last executing test programs: 12.679071909s ago: executing program 3 (id=1286): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.467884757s ago: executing program 3 (id=1287): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000300), 0x4) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000600), 0x204083acb88ff8b, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000300010002", 0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load'], 0x34, 0xfffffffffffffffa) socket(0x0, 0x0, 0x0) 11.08453544s ago: executing program 3 (id=1289): mknod$loop(0x0, 0x400, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x80000108) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x885) 10.880407684s ago: executing program 3 (id=1292): sched_setscheduler(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) lsetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) 10.77845411s ago: executing program 5 (id=1293): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "5412b589"}]}}, 0x0}, 0x0) 9.457949111s ago: executing program 3 (id=1296): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000005, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r8}, 0x10) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 7.552775211s ago: executing program 5 (id=1304): mknod$loop(0x0, 0x400, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x80000108) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x885) 7.505500724s ago: executing program 0 (id=1305): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000000), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 7.329636247s ago: executing program 5 (id=1306): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014e40900b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000018500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r5, &(0x7f0000008600)={0x2020, 0x0, 0x0}, 0x204b) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9}}, 0x50) read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r8, r5, 0x0) r9 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) sendfile(r9, 0xffffffffffffffff, 0x0, 0x7ffff000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32], 0x0}, 0x90) 7.034563979s ago: executing program 0 (id=1307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 6.214873993s ago: executing program 2 (id=1308): sched_setscheduler(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) lsetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) 6.135096283s ago: executing program 0 (id=1309): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400101042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r1, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 6.075310206s ago: executing program 5 (id=1310): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ppoll(&(0x7f0000000040)=[{r0}, {r0}], 0x2, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100), 0x0, 0x8) r1 = gettid() timer_create(0x3, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 5.843384111s ago: executing program 2 (id=1313): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x298) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000002000010000000000fbdbdf25020014"], 0x30}}, 0x0) 5.323160032s ago: executing program 2 (id=1317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000005, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.957052085s ago: executing program 2 (id=1319): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000000), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 2.825271817s ago: executing program 2 (id=1320): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0xc) sendto$inet(r1, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)="ab", 0x14078, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.769049585s ago: executing program 1 (id=1321): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e000000100081", 0x7}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2.715837433s ago: executing program 0 (id=1322): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014e40900b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000018500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r5, &(0x7f0000008600)={0x2020, 0x0, 0x0}, 0x204b) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9}}, 0x50) read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r8, r5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r9, 0x2000009) sendfile(0xffffffffffffffff, r9, 0x0, 0x7ffff000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32], 0x0}, 0x90) 2.715632905s ago: executing program 5 (id=1323): sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES32], 0x34}}, 0x0) gettid() timer_create(0x0, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) msgget$private(0x0, 0xfffffffffffffffd) 2.515097167s ago: executing program 5 (id=1325): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d00000000000001090224000109"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.415636012s ago: executing program 1 (id=1326): pipe2$9p(0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 1.569907471s ago: executing program 2 (id=1328): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x8901}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004140)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x4080, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r4, &(0x7f000000e400)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000008380)="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", 0x2000, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="15"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.485274188s ago: executing program 1 (id=1329): r0 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x80000000) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) connect$netlink(r2, &(0x7f0000000000)=@unspec, 0xc) 1.459512512s ago: executing program 0 (id=1330): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000013d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b5000000087c9500"], &(0x7f0000000140)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r2, 0x25, 0x2, @void}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r4, 0x25, 0x8, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0}}, 0x40) 1.361528838s ago: executing program 3 (id=1331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000005, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.267872058s ago: executing program 1 (id=1332): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000000), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 1.140179096s ago: executing program 1 (id=1333): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0x6) recvmmsg(r1, &(0x7f0000000600), 0x204083acb88ff8b, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000300010002", 0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load'], 0x34, 0xfffffffffffffffa) socket(0x0, 0x0, 0x0) 1.098033432s ago: executing program 0 (id=1334): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400101042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r1, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 1.082936198s ago: executing program 4 (id=1335): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@dev}, {@in=@remote, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x3}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x7}}]}, 0x184}}, 0x0) 747.910276ms ago: executing program 4 (id=1336): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x80000108) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x885) 629.980575ms ago: executing program 4 (id=1337): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) close(0xffffffffffffffff) socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/43, 0x2b) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044942, 0xfffffffffffffffe) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 296.645537ms ago: executing program 4 (id=1338): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000500)="0e"}, 0x20) 172.126384ms ago: executing program 1 (id=1339): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mknod(0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000440), 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bridge\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @ether_spec={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, 0x4}, {}, @esp_ip6_spec={@ipv4={'\x00', '\xff\xff', @local}, @private0}, {0x0, @remote}, 0x3}, 0x1, [0xfffffffa]}}) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000580), 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@broadcast, @random, @val={@val={0x88a8, 0x7, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) flock(r2, 0x5) flock(0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) 87.855809ms ago: executing program 4 (id=1340): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10}}], 0x1, 0x0) 0s ago: executing program 4 (id=1341): msgget$private(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe32, &(0x7f0000000000)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) kernel console output (not intermixed with test programs): moving interface: batadv_slave_0 [ 234.634693][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.643395][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.733132][ T12] veth1_macvtap: left promiscuous mode [ 234.740490][ T5165] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 234.760187][ T12] veth0_macvtap: left promiscuous mode [ 234.766640][ T12] veth1_vlan: left promiscuous mode [ 234.796083][ T12] @ÿ: left promiscuous mode [ 234.910443][ T5165] usb 2-1: device descriptor read/64, error -71 [ 235.200776][ T5165] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 235.380877][ T5165] usb 2-1: device descriptor read/64, error -71 [ 235.525809][ T5165] usb usb2-port1: attempt power cycle [ 235.941802][ T25] usb 6-1: USB disconnect, device number 9 [ 236.001055][ T5165] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 236.069362][ T5165] usb 2-1: device descriptor read/8, error -71 [ 236.392936][ T5165] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 236.441097][ T5165] usb 2-1: device descriptor read/8, error -71 [ 236.571664][ T5165] usb usb2-port1: unable to enumerate USB device [ 236.582796][ T12] team0 (unregistering): Port device team_slave_1 removed [ 236.646534][ T12] team0 (unregistering): Port device team_slave_0 removed [ 237.180659][ T7160] netlink: 32 bytes leftover after parsing attributes in process `syz.5.510'. [ 237.235358][ T6732] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.316135][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.323420][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.364188][ T7162] loop2: detected capacity change from 0 to 1024 [ 237.402355][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.409542][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.465116][ T6811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 237.562401][ T7162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.649237][ T6811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 237.714297][ T6811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 238.660460][ T6811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.401788][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.880743][ T46] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 239.986073][ T6811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.050823][ T7208] netlink: 32 bytes leftover after parsing attributes in process `syz.3.522'. [ 240.081144][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 240.100138][ T46] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.115076][ T6811] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.121903][ T46] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.121940][ T46] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.124941][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.40 [ 240.158136][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.165382][ T5109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.172105][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.180837][ T46] usb 2-1: Product: syz [ 240.185310][ T46] usb 2-1: Manufacturer: syz [ 240.189922][ T46] usb 2-1: SerialNumber: syz [ 240.222105][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.229306][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.321039][ T25] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 240.338635][ T6732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.464168][ T46] usbhid 2-1:1.0: can't add hid device: -22 [ 240.480800][ T25] usb 6-1: device descriptor read/64, error -71 [ 240.488531][ T46] usbhid 2-1:1.0: probe with driver usbhid failed with error -22 [ 240.784015][ T46] usb 2-1: USB disconnect, device number 18 [ 240.920354][ T25] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 241.953576][ T25] usb 6-1: device descriptor read/64, error -71 [ 242.056669][ T6811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.059098][ T7232] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 242.073154][ T25] usb usb6-port1: attempt power cycle [ 242.099274][ T7234] loop1: detected capacity change from 0 to 1024 [ 242.175884][ T7234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.439967][ T6811] veth0_vlan: entered promiscuous mode [ 242.506057][ T6811] veth1_vlan: entered promiscuous mode [ 242.533095][ T25] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 242.542836][ T6732] veth0_vlan: entered promiscuous mode [ 242.600881][ T25] usb 6-1: device descriptor read/8, error -71 [ 242.645213][ T6732] veth1_vlan: entered promiscuous mode [ 242.677851][ T7250] netlink: 64 bytes leftover after parsing attributes in process `syz.3.532'. [ 242.718492][ T5097] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.738116][ T6811] veth0_macvtap: entered promiscuous mode [ 242.765966][ T6811] veth1_macvtap: entered promiscuous mode [ 242.837880][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.849193][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.859768][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.873200][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.904162][ T25] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 242.919231][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.969706][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.983542][ T25] usb 6-1: device descriptor read/8, error -71 [ 242.998688][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.012347][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.028006][ T6811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.061159][ T7252] netlink: 32 bytes leftover after parsing attributes in process `syz.2.535'. [ 243.074645][ T5161] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 243.111350][ T25] usb usb6-port1: unable to enumerate USB device [ 243.134534][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.182451][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.300488][ T5161] usb 4-1: Using ep0 maxpacket: 32 [ 243.448045][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.459149][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.470203][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.214525][ T5161] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 246.260373][ T5161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.268708][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.294957][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.314741][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.317609][ T5161] usb 4-1: config 0 descriptor?? [ 246.501736][ T6811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.503074][ T5161] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 246.597375][ T6732] veth0_macvtap: entered promiscuous mode [ 246.648097][ T6811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.250544][ T5161] gspca_sunplus: reg_w_riv err -71 [ 247.255981][ T5161] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 247.296212][ T6811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.346892][ T5161] usb 4-1: USB disconnect, device number 16 [ 247.360829][ T6811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.461146][ T6811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.603483][ T6732] veth1_macvtap: entered promiscuous mode [ 247.782139][ T7285] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 247.782677][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.884027][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.927760][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.958496][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.985948][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.027542][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.070497][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.104195][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.115406][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.126750][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.158615][ T6732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.198363][ T7291] loop5: detected capacity change from 0 to 1024 [ 248.272402][ T7291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.433084][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.518857][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.540701][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.568954][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.579378][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.601111][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.612116][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.622800][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.648469][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.659628][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.673477][ T6732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.722231][ T7300] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 248.854503][ T6732] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.894894][ T6732] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.920576][ T58] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 248.937665][ T6732] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.960827][ T6732] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.980524][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.988343][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.004849][ T5104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.092964][ T58] usb 4-1: device descriptor read/64, error -71 [ 249.147720][ T7304] netlink: 32 bytes leftover after parsing attributes in process `syz.1.549'. [ 249.412669][ T5446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.466353][ T5446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.614479][ T5305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.655874][ T5305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.445132][ T58] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 250.632973][ T5446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.653549][ T5446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.763223][ T58] usb 4-1: device descriptor read/64, error -71 [ 250.893277][ T58] usb usb4-port1: attempt power cycle [ 251.276210][ T7322] affs: No valid root block on device nullb0 [ 251.930462][ T5098] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 252.593786][ T5098] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 252.696430][ T5098] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 252.705656][ T5098] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 252.716266][ T5098] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.872744][ T7334] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 253.125334][ T7343] loop4: detected capacity change from 0 to 1024 [ 253.243251][ T5098] usb 1-1: string descriptor 0 read error: -71 [ 253.259651][ T7343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.274369][ T5098] usb 1-1: USB disconnect, device number 11 [ 253.498053][ T7357] netlink: 32 bytes leftover after parsing attributes in process `syz.3.561'. [ 253.611501][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 254.528937][ T7358] veth1_macvtap: left promiscuous mode [ 254.542120][ T7358] macsec0: entered promiscuous mode [ 254.547505][ T7358] macsec0: entered allmulticast mode [ 254.610579][ T7358] syz.1.563 (7358) used greatest stack depth: 18352 bytes left [ 254.930069][ T6732] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.275839][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.288131][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.311392][ T5161] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 255.513446][ T5161] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 255.541619][ T5161] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 255.556409][ T5161] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 255.574730][ T5161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.899358][ T5166] usb 1-1: USB disconnect, device number 12 [ 256.270700][ T7404] netlink: 32 bytes leftover after parsing attributes in process `syz.3.578'. [ 257.639035][ T7417] loop3: detected capacity change from 0 to 1024 [ 257.762753][ T7417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.068561][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 258.409609][ T5113] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.500227][ T7447] netlink: 32 bytes leftover after parsing attributes in process `syz.2.595'. [ 261.520484][ T29] audit: type=1326 audit(1721898022.817:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03f2175f19 code=0x0 [ 261.658746][ T7463] loop0: detected capacity change from 0 to 764 [ 261.704991][ T7463] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 261.871449][ T5161] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 261.923701][ T7473] fuse: Unknown parameter 'group_i00000000000000000000' [ 262.001115][ T5166] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 262.062551][ T5161] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 262.080496][ T5161] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 262.101345][ T5161] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 262.130377][ T5161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.204771][ T5166] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.225655][ T5166] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 262.245990][ T5166] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.282128][ T5166] usb 6-1: config 0 descriptor?? [ 262.299613][ T5166] pwc: Askey VC010 type 2 USB webcam detected. [ 262.390492][ T922] usb 4-1: USB disconnect, device number 20 [ 262.498586][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 262.715196][ T5166] pwc: recv_control_msg error -32 req 02 val 2b00 [ 262.742975][ T5166] pwc: recv_control_msg error -32 req 02 val 2700 [ 262.751481][ T5166] pwc: recv_control_msg error -32 req 02 val 2c00 [ 262.962970][ T5165] libceph: connect (1)[c::]:6789 error -101 [ 262.971151][ T5165] libceph: mon0 (1)[c::]:6789 connect error [ 262.978563][ T5166] pwc: recv_control_msg error -71 req 04 val 1300 [ 262.989280][ T5166] pwc: recv_control_msg error -71 req 04 val 1400 [ 263.001243][ T5166] pwc: recv_control_msg error -71 req 02 val 2000 [ 263.020952][ T5166] pwc: recv_control_msg error -71 req 02 val 2100 [ 263.027893][ T5166] pwc: recv_control_msg error -71 req 04 val 1500 [ 263.035191][ T5166] pwc: recv_control_msg error -71 req 02 val 2500 [ 263.061294][ T5166] pwc: recv_control_msg error -71 req 02 val 2400 [ 263.080452][ T5166] pwc: recv_control_msg error -71 req 02 val 2600 [ 263.094919][ T7492] ceph: No mds server is up or the cluster is laggy [ 263.111607][ T5166] pwc: recv_control_msg error -71 req 02 val 2900 [ 263.129637][ T5166] pwc: recv_control_msg error -71 req 02 val 2800 [ 263.357603][ T5166] pwc: recv_control_msg error -71 req 04 val 1100 [ 263.376030][ T5116] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 263.400450][ T5166] pwc: recv_control_msg error -71 req 04 val 1200 [ 263.439919][ T5116] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 263.442894][ T5166] pwc: Registered as video71. [ 263.496843][ T5166] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11 [ 263.566096][ T5116] Bluetooth: hci4: link tx timeout [ 263.573362][ T5116] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 263.613419][ T5166] usb 6-1: USB disconnect, device number 14 [ 264.155563][ T7514] fuse: Unknown parameter 'group_i00000000000000000000' [ 264.575841][ T5166] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 264.800559][ T5166] usb 3-1: Using ep0 maxpacket: 32 [ 264.826844][ T5166] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.960813][ T5166] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.000961][ T7534] affs: No valid root block on device nullb0 [ 265.253975][ T5166] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 265.384561][ T5166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.499834][ T5166] usb 3-1: config 0 descriptor?? [ 265.548194][ T5166] hub 3-1:0.0: USB hub found [ 265.593666][ T5116] Bluetooth: hci4: command 0x0406 tx timeout [ 265.753749][ T5166] hub 3-1:0.0: 1 port detected [ 265.896614][ T7541] 9pnet_fd: Insufficient options for proto=fd [ 266.118909][ T922] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 266.332936][ T922] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 266.380154][ T922] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 266.421860][ T922] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 266.467388][ T5098] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 266.468973][ T922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.693015][ T5098] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.700411][ T5166] hub 3-1:0.0: activate --> -90 [ 266.725143][ T5098] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 266.751829][ T5098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.763497][ T922] usb 1-1: USB disconnect, device number 13 [ 266.843425][ T5166] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 266.844550][ T5098] usb 2-1: config 0 descriptor?? [ 266.886378][ T5160] usb 3-1: USB disconnect, device number 14 [ 266.886819][ T5161] usb 3-1: Failed to suspend device, error -19 [ 266.924458][ T5098] pwc: Askey VC010 type 2 USB webcam detected. [ 267.342391][ T5098] pwc: recv_control_msg error -32 req 02 val 2b00 [ 267.412366][ T5098] pwc: recv_control_msg error -32 req 02 val 2700 [ 267.432600][ T5098] pwc: recv_control_msg error -32 req 02 val 2c00 [ 267.687498][ T5098] pwc: recv_control_msg error -71 req 04 val 1300 [ 267.702011][ T5098] pwc: recv_control_msg error -71 req 04 val 1400 [ 267.723733][ T5098] pwc: recv_control_msg error -71 req 02 val 2000 [ 267.764595][ T5098] pwc: recv_control_msg error -71 req 02 val 2100 [ 267.787785][ T7551] vcan0: Master is either lo or non-ether device [ 267.789963][ T5098] pwc: recv_control_msg error -71 req 04 val 1500 [ 267.833979][ T5098] pwc: recv_control_msg error -71 req 02 val 2500 [ 267.882339][ T5098] pwc: recv_control_msg error -71 req 02 val 2400 [ 267.932255][ T5098] pwc: recv_control_msg error -71 