last executing test programs: 7.285156285s ago: executing program 0 (id=359): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0x4, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x7, 0xc9, &(0x7f00000004c0)=""/201, 0x0, 0x54, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setrlimit(0xc, &(0x7f0000000240)={0x5, 0x7947}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x24) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 7.284606525s ago: executing program 1 (id=360): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101280, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x3, 0x5) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0) read(r1, &(0x7f0000000500)=""/1024, 0x400) 5.940232659s ago: executing program 1 (id=364): syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0) 5.53491163s ago: executing program 1 (id=367): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LOCAL_NAME={{0x8}, 0x2}}}, 0x7) 5.246987387s ago: executing program 1 (id=368): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0x2020) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/103, 0x67, 0x0, 0x1, 0x2}}, 0x48) 4.878209057s ago: executing program 1 (id=370): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$kcm(0x23, 0x2, 0x0) close(r1) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg2\x00'}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/220, &(0x7f00000000c0)=""/80, &(0x7f0000000780)=""/82}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 4.193875814s ago: executing program 0 (id=371): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xec}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) 4.162061884s ago: executing program 2 (id=372): mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) 4.036039627s ago: executing program 3 (id=373): r0 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x20) statx(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x40, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) 3.94462431s ago: executing program 0 (id=374): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r2, 0x8ec6, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000005c0)='\n\x00', 0x2) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, 0x0, 0xfffffffffffffebe) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x4, 0x4, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x0, 0x1}, 0x50) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c000180140003"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl(r7, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f00000003c0)={'batadv_slave_1\x00', {0x2, 0x20, @empty=0xcf05fdfd}}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="200000001e0021000000000000000000070040"], 0x20}}, 0x80) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r12, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000580)={'tunl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x7800, 0xff09, 0xfffffffa, 0x3, {{0x16, 0x4, 0x0, 0x9, 0x58, 0x68, 0x0, 0x6, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x2c, 0x5f, 0x3, 0x4, [{@broadcast, 0x8}, {@local, 0x4}, {@loopback, 0xfffffff7}, {@rand_addr=0x64010100, 0xb3be}, {@local, 0x3}]}, @rr={0x7, 0x17, 0x88, [@multicast1, @private=0xa010102, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x8000) ioctl(r7, 0x8914, &(0x7f0000000000)='lapb0\x00'/40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYRES64=r7, @ANYRESHEX=r6, @ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r2, @ANYRESHEX=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x6, "a874e400"}, @generic={0x1, 0x2}]}}}}}}}}, 0x0) 3.803944444s ago: executing program 2 (id=375): syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0) 3.15341656s ago: executing program 1 (id=376): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f00000011c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000040)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.090971912s ago: executing program 0 (id=377): openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}}}}}, 0x0) 3.068172192s ago: executing program 3 (id=378): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x24, @none={0x0, 0xfffe}}, 0x14, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x4880) 2.960382125s ago: executing program 0 (id=379): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0x4, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x7, 0xc9, &(0x7f00000004c0)=""/201, 0x0, 0x54, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setrlimit(0xc, &(0x7f0000000240)={0x5, 0x7947}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x24) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 2.931519995s ago: executing program 2 (id=380): userfaultfd(0x80801) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, 0x0, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080), 0x0) r8 = dup(r6) syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0x1, 0x80, 0x2, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2000, 0x3, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x3, 0x2, 0x36c, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) 2.912891016s ago: executing program 3 (id=381): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) write(r4, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) syz_emit_ethernet(0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa"], 0x0) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, 0x0, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x54) 1.95239363s ago: executing program 3 (id=382): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xec}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) 1.748162836s ago: executing program 2 (id=383): mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) 1.744713705s ago: executing program 3 (id=384): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00'}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000000)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/220, &(0x7f00000000c0)=""/80, &(0x7f0000000780)=""/82}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 1.485289022s ago: executing program 2 (id=385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) write(r4, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) syz_emit_ethernet(0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8863"], 0x0) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, 0x0, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x54) 848.854428ms ago: executing program 3 (id=386): r0 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x20) statx(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x40, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) 49.372068ms ago: executing program 0 (id=387): io_uring_setup(0xf71, &(0x7f0000000180)={0x0, 0x3f51, 0x1, 0x7, 0xc5}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYBLOB="03"], 0x0) 0s ago: executing program 2 (id=388): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc0000000000000000000000000000010000000000000000000000000000000000000004000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. [ 83.617702][ T5761] cgroup: Unknown subsys name 'net' [ 83.753919][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.467572][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.640089][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.649575][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.658179][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.677464][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.685536][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.717024][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.725287][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.732888][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.744527][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.759093][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.769579][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.777211][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.787726][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.796957][ T5083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.806190][ T5083] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.825324][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.841121][ T5083] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.848896][ T5083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.897394][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.906363][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.915835][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.924248][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.932702][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.940757][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.377666][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 88.493677][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 88.601464][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 88.630549][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.639927][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.647750][ T5777] bridge_slave_0: entered allmulticast mode [ 88.654943][ T5777] bridge_slave_0: entered promiscuous mode [ 88.670818][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.678109][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.685845][ T5777] bridge_slave_1: entered allmulticast mode [ 88.693064][ T5777] bridge_slave_1: entered promiscuous mode [ 88.728753][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.736713][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.744069][ T5773] bridge_slave_0: entered allmulticast mode [ 88.752086][ T5773] bridge_slave_0: entered promiscuous mode [ 