5588] veth1_vlan: entered promiscuous mode [ 181.787985][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.856204][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.937938][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.034863][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.107612][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.133525][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.175710][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.196911][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.244648][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.271120][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.304809][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.365190][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.645891][ T5588] veth0_macvtap: entered promiscuous mode [ 182.734785][ T5588] veth1_macvtap: entered promiscuous mode [ 183.105508][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.228101][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.393437][ T77] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.425135][ T77] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.459011][ T77] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.492849][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.317259][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.351021][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.498400][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.525957][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.636050][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.669690][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.816948][ T5716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.839869][ T5716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.075095][ T5580] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 187.632851][ T5841] loop0: detected capacity change from 0 to 512 [ 187.639211][ T5701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.639296][ T5701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.779633][ T5841] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 187.803046][ T5841] System zones: 1-12 [ 187.817527][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.872677][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.876233][ T5841] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.1: corrupted in-inode xattr: e_value size too large [ 187.969361][ T5841] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.970685][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 187.986716][ C1] EXT4-fs (loop0): initial error at time 1780230839: ext4_iget_extra_inode:5128: inode 15 [ 187.997228][ C1] EXT4-fs (loop0): last error at time 1780230839: ext4_iget_extra_inode:5128: inode 15 [ 188.008379][ T5841] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1: couldn't read orphan inode 15 (err -117) [ 188.047051][ T5841] loop0: lost filesystem error report for type 5 error -117 [ 188.057694][ T5841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.091836][ T5679] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 188.130696][ T5701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.152635][ T5701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.292235][ T5679] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 188.319696][ T5679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.363628][ T5679] usb 3-1: Product: syz [ 188.385754][ T5679] usb 3-1: Manufacturer: syz [ 188.401296][ T5679] usb 3-1: SerialNumber: syz [ 188.416972][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.466381][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.476479][ T5679] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 188.561868][ T5683] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 188.575740][ T40] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 188.788283][ T5683] usb 1-1: config index 0 descriptor too short (expected 12147, got 27) [ 188.843094][ T5683] usb 1-1: config 109 has too many interfaces: 112, using maximum allowed: 32 [ 188.886933][ T5677] usb 3-1: USB disconnect, device number 2 [ 188.926554][ T5683] usb 1-1: config 109 has an invalid descriptor of length 100, skipping remainder of the config [ 188.983849][ T5683] usb 1-1: config 109 has 0 interfaces, different from the descriptor's value: 112 [ 189.056265][ T5683] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 189.100292][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 189.127966][ T5683] usb 1-1: Product: syz [ 189.143193][ T5683] usb 1-1: Manufacturer: syz [ 189.156681][ T5683] usb 1-1: SerialNumber: syz [ 189.235171][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.300272][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.324904][ T5855] netlink: 'syz.1.2': attribute type 58 has an invalid length. [ 189.389786][ T5855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 189.608225][ T5683] usb 1-1: USB disconnect, device number 2 [ 189.688562][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.713506][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.723123][ T5679] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 189.785558][ T40] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 189.798949][ T40] ath9k_htc: Failed to initialize the device [ 189.825125][ T5677] usb 3-1: ath9k_htc: USB layer deinitialized [ 189.894388][ T5679] usb 4-1: Using ep0 maxpacket: 8 [ 189.930226][ T5679] usb 4-1: unable to get BOS descriptor or descriptor too short [ 189.969564][ T5679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 190.023267][ T5679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 190.033898][ T5679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 190.076728][ T5679] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 190.123408][ T5679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 190.134916][ T5679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 26668, setting to 1024 [ 190.147699][ T5679] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 190.184289][ T5679] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 190.226315][ T5679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.261821][ T5679] usb 4-1: Product: syz [ 190.282660][ T5679] usb 4-1: Manufacturer: syz [ 190.311119][ T5679] usb 4-1: SerialNumber: syz [ 190.346970][ T5679] usb 4-1: config 0 descriptor?? [ 190.368374][ T5857] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 190.377059][ T5857] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 190.424507][ T5679] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.472767][ T5862] ======================================================= [ 190.472767][ T5862] WARNING: The mand mount option has been deprecated and [ 190.472767][ T5862] and is ignored by this kernel. Remove the mand [ 190.472767][ T5862] option from the mount to silence this warning. [ 190.472767][ T5862] ======================================================= [ 190.480210][ T5580] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.580781][ T5863] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 190.637513][ T5864] loop4: detected capacity change from 0 to 7 [ 190.756027][ T5864] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 190.762440][ T5864] loop4: partition table partially beyond EOD, truncated [ 190.771697][ T5864] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 191.120915][ T5683] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 191.312149][ T5679] usb 4-1: USB disconnect, device number 2 [ 191.353640][ T5683] usb 5-1: Using ep0 maxpacket: 8 [ 191.402230][ T5683] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 191.448238][ T5683] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 191.495102][ T5683] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 191.507778][ T5683] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.522834][ T5683] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 191.535520][ T5683] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 191.565147][ T5870] loop0: detected capacity change from 0 to 512 [ 191.644885][ T5683] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 191.689980][ T5683] usb 5-1: config 168 interface 0 has no altsetting 0 [ 191.765226][ T5683] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 191.878584][ T5870] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.8: inode has both inline data and extents flags [ 191.905349][ T5683] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 191.925527][ T5870] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 191.926339][ T5870] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.8: couldn't read orphan inode 15 (err -117) [ 191.935843][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 191.935929][ C1] EXT4-fs (loop0): initial error at time 1780230843: ext4_orphan_get:1397: inode 15 [ 191.936075][ C1] EXT4-fs (loop0): last error at time 1780230843: ext4_orphan_get:1397: inode 15 [ 192.006815][ T5683] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 192.066145][ T5870] loop0: lost filesystem error report for type 5 error -117 [ 192.078425][ T5870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.143900][ T5683] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.219440][ T5683] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 192.273659][ T5683] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 192.330426][ T5683] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 192.357137][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.436944][ T5683] usb 5-1: config 168 interface 0 has no altsetting 0 [ 192.495106][ T5683] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 192.519962][ T5683] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 192.593736][ T5683] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 192.698935][ T5880] syzkaller0: entered promiscuous mode [ 192.699574][ T5683] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.748698][ T5880] syzkaller0: entered allmulticast mode [ 192.783127][ T5683] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 192.908073][ T5683] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 192.929310][ T5580] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.931937][ T5683] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 193.009427][ T5683] usb 5-1: config 168 interface 0 has no altsetting 0 [ 193.094681][ T5683] usb 5-1: string descriptor 0 read error: -22 [ 193.111131][ T5683] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 193.170677][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.336936][ T5683] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 193.692875][ T5683] usb 5-1: USB disconnect, device number 2 [ 194.149573][ T5891] warning: `syz.2.