req 02 val 2600 [ 267.965015][ T5098] pwc: recv_control_msg error -71 req 02 val 2900 [ 268.007079][ T5098] pwc: recv_control_msg error -71 req 02 val 2800 [ 268.061245][ T5098] pwc: recv_control_msg error -71 req 04 val 1100 [ 268.101648][ T5098] pwc: recv_control_msg error -71 req 04 val 1200 [ 268.142196][ T5098] pwc: Registered as video71. [ 268.241169][ T5098] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 268.325097][ T5098] usb 2-1: USB disconnect, device number 19 [ 268.508113][ T7561] loop4: detected capacity change from 0 to 512 [ 268.636049][ T7561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.692349][ T7561] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.755464][ T7561] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.639: bg 0: block 344: padding at end of block bitmap is not set [ 268.837086][ T7561] Quota error (device loop4): write_blk: dquota write failed [ 268.857215][ T7574] 9pnet_fd: Insufficient options for proto=fd [ 268.858757][ T7561] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 268.888307][ T7576] netlink: 'syz.3.644': attribute type 1 has an invalid length. [ 268.983718][ T7561] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 269.014535][ T7561] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.639: Failed to acquire dquot type 1 [ 269.091832][ T7585] fuse: Unknown parameter 'group_id00000000000000000000' [ 269.108585][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'. [ 269.212022][ T7578] Quota error (device loop4): write_blk: dquota write failed [ 269.239959][ T7578] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 269.251989][ T7578] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 269.319007][ T7578] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.639: Failed to acquire dquot type 1 [ 269.331865][ T5098] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 269.464836][ T7593] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 269.533667][ T5098] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 269.554678][ T6732] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.582333][ T5098] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 269.665214][ T5098] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.744171][ T5098] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 269.760386][ T7598] affs: No valid root block on device nullb0 [ 269.787868][ T5098] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.964557][ T5098] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 270.097141][ T5098] usb 1-1: USB disconnect, device number 14 [ 270.404523][ T5313] udevd[5313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.678331][ T7624] fuse: Unknown parameter 'group_id00000000000000000000' [ 274.118744][ T7636] netlink: 104 bytes leftover after parsing attributes in process `syz.4.664'. [ 274.601892][ T58] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 274.843377][ T58] usb 1-1: Using ep0 maxpacket: 32 [ 274.890912][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.918436][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.948752][ T58] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 274.985212][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.232913][ T58] usb 1-1: config 0 descriptor?? [ 275.247114][ T58] hub 1-1:0.0: USB hub found [ 276.097419][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 276.139567][ T58] hub 1-1:0.0: 1 port detected [ 276.367647][ T25] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 276.388716][ T25] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 276.415395][ T25] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.439064][ T25] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 276.471607][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.585050][ T7669] fuse: Unknown parameter 'group_id00000000000000000000' [ 276.601112][ T25] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 276.718362][ T58] usb 3-1: USB disconnect, device number 15 [ 276.974446][ T5313] udevd[5313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.995668][ T5098] usb 1-1: USB disconnect, device number 15 [ 278.502578][ T7684] netlink: 104 bytes leftover after parsing attributes in process `syz.0.680'. [ 279.258112][ T7702] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 279.261519][ T7708] fuse: Bad value for 'user_id' [ 279.282070][ T7708] fuse: Bad value for 'user_id' [ 279.701073][ T5161] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 280.069437][ T7723] affs: No valid root block on device nullb0 [ 280.824722][ T5161] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 280.872193][ T5161] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 280.910100][ T5161] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.978411][ T5161] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 281.038628][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.155588][ T5161] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 281.336122][ T5161] usb 2-1: USB disconnect, device number 20 [ 281.374056][ T5313] udevd[5313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.869898][ T7746] fuse: Bad value for 'user_id' [ 281.900361][ T7746] fuse: Bad value for 'user_id' [ 283.560473][ T922] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 283.813808][ T922] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 283.867977][ T922] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 283.905032][ T922] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 283.948637][ T922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.993963][ T7759] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 284.332471][ T5161] usb 1-1: USB disconnect, device number 16 [ 284.719401][ T7784] fuse: Bad value for 'user_id' [ 284.758337][ T7784] fuse: Bad value for 'user_id' [ 284.867030][ T922] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 285.106204][ T5332] udevd[5332]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.274105][ T922] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 285.403712][ T922] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 285.615435][ T922] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.751262][ T922] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 285.810636][ T922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.101022][ T922] usb 6-1: invalid MIDI out EP 0 [ 287.683848][ T922] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 287.745459][ T922] usb 6-1: USB disconnect, device number 15 [ 287.995449][ T5316] udevd[5316]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.425192][ T7816] netlink: 32 bytes leftover after parsing attributes in process `syz.3.734'. [ 290.030362][ T922] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 290.319926][ T922] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 290.357240][ T922] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 290.368808][ T922] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 290.420936][ T922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.464003][ T7827] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 290.731661][ T5109] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 290.860663][ T5161] usb 4-1: USB disconnect, device number 21 [ 290.975104][ T5109] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 291.025619][ T5109] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 291.067474][ T5109] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.576476][ T5109] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 291.587623][ T5109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.677517][ T5109] usb 1-1: invalid MIDI out EP 0 [ 292.847147][ T5109] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 292.930394][ T5109] usb 1-1: USB disconnect, device number 17 [ 293.201358][ T5535] udevd[5535]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.222236][ T5109] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 295.450520][ T5109] usb 4-1: Using ep0 maxpacket: 32 [ 295.471543][ T5109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.537697][ T5109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.557838][ T5109] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 295.567811][ T5109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.620059][ T5109] usb 4-1: config 0 descriptor?? [ 295.642251][ T5109] hub 4-1:0.0: USB hub found [ 295.685015][ T58] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 295.860431][ T5161] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 295.883114][ T5109] hub 4-1:0.0: 1 port detected [ 295.892650][ T58] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 295.925693][ T58] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 295.978635][ T58] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.016064][ T58] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 296.039184][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.092104][ T5161] usb 5-1: Using ep0 maxpacket: 16 [ 296.118901][ T5161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 296.168530][ T58] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 296.194449][ T5161] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 296.234611][ T5161] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.279978][ T5161] usb 5-1: Product: syz [ 296.312731][ T5161] usb 5-1: Manufacturer: syz [ 296.313472][ T58] usb 2-1: USB disconnect, device number 21 [ 296.335398][ T5161] usb 5-1: SerialNumber: syz [ 296.361290][ T5161] usb 5-1: config 0 descriptor?? [ 296.417711][ T5313] udevd[5313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.532714][ T5161] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 296.578529][ T5161] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 296.870784][ T5165] hub 4-1:0.0: activate --> -90 [ 296.960968][ T5109] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 296.988374][ T58] usb 4-1: USB disconnect, device number 22 [ 297.051632][ T5161] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 297.167797][ T5161] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 297.204377][ T5109] usb 1-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba [ 297.213955][ T5109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.228791][ T5161] em28xx 5-1:0.0: board has no eeprom [ 297.235661][ T5109] usb 1-1: Product: syz [ 297.246305][ T5109] usb 1-1: Manufacturer: syz [ 297.268341][ T5109] usb 1-1: SerialNumber: syz [ 297.289248][ T5109] usb 1-1: config 0 descriptor?? [ 297.340472][ T5161] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 297.360954][ T5161] em28xx 5-1:0.0: dvb set to bulk mode. [ 297.367793][ T5165] em28xx 5-1:0.0: Binding DVB extension [ 297.424739][ T5161] usb 5-1: USB disconnect, device number 2 [ 297.464425][ T5161] em28xx 5-1:0.0: Disconnecting em28xx [ 297.566046][ T5165] em28xx 5-1:0.0: Registering input extension [ 297.586379][ T7932] loop2: detected capacity change from 0 to 40427 [ 297.605669][ T5109] kaweth 1-1:0.0: Firmware present in device. [ 297.620705][ T5161] em28xx 5-1:0.0: Closing input extension [ 297.636936][ T5109] kaweth 1-1:0.0: Error reading configuration (-71), no net device created [ 297.638325][ T7932] F2FS-fs (loop2): invalid crc value [ 297.695570][ T5109] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 297.745299][ T5109] usb 1-1: USB disconnect, device number 18 [ 297.763563][ T5161] em28xx 5-1:0.0: Freeing device [ 297.780158][ T7932] F2FS-fs (loop2): Found nat_bits in checkpoint [ 297.958924][ T5165] libceph: connect (1)[c::]:6789 error -101 [ 297.981900][ T5165] libceph: mon0 (1)[c::]:6789 connect error [ 298.047519][ T7932] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 298.134543][ T7961] ceph: No mds server is up or the cluster is laggy [ 298.185702][ T5624] syz-executor: attempt to access beyond end of device [ 298.185702][ T5624] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 298.234315][ T5624] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 298.244659][ T5165] libceph: connect (1)[c::]:6789 error -101 [ 298.251686][ T5624] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 298.280412][ T5165] libceph: mon0 (1)[c::]:6789 connect error [ 298.417689][ T7973] netlink: 104 bytes leftover after parsing attributes in process `syz.0.799'. [ 298.781171][ T5098] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 299.005041][ T5098] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 299.050885][ T5098] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 299.083935][ T5098] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.137738][ T5098] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 299.179826][ T5098] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.340063][ T5098] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 299.460203][ T5313] udevd[5313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.533251][ T5109] usb 4-1: USB disconnect, device number 23 [ 300.620477][ T58] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 300.812977][ T8019] netlink: 104 bytes leftover after parsing attributes in process `syz.4.816'. [ 300.840983][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 300.857224][ T58] usb 3-1: no configurations [ 300.880677][ T58] usb 3-1: can't read configurations, error -22 [ 300.982338][ T5098] libceph: connect (1)[c::]:6789 error -101 [ 301.024619][ T5098] libceph: mon0 (1)[c::]:6789 connect error [ 301.070427][ T58] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 301.090771][ T8021] ceph: No mds server is up or the cluster is laggy [ 301.290401][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 301.297814][ T58] usb 