88.791721][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.800048][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.807702][ T5773] bridge_slave_1: entered allmulticast mode [ 88.815745][ T5773] bridge_slave_1: entered promiscuous mode [ 88.859572][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.871757][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.911590][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.924541][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.960482][ T5777] team0: Port device team_slave_0 added [ 88.977514][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 88.997266][ T5777] team0: Port device team_slave_1 added [ 89.056197][ T5773] team0: Port device team_slave_0 added [ 89.081219][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.091419][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.098735][ T5781] bridge_slave_0: entered allmulticast mode [ 89.106144][ T5781] bridge_slave_0: entered promiscuous mode [ 89.116647][ T5773] team0: Port device team_slave_1 added [ 89.146318][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.153346][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.179403][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.191557][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.201264][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.208955][ T5781] bridge_slave_1: entered allmulticast mode [ 89.216709][ T5781] bridge_slave_1: entered promiscuous mode [ 89.241608][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.248870][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.274993][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.309245][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.316926][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.343585][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.356856][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.363857][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.390617][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.431888][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.445204][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.493449][ T5777] hsr_slave_0: entered promiscuous mode [ 89.500258][ T5777] hsr_slave_1: entered promiscuous mode [ 89.569540][ T5781] team0: Port device team_slave_0 added [ 89.579376][ T5781] team0: Port device team_slave_1 added [ 89.586410][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.593690][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.601239][ T5785] bridge_slave_0: entered allmulticast mode [ 89.608454][ T5785] bridge_slave_0: entered promiscuous mode [ 89.616998][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.624158][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.632353][ T5785] bridge_slave_1: entered allmulticast mode [ 89.639955][ T5785] bridge_slave_1: entered promiscuous mode [ 89.675301][ T5773] hsr_slave_0: entered promiscuous mode [ 89.682073][ T5773] hsr_slave_1: entered promiscuous mode [ 89.688709][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.697032][ T5773] Cannot create hsr debugfs directory [ 89.785802][ T5083] Bluetooth: hci1: command tx timeout [ 89.786880][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.798827][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.825181][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.838607][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.845967][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.865394][ T5083] Bluetooth: hci0: command tx timeout [ 89.872659][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.893369][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.906409][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.945060][ T5083] Bluetooth: hci2: command tx timeout [ 90.001927][ T5785] team0: Port device team_slave_0 added [ 90.025672][ T5083] Bluetooth: hci3: command tx timeout [ 90.039994][ T5785] team0: Port device team_slave_1 added [ 90.063031][ T5781] hsr_slave_0: entered promiscuous mode [ 90.070182][ T5781] hsr_slave_1: entered promiscuous mode [ 90.077123][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.084700][ T5781] Cannot create hsr debugfs directory [ 90.132733][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.140100][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.166150][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.206497][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.213508][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.239693][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.448851][ T5785] hsr_slave_0: entered promiscuous mode [ 90.459200][ T5785] hsr_slave_1: entered promiscuous mode [ 90.465790][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.473370][ T5785] Cannot create hsr debugfs directory [ 90.565631][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.578594][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.599799][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.612852][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.746900][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.759238][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.771595][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.801393][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.891768][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.926184][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.948124][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.959012][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.060209][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.071310][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.088190][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.119743][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.171034][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.232910][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.252025][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.304205][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.311652][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.340844][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.348070][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.378969][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.401290][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.408510][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.428241][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.451277][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.458573][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.533159][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.577205][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.584352][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.623167][ T5781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.640568][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.684710][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.691961][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.759161][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.810976][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.864142][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.869646][ T5083] Bluetooth: hci1: command tx timeout [ 91.871834][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.924890][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.932096][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.946972][ T5083] Bluetooth: hci0: command tx timeout [ 92.026199][ T5083] Bluetooth: hci2: command tx timeout [ 92.089924][ T5785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.102655][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.113700][ T5083] Bluetooth: hci3: command tx timeout [ 92.169099][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.194597][ T9] cfg80211: failed to load regulatory.db [ 92.357522][ T5777] veth0_vlan: entered promiscuous mode [ 92.421838][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.444989][ T5777] veth1_vlan: entered promiscuous mode [ 92.531387][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.621059][ T5781] veth0_vlan: entered promiscuous mode [ 92.637633][ T5777] veth0_macvtap: entered promiscuous mode [ 92.659720][ T5777] veth1_macvtap: entered promiscuous mode [ 92.689033][ T5781] veth1_vlan: entered promiscuous mode [ 92.710661][ T5773] veth0_vlan: entered promiscuous mode [ 92.730349][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.747146][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.761133][ T5773] veth1_vlan: entered promiscuous mode [ 92.809487][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.833993][ T5781] veth0_macvtap: entered promiscuous mode [ 92.846539][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.856844][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.865667][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.874403][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.928056][ T5781] veth1_macvtap: entered promiscuous mode [ 92.956479][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.967790][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.981147][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.009120][ T5785] veth0_vlan: entered promiscuous mode [ 93.019835][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.030675][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.043294][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.062889][ T5785] veth1_vlan: entered promiscuous mode [ 93.088772][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.098208][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.107223][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.116987][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.128892][ T5773] veth0_macvtap: entered promiscuous mode [ 93.193299][ T5773] veth1_macvtap: entered promiscuous mode [ 93.259777][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.261244][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.280328][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.292865][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.331274][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.344166][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.354150][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.365140][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.377953][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.411321][ T5785] veth0_macvtap: entered promiscuous mode [ 93.442632][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.454316][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.466753][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.478939][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.490966][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.499225][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.513412][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.530046][ T5785] veth1_macvtap: entered promiscuous mode [ 93.541108][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.555021][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.563814][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.572892][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.587360][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.600180][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.658981][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.670574][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.681975][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.693478][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.720409][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.731212][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.745942][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.780327][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.796003][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.816455][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.830929][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.849406][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.862811][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.878825][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.918382][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.946984][ T5083] Bluetooth: hci1: command tx timeout [ 93.952749][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.981170][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.999309][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.025999][ T5083] Bluetooth: hci0: command tx timeout [ 94.105920][ T5083] Bluetooth: hci2: command tx timeout [ 94.151265][ T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.184011][ T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.190892][ T5083] Bluetooth: hci3: command tx timeout [ 94.304784][ T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.325227][ T5838] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.351380][ T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.393971][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.411856][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.517759][ T130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.540036][ T130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.548946][ T5838] usb 4-1: Using ep0 maxpacket: 16 [ 94.596094][ T5838] usb 4-1: unable to get BOS descriptor or descriptor too short [ 94.638500][ T5838] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.679461][ T5838] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.708379][ T5838] usb 4-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 94.723192][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.752934][ T5838] usb 4-1: Product: syz [ 94.760638][ T5838] usb 4-1: Manufacturer: syz [ 94.776866][ T5838] usb 4-1: SerialNumber: syz [ 95.724094][ T5861] process 'syz.0.6' launched './file2' with NULL argv: empty string added [ 96.057492][ T5083] Bluetooth: hci1: command tx timeout [ 96.104956][ T5083] Bluetooth: hci0: command tx timeout [ 96.188680][ T5083] Bluetooth: hci2: command tx timeout [ 96.236909][ T5864] syz.2.7[5864]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 96.266310][ T5083] Bluetooth: hci3: command tx timeout [ 96.357247][ T5838] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 96.399253][ T5838] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 96.448304][ T5866] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 96.547056][ T5838] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 96.582396][ T5838] usb 4-1: USB disconnect, device number 2 [ 96.630073][ T5864] loop2: detected capacity change from 0 to 8192 [ 96.666105][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.315981][ T5893] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 100.607796][ T5882] loop2: detected capacity change from 0 to 32768 [ 100.627841][ T5882] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.13 (5882) [ 100.667017][ T5882] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 100.679230][ T5882] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 100.699742][ T5882] BTRFS info (device loop2): enabling auto defrag [ 100.716812][ T5882] BTRFS info (device loop2): force clearing of disk cache [ 100.725609][ T5882] BTRFS info (device loop2): disabling log replay at mount time [ 100.764441][ T5882] BTRFS info (device loop2): turning on async discard [ 100.783793][ T5882] BTRFS info (device loop2): setting nodatacow, compression disabled [ 100.802911][ T5882] BTRFS info (device loop2): turning off async discard [ 100.810910][ T5882] BTRFS info (device loop2): disabling free space tree [ 100.818254][ T5882] BTRFS info (device loop2): disabling tree log [ 100.824725][ T5882] BTRFS info (device loop2): enabling disk space caching [ 100.832883][ T5882] BTRFS info (device loop2): disk space caching is enabled [ 101.226900][ T5785] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 102.860865][ T5934] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 103.727725][ T5948] netlink: 'syz.1.34': attribute type 29 has an invalid length. [ 103.739894][ T5948] netlink: 'syz.1.34': attribute type 29 has an invalid length. [ 103.767648][ T5948] netlink: 288 bytes leftover after parsing attributes in process `syz.1.34'. [ 103.787018][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34'. [ 103.808858][ T5948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.34'. [ 103.824590][ T5946] loop3: detected capacity change from 0 to 2048 [ 103.847658][ T5946] UDF-fs: bad mount option "gid=00000000000000060928" or missing value [ 104.554081][ T5959] loop1: detected capacity change from 0 to 32768 [ 104.742739][ T5959] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 105.243727][ T5959] XFS (loop1): Ending clean mount [ 105.268292][ T5959] XFS (loop1): Quotacheck needed: Please wait. [ 105.557188][ T5959] XFS (loop1): Quotacheck: Done. [ 106.901182][ T5982] sched: RT throttling activated [ 106.941272][ T28] audit: type=1800 audit(1785827051.670:2): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.37" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 107.132878][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 108.165276][ T6002] netlink: 'syz.2.45': attribute type 29 has an invalid length. [ 108.215802][ T6002] netlink: 'syz.2.45': attribute type 29 has an invalid length. [ 108.320791][ T6002] netlink: 288 bytes leftover after parsing attributes in process `syz.2.45'. [ 108.342710][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.45'. [ 108.405254][ T6002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.45'. [ 110.605725][ T6027] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 110.876017][ T6024] syz.0.49 (6024) used greatest stack depth: 17896 bytes left [ 113.573427][ T6064] netlink: 'syz.2.58': attribute type 29 has an invalid length. [ 113.595472][ T6064] netlink: 'syz.2.58': attribute type 29 has an invalid length. [ 113.662150][ T6072] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 113.923823][ T6064] netlink: 288 bytes leftover after parsing attributes in process `syz.2.58'. [ 115.205407][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 115.254032][ T6064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.58'. [ 116.600515][ T6101] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 118.319321][ T6121] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 119.148047][ T6125] netlink: 'syz.3.73': attribute type 29 has an invalid length. [ 119.181401][ T6125] netlink: 'syz.3.73': attribute type 29 has an invalid length. [ 119.396680][ T6125] netlink: 288 bytes leftover after parsing attributes in process `syz.3.73'. [ 119.406061][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.73'. [ 119.485055][ T6125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.73'. [ 120.352438][ T6138] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 126.596760][ T6176] netlink: 'syz.3.88': attribute type 29 has an invalid length. [ 126.597140][ T6176] netlink: 'syz.3.88': attribute type 29 has an invalid length. [ 126.604225][ T6176] netlink: 288 bytes leftover after parsing attributes in process `syz.3.88'. [ 126.604257][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.88'. [ 126.604294][ T6176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.88'. [ 126.797529][ T6180] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 131.391921][ T6212] netlink: 'syz.2.99': attribute