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 194.233676][ T5679] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 194.428749][ T5679] usb 1-1: Using ep0 maxpacket: 8 [ 194.505780][ T5679] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 194.574030][ T5679] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 194.636606][ T5679] usb 1-1: config 179 has no interface number 0 [ 194.667954][ T5679] usb 1-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 194.743711][ T5679] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 194.803935][ T5679] usb 1-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 194.888526][ T5679] usb 1-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice=1e.eb [ 194.948366][ T5679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.186757][ T5905] Zero length message leads to an empty skb [ 195.483786][ T5909] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 195.534402][ T5683] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 195.545665][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.555372][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.731891][ T5683] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 195.745848][ T5683] usb 2-1: config 0 has no interface number 0 [ 195.769373][ T5683] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=77.f4 [ 195.791042][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.813381][ T5683] usb 2-1: Product: syz [ 195.829222][ T5683] usb 2-1: Manufacturer: syz [ 195.840138][ T5683] usb 2-1: SerialNumber: syz [ 195.876098][ T5683] usb 2-1: config 0 descriptor?? [ 195.899263][ T5905] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 196.192007][ T5679] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 196.243574][ T5905] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.363941][ T5683] asix 2-1:0.251: probe with driver asix failed with error -71 [ 196.377131][ T5679] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 196.415330][ T5679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.455278][ T5679] usb 3-1: Product: syz [ 196.465170][ T5683] usb 2-1: USB disconnect, device number 2 [ 196.465712][ T5679] usb 3-1: Manufacturer: syz [ 196.488592][ T5679] usb 3-1: SerialNumber: syz [ 196.569243][ T5679] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 196.662986][ T5198] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 196.739396][ T9] usb 1-1: USB disconnect, device number 3 [ 196.974938][ T5683] usb 3-1: USB disconnect, device number 3 [ 197.021109][ T5679] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 197.201555][ T5679] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 197.261453][ T5679] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.301010][ T5679] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.319470][ T5924] loop0: detected capacity change from 0 to 512 [ 197.323623][ T5679] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 197.377297][ T5679] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 197.381668][ T5924] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 197.387425][ T5679] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 197.403294][ T5679] usb 5-1: Manufacturer: syz [ 197.421960][ T5679] usb 5-1: config 0 descriptor?? [ 197.478150][ T5924] System zones: 1-12 [ 197.588740][ T5924] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.22: corrupted in-inode xattr: e_value size too large [ 197.681294][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 197.709383][ T5924] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 197.710613][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 197.726638][ C1] EXT4-fs (loop0): initial error at time 1780230848: ext4_iget_extra_inode:5128: inode 15 [ 197.736884][ C1] EXT4-fs (loop0): last error at time 1780230848: ext4_iget_extra_inode:5128: inode 15 [ 197.762268][ T5924] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.22: couldn't read orphan inode 15 (err -117) [ 197.783513][ T5924] loop0: lost filesystem error report for type 5 error -117 [ 197.788551][ T5924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.792371][ T5198] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 197.836927][ T5198] ath9k_htc: Failed to initialize the device [ 197.852106][ T5683] usb 3-1: ath9k_htc: USB layer deinitialized [ 197.899918][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 197.933284][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.956476][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.977679][ T5679] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 197.979598][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 198.053026][ T5679] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 198.054436][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 198.095875][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 198.139660][ T9] usb 4-1: Manufacturer: syz [ 198.199446][ T9] usb 4-1: config 0 descriptor?? [ 198.316747][ T40] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 198.491711][ T5683] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 198.523818][ T40] usb 1-1: config index 0 descriptor too short (expected 12147, got 27) [ 198.550280][ T40] usb 1-1: config 109 has too many interfaces: 112, using maximum allowed: 32 [ 198.594138][ T40] usb 1-1: config 109 has an invalid descriptor of length 100, skipping remainder of the config [ 198.649428][ T40] usb 1-1: config 109 has 0 interfaces, different from the descriptor's value: 112 [ 198.685184][ T5683] usb 3-1: Using ep0 maxpacket: 8 [ 198.709075][ T9] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 198.714544][ T40] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 198.730556][ T5683] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 198.752544][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 198.763645][ T5683] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 198.775146][ T40] usb 1-1: Product: syz [ 198.775297][ T40] usb 1-1: Manufacturer: syz [ 198.775438][ T40] usb 1-1: SerialNumber: syz [ 198.836686][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.843649][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.844772][ T5683] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 198.862659][ T5683] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.892952][ T9] appleir 0003:05AC:8243.0002: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 198.950013][ T5683] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 198.978314][ T5683] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 199.060811][ T5683] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 199.103923][ T5683] usb 3-1: config 168 interface 0 has no altsetting 0 [ 199.167191][ T5683] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 199.201521][ T5683] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 199.252197][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 199.265261][ T5683] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 199.356525][ T5683] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.395845][ T5683] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 199.420806][ T40] usb 1-1: USB disconnect, device number 4 [ 199.479735][ T5683] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 199.533191][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 199.546539][ T5683] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 199.570729][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.590050][ T9] usb 2-1: Product: syz [ 199.596706][ T5683] usb 3-1: config 168 interface 0 has no altsetting 0 [ 199.604948][ T9] usb 2-1: Manufacturer: syz [ 199.621213][ T9] usb 2-1: SerialNumber: syz [ 199.635193][ T5683] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 199.648286][ T5683] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 199.681215][ T5683] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 199.704785][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 199.745397][ T5683] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.787627][ T807] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 199.804231][ T5683] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 199.912248][ T5683] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 199.971411][ T5683] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 200.014579][ T5683] usb 3-1: config 168 interface 0 has no altsetting 0 [ 200.104083][ T5683] usb 3-1: string descriptor 0 read error: -22 [ 200.112427][ T5683] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 200.133660][ T5677] usb 5-1: USB disconnect, device number 3 [ 200.204512][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.480112][ T5580] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.521097][ T40] usb 2-1: USB disconnect, device number 3 [ 200.645241][ T5683] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 200.736561][ T5683] usb 3-1: USB disconnect, device number 4 [ 200.832148][ T5679] usb 4-1: USB disconnect, device number 3 [ 200.982317][ T807] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 201.026648][ T807] ath9k_htc: Failed to initialize the device [ 201.073302][ T40] usb 2-1: ath9k_htc: USB layer deinitialized [ 201.235945][ T5947] syzkaller0: entered promiscuous mode [ 201.259448][ T5947] syzkaller0: entered allmulticast mode [ 201.891110][ T807] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 202.083896][ T807] usb 4-1: Using ep0 maxpacket: 8 [ 202.149109][ T5959] netlink: 'syz.0.32': attribute type 58 has an invalid length. [ 203.054961][ T5959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.32'. [ 203.098054][ T807] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 204.049315][ T807] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 204.060047][ T807] usb 4-1: config 179 has no interface number 0 [ 204.067374][ T807] usb 4-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 204.099951][ T807] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 204.718055][ T807] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 204.733280][ T807] usb 4-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice=1e.eb [ 204.745138][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.782426][ T807] usb 4-1: can't set config #179, error -71 [ 204.833977][ T807] usb 4-1: USB disconnect, device number 4 [ 205.233900][ T5976] loop0: detected capacity change from 0 to 256 [ 205.285470][ T5976] exfat: Deprecated parameter 'utf8' [ 205.297054][ T5973] syzkaller0: entered promiscuous mode [ 205.352563][ T5973] syzkaller0: entered allmulticast mode [ 205.396199][ T5976] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 205.831072][ T807] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 206.083591][ T807] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 206.102297][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.115257][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.130837][ T807] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 206.164435][ T807] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 206.177607][ T807] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 206.202552][ T807] usb 3-1: Manufacturer: syz [ 206.228692][ T807] usb 3-1: config 0 descriptor?? [ 206.271935][ T5683] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 206.432342][ T5683] usb 2-1: Using ep0 maxpacket: 8 [ 206.447350][ T5683] usb 2-1: unable to get BOS descriptor or descriptor too short [ 206.477082][ T5683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 206.512240][ T5683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 206.524826][ T5683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 206.540348][ T5683] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 206.552368][ T5683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 206.598294][ T5683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 26668, setting to 1024 [ 206.650863][ T5683] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 206.718753][ T5683] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 206.747704][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.772840][ T807] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 206.801634][ T5683] usb 2-1: Product: syz [ 206.809919][ T5683] usb 2-1: Manufacturer: syz [ 206.834296][ T5683] usb 2-1: SerialNumber: syz [ 206.861100][ T807] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 206.885776][ T5683] usb 2-1: config 0 descriptor?? [ 206.905377][ T5981] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 206.913993][ T5981] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 206.956484][ T5683] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 207.198573][ T5988] netlink: 64 bytes leftover after parsing attributes in process `syz.3.40'. [ 207.542779][ T5992] syzkaller0: entered promiscuous mode [ 207.564604][ T5992] syzkaller0: entered allmulticast mode [ 207.780188][ T5683] usb 2-1: USB disconnect, device number 4 [ 208.373623][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.867515][ T40] usb 3-1: USB disconnect, device number 5 [ 209.011872][ T5683] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 209.308218][ T5683] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 209.349413][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.384501][ T5683] usb 1-1: Product: syz [ 209.410284][ T5683] usb 1-1: Manufacturer: syz [ 209.427661][ T5683] usb 1-1: SerialNumber: syz [ 209.495075][ T5683] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 209.574579][ T5677] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 209.612004][ T40] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 209.810353][ T40] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 209.834406][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.878736][ T40] usb 4-1: Product: syz [ 209.914466][ T40] usb 4-1: Manufacturer: syz [ 209.929862][ T40] usb 4-1: SerialNumber: syz [ 209.977925][ T40] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 210.108812][ T5679] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 210.552772][ T5683] usb 4-1: USB disconnect, device number 5 [ 210.747187][ T5677] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 210.822342][ T5677] ath9k_htc: Failed to initialize the device [ 211.062685][ T5677] usb 1-1: ath9k_htc: USB layer deinitialized [ 211.269760][ T807] usb 1-1: USB disconnect, device number 5 [ 211.308511][ T6022] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 211.382388][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.392058][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.466821][ T5679] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 211.500029][ T5679] ath9k_htc: Failed to initialize the device [ 211.527604][ T5683] usb 4-1: ath9k_htc: USB layer deinitialized [ 212.041135][ T5198] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 212.142262][ T5683] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 212.222026][ T5198] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 212.240314][ T5198] usb 5-1: config 179 has no interface number 0 [ 212.264725][ T5198] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 212.296566][ T5198] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 212.311869][ T5683] usb 1-1: Using ep0 maxpacket: 8 [ 212.329399][ T6037] loop1: detected capacity change from 0 to 256 [ 212.329512][ T5683] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 212.339409][ T6037] exfat: Deprecated parameter 'utf8' [ 212.359748][ T5198] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 212.384028][ T5683] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 212.400122][ T5198] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 212.425179][ T5683] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 212.459909][ T5198] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 212.477834][ T5683] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.487079][ T6037] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 212.528095][ T5683] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 212.530417][ T5198] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 212.578046][ T5683] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 212.592132][ T5198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.625800][ T5683] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 212.668027][ T6030] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 212.689765][ T6030] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 212.702959][ T5683] usb 1-1: config 168 interface 0 has no altsetting 0 [ 212.741675][ T5683] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 212.766255][ T5683] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 212.815204][ T5683] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 212.881135][ T5683] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.951346][ T5683] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 213.045993][ T5683] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 213.096123][ T5683] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 213.195662][ T5683] usb 1-1: config 168 interface 0 has no altsetting 0 [ 213.245728][ T5683] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 213.293916][ T5683] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 213.345838][ T5683] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 213.445386][ T5683] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.511284][ T5683] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 213.594945][ T5677] usb 5-1: USB disconnect, device number 4 [ 213.595041][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 213.610328][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 213.618648][ T5683] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 213.683959][ T5683] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 213.760973][ T5683] usb 1-1: config 168 interface 0 has no altsetting 0 [ 213.785081][ T5683] usb 1-1: string descriptor 0 read error: -22 [ 213.801380][ T5683] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 213.824443][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.842453][ T807] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 213.926062][ T5683] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 214.030295][ T807] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 214.042914][ T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.056751][ T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.069216][ T807] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 214.096743][ T807] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 214.123382][ T807] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 214.142039][ T5683] usb 1-1: USB disconnect, device number 6 [ 214.158242][ T807] usb 2-1: Manufacturer: syz [ 214.199021][ T807] usb 2-1: config 0 descriptor?? [ 214.666191][ T807] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 214.710898][ T5198] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 214.729852][ T807] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 214.784194][ T6055] loop2: detected capacity change from 0 to 512 [ 214.865041][ T6055] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 214.897668][ T5198] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 214.912668][ T5198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.940705][ T5198] usb 5-1: Product: syz [ 214.945140][ T5198] usb 5-1: Manufacturer: syz [ 214.949935][ T5198] usb 5-1: SerialNumber: syz [ 214.963462][ T6055] System zones: 1-12 [ 214.964607][ T5198] usb 5-1: config 0 descriptor?? [ 215.042000][ T6055] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.59: corrupted in-inode xattr: e_value size too large [ 215.141389][ T6055] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 215.150774][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 215.166660][ C1] EXT4-fs (loop2): initial error at time 1780230866: ext4_iget_extra_inode:5128: inode 15 [ 215.176966][ C1] EXT4-fs (loop2): last error at time 1780230866: ext4_iget_extra_inode:5128: inode 15 [ 215.210767][ T6055] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.59: couldn't read orphan inode 15 (err -117) [ 215.241206][ T6055] loop2: lost filesystem error report for type 5 error -117 [ 215.247460][ T6055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.576737][ T5198] usb 5-1: Firmware version (0.0) predates our first public release. [ 215.622995][ T5198] usb 5-1: Please update to version 0.2 or newer [ 215.680892][ T807] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 215.898668][ T807] usb 3-1: config index 0 descriptor too short (expected 12147, got 27) [ 215.919256][ T807] usb 3-1: config 109 has too many interfaces: 112, using maximum allowed: 32 [ 215.931440][ T807] usb 3-1: config 109 has an invalid descriptor of length 100, skipping remainder of the config [ 215.948500][ T807] usb 3-1: config 109 has 0 interfaces, different from the descriptor's value: 112 [ 215.969234][ T5198] usb 5-1: USB disconnect, device number 5 [ 216.041966][ T807] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 216.054411][ T807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 216.087552][ T807] usb 3-1: Product: syz [ 216.093179][ T807] usb 3-1: Manufacturer: syz [ 216.119024][ T807] usb 3-1: SerialNumber: syz [ 216.729619][ T807] usb 3-1: USB disconnect, device number 6 [ 216.796364][ T40] usb 2-1: USB disconnect, device number 5 [ 217.384757][ T5581] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.424190][ T40] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 217.570912][ T807] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 217.655473][ T40] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 217.688431][ T40] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.710068][ T40] usb 2-1: Product: syz [ 217.714842][ T40] usb 2-1: Manufacturer: syz [ 217.719627][ T40] usb 2-1: SerialNumber: syz [ 217.771295][ T40] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 217.829983][ T807] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 217.865202][ T5683] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 217.894244][ T5679] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 217.896033][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.963741][ T807] usb 4-1: Product: syz [ 217.978057][ T807] usb 4-1: Manufacturer: syz [ 218.000300][ T807] usb 4-1: SerialNumber: syz [ 218.112105][ T807] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 218.121871][ T5683] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 218.179225][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.238868][ T5724] usb 2-1: USB disconnect, device number 6 [ 218.257700][ T5683] usb 3-1: Product: syz [ 218.307624][ T5683] usb 3-1: Manufacturer: syz [ 218.355678][ T5683] usb 3-1: SerialNumber: syz [ 218.380380][ T5677] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 218.410373][ T5683] usb 3-1: config 0 descriptor?? [ 218.982986][ T5683] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 219.030806][ T5683] usb 3-1: Firmware version (0.0) predates our first public release. [ 219.092045][ T5683] usb 3-1: Please update to version 0.2 or newer [ 219.148559][ T5679] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 219.222839][ T5679] ath9k_htc: Failed to initialize the device [ 219.297326][ T5724] usb 2-1: ath9k_htc: USB layer deinitialized [ 219.466026][ T5683] usb 3-1: USB disconnect, device number 7 [ 219.621672][ T5677] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 219.667408][ T5677] ath9k_htc: Failed to initialize the device [ 219.839695][ T5679] usb 4-1: USB disconnect, device number 6 [ 219.952607][ T5679] usb 4-1: ath9k_htc: USB layer deinitialized [ 220.071629][ T6101] loop4: detected capacity change from 0 to 512 [ 220.174915][ T6101] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 220.188752][ T6104] loop0: detected capacity change from 0 to 512 [ 220.219333][ T6104] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 220.228439][ T6104] System zones: 1-12 [ 220.237868][ T6101] System zones: 1-12 [ 220.240853][ T6104] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.67: corrupted in-inode xattr: e_value size too large [ 220.262060][ T6104] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.263393][ T6104] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.67: couldn't read orphan inode 15 (err -117) [ 220.273205][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 220.273292][ C1] EXT4-fs (loop0): initial error at time 1780230871: ext4_iget_extra_inode:5128: inode 15 [ 220.273438][ C1] EXT4-fs (loop0): last error at time 1780230871: ext4_iget_extra_inode:5128: inode 15 [ 220.294623][ T6101] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.69: corrupted in-inode xattr: e_value size too large [ 220.294765][ T6101] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.299105][ T6101] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.69: couldn't read orphan inode 15 (err -117) [ 220.311984][ T6104] loop0: lost filesystem error report for type 5 error -117 [ 220.318412][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 220.367179][ C0] EXT4-fs (loop4): initial error at time 1780230871: ext4_iget_extra_inode:5128: inode 15 [ 220.377554][ T40] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 220.377585][ C0] EXT4-fs (loop4): last error at time 1780230871: ext4_iget_extra_inode:5128: inode 15 [ 220.428553][ T6101] loop4: lost filesystem error report for type 5 error -117 [ 220.445048][ T6101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.484475][ T6104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.576141][ T40] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 220.591833][ T40] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.640969][ T40] usb 2-1: Product: syz [ 220.649477][ T40] usb 2-1: Manufacturer: syz [ 220.697295][ T40] usb 2-1: SerialNumber: syz [ 220.847720][ T40] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 220.894794][ T5679] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 220.984166][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 221.003781][ T6112] netlink: 64 bytes leftover after parsing attributes in process `syz.2.70'. [ 221.012102][ T5677] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 221.150407][ T5683] usb 2-1: USB disconnect, device number 7 [ 221.181823][ T9] usb 1-1: config index 0 descriptor too short (expected 12147, got 27) [ 221.181953][ T9] usb 1-1: config 109 has too many interfaces: 112, using maximum allowed: 32 [ 221.182065][ T9] usb 1-1: config 109 has an invalid descriptor of length 100, skipping remainder of the config [ 221.182177][ T9] usb 1-1: config 109 has 0 interfaces, different from the descriptor's value: 112 [ 221.207317][ T5677] usb 5-1: config index 0 descriptor too short (expected 12147, got 27) [ 221.207488][ T5677] usb 5-1: config 109 has too many interfaces: 112, using maximum allowed: 32 [ 221.207652][ T5677] usb 5-1: config 109 has an invalid descriptor of length 100, skipping remainder of the config [ 221.207813][ T5677] usb 5-1: config 109 has 0 interfaces, different from the descriptor's value: 112 [ 221.282411][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 221.282550][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 221.282660][ T9] usb 1-1: Product: syz [ 221.282750][ T9] usb 1-1: Manufacturer: syz [ 221.282834][ T9] usb 1-1: SerialNumber: syz [ 221.295113][ T5677] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 221.295284][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 221.295397][ T5677] usb 5-1: Product: syz [ 221.295487][ T5677] usb 5-1: Manufacturer: syz [ 221.295577][ T5677] usb 5-1: SerialNumber: syz [ 221.818769][ T5677] usb 5-1: USB disconnect, device number 6 [ 221.863777][ T9] usb 1-1: USB disconnect, device number 7 [ 221.904763][ T6118] syzkaller0: entered promiscuous mode [ 222.055763][ T6118] syzkaller0: entered allmulticast mode [ 222.100921][ T5679] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 222.157476][ T5679] ath9k_htc: Failed to initialize the device [ 222.209584][ T5683] usb 2-1: ath9k_htc: USB layer deinitialized [ 222.553349][ T5580] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.636558][ T5588] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.673455][ T5683] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 222.863510][ T5683] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 222.906972][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.933760][ T5683] usb 2-1: Product: syz [ 222.944728][ T5683] usb 2-1: Manufacturer: syz [ 222.956425][ T5683] usb 2-1: SerialNumber: syz [ 223.150902][ T40] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 223.337737][ T40] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 223.356791][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.398215][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.424301][ T40] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 223.474223][ T40] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 223.489281][ T40] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 223.513925][ T40] usb 1-1: Manufacturer: syz [ 223.548119][ T40] usb 1-1: config 0 descriptor?? [ 223.681490][ T6126] loop4: detected capacity change from 0 to 32768 [ 223.691076][ T6126] btrfs: Deprecated parameter 'usebackuproot' [ 223.697341][ T6126] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 223.718490][ T5683] usb 2-1: config 0 descriptor?? [ 223.736075][ T6126] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.75 (6126) [ 223.765914][ T6126] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 223.777953][ T6126] BTRFS info (device loop4): using crc32c checksum algorithm [ 223.786697][ T6126] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 224.003930][ T6126] BTRFS info (device loop4): rebuilding free space tree [ 224.091945][ T6126] BTRFS info (device loop4): disabling free space tree [ 224.099455][ T6126] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 224.111180][ T6126] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 224.151268][ T6126] BTRFS info (device loop4): allowing degraded mounts [ 224.158389][ T6126] BTRFS info (device loop4): enabling ssd optimizations [ 224.166193][ T6126] BTRFS info (device loop4): turning on async discard [ 224.173345][ T6126] BTRFS info (device loop4): enabling disk space caching [ 224.180902][ T6126] BTRFS info (device loop4): force clearing of disk cache [ 224.189963][ T6126] BTRFS info (device loop4): trying to use backup root at mount time [ 224.198426][ T6126] BTRFS info (device loop4): force zlib compression, level 3 [ 224.216122][ T40] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 224.329239][ T5683] usb 2-1: Firmware version (0.0) predates our first public release. [ 224.337876][ T40] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 224.376335][ T5683] usb 2-1: Please update to version 0.2 or newer [ 224.717633][ T6148] loop3: detected capacity change from 0 to 512 [ 225.049503][ T6148] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 225.157166][ T6148] System zones: 1-12 [ 225.275772][ T6148] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.77: corrupted in-inode xattr: e_value size too large [ 225.334142][ T5588] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.423715][ T6149] loop2: detected capacity change from 0 to 32768 [ 225.433163][ T6149] btrfs: Deprecated parameter 'usebackuproot' [ 225.439404][ T6149] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 225.454467][ T6149] BTRFS info: device /dev/loop2 (7:2) using temp-fsid b0737329-dcb0-431b-b702-dcf090b4649f [ 225.464918][ T6149] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.78 (6149) [ 225.467672][ T6148] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 225.481857][ T5683] usb 2-1: USB disconnect, device number 8 [ 225.508196][ T6148] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.77: couldn't read orphan inode 15 (err -117) [ 225.520162][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 225.520249][ C0] EXT4-fs (loop3): initial error at time 1780230876: ext4_iget_extra_inode:5128: inode 15 [ 225.520396][ C0] EXT4-fs (loop3): last error at time 1780230876: ext4_iget_extra_inode:5128: inode 15 [ 225.563477][ T6149] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.573897][ T6149] BTRFS info (device loop2): using crc32c checksum algorithm [ 225.579896][ T6148] loop3: lost filesystem error report for type 5 error -117 [ 225.581660][ T6149] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 225.678353][ T6148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.853170][ T6149] BTRFS info (device loop2): rebuilding free space tree [ 225.898145][ T6149] BTRFS info (device loop2): disabling free space tree [ 225.905422][ T6149] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 225.915514][ T6149] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 225.958908][ T6149] BTRFS info (device loop2): allowing degraded mounts [ 225.965950][ T6149] BTRFS info (device loop2): enabling ssd optimizations [ 225.978759][ T6149] BTRFS info (device loop2): turning on async discard [ 225.985967][ T6149] BTRFS info (device loop2): enabling disk space caching [ 225.993264][ T6149] BTRFS info (device loop2): force clearing of disk cache [ 226.000819][ T6149] BTRFS info (device loop2): trying to use backup root at mount time [ 226.009100][ T6149] BTRFS info (device loop2): force zlib compression, level 3 [ 226.141410][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 226.196900][ T5198] usb 1-1: USB disconnect, device number 8 [ 226.351892][ T9] usb 4-1: config index 0 descriptor too short (expected 12147, got 27) [ 226.411118][ T9] usb 4-1: config 109 has too many interfaces: 112, using maximum allowed: 32 [ 226.478304][ T9] usb 4-1: config 109 has an invalid descriptor of length 100, skipping remainder of the config [ 226.567630][ T9] usb 4-1: config 109 has 0 interfaces, different from the descriptor's value: 112 [ 226.634622][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 226.651687][ T40] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 226.687610][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 226.713458][ T5581] BTRFS info (device loop2): last unmount of filesystem b0737329-dcb0-431b-b702-dcf090b4649f [ 226.735960][ T9] usb 4-1: Product: syz [ 226.753504][ T9] usb 4-1: Manufacturer: syz [ 226.774758][ T9] usb 4-1: SerialNumber: syz [ 226.894776][ T40] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 226.929481][ T40] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.955852][ T5198] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 226.966327][ T40] usb 2-1: Product: syz [ 226.996936][ T40] usb 2-1: Manufacturer: syz [ 227.028184][ T40] usb 2-1: SerialNumber: syz [ 227.095491][ T40] usb 2-1: config 0 descriptor?? [ 227.202069][ T5198] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 227.221500][ T5198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.284484][ T5198] usb 5-1: Product: syz [ 227.307216][ T5198] usb 5-1: Manufacturer: syz [ 227.332921][ T5198] usb 5-1: SerialNumber: syz [ 227.499359][ T5198] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 227.589781][ T9] usb 4-1: USB disconnect, device number 7 [ 227.636167][ T5679] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 227.651417][ T40] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 227.656799][ T5823] udevd[5823]: setting mode of /dev/bus/usb/004/007 to 020664 failed: No such file or directory [ 227.701013][ T40] usb 2-1: Firmware version (0.0) predates our first public release. [ 227.753913][ T5823] udevd[5823]: setting owner of /dev/bus/usb/004/007 to uid=0, gid=0 failed: No such file or directory [ 227.789190][ T40] usb 2-1: Please update to version 0.2 or newer [ 227.992166][ T5683] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 228.055451][ T5724] usb 5-1: USB disconnect, device number 7 [ 228.140291][ T40] usb 2-1: USB disconnect, device number 9 [ 228.213551][ T5683] usb 3-1: Using ep0 maxpacket: 8 [ 228.265747][ T5683] usb 3-1: unable to get BOS descriptor or descriptor too short [ 228.303478][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 228.370672][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 228.429459][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 228.474291][ T5683] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 228.526658][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 228.573125][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 26668, setting to 1024 [ 228.602501][ T5593] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.644885][ T5683] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 228.735222][ T5683] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 228.786981][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.841130][ T5683] usb 3-1: Product: syz [ 228.856625][ T5683] usb 3-1: Manufacturer: syz [ 228.884934][ T5683] usb 3-1: SerialNumber: syz [ 228.912926][ T5679] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 228.948204][ T5683] usb 3-1: config 0 descriptor?? [ 228.957268][ T5679] ath9k_htc: Failed to initialize the device [ 228.980467][ T6179] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 228.989224][ T6179] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 229.011148][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 229.044441][ T5724] usb 5-1: ath9k_htc: USB layer deinitialized [ 229.070173][ T5683] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 229.268059][ T6187] loop3: detected capacity change from 0 to 512 [ 229.277141][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 229.321037][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.298208][ T9] usb 1-1: Product: syz [ 230.302714][ T9] usb 1-1: Manufacturer: syz [ 230.308508][ T9] usb 1-1: SerialNumber: syz [ 230.592358][ T6191] loop1: detected capacity change from 0 to 32768 [ 230.602198][ T6191] btrfs: Deprecated parameter 'usebackuproot' [ 230.608461][ T6191] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 230.748070][ T6191] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.86 (6191) [ 230.888622][ T6187] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 231.019231][ T6187] System zones: 1-12 [ 231.100783][ T6187] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.85: corrupted in-inode xattr: e_value size too large [ 231.240226][ T6187] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 231.240622][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 231.257117][ C1] EXT4-fs (loop3): initial error at time 1780230882: ext4_iget_extra_inode:5128: inode 15 [ 231.267563][ C1] EXT4-fs (loop3): last error at time 1780230882: ext4_iget_extra_inode:5128: inode 15 [ 231.324381][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 231.331731][ T6191] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 