3-1: no configurations [ 301.313150][ T58] usb 3-1: can't read configurations, error -22 [ 301.349353][ T58] usb usb3-port1: attempt power cycle [ 301.377390][ T8000] loop0: detected capacity change from 0 to 40427 [ 301.439504][ T8000] F2FS-fs (loop0): invalid crc value [ 301.461821][ T8035] loop5: detected capacity change from 0 to 128 [ 301.570407][ T8035] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 301.620277][ T8000] F2FS-fs (loop0): Found nat_bits in checkpoint [ 301.675005][ T8035] ext4 filesystem being mounted at /172/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 301.832805][ T58] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 301.900661][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 301.920445][ T58] usb 3-1: no configurations [ 301.930573][ T58] usb 3-1: can't read configurations, error -22 [ 301.990143][ T8000] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 302.102701][ T5104] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.121380][ T8011] loop1: detected capacity change from 0 to 32768 [ 302.140528][ T58] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 302.162433][ T8011] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.815 (8011) [ 302.232162][ T8011] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 302.251185][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 302.279337][ T58] usb 3-1: no configurations [ 302.305091][ T58] usb 3-1: can't read configurations, error -22 [ 302.312386][ T8011] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 302.369016][ C1] eth0: bad gso: type: 1, size: 1408 [ 302.394826][ T8011] BTRFS info (device loop1): using free-space-tree [ 302.408404][ T6811] syz-executor: attempt to access beyond end of device [ 302.408404][ T6811] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 302.430775][ T58] usb usb3-port1: unable to enumerate USB device [ 302.550798][ T6811] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 302.611744][ T6811] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 302.779395][ T8045] loop5: detected capacity change from 0 to 4096 [ 302.789319][ T8045] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 302.963500][ T29] audit: type=1804 audit(1721898064.267:208): pid=8011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.815" name="/newroot/159/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 303.100933][ T5097] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 303.114805][ T8032] loop4: detected capacity change from 0 to 32768 [ 303.150527][ T8032] BTRFS: device /dev/loop4 (7:4) using temp-fsid f62805dd-9820-4c7d-b646-d0ec64591fdd [ 303.188337][ T8032] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.820 (8032) [ 303.338532][ T8032] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 303.395155][ T8032] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 303.430621][ T54] Bluetooth: hci2: command 0x0405 tx timeout [ 303.437517][ T8032] BTRFS info (device loop4): using free-space-tree [ 304.286683][ T8032] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 304.519729][ T8032] BTRFS error (device loop4): open_ctree failed [ 305.121608][ T5164] libceph: connect (1)[c::]:6789 error -101 [ 305.160113][ T5164] libceph: mon0 (1)[c::]:6789 connect error [ 305.292241][ T8101] ceph: No mds server is up or the cluster is laggy [ 305.599014][ T5165] libceph: connect (1)[c::]:6789 error -101 [ 305.616742][ T5165] libceph: mon0 (1)[c::]:6789 connect error [ 307.377977][ T8119] vhci_hcd: invalid port number 129 [ 307.383433][ T8119] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 307.910060][ T5109] libceph: connect (1)[c::]:6789 error -101 [ 307.930616][ T5109] libceph: mon0 (1)[c::]:6789 connect error [ 308.068476][ T5098] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 308.300884][ T5098] usb 2-1: Using ep0 maxpacket: 16 [ 308.317980][ T5098] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 308.410604][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 308.541926][ T5098] usb 2-1: string descriptor 0 read error: -71 [ 308.551773][ T5161] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 308.558667][ T5098] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 308.566210][ T5109] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 308.578666][ T5098] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.644490][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.660011][ T5098] usb 2-1: config 0 descriptor?? [ 308.688307][ T5098] usb 2-1: can't set config #0, error -71 [ 308.694639][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.720855][ T5098] usb 2-1: USB disconnect, device number 22 [ 308.738762][ T25] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 308.765573][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.770635][ T5109] usb 4-1: Using ep0 maxpacket: 8 [ 308.793130][ T5161] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 308.794611][ T25] usb 5-1: config 0 descriptor?? [ 308.828393][ T5109] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.847869][ T5161] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 308.858219][ T5109] usb 4-1: config 0 has no interfaces? [ 308.864391][ T5109] usb 4-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 308.874586][ T5161] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 308.885043][ T5109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.893387][ T5161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.935802][ T5109] usb 4-1: config 0 descriptor?? [ 308.944964][ T8124] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 308.991882][ T5160] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 309.196404][ T5161] usb 4-1: USB disconnect, device number 24 [ 309.210746][ T5160] usb 6-1: Using ep0 maxpacket: 8 [ 309.247274][ T5160] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 22 [ 309.267098][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 309.277360][ T5160] usb 6-1: can't read configurations, error -22 [ 309.285579][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 309.304784][ T25] usb 5-1: USB disconnect, device number 3 [ 309.313781][ T5109] usb 1-1: USB disconnect, device number 19 [ 309.450777][ T5160] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 309.895416][ T5160] usb 6-1: Using ep0 maxpacket: 8 [ 310.041543][ T5160] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 22 [ 310.206330][ T5160] usb 6-1: can't read configurations, error -22 [ 310.241064][ T5160] usb usb6-port1: attempt power cycle [ 310.741380][ T5160] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 310.885888][ T5160] usb 6-1: Using ep0 maxpacket: 8 [ 312.204746][ T5160] usb 6-1: unable to read config index 0 descriptor/all [ 312.236006][ T5160] usb 6-1: can't read configurations, error -71 [ 313.557776][ T5116] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 313.569251][ T8168] netlink: 64 bytes leftover after parsing attributes in process `syz.0.853'. [ 313.578399][ T5116] CPU: 1 UID: 0 PID: 5116 Comm: kworker/u9:7 Not tainted 6.10.0-syzkaller-12381-gc33ffdb70cc6 #0 [ 313.588928][ T5116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 313.599430][ T5116] Workqueue: hci5 hci_rx_work [ 313.604147][ T5116] Call Trace: [ 313.607425][ T5116] [ 313.610356][ T5116] dump_stack_lvl+0x241/0x360 [ 313.615047][ T5116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.620286][ T5116] ? __pfx__printk+0x10/0x10 [ 313.624926][ T5116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.630585][ T5116] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 313.635882][ T5116] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 313.641445][ T5116] sysfs_create_dir_ns+0x2ce/0x3a0 [ 313.646590][ T5116] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 313.652229][ T5116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.657891][ T5116] kobject_add_internal+0x435/0x8d0 [ 313.663124][ T5116] kobject_add+0x152/0x220 [ 313.667630][ T5116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.673297][ T5116] ? do_raw_spin_unlock+0x13c/0x8b0 [ 313.678532][ T5116] ? device_add+0x3e7/0xbf0 [ 313.683070][ T5116] ? __pfx_kobject_add+0x10/0x10 [ 313.688022][ T5116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.693670][ T5116] ? _raw_spin_unlock+0x28/0x50 [ 313.699046][ T5116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.704697][ T5116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.710356][ T5116] ? get_device_parent+0x165/0x410 [ 313.715536][ T5116] device_add+0x4e5/0xbf0 [ 313.719885][ T5116] hci_conn_add_sysfs+0xe8/0x200 [ 313.724863][ T5116] le_conn_complete_evt+0xc9f/0x12e0 [ 313.730205][ T5116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.735871][ T5116] ? trace_contention_end+0x3c/0x120 [ 313.741171][ T5116] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 313.746908][ T5116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.752554][ T5116] ? __mutex_unlock_slowpath+0x21d/0x750 [ 313.758201][ T5116] ? __copy_skb_header+0x437/0x5b0 [ 313.763320][ T5116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.768964][ T5116] ? skb_pull_data+0x112/0x230 [ 313.773743][ T5116] hci_le_enh_conn_complete_evt+0x185/0x420 [ 313.779657][ T5116] hci_event_packet+0xa57/0x1540 [ 313.784646][ T5116] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 313.789946][ T5116] ? __pfx_hci_event_packet+0x10/0x10 [ 313.795338][ T5116] ? do_raw_spin_unlock+0x13c/0x8b0 [ 313.800562][ T5116] ? __entry_text_end+0xfdfc5/0x1020c9 [ 313.806030][ T5116] ? hci_send_to_monitor+0xd8/0x7f0 [ 313.811244][ T5116] ? kcov_remote_start+0x9e/0x7e0 [ 313.816379][ T5116] hci_rx_work+0x3e8/0xca0 [ 313.820813][ T5116] ? process_scheduled_works+0x945/0x1830 [ 313.826546][ T5116] process_scheduled_works+0xa2e/0x1830 [ 313.832146][ T5116] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.838152][ T5116] ? assign_work+0x364/0x3d0 [ 313.842760][ T5116] worker_thread+0x86d/0xd40 [ 313.847381][ T5116] ? __kthread_parkme+0x169/0x1d0 [ 313.852426][ T5116] ? __pfx_worker_thread+0x10/0x10 [ 313.857549][ T5116] kthread+0x2f2/0x390 [ 313.861623][ T5116] ? __pfx_worker_thread+0x10/0x10 [ 313.866746][ T5116] ? __pfx_kthread+0x10/0x10 [ 313.871346][ T5116] ret_from_fork+0x4d/0x80 [ 313.875775][ T5116] ? __pfx_kthread+0x10/0x10 [ 313.880372][ T5116] ret_from_fork_asm+0x1a/0x30 [ 313.885166][ T5116] [ 313.891028][ T5116] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 314.009555][ T5116] Bluetooth: hci5: failed to register connection device [ 314.312229][ T5098] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 314.400713][ T58] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 314.511055][ T5098] usb 5-1: Using ep0 maxpacket: 16 [ 314.526167][ T5098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 314.555389][ T5098] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 314.575079][ T5098] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.610328][ T5160] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 314.620365][ T5098] usb 5-1: Product: syz [ 314.633539][ T58] usb 1-1: Using ep0 maxpacket: 32 [ 314.638803][ T5098] usb 5-1: Manufacturer: syz [ 314.650547][ T8192] Zero length message leads to an empty skb [ 314.661530][ T58] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 314.671274][ T25] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 314.680050][ T5098] usb 5-1: SerialNumber: syz [ 314.693273][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.712463][ T5098] usb 5-1: config 0 descriptor?? [ 314.731383][ T5098] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 314.746654][ T58] usb 1-1: config 0 descriptor?? [ 314.764436][ T5098] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 314.795656][ T58] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 314.859886][ T5160] usb 2-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba [ 314.875807][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 314.883378][ T5160] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.903594][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.916943][ T8194] netlink: 104 bytes leftover after parsing attributes in process `syz.3.861'. [ 314.943585][ T5160] usb 2-1: Product: syz [ 314.955395][ T25] usb 6-1: config 0 has no interfaces? [ 314.976353][ T5160] usb 2-1: Manufacturer: syz [ 314.982134][ T25] usb 6-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 314.992432][ T5160] usb 2-1: SerialNumber: syz [ 315.015369][ T5160] usb 2-1: config 0 descriptor?? [ 315.020574][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.066862][ T25] usb 6-1: config 0 descriptor?? [ 315.341974][ T58] gspca_sunplus: reg_w_riv err -110 [ 315.352879][ T25] usb 6-1: USB disconnect, device number 20 [ 315.367950][ T58] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 315.418902][ T5098] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 315.442485][ T5160] kaweth 2-1:0.0: Firmware present in device. [ 315.451105][ T5160] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 315.462921][ T5160] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 315.490200][ T5160] usb 2-1: USB disconnect, device number 23 [ 315.515303][ T5098] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 315.562007][ T5098] em28xx 5-1:0.0: board has no eeprom [ 315.675664][ T5098] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 315.698965][ T5098] em28xx 5-1:0.0: dvb set to bulk mode. [ 315.713107][ T5168] em28xx 5-1:0.0: Binding DVB extension [ 315.728839][ T5098] usb 5-1: USB disconnect, device number 4 [ 315.742598][ T5098] em28xx 5-1:0.0: Disconnecting em28xx [ 315.804257][ T5168] em28xx 5-1:0.0: Registering input extension [ 315.817705][ T5098] em28xx 5-1:0.0: Closing input extension [ 315.864192][ T5098] em28xx 5-1:0.0: Freeing device [ 315.910373][ T25] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 316.300342][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 316.663106][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.718533][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.751730][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.013220][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.070269][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.240480][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 317.249542][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.275012][ T5164] usb 1-1: USB disconnect, device number 20 [ 317.318532][ T25] usb 3-1: config 0 descriptor?? [ 318.487666][ T25] pyra 0003:1E7D:2C24.