type 29 has an invalid length. [ 131.400365][ T6212] netlink: 'syz.2.99': attribute type 29 has an invalid length. [ 131.419170][ T6212] netlink: 288 bytes leftover after parsing attributes in process `syz.2.99'. [ 131.428365][ T6212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'. [ 131.471472][ T6212] netlink: 20 bytes leftover after parsing attributes in process `syz.2.99'. [ 131.731599][ T6217] loop1: detected capacity change from 0 to 32768 [ 131.755638][ T6217] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.100 (6217) [ 131.772624][ T6217] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.783029][ T6217] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 131.791803][ T6217] BTRFS info (device loop1): turning on sync discard [ 131.798588][ T6217] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 131.809394][ T6217] BTRFS info (device loop1): use zstd compression, level 3 [ 131.816714][ T6217] BTRFS info (device loop1): turning on async discard [ 131.823670][ T6217] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 131.834433][ T6217] BTRFS info (device loop1): trying to use backup root at mount time [ 131.842609][ T6217] BTRFS info (device loop1): enabling auto defrag [ 131.849187][ T6217] BTRFS info (device loop1): using free space tree [ 132.447745][ T130] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 132.490810][ T6217] BTRFS error (device loop1): failed to load root extent [ 132.498452][ T6217] BTRFS warning (device loop1): try to load backup roots slot 1 [ 132.514092][ T50] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 132.552462][ T6217] BTRFS warning (device loop1): couldn't read tree root [ 132.560000][ T6217] BTRFS warning (device loop1): try to load backup roots slot 2 [ 132.570651][ T50] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 132.581808][ T6217] BTRFS warning (device loop1): couldn't read tree root [ 132.589962][ T6217] BTRFS warning (device loop1): try to load backup roots slot 3 [ 132.615105][ T6217] BTRFS info (device loop1): enabling ssd optimizations [ 132.624749][ T6217] BTRFS info (device loop1): rebuilding free space tree [ 132.704392][ T6217] BTRFS info (device loop1): checking UUID tree [ 133.473729][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.480953][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.687448][ T6245] rt1719: probe of 0-0049 failed with error -5 [ 133.697427][ T6245] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 133.841345][ T6245] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 134.122865][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.346204][ T6245] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 135.393671][ T6246] bond1: entered promiscuous mode [ 135.400065][ T6251] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 135.410367][ T6251] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 135.420068][ T6251] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 138.943137][ T6283] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 141.835012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 142.232401][ T6294] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 144.315163][ T27] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 144.536128][ T27] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 144.630956][ T27] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 144.767025][ T27] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 144.923232][ T27] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 144.994441][ T27] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 145.181257][ T6323] loop0: detected capacity change from 0 to 736 [ 145.389533][ T6321] loop3: detected capacity change from 0 to 32768 [ 145.398805][ T27] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 145.411397][ T27] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 145.419824][ T27] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 145.430829][ T6321] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.129 (6321) [ 145.444333][ T27] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 145.468808][ T6321] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.479224][ T6321] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 145.488205][ T6321] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 145.497799][ T6321] BTRFS info (device loop3): use zstd compression, level 3 [ 145.505828][ T6321] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 145.516579][ T6321] BTRFS info (device loop3): trying to use backup root at mount time [ 145.525393][ T6321] BTRFS info (device loop3): enabling auto defrag [ 145.532119][ T6321] BTRFS info (device loop3): disabling free space tree [ 145.539118][ T6321] BTRFS error (device loop3): cannot disable free space tree [ 145.550714][ T6321] BTRFS error (device loop3): open_ctree failed: -22 [ 145.781313][ T27] usb 3-1: string descriptor 0 read error: -22 [ 145.788187][ T27] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 145.797409][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.817225][ T27] adutux 3-1:168.0: interrupt endpoints not found [ 146.068221][ T23] usb 3-1: USB disconnect, device number 2 [ 146.955081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 146.973825][ T6333] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 147.134570][ T6336] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 147.306029][ T5784] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (5784) [ 149.911784][ T6357] loop1: detected capacity change from 0 to 4096 [ 150.065355][ T6363] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.597635][ T6367] deleting an unspecified loop device is not supported. [ 153.606782][ T6377] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 154.507340][ T5083] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 154.516217][ T5083] Bluetooth: hci3: Injecting HCI hardware error event [ 154.525604][ T5083] Bluetooth: hci3: hardware error 0x00 [ 156.684970][ T5083] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 156.785426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 156.939684][ T6386] loop2: detected capacity change from 0 to 131072 [ 156.961623][ T6386] F2FS-fs (loop2): invalid crc value [ 156.997134][ T6386] F2FS-fs (loop2): Found nat_bits in checkpoint [ 157.102106][ T6386] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 157.646993][ T28] audit: type=1326 audit(1785827103.260:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.0.153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da279e019 code=0x7ffc0000 [ 157.703313][ T6399] loop1: detected capacity change from 0 to 256 [ 158.893662][ T6399] exfat: Deprecated parameter 'utf8' [ 158.937824][ T6403] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 159.294873][ T28] audit: type=1326 audit(1785827104.720:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.0.153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f5da279e019 code=0x7ffc0000 [ 159.325099][ T6399] exfat: Deprecated parameter 'namecase' [ 159.427949][ T28] audit: type=1326 audit(1785827104.720:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.0.153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da279e019 code=0x7ffc0000 [ 159.497579][ T28] audit: type=1326 audit(1785827104.720:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.0.153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da279e019 code=0x7ffc0000 [ 159.543332][ T6399] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d) [ 159.915100][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 160.135029][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 160.150633][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.182663][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 160.256943][ T23] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 160.291767][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.329478][ T23] usb 1-1: Product: syz [ 160.365597][ T23] usb 1-1: Manufacturer: syz [ 160.386618][ T23] usb 1-1: SerialNumber: syz [ 160.583899][ T23] usb 1-1: config 0 descriptor?? [ 160.609469][ T23] radioshark2 1-1:0.0: Invalid radioSHARK2 device [ 160.632570][ T23] radioshark2: probe of 1-1:0.0 failed with error -22 [ 160.677235][ T23] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 161.047886][ T23] usb 1-1: USB disconnect, device number 2 [ 161.227197][ T6417] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 163.192599][ T6428] kernel profiling enabled (shift: 5) [ 166.428143][ T6439] loop1: detected capacity change from 0 to 131072 [ 166.444411][ T6439] F2FS-fs (loop1): invalid crc value [ 166.457639][ T6439] F2FS-fs (loop1): Found nat_bits in checkpoint [ 166.510555][ T6439] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 166.574342][ T6446] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 167.598817][ T6456] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 168.368742][ T6466] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 170.726662][ T6474] loop2: detected capacity change from 0 to 32768 [ 170.753780][ T6461] loop3: detected capacity change from 0 to 32768 [ 170.874162][ T6474] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 171.406811][ T6474] XFS (loop2): Ending clean mount [ 171.437602][ T6474] XFS (loop2): Quotacheck needed: Please wait. [ 171.704260][ T6474] XFS (loop2): Quotacheck: Done. [ 172.091005][ T28] audit: type=1800 audit(1785827117.680:7): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.175" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 172.599749][ T6497] loop0: detected capacity change from 0 to 256 [ 172.637216][ T6497] exfat: Deprecated parameter 'utf8' [ 172.706772][ T5785] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.421431][ T6495] loop3: detected capacity change from 0 to 131072 [ 173.451144][ T6495] F2FS-fs (loop3): invalid crc value [ 173.466362][ T6497] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 173.533617][ T6500] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 173.547688][ T6495] F2FS-fs (loop3): Found nat_bits in checkpoint [ 173.651137][ T6495] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 173.867609][ T6497] veth0_to_bond: mtu less than device minimum [ 173.928821][ T6497] netlink: 248 bytes leftover after parsing attributes in process `syz.0.180'. [ 173.983337][ T6497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.180'. [ 174.047020][ T6497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.180'. [ 174.369447][ T6508] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 176.503099][ T6515] loop0: detected capacity change from 0 to 32768 [ 176.549764][ T6515] (syz.0.184,6515,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 176.566357][ T6515] (syz.0.184,6515,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 176.648367][ T6515] JBD2: Ignoring recovery information on journal [ 176.709176][ T6515] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 177.914966][ T5782] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 178.163653][ T5782] usb 2-1: Using ep0 maxpacket: 8 [ 178.255350][ T5782] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.697586][ T5782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 179.084924][ T5782] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.115378][ T5782] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 179.125541][ T5782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.135046][ T5782] usb 2-1: Product: syz [ 179.140218][ T5782] usb 2-1: Manufacturer: syz [ 179.145767][ T5782] usb 2-1: SerialNumber: syz [ 179.157688][ T5782] usb 2-1: config 0 descriptor?? [ 179.167717][ T5782] radioshark2 2-1:0.0: Invalid radioSHARK2 device [ 179.188475][ T5782] radioshark2: probe of 2-1:0.0 failed with error -22 [ 179.209104][ T5782] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 179.326673][ T5781] ocfs2: Unmounting device (7,0) on (node local) [ 179.379513][ T5782] usb 2-1: USB disconnect, device number 2 [ 179.591531][ T6536] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 179.716475][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 179.998909][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 180.175102][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 180.277276][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.398986][ T6538] loop3: detected capacity change from 0 to 512 [ 180.406509][ T6538] EXT4-fs: Ignoring removed orlov option [ 180.436153][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 180.479779][ T8] pvrusb2: ********** [ 180.483848][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 180.567576][ T8] pvrusb2: Important functionality might not be entirely working. [ 180.599466][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 180.637672][ T6538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.663559][ T8] pvrusb2: ********** [ 180.684304][ T6538] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.701871][ T2323] pvrusb2: Invalid write control endpoint [ 180.895789][ T6532] pvrusb2: Invalid write control endpoint [ 180.930340][ T5844] usb 3-1: USB disconnect, device number 3 [ 180.937157][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.997419][ T2323] pvrusb2: Invalid write control endpoint [ 181.024855][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 181.050365][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 181.079223][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 181.103682][ T2323] pvrusb2: Device being rendered inoperable [ 181.134372][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 181.143368][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 181.165147][ T2323] pvrusb2: Attached sub-driver cx25840 [ 181.170895][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 181.199899][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 181.402019][ T6555] netlink: 'syz.3.195': attribute type 29 has an invalid length. [ 181.418403][ T6555] netlink: 'syz.3.195': attribute type 29 has an invalid length. [ 181.453107][ T6555] netlink: 288 bytes leftover after parsing attributes in process `syz.3.195'. [ 181.542383][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.195'. [ 181.574022][ T6555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.195'. [ 182.441981][ T6562] loop2: detected capacity change from 0 to 131072 [ 182.456722][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 182.486593][ T6562] F2FS-fs (loop2): invalid crc value [ 182.570890][ T6562] F2FS-fs (loop2): Found nat_bits in checkpoint [ 182.659507][ T6562] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 182.799415][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.016834][ T23] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 183.027158][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.076866][ T23] usb 2-1: config 0 descriptor?? [ 184.063188][ T6575] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 184.099967][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 184.230749][ T6571] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 184.254351][ T6572] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 184.474742][ T6578] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 184.619574][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 184.767309][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 184.800939][ T6557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.048457][ T6557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.383975][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'. [ 185.485624][ T6296] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 185.715350][ T6296] usb 4-1: Using ep0 maxpacket: 8 [ 185.822836][ T6296] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.990756][ T6296] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 186.124428][ T6296] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.423814][ T6296] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 186.639547][ T6296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.828638][ T6296] usb 4-1: Product: syz [ 186.938047][ T6296] usb 4-1: Manufacturer: syz [ 187.050665][ T6296] usb 4-1: SerialNumber: syz [ 187.415053][ T6296] usb 4-1: config 0 descriptor?? [ 188.055106][ T6296] radioshark2 4-1:0.0: Invalid radioSHARK2 device [ 188.267391][ T6296] radioshark2: probe of 4-1:0.0 failed with error -22 [ 188.505309][ T6296] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 188.580918][ T23] pwc: recv_control_msg error -71 req 02 val 2c00 [ 188.652188][ T23] pwc: recv_control_msg error -71 req 04 val 1000 [ 188.675119][ T6296] usb 4-1: USB disconnect, device number 3 [ 188.712175][ T23] pwc: recv_control_msg error -71 req 04 val 1300 [ 188.766673][ T23] pwc: recv_control_msg error -71 req 04 val 1400 [ 188.786619][ T23] pwc: recv_control_msg error -71 req 02 val 2000 [ 188.805451][ T23] pwc: recv_control_msg error -71 req 02 val 2100 [ 188.829483][ T23] pwc: recv_control_msg error -71 req 04 val 1500 [ 188.869431][ T23] pwc: recv_control_msg error -71 req 02 val 2500 [ 188.888627][ T23] pwc: recv_control_msg error -71 req 02 val 2400 [ 188.898077][ T23] pwc: recv_control_msg error -71 req 02 val 2600 [ 188.908341][ T23] pwc: recv_control_msg error -71 req 02 val 2900 [ 188.944308][ T23] pwc: recv_control_msg error -71 req 02 val 2800 [ 189.013538][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 189.028710][ T6597] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 189.039172][ T6597] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 189.097126][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 189.138078][ T6296] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 189.274307][ T23] pwc: Registered as video103. [ 189.286421][ T6597] bond1: entered promiscuous mode [ 189.430234][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 189.474974][ T6296] usb 4-1: Using ep0 maxpacket: 8 [ 189.541910][ T6296] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 189.681275][ T6296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.763271][ T6601] netlink: 'syz.1.208': attribute type 29 has an invalid length. [ 189.780163][ T6601] netlink: 'syz.1.208': attribute type 29 has an invalid length. [ 189.786311][ T23] usb 2-1: USB disconnect, device number 3 [ 189.809242][ T6601] netlink: 288 bytes leftover after parsing attributes in process `syz.1.208'. [ 189.818529][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'. [ 189.830994][ T6601] netlink: 20 bytes leftover after parsing attributes in process `syz.1.208'. [ 189.834370][ T6296] pvrusb2: Hardware description: Terratec Grabster AV400 [ 189.914879][ T6296] pvrusb2: ********** [ 189.918967][ T6296] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 189.965412][ T6296] pvrusb2: Important functionality might not be entirely working. [ 189.973322][ T6296] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 190.044497][ T6296] pvrusb2: ********** [ 190.073879][ T2323] pvrusb2: Invalid write control endpoint [ 190.273032][ T6592] pvrusb2: Invalid write control endpoint [ 190.292634][ T8] usb 4-1: USB disconnect, device number 4 [ 190.304554][ T2323] pvrusb2: Invalid write control endpoint [ 190.334112][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 190.359026][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 190.375004][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 190.408395][ T2323] pvrusb2: Device being rendered inoperable [ 190.418824][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 