231.343688][ T6191] BTRFS info (device loop1): using crc32c checksum algorithm [ 231.358547][ T6191] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 231.527771][ T6187] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.85: couldn't read orphan inode 15 (err -117) [ 231.724610][ T6187] loop3: lost filesystem error report for type 5 error -117 [ 231.791548][ T6187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.843412][ T6191] BTRFS info (device loop1): rebuilding free space tree [ 231.879214][ T6197] loop2: detected capacity change from 0 to 512 [ 231.907088][ T6191] BTRFS info (device loop1): disabling free space tree [ 231.914665][ T6191] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 231.924808][ T6191] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 231.998993][ T6191] BTRFS info (device loop1): allowing degraded mounts [ 232.006344][ T6191] BTRFS info (device loop1): enabling ssd optimizations [ 232.014227][ T6191] BTRFS info (device loop1): turning on async discard [ 232.021874][ T6191] BTRFS info (device loop1): enabling disk space caching [ 232.029074][ T6191] BTRFS info (device loop1): force clearing of disk cache [ 232.036535][ T6191] BTRFS info (device loop1): trying to use backup root at mount time [ 232.044937][ T6191] BTRFS info (device loop1): force zlib compression, level 3 [ 232.078103][ T5724] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 232.107397][ T9] usb 1-1: USB disconnect, device number 9 [ 232.219126][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 232.236498][ T6197] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 232.285533][ T6197] System zones: 1-12 [ 232.301310][ T6197] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.88: corrupted in-inode xattr: e_value size too large [ 232.348427][ T5585] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 232.385614][ T6197] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 232.387388][ T6197] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.88: couldn't read orphan inode 15 (err -117) [ 232.397037][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 232.397123][ C1] EXT4-fs (loop2): initial error at time 1780230883: ext4_iget_extra_inode:5128: inode 15 [ 232.397271][ C1] EXT4-fs (loop2): last error at time 1780230883: ext4_iget_extra_inode:5128: inode 15 [ 232.534722][ T6197] loop2: lost filesystem error report for type 5 error -117 [ 232.540358][ T6197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.661905][ T5593] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.757873][ T5683] usb 3-1: USB disconnect, device number 8 [ 233.172526][ T5679] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 233.326555][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.410142][ T5683] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 233.413370][ T5679] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 233.496959][ T5679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.573284][ T5679] usb 1-1: Product: syz [ 233.602056][ T5679] usb 1-1: Manufacturer: syz [ 233.638099][ T5679] usb 1-1: SerialNumber: syz [ 233.660918][ T5683] usb 3-1: config index 0 descriptor too short (expected 12147, got 27) [ 233.680346][ T5679] usb 1-1: config 0 descriptor?? [ 233.700423][ T5683] usb 3-1: config 109 has too many interfaces: 112, using maximum allowed: 32 [ 233.762733][ T5683] usb 3-1: config 109 has an invalid descriptor of length 100, skipping remainder of the config [ 233.832101][ T5683] usb 3-1: config 109 has 0 interfaces, different from the descriptor's value: 112 [ 233.911121][ T5683] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 233.971068][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 234.019870][ T5683] usb 3-1: Product: syz [ 234.054148][ T5683] usb 3-1: Manufacturer: syz [ 234.075761][ T5683] usb 3-1: SerialNumber: syz [ 234.204783][ T5679] usb 1-1: Firmware version (0.0) predates our first public release. [ 234.204899][ T5679] usb 1-1: Please update to version 0.2 or newer [ 234.478622][ T5683] usb 3-1: USB disconnect, device number 9 [ 234.593430][ T5581] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.744360][ T5679] usb 1-1: USB disconnect, device number 10 [ 235.394619][ T5683] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 235.530870][ T5724] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 235.676142][ T5683] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 235.687793][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.700765][ T5683] usb 3-1: Product: syz [ 235.705599][ T5683] usb 3-1: Manufacturer: syz [ 235.713774][ T5724] usb 4-1: Using ep0 maxpacket: 8 [ 235.728538][ T5683] usb 3-1: SerialNumber: syz [ 235.745829][ T5724] usb 4-1: unable to get BOS descriptor or descriptor too short [ 235.778778][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 235.796600][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 235.811130][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 235.832600][ T5724] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 235.854134][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 235.886533][ T5683] usb 3-1: config 0 descriptor?? [ 235.936717][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 26668, setting to 1024 [ 236.105130][ T5724] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 238.190203][ T5683] usb 3-1: Firmware version (0.0) predates our first public release. [ 238.206239][ T5683] usb 3-1: Please update to version 0.2 or newer [ 238.215040][ T5724] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 238.225315][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.234211][ T5724] usb 4-1: Product: syz [ 238.240276][ T5724] usb 4-1: Manufacturer: syz [ 238.731716][ T5724] usb 4-1: config 0 descriptor?? [ 238.751064][ T5724] usb 4-1: can't set config #0, error -71 [ 238.879734][ T5724] usb 4-1: USB disconnect, device number 8 [ 238.949102][ T5683] usb 3-1: USB disconnect, device number 10 [ 239.001048][ T5679] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 239.108527][ T6267] netlink: 64 bytes leftover after parsing attributes in process `syz.3.102'. [ 239.212986][ T5679] usb 2-1: Using ep0 maxpacket: 8 [ 239.259659][ T5679] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 239.269689][ T5679] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 239.307818][ T5679] usb 2-1: config 179 has no interface number 0 [ 239.338203][ T5679] usb 2-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 239.376743][ T5679] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 239.413720][ T5679] usb 2-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 239.471613][ T5679] usb 2-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice=1e.eb [ 239.492781][ T5679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.511462][ T5683] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 239.707009][ T5683] usb 3-1: Using ep0 maxpacket: 8 [ 239.729316][ T5683] usb 3-1: unable to get BOS descriptor or descriptor too short [ 239.764442][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 239.817266][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 239.856693][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 239.873012][ T5683] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 239.898876][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 239.932639][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 26668, setting to 1024 [ 239.973402][ T5683] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 240.007509][ T5683] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 240.019338][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.039959][ T5683] usb 3-1: Product: syz [ 240.053872][ T5683] usb 3-1: Manufacturer: syz [ 240.069337][ T5683] usb 3-1: SerialNumber: syz [ 240.111125][ T5683] usb 3-1: config 0 descriptor?? [ 240.129981][ T6268] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 240.138271][ T6268] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 240.223199][ T5683] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.430931][ T5679] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 240.613449][ T5683] usb 3-1: USB disconnect, device number 11 [ 240.637484][ T5679] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 240.637609][ T5679] usb 5-1: config 179 has no interface number 0 [ 240.637744][ T5679] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 240.637892][ T5679] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 240.638031][ T5679] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 240.638168][ T5679] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 240.638397][ T5679] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 240.638586][ T5679] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 240.638716][ T5679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.658455][ T6282] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 240.658472][ T6288] netlink: 64 bytes leftover after parsing attributes in process `syz.0.108'. [ 240.659182][ T6282] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 240.771286][ T5724] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 241.040431][ T5724] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 241.040757][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.040871][ T5724] usb 4-1: Product: syz [ 241.040960][ T5724] usb 4-1: Manufacturer: syz [ 241.041051][ T5724] usb 4-1: SerialNumber: syz [ 241.070343][ T5724] usb 4-1: config 0 descriptor?? [ 241.162564][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.635523][ T5724] usb 4-1: Firmware version (0.0) predates our first public release. [ 241.635641][ T5724] usb 4-1: Please update to version 0.2 or newer [ 241.776675][ T5679] usb 2-1: USB disconnect, device number 10 [ 242.057257][ T5724] usb 4-1: USB disconnect, device number 9 [ 242.250771][ T5679] usb 5-1: USB disconnect, device number 8 [ 