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.2-1/input0 [ 318.664411][ T25] usb 3-1: USB disconnect, device number 20 [ 319.205309][ T8247] netlink: 64 bytes leftover after parsing attributes in process `syz.4.882'. [ 319.521395][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 319.741094][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 319.777118][ T25] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 319.828289][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.891044][ T25] usb 5-1: config 0 descriptor?? [ 319.925950][ T25] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 321.094926][ T29] audit: type=1804 audit(1721898081.707:209): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.887" name="/newroot/183/file0" dev="fuse" ino=1 res=1 errno=0 [ 321.095175][ T25] gspca_sunplus: reg_w_riv err -110 [ 321.115488][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.179641][ T25] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 322.355775][ T5164] usb 5-1: USB disconnect, device number 5 [ 322.400440][ T922] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 322.600430][ T922] usb 2-1: Using ep0 maxpacket: 8 [ 323.559886][ T922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.600622][ T922] usb 2-1: config 0 has no interfaces? [ 323.606159][ T922] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 323.660429][ T922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.706988][ T922] usb 2-1: config 0 descriptor?? [ 326.347006][ T5164] usb 2-1: USB disconnect, device number 24 [ 326.540378][ T5098] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 327.280415][ T5098] usb 1-1: Using ep0 maxpacket: 32 [ 327.291811][ T5098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.320433][ T5098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.350764][ T5098] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 327.381462][ T5098] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.489054][ T5098] usb 1-1: config 0 descriptor?? [ 327.516857][ T922] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 327.541956][ T5098] hub 1-1:0.0: USB hub found [ 327.614094][ T8332] fuse: Unknown parameter 'use00000000000000000000' [ 327.780403][ T5098] hub 1-1:0.0: 1 port detected [ 327.780434][ T922] usb 6-1: Using ep0 maxpacket: 8 [ 327.782447][ T922] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.854907][ T922] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 327.918655][ T922] usb 6-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 327.976737][ T922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.031457][ T922] usb 6-1: config 0 descriptor?? [ 328.230922][ T58] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 328.268613][ T5164] usb 6-1: USB disconnect, device number 21 [ 328.395589][ T8316] loop2: detected capacity change from 0 to 32768 [ 328.420566][ T8316] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.907 (8316) [ 328.463977][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.467042][ T8316] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 328.480340][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.520420][ T8316] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 329.323443][ T5116] Bluetooth: hci4: command 0x0406 tx timeout [ 329.429739][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.434897][ T8345] pty pty21: ldisc open failed (-12), clearing slot 21 [ 329.472749][ T5168] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 329.501382][ T8316] BTRFS info (device loop2): using free-space-tree [ 329.522534][ T58] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 329.541915][ T8316] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 329.553190][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.620812][ T8316] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 329.621700][ T8316] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 329.640438][ T58] usb 4-1: config 0 descriptor?? [ 329.689259][ T8316] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 329.698660][ T8316] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 329.721323][ T25] usb 1-1: USB disconnect, device number 21 [ 329.771452][ T8316] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 329.772358][ T8316] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 330.105818][ T8316] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 330.457001][ T8316] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 330.473570][ T8316] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 330.489759][ T8316] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 330.504246][ T8316] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 330.542156][ T58] usbhid 4-1:0.0: can't add hid device: -71 [ 330.710437][ T58] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 330.739359][ T8316] BTRFS error (device loop2): open_ctree failed [ 330.808483][ T58] usb 4-1: USB disconnect, device number 25 [ 330.820777][ T8370] loop1: detected capacity change from 0 to 512 [ 330.890042][ T8370] devtmpfs: Unknown parameter 'errors' [ 330.901584][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 331.147503][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 331.218001][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.257641][ T25] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 331.261445][ T8375] fuse: Unknown parameter 'use00000000000000000000' [ 331.308301][ T25] usb 1-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 331.349102][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.397482][ T25] usb 1-1: config 0 descriptor?? [ 332.272817][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 332.651194][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 332.685221][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.736399][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.759860][ T8400] loop5: detected capacity change from 0 to 1024 [ 332.817337][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 332.865144][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.897712][ T25] usb 5-1: config 0 descriptor?? [ 332.909844][ T58] usb 1-1: USB disconnect, device number 22 [ 332.917620][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.937'. [ 332.931351][ T5161] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 332.945835][ T25] hub 5-1:0.0: USB hub found [ 333.343570][ T5161] usb 4-1: Using ep0 maxpacket: 8 [ 333.353312][ T25] hub 5-1:0.0: 1 port detected [ 333.362129][ T8409] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 334.021200][ T5161] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.080947][ T5161] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.155397][ T5161] usb 4-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 334.221687][ T5161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.353238][ T5161] usb 4-1: config 0 descriptor?? [ 334.417523][ T8419] fuse: Unknown parameter 'use00000000000000000000' [ 334.768764][ T5164] usb 4-1: USB disconnect, device number 26 [ 335.096818][ T29] audit: type=1804 audit(1721898096.287:210): pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.945" name="/newroot/58/file0" dev="fuse" ino=1 res=1 errno=0 [ 335.747131][ T25] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 335.793210][ T5161] usb 5-1: USB disconnect, device number 6 [ 336.003604][ T5164] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 337.010513][ T5164] usb 6-1: device descriptor read/64, error -71 [ 337.090355][ T5109] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 338.059504][ T8460] fuse: Unknown parameter 'user_i00000000000000000000' [ 338.328590][ T5109] usb 1-1: Using ep0 maxpacket: 8 [ 338.336312][ T5109] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.353107][ T5109] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 338.365933][ T5109] usb 1-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 338.375224][ T5109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.390380][ T5164] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 338.425163][ T8463] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 338.530651][ T5109] usb 1-1: config 0 descriptor?? [ 338.696519][ T5164] usb 6-1: device descriptor read/64, error -71 [ 338.840748][ T5164] usb usb6-port1: attempt power cycle [ 338.967701][ T8450] loop2: detected capacity change from 0 to 40427 [ 338.996668][ T8450] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 339.028598][ T8450] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 339.077547][ T8450] F2FS-fs (loop2): Found nat_bits in checkpoint [ 339.301791][ T8450] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 339.311185][ T8450] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 339.350831][ T5116] Bluetooth: hci0: command 0x0406 tx timeout [ 339.784708][ T8487] overlayfs: failed to resolve './file0': -2 [ 340.322505][ T25] usb 1-1: USB disconnect, device number 23 [ 341.028371][ T8501] fuse: Unknown parameter 'user_i00000000000000000000' [ 342.775124][ T5109] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 342.830168][ T8512] loop4: detected capacity change from 0 to 16 [ 342.896753][ T8512] erofs: (device loop4): mounted with root inode @ nid 36. [ 342.980544][ T5109] usb 1-1: device descriptor read/64, error -71 [ 343.015939][ T8516] fuse: Bad value for 'fd' [ 343.280470][ T5109] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 343.485951][ T5109] usb 1-1: device descriptor read/64, error -71 [ 343.656652][ T5109] usb usb1-port1: attempt power cycle [ 344.270592][ T5109] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 344.361069][ T5109] usb 1-1: device descriptor read/8, error -71 [ 344.514773][ T8536] fuse: Unknown parameter 'user_i00000000000000000000' [ 344.820352][ T5109] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 344.869606][ T5109] usb 1-1: device descriptor read/8, error -71 [ 344.890453][ T8543] affs: No valid root block on device nullb0 [ 345.281866][ T5109] usb usb1-port1: unable to enumerate USB device [ 346.787178][ T58] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 348.343102][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.415376][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.457327][ T8576] fuse: Unknown parameter 'user_id00000000000000000000' [ 348.509360][ T58] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 348.563398][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.618411][ T58] usb 3-1: config 0 descriptor?? [ 348.659431][ T5164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 348.684111][ T5164] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 348.722933][ T5164] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 349.050555][ T5109] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 349.449064][ T58] sony 0003:054C:0268.000B: unknown main item tag 0x0 [ 349.840335][ T5109] usb 6-1: device descriptor read/64, error -71 [ 349.897109][ T58] sony 0003:054C:0268.000B: item fetching failed at offset 1/5 [ 349.935267][ T58] sony 0003:054C:0268.000B: parse failed [ 349.954789][ T58] sony 0003:054C:0268.000B: probe with driver sony failed with error -22 [ 350.008705][ T58] usb 3-1: USB disconnect, device number 21 [ 350.230545][ T5109] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 350.390528][ T5109] usb 6-1: device descriptor read/64, error -71 [ 350.397094][ T5164] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 350.544335][ T5109] usb usb6-port1: attempt power cycle [ 350.612990][ T5164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.038390][ T5109] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 352.050293][ T5164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.166160][ T5164] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 352.232377][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.274042][ T5109] usb 6-1: device descriptor read/8, error -71 [ 352.307056][ T5164] usb 2-1: config 0 descriptor?? [ 352.390718][ T8622] fuse: Unknown parameter 'user_id00000000000000000000' [ 353.420082][ T5164] sony 0003:054C:0268.000C: unknown main item tag 0x0 [ 353.502856][ T5164] sony 0003:054C:0268.000C: item fetching failed at offset 1/5 [ 353.547346][ T5164] sony 0003:054C:0268.000C: parse failed [ 353.603782][ T5164] sony 0003:054C:0268.000C: probe with driver sony failed with error -22 [ 353.930103][ T5164] usb 2-1: USB disconnect, device number 25 [ 353.990319][ T5109] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 354.046526][ T5109] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.098873][ T5109] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.190375][ T5109] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 354.202268][ T8641] affs: No valid root block on device nullb0 [ 354.253460][ T5109] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.301072][ T5109] usb 