190.435819][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 190.490295][ T2323] pvrusb2: Attached sub-driver cx25840 [ 190.799607][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 191.002155][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 191.499163][ T6612] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 192.403326][ T6613] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 192.661268][ T6617] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 192.670921][ T6617] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 192.797961][ T6617] bond1: entered promiscuous mode [ 193.542928][ T6628] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 193.553880][ T6628] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 193.715163][ T5813] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 194.412500][ T6628] bond2: entered promiscuous mode [ 194.534848][ T5813] usb 3-1: Using ep0 maxpacket: 8 [ 194.554996][ T5813] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.567243][ T6634] netlink: 'syz.0.217': attribute type 29 has an invalid length. [ 194.588753][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.604147][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.612180][ T6634] netlink: 'syz.0.217': attribute type 29 has an invalid length. [ 194.616325][ T5813] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 194.641234][ T6634] netlink: 288 bytes leftover after parsing attributes in process `syz.0.217'. [ 194.651078][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'. [ 194.664889][ T5813] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.697415][ T6634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.217'. [ 194.698247][ T5813] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 194.732177][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.752474][ T5813] usb 3-1: Product: syz [ 194.764819][ T5813] usb 3-1: Manufacturer: syz [ 194.775979][ T5813] usb 3-1: SerialNumber: syz [ 194.793681][ T5813] usb 3-1: config 0 descriptor?? [ 194.827594][ T5813] radioshark2 3-1:0.0: Invalid radioSHARK2 device [ 194.834127][ T5813] radioshark2: probe of 3-1:0.0 failed with error -22 [ 194.884395][ T5813] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 195.025188][ T5813] usb 3-1: USB disconnect, device number 4 [ 195.307024][ T6648] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 195.316856][ T6648] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 195.559208][ T6647] loop1: detected capacity change from 0 to 32768 [ 195.694191][ T6648] bond2: entered promiscuous mode [ 195.750149][ T6647] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.761060][ T6647] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 195.769858][ T6647] BTRFS info (device loop1): turning on sync discard [ 195.776673][ T6647] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 195.786151][ T6647] BTRFS info (device loop1): use zstd compression, level 3 [ 195.793376][ T6647] BTRFS info (device loop1): turning on async discard [ 195.800971][ T6647] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 195.811642][ T6647] BTRFS info (device loop1): trying to use backup root at mount time [ 195.819795][ T6647] BTRFS info (device loop1): enabling auto defrag [ 195.826303][ T6647] BTRFS info (device loop1): using free space tree [ 196.167277][ T3478] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 196.256413][ T6666] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 196.282613][ T6647] BTRFS error (device loop1): failed to load root extent [ 196.289853][ T6647] BTRFS warning (device loop1): try to load backup roots slot 1 [ 196.303724][ T1082] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 196.980907][ T6647] BTRFS warning (device loop1): couldn't read tree root [ 196.988121][ T6647] BTRFS warning (device loop1): try to load backup roots slot 2 [ 196.999043][ T50] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 197.016174][ T6647] BTRFS warning (device loop1): couldn't read tree root [ 197.023228][ T6647] BTRFS warning (device loop1): try to load backup roots slot 3 [ 197.119845][ T6647] BTRFS info (device loop1): enabling ssd optimizations [ 197.128377][ T6647] BTRFS info (device loop1): rebuilding free space tree [ 197.215661][ T6672] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 197.238957][ T6647] BTRFS info (device loop1): checking UUID tree [ 197.587976][ T6675] netlink: 32 bytes leftover after parsing attributes in process `syz.0.225'. [ 198.687024][ T6680] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 198.697083][ T6680] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 199.096259][ T6687] netlink: 'syz.0.228': attribute type 29 has an invalid length. [ 199.104273][ T6687] netlink: 'syz.0.228': attribute type 29 has an invalid length. [ 199.123505][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.205642][ T6687] netlink: 288 bytes leftover after parsing attributes in process `syz.0.228'. [ 199.249629][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.228'. [ 199.259458][ T6687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.228'. [ 199.794950][ T789] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 199.967805][ T6704] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 199.978295][ T6704] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 200.005023][ T789] usb 1-1: Using ep0 maxpacket: 8 [ 200.060315][ T789] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.123081][ T6704] bond2: entered promiscuous mode [ 200.214060][ T789] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 200.801369][ T6707] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 200.959246][ T789] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.975440][ T789] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 200.984565][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.011322][ T789] usb 1-1: Product: syz [ 201.015647][ T789] usb 1-1: Manufacturer: syz [ 201.020288][ T789] usb 1-1: SerialNumber: syz [ 201.028594][ T789] usb 1-1: config 0 descriptor?? [ 201.037716][ T789] radioshark2 1-1:0.0: Invalid radioSHARK2 device [ 201.044219][ T789] radioshark2: probe of 1-1:0.0 failed with error -22 [ 201.064635][ T789] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 201.159554][ T6713] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 201.631697][ T789] usb 1-1: USB disconnect, device number 3 [ 202.605820][ T6727] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 202.616008][ T6727] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 203.690133][ T6716] loop2: detected capacity change from 0 to 32768 [ 203.744101][ T6717] loop3: detected capacity change from 0 to 32768 [ 203.752539][ T6716] (syz.2.236,6716,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 203.775252][ T6716] (syz.2.236,6716,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 203.937447][ T6716] JBD2: Ignoring recovery information on journal [ 204.030178][ T6716] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 204.088682][ T5433] veth1_vlan: left promiscuous mode [ 204.107383][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 205.369201][ T5083] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 205.572820][ T6750] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 205.581971][ T6750] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 205.786474][ T6750] bond3: entered promiscuous mode [ 206.428425][ T5785] ocfs2: Unmounting device (7,2) on (node local) [ 206.799267][ T6764] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 206.808670][ T6764] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 208.289652][ T6778] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 210.165196][ T6783] loop0: detected capacity change from 0 to 131072 [ 210.210537][ T6787] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 210.219468][ T6787] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 210.411364][ T6787] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 210.654619][ T6783] F2FS-fs (loop0): invalid crc value [ 210.857375][ T6783] F2FS-fs (loop0): Found nat_bits in checkpoint [ 210.915020][ T6783] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 211.976303][ T6797] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 212.007984][ T6798] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 212.119777][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 212.126377][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 212.132476][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 213.235999][ T6810] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 213.245745][ T6810] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 215.371998][ T6829] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 215.381052][ T6829] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 216.019205][ T6829] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 216.123367][ T6831] loop2: detected capacity change from 0 to 256 [ 216.177374][ T6831] exfat: Deprecated parameter 'utf8' [ 216.182819][ T6831] exfat: Deprecated parameter 'namecase' [ 216.245394][ T6831] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d) [ 217.482665][ T5813] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 217.554902][ T5838] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 217.676575][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 217.745236][ T5838] usb 1-1: Using ep0 maxpacket: 16 [ 217.757032][ T5813] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 217.775735][ T5838] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.776189][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.786662][ T5838] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.828106][ T5838] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.860618][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.899336][ T5838] usb 1-1: Product: syz [ 217.913599][ T5838] usb 1-1: Manufacturer: syz [ 217.934556][ T5838] usb 1-1: SerialNumber: syz [ 218.186220][ T5813] pvrusb2: Hardware description: Terratec Grabster AV400 [ 218.316201][ T5838] usb 1-1: 0:2 : does not exist [ 218.351528][ T5838] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 218.420449][ T5813] pvrusb2: ********** [ 218.463785][ T5813] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 218.499018][ T5813] pvrusb2: Important functionality might not be entirely working. [ 218.514886][ T5813] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 218.546242][ T5813] pvrusb2: ********** [ 218.560889][ T2323] pvrusb2: Invalid write control endpoint [ 218.610528][ T5838] usb 1-1: USB disconnect, device number 4 [ 218.713929][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.803635][ T6836] pvrusb2: Invalid write control endpoint [ 218.882355][ T2323] pvrusb2: Invalid write control endpoint [ 218.919131][ T5813] usb 4-1: USB disconnect, device number 5 [ 218.998607][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 219.213245][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 219.347410][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 219.532066][ T2323] pvrusb2: Device being rendered inoperable [ 219.538261][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 219.545595][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 219.556942][ T2323] pvrusb2: Attached sub-driver cx25840 [ 219.562499][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 219.572783][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 220.032788][ T6855] loop2: detected capacity change from 0 to 128 [ 220.284156][ T6855] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 221.991432][ T6868] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 222.001236][ T6868] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 222.596306][ T6868] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 225.485161][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 226.005876][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 226.050462][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 226.075453][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.117210][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 226.189122][ T9] pvrusb2: ********** [ 226.215303][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 226.281492][ T9] pvrusb2: Important functionality might not be entirely working. [ 226.337524][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 226.381721][ T9] pvrusb2: ********** [ 226.402675][ T2323] pvrusb2: Invalid write control endpoint [ 226.524436][ T6909] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 226.534202][ T6909] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 226.603664][ T6890] pvrusb2: Invalid write control endpoint [ 226.671843][ T5838] usb 3-1: USB disconnect, device number 5 [ 226.703015][ T6909] bond4: entered promiscuous mode [ 227.321664][ T6913] loop0: detected capacity change from 0 to 128 [ 227.344673][ T2323] pvrusb2: Invalid write control endpoint [ 227.350672][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 227.360199][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 227.367931][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 227.378211][ T2323] pvrusb2: Device being rendered inoperable [ 227.384297][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 227.391550][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 227.401411][ T2323] pvrusb2: Attached sub-driver cx25840 [ 227.408430][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 227.418684][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 227.496061][ T6913] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 229.583522][ T6953] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 229.594088][ T6953] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 229.687118][ T5838] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 229.720462][ T6953] bond1: entered promiscuous mode [ 230.475120][ T5838] usb 1-1: Using ep0 maxpacket: 8 [ 230.482220][ T5838] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 230.491716][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.529671][ T5838] pvrusb2: Hardware description: Terratec Grabster AV400 [ 230.565528][ T5838] pvrusb2: ********** [ 230.569652][ T5838] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 230.613626][ T5838] pvrusb2: Important functionality might not be entirely working. [ 230.643988][ T5838] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 230.784875][ T5838] pvrusb2: ********** [ 230.871242][ T2323] pvrusb2: Invalid write control endpoint [ 231.239611][ T6945] pvrusb2: Invalid write control endpoint [ 231.400100][ T9] usb 1-1: USB disconnect, device number 5 [ 232.035807][ T2323] pvrusb2: Invalid write control endpoint [ 232.041709][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 232.135109][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 232.142726][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 232.157017][ T2323] pvrusb2: Device being rendered inoperable [ 232.163140][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 232.170796][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 232.196198][ T2323] pvrusb2: Attached sub-driver cx25840 [ 232.212462][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 232.264831][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 233.265244][ T6996] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 233.274178][ T6996] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 234.047118][ T6996] bond2: entered promiscuous mode [ 235.425219][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 235.453148][ T7013] loop3: detected capacity change from 0 to 4096 [ 235.497890][ T7017] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.873657][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 235.984569][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 236.140340][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.216774][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 236.223916][ T9] pvrusb2: ********** [ 236.272355][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 236.290188][ T9] pvrusb2: Important functionality might not be entirely working. [ 236.302724][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 236.384082][ T9] pvrusb2: ********** [ 236.412044][ T2323] pvrusb2: Invalid write control endpoint [ 236.557678][ T2323] pvrusb2: Invalid write control endpoint [ 236.604860][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 236.635019][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 236.642650][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 236.739010][ T7027] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 236.747942][ T7027] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 237.225001][ T5083] Bluetooth: hci0: command 0x0406 tx timeout [ 237.413684][ T7027] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 237.436244][ T2323] pvrusb2: Device being rendered inoperable [ 237.453578][ T7009] pvrusb2: Attempted to execute control transfer when device not ok [ 237.463281][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 237.470948][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 237.482293][ T2323] pvrusb2: Attached sub-driver cx25840 [ 237.486164][ T5813] usb 1-1: USB disconnect, device number 6 [ 237.489528][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 237.504128][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 238.704926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 241.791586][ T7053] loop0: detected capacity change from 0 to 32768 [ 241.853832][ T7053] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 241.928813][ T7053] XFS (loop0): Ending clean mount [ 241.951562][ T7053] XFS (loop0): Quotacheck needed: Please wait. [ 242.161844][ T7053] XFS (loop0): Quotacheck: Done. [ 242.565131][ T28] audit: type=1800 audit(1785827188.090:8): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.322" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 242.962086][ T5781] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 244.350178][ T5813] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 244.545232][ T5813] usb 3-1: Using ep0 maxpacket: 8 [ 244.559912][ T5813] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 244.580385][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.614690][ T5813] pvrusb2: Hardware description: Terratec Grabster AV400 [ 244.642141][ T5813] pvrusb2: ********** [ 244.659601][ T5813] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 244.680981][ T5813] pvrusb2: Important functionality might not be entirely working. [ 244.714202][ T5813] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 244.811101][ T7081] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 244.820367][ T7081] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 245.557107][ T7081] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 245.595665][ T5813] pvrusb2: ********** [ 245.736891][ T2323] pvrusb2: Invalid write control endpoint [ 245.887721][ T7078] pvrusb2: Invalid write control endpoint [ 245.895332][ T5782] usb 3-1: USB disconnect, device number 6 [ 246.063880][ T2323] pvrusb2: Invalid write control endpoint [ 246.077777][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 246.094596][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 246.103643][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 246.127834][ T2323] pvrusb2: Device being rendered inoperable [ 246.144383][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 