242.251140][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 242.251345][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 243.196153][ T6303] netlink: 64 bytes leftover after parsing attributes in process `syz.1.113'. [ 243.745369][ T5724] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 244.039609][ T6312] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.047229][ T6312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.056012][ T6312] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.063602][ T6312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.231607][ T5724] usb 5-1: Using ep0 maxpacket: 8 [ 246.596239][ T5724] usb 5-1: device descriptor read/all, error -71 [ 246.905573][ T6329] loop2: detected capacity change from 0 to 512 [ 247.443019][ T6329] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 248.393036][ T6329] System zones: 1-12 [ 248.634533][ T6329] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.120: corrupted in-inode xattr: e_value size too large [ 248.795878][ T6329] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 248.800659][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 248.816921][ C1] EXT4-fs (loop2): initial error at time 1780230899: ext4_iget_extra_inode:5128: inode 15 [ 248.827197][ C1] EXT4-fs (loop2): last error at time 1780230899: ext4_iget_extra_inode:5128: inode 15 [ 248.874484][ T6329] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.120: couldn't read orphan inode 15 (err -117) [ 248.953747][ T6329] loop2: lost filesystem error report for type 5 error -117 [ 248.985344][ T6329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.713869][ T40] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 249.961398][ T5679] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 249.987673][ T40] usb 3-1: config index 0 descriptor too short (expected 12147, got 27) [ 250.032520][ T40] usb 3-1: config 109 has too many interfaces: 112, using maximum allowed: 32 [ 250.057282][ T6351] netlink: 64 bytes leftover after parsing attributes in process `syz.4.125'. [ 250.075473][ T40] usb 3-1: config 109 has an invalid descriptor of length 100, skipping remainder of the config [ 250.106359][ T40] usb 3-1: config 109 has 0 interfaces, different from the descriptor's value: 112 [ 250.158464][ T40] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 250.174465][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 250.192909][ T5679] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 250.223765][ T40] usb 3-1: Product: syz [ 250.230331][ T5679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.246797][ T40] usb 3-1: Manufacturer: syz [ 250.257957][ T40] usb 3-1: SerialNumber: syz [ 250.272861][ T5679] usb 1-1: Product: syz [ 250.285237][ T5679] usb 1-1: Manufacturer: syz [ 250.295527][ T5679] usb 1-1: SerialNumber: syz [ 250.343573][ T6355] netlink: 64 bytes leftover after parsing attributes in process `syz.3.126'. [ 250.410664][ T5679] usb 1-1: config 0 descriptor?? [ 250.571661][ T5724] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 250.751197][ T5724] usb 2-1: device descriptor read/64, error -71 [ 250.802123][ T40] usb 3-1: USB disconnect, device number 12 [ 250.871691][ T5679] usb 1-1: Firmware version (0.0) predates our first public release. [ 250.919284][ T5581] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.925220][ T5679] usb 1-1: Please update to version 0.2 or newer [ 251.032450][ T5724] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 251.245409][ T5679] usb 1-1: USB disconnect, device number 11 [ 251.246049][ T5724] usb 2-1: device descriptor read/64, error -71 [ 251.455620][ T5724] usb usb2-port1: attempt power cycle [ 251.861256][ T5724] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 251.936876][ T5724] usb 2-1: device descriptor read/8, error -71 [ 252.222891][ T5724] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 252.309614][ T5724] usb 2-1: device descriptor read/8, error -71 [ 252.334439][ T40] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 252.406566][ T6372] netlink: 64 bytes leftover after parsing attributes in process `syz.3.131'. [ 253.367240][ T5724] usb usb2-port1: unable to enumerate USB device [ 253.434484][ T40] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 253.551026][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.687624][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.813699][ T40] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 254.004002][ T40] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 254.042161][ T5198] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 254.116112][ T40] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 254.287826][ T40] usb 3-1: Manufacturer: syz [ 254.501176][ T40] usb 3-1: config 0 descriptor?? [ 254.578251][ T5198] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 254.696072][ T5198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.738324][ T5198] usb 1-1: Product: syz [ 254.767886][ T5198] usb 1-1: Manufacturer: syz [ 254.798719][ T5198] usb 1-1: SerialNumber: syz [ 254.933500][ T40] usb 3-1: can't set config #0, error -71 [ 254.957128][ T5198] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 255.017223][ T40] usb 3-1: USB disconnect, device number 13 [ 255.174486][ T3093] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 255.387224][ T5724] usb 1-1: USB disconnect, device number 12 [ 256.345719][ T3093] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 256.387190][ T3093] ath9k_htc: Failed to initialize the device [ 256.429402][ T5724] usb 1-1: ath9k_htc: USB layer deinitialized [ 256.501987][ T5683] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 256.810833][ T5683] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 256.845112][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.886329][ T5683] usb 5-1: Product: syz [ 256.908834][ T5683] usb 5-1: Manufacturer: syz [ 256.933081][ T5683] usb 5-1: SerialNumber: syz [ 257.015664][ T5683] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 257.100721][ T3093] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 257.224188][ T5724] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 257.336697][ T3093] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 257.371060][ T3093] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.409949][ T3093] usb 4-1: Product: syz [ 257.438002][ T3093] usb 4-1: Manufacturer: syz [ 257.482989][ T3093] usb 4-1: SerialNumber: syz [ 257.544018][ T3093] usb 4-1: config 0 descriptor?? [ 257.721524][ T5198] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 257.902711][ T5198] usb 1-1: device descriptor read/64, error -71 [ 258.103486][ T3093] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 258.153520][ T3093] usb 4-1: Firmware version (0.0) predates our first public release. [ 258.171435][ T3093] usb 4-1: Please update to version 0.2 or newer [ 258.191167][ T5198] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 258.351185][ T5198] usb 1-1: device descriptor read/64, error -71 [ 258.425595][ T5724] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 258.473598][ T5198] usb usb1-port1: attempt power cycle [ 258.533022][ T5724] ath9k_htc: Failed to initialize the device [ 258.627753][ T3093] usb 4-1: USB disconnect, device number 10 [ 258.687069][ T5724] usb 5-1: ath9k_htc: USB layer deinitialized [ 258.849975][ T5198] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 258.885688][ T5198] usb 1-1: device descriptor read/8, error -71 [ 258.942124][ T40] usb 5-1: USB disconnect, device number 11 [ 259.176533][ T5198] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 259.237780][ T5198] usb 1-1: device descriptor read/8, error -71 [ 259.384360][ T5198] usb usb1-port1: unable to enumerate USB device [ 260.002924][ T6428] loop4: detected capacity change from 0 to 32768 [ 260.011822][ T6428] btrfs: Deprecated parameter 'usebackuproot' [ 260.018017][ T6428] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 260.062563][ T6428] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.147 (6428) [ 260.219409][ T6428] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.231606][ T6428] BTRFS info (device loop4): using crc32c checksum algorithm [ 260.239832][ T6428] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 260.269474][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.276213][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.388092][ T6428] BTRFS info (device loop4): rebuilding free space tree [ 260.416555][ T6428] BTRFS info (device loop4): disabling free space tree [ 260.423990][ T6428] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 260.436279][ T6428] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 260.468445][ T6428] BTRFS info (device loop4): allowing degraded mounts [ 260.475625][ T6428] BTRFS info (device loop4): enabling ssd optimizations [ 260.483649][ T6428] BTRFS info (device loop4): turning on async discard [ 260.490714][ T6428] BTRFS info (device loop4): enabling disk space caching [ 260.497995][ T6428] BTRFS info (device loop4): force clearing of disk cache [ 260.505474][ T6428] BTRFS info (device loop4): trying to use backup root at mount time [ 260.513775][ T6428] BTRFS info (device loop4): force zlib compression, level 3 [ 260.942294][ T5588] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 261.710815][ T5198] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 261.902863][ T5198] usb 5-1: Using ep0 maxpacket: 8 [ 261.942249][ T5724] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 261.950821][ T5198] usb 5-1: unable to get BOS descriptor or descriptor too short [ 261.987551][ T5198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 262.021034][ T5198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 262.050950][ T5198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 262.100739][ T5198] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 262.112157][ T5198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 