6-1: config 0 descriptor?? [ 354.727303][ T5109] lg-g15 0003:046D:C222.000D: unknown main item tag 0x0 [ 354.753769][ T5109] lg-g15 0003:046D:C222.000D: unknown main item tag 0x0 [ 354.800487][ T5109] lg-g15 0003:046D:C222.000D: unknown main item tag 0x0 [ 354.810506][ T5109] lg-g15 0003:046D:C222.000D: unknown main item tag 0x2 [ 354.831492][ T5109] lg-g15 0003:046D:C222.000D: unknown main item tag 0x0 [ 354.838495][ T5109] lg-g15 0003:046D:C222.000D: unknown main item tag 0x0 [ 354.871207][ T5109] lg-g15 0003:046D:C222.000D: unknown main item tag 0x0 [ 354.880675][ T5109] lg-g15 0003:046D:C222.000D: unknown main item tag 0x0 [ 354.921029][ T5109] lg-g15 0003:046D:C222.000D: unknown main item tag 0x0 [ 354.954281][ T5109] lg-g15 0003:046D:C222.000D: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.5-1/input0 [ 355.014311][ T5109] usb 6-1: USB disconnect, device number 28 [ 356.641114][ T8671] fuse: Unknown parameter 'user_id00000000000000000000' [ 358.612753][ T8697] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 358.831891][ T58] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 358.857891][ T8667] loop5: detected capacity change from 0 to 40427 [ 358.914824][ T8667] F2FS-fs (loop5): invalid crc value [ 358.964342][ T8667] F2FS-fs (loop5): Found nat_bits in checkpoint [ 359.921769][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 359.937469][ T58] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 360.001349][ T58] usb 5-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 360.068195][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.142736][ T58] usb 5-1: config 0 descriptor?? [ 360.143361][ T8713] fuse: Bad value for 'fd' [ 360.809011][ T29] audit: type=1326 audit(1721898122.107:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.1.1058" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f34d75f19 code=0x0 [ 361.040500][ T5164] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 361.247851][ T5164] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 361.287223][ T5164] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 361.306351][ T8736] affs: No valid root block on device nullb0 [ 361.325070][ T5164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.371728][ T5164] usb 1-1: config 0 descriptor?? [ 361.389251][ T5164] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 361.478568][ T8744] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 361.653834][ T58] usb 5-1: USB disconnect, device number 7 [ 362.816265][ T8760] fuse: Bad value for 'fd' [ 363.833422][ T5164] usb 1-1: USB disconnect, device number 28 [ 364.103708][ T8782] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 364.210375][ T5160] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 364.415421][ T5160] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 364.446912][ T5160] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 364.480441][ T5160] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 364.501124][ T5160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.524873][ T8774] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 364.686463][ T8767] loop5: detected capacity change from 0 to 32768 [ 364.700575][ T922] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 364.723273][ T8767] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1069 (8767) [ 364.781967][ T5164] usb 2-1: USB disconnect, device number 26 [ 364.811879][ T8767] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 364.840639][ T8767] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 364.861241][ T8767] BTRFS info (device loop5): using free-space-tree [ 364.902299][ T922] usb 1-1: Using ep0 maxpacket: 8 [ 364.918880][ T922] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 364.933658][ T922] usb 1-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 364.946996][ T922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.297843][ T922] usb 1-1: config 0 descriptor?? [ 366.123624][ T5104] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 367.010340][ T25] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 367.220726][ T25] usb 4-1: config 0 has no interfaces? [ 367.248244][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice=ac.5f [ 367.264736][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.293581][ T25] usb 4-1: config 0 descriptor?? [ 367.702515][ T922] usb 1-1: USB disconnect, device number 29 [ 367.771051][ T8837] fuse: Bad value for 'fd' [ 367.807520][ T5160] usb 4-1: USB disconnect, device number 27 [ 368.110333][ T25] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 368.153776][ T8846] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 368.356788][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 368.371744][ T25] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 368.385997][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.400095][ T25] usb 2-1: config 0 descriptor?? [ 368.421073][ T25] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 368.500526][ T5160] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 368.710934][ T5160] usb 1-1: Using ep0 maxpacket: 16 [ 368.735767][ T5160] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 368.745156][ T5160] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.753919][ T5160] usb 1-1: Product: syz [ 368.758388][ T5160] usb 1-1: Manufacturer: syz [ 368.764490][ T5160] usb 1-1: SerialNumber: syz [ 368.774594][ T5160] r8152-cfgselector 1-1: Unknown version 0x0000 [ 368.782620][ T5160] r8152-cfgselector 1-1: config 0 descriptor?? [ 368.810539][ T5165] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 368.868950][ T8857] loop5: detected capacity change from 0 to 32768 [ 368.877213][ T8857] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1093 (8857) [ 368.898621][ T8857] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 368.917522][ T8857] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 368.936948][ T8857] BTRFS info (device loop5): using free-space-tree [ 369.012454][ T5165] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 369.037766][ T5165] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 369.060895][ T5165] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 369.086496][ T5165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.143146][ T8859] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 369.413078][ T5104] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 369.440917][ T5165] usb 4-1: USB disconnect, device number 28 [ 369.508611][ T5160] r8152-cfgselector 1-1: Unknown version 0x0000 [ 369.520585][ T5160] r8152-cfgselector 1-1: bad CDC descriptors [ 369.531705][ T5160] r8152-cfgselector 1-1: USB disconnect, device number 30 [ 371.527963][ T5199] usb 2-1: USB disconnect, device number 27 [ 371.902478][ T5316] udevd[5316]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.942356][ T8898] fuse: Bad value for 'fd' [ 372.087535][ T29] audit: type=1326 audit(1721898133.387:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.1103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7a6775f19 code=0x0 [ 372.160339][ T5199] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 372.281562][ T58] libceph: connect (1)[c::]:6789 error -101 [ 372.287684][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 372.332373][ T5199] usb 2-1: device descriptor read/64, error -71 [ 372.426846][ T8906] ceph: No mds server is up or the cluster is laggy [ 372.610306][ T5199] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 372.781167][ T5199] usb 2-1: device descriptor read/64, error -71 [ 372.901931][ T5199] usb usb2-port1: attempt power cycle [ 373.170496][ T922] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 373.292632][ T58] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 373.321097][ T5199] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 373.362307][ T5199] usb 2-1: device descriptor read/8, error -71 [ 373.373428][ T922] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 373.414806][ T922] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 373.463936][ T922] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.510038][ T922] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 373.532369][ T58] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 373.558824][ T922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.559569][ T58] usb 4-1: can't read configurations, error -61 [ 373.639544][ T922] usb 1-1: invalid MIDI out EP 0 [ 373.670451][ T5199] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 373.713418][ T5199] usb 2-1: device descriptor read/8, error -71 [ 373.741805][ T58] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 373.840880][ T5199] usb usb2-port1: unable to enumerate USB device [ 373.851609][ T922] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 373.945397][ T58] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 373.949306][ T922] usb 1-1: USB disconnect, device number 31 [ 373.974104][ T58] usb 4-1: can't read configurations, error -61 [ 374.002821][ T58] usb usb4-port1: attempt power cycle [ 374.262163][ T5361] udevd[5361]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.280520][ T8938] fuse: Bad value for 'fd' [ 374.431070][ T58] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 374.475068][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.508344][ T58] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 374.518494][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.532377][ T58] usb 4-1: can't read configurations, error -61 [ 374.539614][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.557145][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.565202][ T5116] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 374.573525][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.701150][ T58] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 375.020839][ T58] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 375.054436][ T58] usb 4-1: can't read configurations, error -61 [ 375.056365][ T8948] affs: No valid root block on device nullb0 [ 375.076808][ T58] usb usb4-port1: unable to enumerate USB device [ 375.316121][ T29] audit: type=1326 audit(1721898136.607:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.1.1121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f34d75f19 code=0x0 [ 375.379429][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.608095][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.650992][ T29] audit: type=1326 audit(1721898136.957:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8957 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b1375f19 code=0x7ffc0000 [ 375.732663][ T29] audit: type=1326 audit(1721898136.957:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8957 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b1375f19 code=0x7ffc0000 [ 375.787742][ T29] audit: type=1326 audit(1721898136.957:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8957 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7ff8b1375f19 code=0x7ffc0000 [ 375.823343][ T29] audit: type=1326 audit(1721898136.957:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8957 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b1375f19 code=0x7ffc0000 [ 375.827586][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.890675][ T29] audit: type=1326 audit(1721898136.957:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8957 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b1375f19 code=0x7ffc0000 [ 376.121437][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.640462][ T5116] Bluetooth: hci2: command tx timeout [ 376.893356][ T8974] fuse: Bad value for 'fd' [ 376.956507][ T8939] chnl_net:caif_netlink_parms(): no params data found [ 377.115024][ T11] bridge_slave_1: left allmulticast mode [ 377.139555][ T11] bridge_slave_1: left promiscuous mode [ 377.160550][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.236486][ T11] bridge_slave_0: left allmulticast mode [ 377.252069][ T11] bridge_slave_0: left promiscuous mode [ 377.259713][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.369864][ T8962] loop4: detected capacity change from 0 to 32768 [ 377.385954][ T922] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 377.400987][ T8962] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1125 (8962) [ 377.521688][ T8962] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 377.557084][ T8962] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 377.578223][ T8962] BTRFS info (device loop4): using free-space-tree [ 377.652197][ T922] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 377.744737][ T922] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 377.787087][ T922] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 377.818138][ T922] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 377.831347][ T25] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 377.854231][ T922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.902598][ T922] usb 6-1: invalid MIDI out EP 0 [ 377.990340][ T25] usb 2-1: device descriptor read/64, error -71 [ 378.012865][ T29] audit: type=1804 audit(1721898139.317:219): pid=9002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1125" name="/newroot/88/file0/bus" dev="loop4" ino=263 res=1 errno=0 [ 378.124758][ T922] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 378.162726][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.169296][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.231319][ T922] usb 6-1: USB disconnect, device number 29 [ 378.247506][ T6732] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 378.303709][ T29] audit: type=1326 audit(1721898139.607:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9007 comm="syz.3.1138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7a6775f19 code=0x0 [ 378.340766][ T25] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 378.454071][ T5161] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 378.481670][ T5361] udevd[5361]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.512686][ T25] usb 2-1: device descriptor read/64, error -71 [ 378.656278][ T25] usb usb2-port1: attempt power cycle [ 378.675571][ T5161] usb 1-1: Using ep0 maxpacket: 16 [ 378.703416][ T5161] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 378.712100][ T5116] Bluetooth: hci2: command tx timeout [ 378.755491][ T5161] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 378.801657][ T5161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.809746][ T5161] usb 1-1: Product: syz [ 378.836154][ T5161] usb 1-1: Manufacturer: syz [ 378.844040][ T5161] usb 1-1: SerialNumber: syz [ 378.845022][ T29] audit: type=1326 audit(1721898140.147:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.5.