246.625567][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 246.682781][ T2323] pvrusb2: Attached sub-driver cx25840 [ 246.729108][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 246.767664][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 247.178824][ T7093] loop3: detected capacity change from 0 to 32768 [ 247.285426][ T7093] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 247.494616][ T7093] XFS (loop3): Ending clean mount [ 247.530458][ T7093] XFS (loop3): Quotacheck needed: Please wait. [ 247.649248][ T7093] XFS (loop3): Quotacheck: Done. [ 248.084963][ T28] audit: type=1800 audit(1785827193.560:9): pid=7114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.333" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 248.410702][ T5777] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 249.017519][ T7119] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 249.027380][ T7119] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 249.184294][ T7119] bond3: entered promiscuous mode [ 250.516525][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'. [ 250.549059][ T5782] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 251.254939][ T5782] usb 1-1: Using ep0 maxpacket: 16 [ 251.359686][ T5782] usb 1-1: unable to get BOS descriptor or descriptor too short [ 251.385802][ T5782] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.426070][ T5782] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.460853][ T7134] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 251.465184][ T5782] usb 1-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 251.536652][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.560152][ T5782] usb 1-1: Product: syz [ 251.564439][ T5782] usb 1-1: Manufacturer: syz [ 251.579871][ T5782] usb 1-1: SerialNumber: syz [ 252.034060][ T5782] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 252.072927][ T5782] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 253.014480][ T7144] dummy_hcd dummy_hcd.0: remove, state 1 [ 253.022451][ T7144] usb usb1: USB disconnect, device number 1 [ 253.294184][ T5782] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 253.317969][ T7144] usb 1-1: USB disconnect, device number 7 [ 253.456280][ T7144] dummy_hcd dummy_hcd.0: stopped [ 253.461284][ T7144] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 253.567218][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.108030][ T7154] ISOFS: Unable to identify CD-ROM format. [ 256.075908][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.088760][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.102224][ T7199] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 258.111337][ T7199] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 258.683844][ T7199] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 260.256719][ T7218] netlink: 'syz.3.363': attribute type 29 has an invalid length. [ 260.281183][ T7218] netlink: 'syz.3.363': attribute type 29 has an invalid length. [ 260.331746][ T7218] netlink: 288 bytes leftover after parsing attributes in process `syz.3.363'. [ 260.367970][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.363'. [ 260.403210][ T7218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.363'. [ 260.650233][ T52] Bluetooth: hci0: unexpected event for opcode 0x0c13 [ 261.292820][ T7238] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 261.301666][ T7238] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 261.476732][ T7238] bond3: entered promiscuous mode [ 262.138869][ T7246] ISOFS: Unable to identify CD-ROM format. [ 262.236147][ T7253] netlink: 'syz.0.374': attribute type 29 has an invalid length. [ 262.357548][ T7253] netlink: 'syz.0.374': attribute type 29 has an invalid length. [ 262.778160][ T7253] netlink: 288 bytes leftover after parsing attributes in process `syz.0.374'. [ 262.862510][ T7253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.374'. [ 262.877434][ T7253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.374'. [ 263.294849][ T5782] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 263.357132][ T7272] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 263.366478][ T7272] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 263.500281][ T7272] bond4: entered promiscuous mode [ 264.132474][ T5782] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 264.142225][ T5782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.165474][ T5782] usb 2-1: Product: syz [ 264.169720][ T5782] usb 2-1: Manufacturer: syz [ 264.174357][ T5782] usb 2-1: SerialNumber: syz [ 264.490367][ T7284] ISOFS: Unable to identify CD-ROM format. [ 264.649287][ T5782] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 265.094580][ T7293] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 265.105633][ T7293] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 265.253070][ T7293] bond3: entered promiscuous mode [ 266.129092][ T7299] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 266.140873][ T7299] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 266.149347][ T7299] CPU: 0 PID: 7299 Comm: syz.0.387 Not tainted syzkaller #0 [ 266.156654][ T7299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.166733][ T7299] RIP: 0010:dummy_udc_start+0xcd/0x1e0 [ 266.172228][ T7299] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 8e 00 00 00 e8 f8 08 cd fa eb 0c e8 f1 08 cd fa eb 05 e8 ea 08 cd fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 44 8b 25 fb 4d 8b 36 4c 89 f7 e8 [ 266.191849][ T7299] RSP: 0018:ffffc9000baa7850 EFLAGS: 00010246 [ 266.197975][ T7299] RAX: 0000000000000000 RBX: ffff88805bb9c050 RCX: 0000000000080000 [ 266.205987][ T7299] RDX: ffffc9000c949000 RSI: 0000000000003ff2 RDI: 0000000000003ff3 [ 266.214003][ T7299] RBP: ffff888143765000 R08: ffff8880263f9e00 R09: 0000000000000004 [ 266.221990][ T7299] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 266.229973][ T7299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 266.238386][ T7299] FS: 00007f5da36f86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 266.247330][ T7299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.254132][ T7299] CR2: 00007f5da2787180 CR3: 0000000074e29000 CR4: 00000000003506f0 [ 266.262291][ T7299] Call Trace: [ 266.265585][ T7299] [ 266.268525][ T7299] ? dummy_pullup+0x120/0x120 [ 266.273219][ T7299] gadget_bind_driver+0x390/0x770 [ 266.278276][ T7299] ? gadget_match_driver+0x130/0x130 [ 266.283589][ T7299] really_probe+0x247/0xae0 [ 266.288103][ T7299] ? pm_runtime_barrier+0x14b/0x1c0 [ 266.293317][ T7299] __driver_probe_device+0x1f5/0x390 [ 266.298801][ T7299] driver_probe_device+0x4f/0x420 [ 266.303840][ T7299] __driver_attach+0x444/0x6d0 [ 266.308619][ T7299] bus_for_each_dev+0x235/0x2b0 [ 266.313485][ T7299] ? driver_attach+0x50/0x50 [ 266.318091][ T7299] ? bus_remove_file+0x140/0x140 [ 266.323042][ T7299] ? do_raw_spin_unlock+0x121/0x230 [ 266.328255][ T7299] bus_add_driver+0x340/0x630 [ 266.332959][ T7299] driver_register+0x23a/0x310 [ 266.337740][ T7299] usb_gadget_register_driver_owner+0xf9/0x270 [ 266.343996][ T7299] raw_ioctl+0x1613/0x3d80 [ 266.348424][ T7299] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 266.354070][ T7299] ? tomoyo_path_number_perm+0x217/0x5e0 [ 266.359720][ T7299] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 266.365197][ T7299] ? make_qualifier+0x260/0x260 [ 266.370078][ T7299] ? __fget_files+0x28/0x460 [ 266.374760][ T7299] ? bpf_lsm_file_ioctl+0x9/0x10 [ 266.379720][ T7299] ? security_file_ioctl+0x80/0xa0 [ 266.384852][ T7299] ? make_qualifier+0x260/0x260 [ 266.389728][ T7299] __se_sys_ioctl+0xfd/0x170 [ 266.394331][ T7299] do_syscall_64+0x55/0xb0 [ 266.398756][ T7299] ? clear_bhb_loop+0x40/0x90 [ 266.403436][ T7299] ? clear_bhb_loop+0x40/0x90 [ 266.408118][ T7299] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.414037][ T7299] RIP: 0033:0x7f5da279dcab [ 266.418488][ T7299] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 266.438120][ T7299] RSP: 002b:00007f5da36f5f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.446543][ T7299] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f5da279dcab [ 266.454521][ T7299] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 266.462504][ T7299] RBP: 00007f5da36f6fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 266.470497][ T7299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.478477][ T7299] R13: 0000200000000040 R14: 0000000000000003 R15: 0000000000000000 [ 266.486552][ T7299] [ 266.489599][ T7299] Modules linked in: [ 266.617166][ T7299] ---[ end trace 0000000000000000 ]--- [ 266.622749][ T7299] RIP: 0010:dummy_udc_start+0xcd/0x1e0 [ 266.638215][ T7299] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 8e 00 00 00 e8 f8 08 cd fa eb 0c e8 f1 08 cd fa eb 05 e8 ea 08 cd fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 44 8b 25 fb 4d 8b 36 4c 89 f7 e8 [ 266.661874][ T7299] RSP: 0018:ffffc9000baa7850 EFLAGS: 00010246 [ 266.668544][ T7299] RAX: 0000000000000000 RBX: ffff88805bb9c050 RCX: 0000000000080000 [ 266.678766][ T7299] RDX: ffffc9000c949000 RSI: 0000000000003ff2 RDI: 0000000000003ff3 [ 266.687206][ T7299] RBP: ffff888143765000 R08: ffff8880263f9e00 R09: 0000000000000004 [ 266.696214][ T7299] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 266.705111][ T7299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 266.713468][ T7299] FS: 00007f5da36f86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 266.723153][ T7299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.730724][ T7299] CR2: 000000110c3dcfe8 CR3: 0000000074e29000 CR4: 00000000003506f0 [ 266.739558][ T7299] Kernel panic - not syncing: Fatal exception [ 266.745821][ T7299] Kernel Offset: disabled [ 266.750179][ T7299] Rebooting in 86400 seconds..