262.140685][ T5198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 26668, setting to 1024 [ 262.157504][ T5724] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 262.158080][ T5198] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 262.200377][ T5724] usb 4-1: config 179 has no interface number 0 [ 262.222545][ T5724] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 262.239970][ T5724] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 262.257195][ T5724] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 262.296791][ T5198] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 262.325453][ T5724] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 262.336116][ T5198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.346579][ T5724] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 262.375354][ T5198] usb 5-1: Product: syz [ 262.378162][ T5724] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 262.391035][ T5198] usb 5-1: Manufacturer: syz [ 262.391133][ T5198] usb 5-1: SerialNumber: syz [ 262.418327][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.420184][ T5198] usb 5-1: config 0 descriptor?? [ 262.464848][ T6464] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 262.505801][ T6464] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 262.510165][ T6459] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 262.601023][ T6459] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 262.930257][ T5198] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 263.613212][ T5724] usb 4-1: USB disconnect, device number 11 [ 263.619592][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 263.619800][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 263.654140][ T6468] syzkaller0: entered promiscuous mode [ 263.666458][ T6468] syzkaller0: entered allmulticast mode [ 264.076707][ T5198] usb 5-1: USB disconnect, device number 12 [ 264.454696][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.817222][ T6488] binder: 6487:6488 ioctl 4018620d 0 returned -22 [ 264.945707][ T40] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 265.093046][ T40] usb 3-1: device descriptor read/64, error -71 [ 265.186242][ T6492] loop1: detected capacity change from 0 to 512 [ 265.237912][ T6492] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 265.266043][ T6492] System zones: 1-12 [ 265.282710][ T6492] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.163: corrupted in-inode xattr: e_value size too large [ 265.301251][ T6492] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 265.309515][ T6492] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.163: couldn't read orphan inode 15 (err -117) [ 265.319242][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 265.319330][ C0] EXT4-fs (loop1): initial error at time 1780230916: ext4_iget_extra_inode:5128: inode 15 [ 265.319472][ C0] EXT4-fs (loop1): last error at time 1780230916: ext4_iget_extra_inode:5128: inode 15 [ 265.356515][ T40] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 265.367305][ T6492] loop1: lost filesystem error report for type 5 error -117 [ 265.402510][ T6492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.545217][ T40] usb 3-1: device descriptor read/64, error -71 [ 265.674336][ T40] usb usb3-port1: attempt power cycle [ 265.786926][ T6500] loop0: detected capacity change from 0 to 512 [ 265.801196][ T5724] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 265.827403][ T6500] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 265.847832][ T6500] System zones: 1-12 [ 265.871499][ T6500] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.166: corrupted in-inode xattr: e_value size too large [ 265.890911][ T6500] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 265.897746][ T6500] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.166: couldn't read orphan inode 15 (err -117) [ 265.907326][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 265.907414][ C0] EXT4-fs (loop0): initial error at time 1780230917: ext4_iget_extra_inode:5128: inode 15 [ 265.907566][ C0] EXT4-fs (loop0): last error at time 1780230917: ext4_iget_extra_inode:5128: inode 15 [ 265.961583][ T6500] loop0: lost filesystem error report for type 5 error -117 [ 265.974897][ T6500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.037598][ T5724] usb 2-1: config index 0 descriptor too short (expected 12147, got 27) [ 266.060969][ T40] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 266.063487][ T5724] usb 2-1: config 109 has too many interfaces: 112, using maximum allowed: 32 [ 266.107394][ T40] usb 3-1: device descriptor read/8, error -71 [ 266.114082][ T5724] usb 2-1: config 109 has an invalid descriptor of length 100, skipping remainder of the config [ 266.114202][ T5724] usb 2-1: config 109 has 0 interfaces, different from the descriptor's value: 112 [ 266.160415][ T5724] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 266.180230][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 266.190381][ T5724] usb 2-1: Product: syz [ 266.203302][ T5724] usb 2-1: Manufacturer: syz [ 266.208182][ T5724] usb 2-1: SerialNumber: syz [ 266.281020][ T5198] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 266.363188][ T40] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 266.417375][ T40] usb 3-1: device descriptor read/8, error -71 [ 266.449093][ T5198] usb 1-1: config index 0 descriptor too short (expected 12147, got 27) [ 266.467728][ T5198] usb 1-1: config 109 has too many interfaces: 112, using maximum allowed: 32 [ 266.507606][ T5198] usb 1-1: config 109 has an invalid descriptor of length 100, skipping remainder of the config [ 266.540956][ T5198] usb 1-1: config 109 has 0 interfaces, different from the descriptor's value: 112 [ 266.552439][ T40] usb usb3-port1: unable to enumerate USB device [ 266.568486][ T5724] usb 2-1: USB disconnect, device number 15 [ 266.617473][ T5198] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 266.631232][ C1] ===================================================== [ 266.638431][ C1] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x343/0x1810 [ 266.647201][ C1] __flush_smp_call_function_queue+0x343/0x1810 [ 266.653633][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 266.660747][ C1] __sysvec_call_function_single+0x48/0x350 [ 266.666788][ C1] sysvec_call_function_single+0x3d/0x90 [ 266.672584][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 266.678694][ C1] [ 266.681070][ C1] Local variable rf created at: [ 266.685987][ C1] __schedule+0x3a/0x8750 [ 266.690451][ C1] preempt_schedule_irq+0x50/0xa0 [ 266.695612][ C1] [ 266.698026][ C1] CPU: 1 UID: 0 PID: 6499 Comm: syz.4.167 Not tainted syzkaller #0 PREEMPT(lazy) [ 266.707579][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.717734][ C1] ===================================================== [ 266.724748][ C1] Disabling lock debugging due to kernel taint [ 266.730972][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 266.737481][ C1] CPU: 1 UID: 0 PID: 6499 Comm: syz.4.167 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 266.748416][ C1] Tainted: [B]=BAD_PAGE [ 266.752642][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.762800][ C1] Call Trace: [ 266.766149][ C1] [ 266.769143][ C1] __dump_stack+0x26/0x30 [ 266.773635][ C1] dump_stack_lvl+0x50/0x1c0 [ 266.778396][ C1] ? dump_stack+0x12/0x25 [ 266.782859][ C1] dump_stack+0x1e/0x25 [ 266.787153][ C1] vpanic+0x7b4/0x1430 [ 266.791483][ C1] panic+0x15d/0x160 [ 266.795566][ C1] kmsan_report+0x31a/0x320 [ 266.800236][ C1] ? __msan_warning+0x1b/0x30 [ 266.805066][ C1] ? __flush_smp_call_function_queue+0x343/0x1810 [ 266.811823][ C1] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 266.819119][ C1] ? __sysvec_call_function_single+0x48/0x350 [ 266.825345][ C1] ? sysvec_call_function_single+0x3d/0x90 [ 266.831837][ C1] ? asm_sysvec_call_function_single+0x1f/0x30 [ 266.838147][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 266.843539][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 266.850547][ C1] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 266.856788][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 266.862172][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 266.868167][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 266.873451][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 266.879951][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 266.885233][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 266.891227][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 266.896520][ C1] __msan_warning+0x1b/0x30 [ 266.901191][ C1] __flush_smp_call_function_queue+0x343/0x1810 [ 266.907636][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 266.914751][ C1] __sysvec_call_function_single+0x48/0x350 [ 266.920818][ C1] sysvec_call_function_single+0x3d/0x90 [ 266.926633][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 266.932761][ C1] RIP: 0033:0x7efd1cc507c3 [ 266.937285][ C1] Code: 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 18 3b 00 89 f0 4c 8d 05 49 f8 3a 00 89 c2 81 e2 ff 1f 00 00 49 8b 0c d1 <48> 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 [ 266.957112][ C1] RSP: 002b:00007ffde641dbc8 EFLAGS: 00000206 [ 266.963306][ C1] RAX: 000000008266e890 RBX: ffffffff8266e890 RCX: ffffffff8266e890 [ 266.971399][ C1] RDX: 0000000000000890 RSI: ffffffff8266e890 RDI: 0000000000000013 [ 266.979478][ C1] RBP: 0000000000000001 R08: 00007efd1d000000 R09: 00007efd1d002000 [ 266.987563][ C1] R10: 000000008266e894 R11: 0000000000000013 R12: 00007efd1d016128 [ 266.995738][ C1] R13: 000000000000f8c6 R14: ffffffff8266e5d1 R15: 00007efd1db45720 [ 267.003852][ C1] ? folio_add_lru+0x3d1/0x3f0 [ 267.008783][ C1] ? lru_add+0x290/0xba0 [ 267.013174][ C1] ? lru_add+0x290/0xba0 [ 267.017562][ C1] ? lru_add+0x290/0xba0 [ 267.021958][ C1] [ 267.025230][ C1] Kernel Offset: disabled [ 267.029613][ C1] Rebooting in 86400 seconds..