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b2575f19 code=0x7ffc0000 [ 378.861429][ T5161] usb 1-1: config 0 descriptor?? [ 378.921513][ T5161] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 378.931218][ T29] audit: type=1326 audit(1721898140.147:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.5.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b2575f19 code=0x7ffc0000 [ 378.970790][ T5161] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 379.036094][ T29] audit: type=1326 audit(1721898140.187:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.5.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f74b2575f19 code=0x7ffc0000 [ 379.071101][ T29] audit: type=1326 audit(1721898140.187:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.5.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b2575f19 code=0x7ffc0000 [ 379.097554][ T25] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 379.120567][ T29] audit: type=1326 audit(1721898140.187:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.5.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b2575f19 code=0x7ffc0000 [ 379.136401][ T25] usb 2-1: device descriptor read/8, error -71 [ 379.195427][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.207740][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.215290][ T11] bond0 (unregistering): Released all slaves [ 379.360454][ T5165] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 379.402529][ T25] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 379.422818][ T9021] fuse: Unknown parameter '0x0000000000000003' [ 379.470745][ T25] usb 2-1: device descriptor read/8, error -71 [ 379.549899][ T5161] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 379.577050][ T5165] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 379.601885][ T25] usb usb2-port1: unable to enumerate USB device [ 379.618908][ T5165] usb 5-1: can't read configurations, error -61 [ 379.681392][ T9029] Bluetooth: MGMT ver 1.23 [ 379.682547][ T8939] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.704654][ T5161] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 379.726810][ T5161] em28xx 1-1:0.0: board has no eeprom [ 379.733908][ T8939] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.757058][ T8939] bridge_slave_0: entered allmulticast mode [ 379.786295][ T8939] bridge_slave_0: entered promiscuous mode [ 379.820394][ T5165] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 379.831034][ T5161] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 379.856276][ T8939] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.868335][ T5161] em28xx 1-1:0.0: dvb set to bulk mode. [ 379.884607][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.893877][ T5109] em28xx 1-1:0.0: Binding DVB extension [ 379.922326][ T5161] usb 1-1: USB disconnect, device number 32 [ 379.932673][ T8939] bridge_slave_1: entered allmulticast mode [ 379.969218][ T5161] em28xx 1-1:0.0: Disconnecting em28xx [ 379.986305][ T8939] bridge_slave_1: entered promiscuous mode [ 380.028132][ T5165] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 380.047427][ T5165] usb 5-1: can't read configurations, error -61 [ 380.071748][ T5165] usb usb5-port1: attempt power cycle [ 380.132048][ T5109] em28xx 1-1:0.0: Registering input extension [ 380.154025][ T5161] em28xx 1-1:0.0: Closing input extension [ 380.252543][ T5161] em28xx 1-1:0.0: Freeing device [ 380.522067][ T5165] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 380.578057][ T11] hsr_slave_0: left promiscuous mode [ 380.613142][ T5165] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 380.633279][ T5165] usb 5-1: can't read configurations, error -61 [ 380.669359][ T11] hsr_slave_1: left promiscuous mode [ 380.727961][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.750459][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.784338][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.792572][ T5116] Bluetooth: hci2: command tx timeout [ 380.810364][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.882783][ T11] veth1_macvtap: left promiscuous mode [ 380.927629][ T11] veth0_macvtap: left promiscuous mode [ 380.961459][ T11] veth1_vlan: left promiscuous mode [ 380.985722][ T11] veth0_vlan: left promiscuous mode [ 381.010336][ T5165] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 381.066398][ T5165] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 381.083833][ T5161] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 381.106761][ T5165] usb 5-1: can't read configurations, error -61 [ 381.283460][ T29] audit: type=1804 audit(1721898142.557:226): pid=9056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1148" name="/newroot/215/file0" dev="fuse" ino=1 res=1 errno=0 [ 381.320722][ T5165] usb usb5-port1: unable to enumerate USB device [ 381.472979][ T5161] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.681200][ T5098] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 381.910303][ T5161] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.922590][ T5161] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 381.936049][ T5161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.946898][ T5161] usb 1-1: config 0 descriptor?? [ 381.949943][ T5098] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 381.971629][ T5161] usbhid 1-1:0.0: can't add hid device: -22 [ 381.997060][ T5161] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 382.001090][ T5098] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.051513][ T5098] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 382.091411][ T29] audit: type=1326 audit(1721898143.387:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9063 comm="syz.1.1152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f34d75f19 code=0x0 [ 382.130798][ T5098] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 382.198587][ T5098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.236452][ T5098] usb 6-1: invalid MIDI out EP 0 [ 382.405003][ T9072] fuse: Unknown parameter '0x0000000000000003' [ 382.452641][ T5098] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 382.493219][ T5098] usb 6-1: USB disconnect, device number 30 [ 382.766598][ T5535] udevd[5535]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.871195][ T54] Bluetooth: hci2: command tx timeout [ 383.025666][ T9089] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 383.371280][ T5098] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 383.452646][ T25] usb 1-1: USB disconnect, device number 33 [ 383.520053][ T11] team0 (unregistering): Port device team_slave_1 removed [ 383.573028][ T5098] usb 2-1: device descriptor read/64, error -71 [ 383.797965][ T11] team0 (unregistering): Port device team_slave_0 removed [ 383.896825][ T5098] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 384.114213][ T5098] usb 2-1: device descriptor read/64, error -71 [ 384.289597][ T5098] usb usb2-port1: attempt power cycle [ 384.423059][ T922] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 384.554255][ T9112] fuse: Unknown parameter '0x0000000000000003' [ 384.668730][ T922] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 384.700046][ T922] usb 6-1: can't read configurations, error -61 [ 384.718109][ T5098] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 384.767659][ T5098] usb 2-1: device descriptor read/8, error -71 [ 384.791861][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 384.859015][ T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 384.871456][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.10.0-syzkaller-12381-gc33ffdb70cc6 #0 [ 384.874444][ T922] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 384.881787][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 384.881855][ T54] Workqueue: hci0 hci_rx_work [ 384.881893][ T54] Call Trace: [ 384.881906][ T54] [ 384.881921][ T54] dump_stack_lvl+0x241/0x360 [ 384.881975][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.882022][ T54] ? __pfx__printk+0x10/0x10 [ 384.882063][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.882106][ T54] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 384.882145][ T54] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 384.882195][ T54] sysfs_create_dir_ns+0x2ce/0x3a0 [ 384.882239][ T54] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 384.882275][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.957925][ T54] kobject_add_internal+0x435/0x8d0 [ 384.963185][ T54] kobject_add+0x152/0x220 [ 384.967611][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.973253][ T54] ? do_raw_spin_unlock+0x13c/0x8b0 [ 384.978467][ T54] ? device_add+0x3e7/0xbf0 [ 384.982982][ T54] ? __pfx_kobject_add+0x10/0x10 [ 384.987931][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.993574][ T54] ? _raw_spin_unlock+0x28/0x50 [ 384.998427][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.004076][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.009714][ T54] ? get_device_parent+0x165/0x410 [ 385.014839][ T54] device_add+0x4e5/0xbf0 [ 385.019187][ T54] hci_conn_add_sysfs+0xe8/0x200 [ 385.024144][ T54] le_conn_complete_evt+0xc9f/0x12e0 [ 385.029454][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.035092][ T54] ? trace_contention_end+0x3c/0x120 [ 385.040392][ T54] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 385.046168][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.051807][ T54] ? __mutex_unlock_slowpath+0x21d/0x750 [ 385.057451][ T54] ? __copy_skb_header+0x437/0x5b0 [ 385.062576][ T54] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.068215][ T54] ? skb_pull_data+0x112/0x230 [ 385.072991][ T54] hci_le_enh_conn_complete_evt+0x185/0x420 [ 385.078902][ T54] hci_event_packet+0xa57/0x1540 [ 385.083863][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 385.089161][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 385.094549][ T54] ? do_raw_spin_unlock+0x13c/0x8b0 [ 385.099764][ T54] ? __entry_text_end+0xfdfc5/0x1020c9 [ 385.105234][ T54] ? hci_send_to_monitor+0xd8/0x7f0 [ 385.110449][ T54] ? kcov_remote_start+0x9e/0x7e0 [ 385.115493][ T54] hci_rx_work+0x3e8/0xca0 [ 385.119924][ T54] ? process_scheduled_works+0x945/0x1830 [ 385.125653][ T54] process_scheduled_works+0xa2e/0x1830 [ 385.131243][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 385.137248][ T54] ? assign_work+0x364/0x3d0 [ 385.141858][ T54] worker_thread+0x86d/0xd40 [ 385.146488][ T54] ? __kthread_parkme+0x169/0x1d0 [ 385.151532][ T54] ? __pfx_worker_thread+0x10/0x10 [ 385.156656][ T54] kthread+0x2f2/0x390 [ 385.160724][ T54] ? __pfx_worker_thread+0x10/0x10 [ 385.165846][ T54] ? __pfx_kthread+0x10/0x10 [ 385.170439][ T54] ret_from_fork+0x4d/0x80 [ 385.175392][ T54] ? __pfx_kthread+0x10/0x10 [ 385.179982][ T54] ret_from_fork_asm+0x1a/0x30 [ 385.184779][ T54] [ 385.193466][ T54] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 385.246353][ T54] Bluetooth: hci0: failed to register connection device [ 385.361197][ T5098] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 385.421968][ T5098] usb 2-1: device descriptor read/8, error -71 [ 385.437463][ T922] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 385.445527][ T922] usb 6-1: can't read configurations, error -61 [ 385.453473][ T29] audit: type=1326 audit(1721898146.757:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.0.1171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f04f75f19 code=0x0 [ 385.476358][ T922] usb usb6-port1: attempt power cycle [ 385.563713][ T5098] usb usb2-port1: unable to enumerate USB device [ 385.624342][ T8939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.951706][ T8939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.261567][ T8939] team0: Port device team_slave_0 added [ 386.320503][ T922] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 386.345866][ T8939] team0: Port device team_slave_1 added [ 386.384375][ T922] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 386.409166][ T922] usb 6-1: can't read configurations, error -61 [ 386.591125][ T922] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 386.660120][ T8939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.706808][ T922] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 386.725031][ T8939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.766523][ T922] usb 6-1: can't read configurations, error -61 [ 386.776917][ T922] usb usb6-port1: unable to enumerate USB device [ 386.831832][ T8939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.874619][ T8939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.885889][ T8939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.925842][ T8939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.189217][ T8939] hsr_slave_0: entered promiscuous mode [ 387.237332][ T8939] hsr_slave_1: entered promiscuous mode [ 387.270472][ T5116] Bluetooth: hci0: command 0x0406 tx timeout [ 387.998462][ T9167] fuse: Unknown parameter '0x0000000000000003' [ 388.248715][ T9170] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 388.496952][ T29] audit: type=1326 audit(1721898149.787:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9179 comm="syz.1.1186" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f34d75f19 code=0x0 [ 388.624121][ T5161] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 389.023189][ T5161] usb 1-1: Using ep0 maxpacket: 32 [ 389.088850][ T5161] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.129583][ T5161] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 389.156500][ T5161] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 389.199822][ T5161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.228290][ T5161] usb 1-1: config 0 descriptor?? [ 390.290417][ T25] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 390.499418][ T9213] affs: No valid root block on device nullb0 [ 390.501945][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.547888][ T25] usb 2-1: config 0 has no interfaces? [ 390.577841][ T25] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 390.644964][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.695136][ T25] usb 2-1: config 0 descriptor?? [ 390.818336][ T8939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 390.861705][ T8939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 390.935234][ T8939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 390.990561][ T8939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 391.384373][ T5165] usb 1-1: USB disconnect, device number 34 [ 391.496964][ T8939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.601491][ T9238] fuse: Unknown parameter '0x0000000000000003' [ 391.603674][ T8939] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.698406][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.705688][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.298058][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.305324][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.702774][ T5165] usb 2-1: USB disconnect, device number 40 [ 392.922945][ T29] audit: type=1326 audit(1721898154.227:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.4.1202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8b1375f19 code=0x0 [ 392.995198][ T9252] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 393.630160][ T8939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.826217][ T8939] veth0_vlan: entered promiscuous mode [ 393.943397][ T8939] veth1_vlan: entered promiscuous mode [ 394.154353][ T8939] veth0_macvtap: entered promiscuous mode [ 394.215254][ T8939] veth1_macvtap: entered promiscuous mode [ 394.241734][ T9296] fuse: Unknown parameter '0x0000000000000003' [ 394.330110][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.381457][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.453312][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.490518][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.540403][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.593105][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.633645][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.890154][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.921077][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.956019][ T5109] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 394.984078][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.012920][ T8939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.072531][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.125206][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.166480][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.192593][ T5109] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.198251][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.220264][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.230270][ T5109] usb 1-1: config 0 has no interfaces? [ 395.231572][ T25] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 395.257996][ T5109] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 395.266863][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.292264][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.299043][ T5109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.313210][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.360899][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.371427][ T5109] usb 1-1: config 0 descriptor?? [ 395.398737][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.441647][ T25] usb 2-1: device descriptor read/64, error -71 [ 395.447851][ T8939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.519378][ T8939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.567494][ T8939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.586795][ T8939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.609365][ T8939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.706123][ T29] audit: type=1326 audit(1721898157.007:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9321 comm="syz.3.1219" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7a6775f19 code=0x0 [ 395.744047][ T25] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 395.929597][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.931284][ T25] usb 2-1: device descriptor read/64, error -71 [ 395.966300][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.088620][ T5446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.114719][ T5446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.125101][ T25] usb usb2-port1: attempt power cycle [ 396.168808][ T9299] loop4: detected capacity change from 0 to 40427 [ 396.193808][ T9299] F2FS-fs (loop4): invalid crc value [ 396.214578][ T9299] F2FS-fs (loop4): Found nat_bits in checkpoint [ 396.490325][ T9299] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 396.561587][ T25] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 396.662065][ T25] usb 2-1: device descriptor read/8, error -71 [ 396.790157][ T6732] syz-executor: attempt to access beyond end of device [ 396.790157][ T6732] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 396.855402][ T6732] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 396.921742][ T6732] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 396.961663][ T25] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 397.014714][ T25] usb 2-1: device descriptor read/8, error -71 [ 397.161778][ T25] usb usb2-port1: unable to enumerate USB device [ 397.563542][ T5098] usb 1-1: USB disconnect, device number 35 [ 398.984554][ T9382] fuse: Unknown parameter 'fd0x0000000000000003' [ 399.832528][ T9367] loop0: detected capacity change from 0 to 32768 [ 399.870519][ T9367] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1228 (9367) [ 399.901197][ T5098] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 399.956924][ T9367] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 399.996765][ T9367] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 400.030882][ T9367] BTRFS info (device loop0): using free-space-tree [ 400.122771][ T5098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.139556][ T5098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.210544][ T5098] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 400.219813][ T5098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.241038][ T5098] usb 5-1: config 0 descriptor?? [ 400.410352][ T29] audit: type=1804 audit(1721898161.707:232): pid=9367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1228" name="/newroot/110/file0/bus" dev="loop0" ino=263 res=1 errno=0 [ 400.667155][ T6811] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 400.706934][ T5098] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 400.734605][ T5098] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 400.754870][ T5098] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 400.786304][ T5098] lg-g15 0003:046D:C222.000E: unknown main item tag 0x2 [ 400.825707][ T5168] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 400.836423][ T5098] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 400.863810][ T5098] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 400.878884][ T5098] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 400.911577][ T5098] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 400.919638][ T5098] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 400.998303][ T5098] lg-g15 0003:046D:C222.000E: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 401.054597][ T5168] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.066968][ T5098] usb 5-1: USB disconnect, device number 12 [ 401.113515][ T5168] usb 4-1: config 0 has no interfaces? [ 401.148616][ T5168] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 401.191202][ T5168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.224289][ T5168] usb 4-1: config 0 descriptor?? [ 401.828352][ T9435] vcan0: Master is either lo or non-ether device [ 402.170338][ T5109] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 402.390797][ T5109] usb 6-1: device descriptor read/64, error -71 [ 402.523903][ T29] audit: type=1326 audit(1721898163.827:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.0.1250" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f04f75f19 code=0x0 [ 402.562001][ T5165] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 402.680777][ T5109] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 402.795994][ T5165] usb 2-1: Using ep0 maxpacket: 16 [ 402.826917][ T5165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.847235][ T5109] usb 6-1: device descriptor read/64, error -71 [ 402.853761][ T5165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.892571][ T5165] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 402.922002][ T5165] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 402.945624][ T5165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.961087][ T5165] usb 2-1: config 0 descriptor?? [ 402.980951][ T5109] usb usb6-port1: attempt power cycle [ 403.406349][ T9462] loop2: detected capacity change from 0 to 32768 [ 403.410735][ T5165] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 403.437334][ T9462] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1254 (9462) [ 403.439850][ T5109] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 403.459440][ T5165] microsoft 0003:045E:07DA.000F: item 0 4 0 8 parsing failed [ 403.468893][ T5165] microsoft 0003:045E:07DA.000F: parse failed [ 403.476616][ T5165] microsoft 0003:045E:07DA.000F: probe with driver microsoft failed with error -22 [ 403.499700][ T5109] usb 6-1: device descriptor read/8, error -71 [ 403.557972][ T9462] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 403.597616][ T9462] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 403.610781][ T5161] usb 4-1: USB disconnect, device number 33 [ 403.627085][ T9462] BTRFS info (device loop2): using free-space-tree [ 403.653615][ T5165] usb 2-1: USB disconnect, device number 45 [ 403.715093][ T9475] vcan0: Master is either lo or non-ether device [ 403.790636][ T5109] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 403.842025][ T5109] usb 6-1: device descriptor read/8, error -71 [ 403.960836][ T5109] usb usb6-port1: unable to enumerate USB device [ 404.104861][ T29] audit: type=1804 audit(1721898165.407:234): pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1254" name="/newroot/7/file0/bus" dev="loop2" ino=263 res=1 errno=0 [ 404.228107][ T8939] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 404.497100][ T9500] loop0: detected capacity change from 0 to 4096 [ 404.537356][ T9500] EXT4-fs: Ignoring removed nomblk_io_submit option [ 404.638769][ T9500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.808887][ T9500] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #15: comm syz.0.1262: corrupted inode contents [ 404.910409][ T9500] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #15: comm syz.0.1262: mark_inode_dirty error [ 404.997450][ T9500] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #15: comm syz.0.1262: corrupted inode contents [ 405.071457][ T9500] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.1262: mark_inode_dirty error [ 405.119825][ T9500] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #15: comm syz.0.1262: corrupted inode contents [ 405.163317][ T9500] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.1262: mark_inode_dirty error [ 405.261659][ T9500] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #15: comm syz.0.1262: corrupted inode contents [ 405.333317][ T9500] EXT4-fs error (device loop0): ext4_truncate:4241: inode #15: comm syz.0.1262: mark_inode_dirty error [ 405.352266][ T5161] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 405.390331][ T9500] EXT4-fs error (device loop0) in ext4_setattr:5553: Corrupt filesystem [ 405.506965][ T9511] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #15: comm syz.0.1262: corrupted inode contents [ 405.568707][ T29] audit: type=1326 audit(1721898166.867:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.1.1270" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f34d75f19 code=0x0 [ 405.618837][ T5161] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 405.648847][ T5161] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 405.667020][ C1] eth0: bad gso: type: 1, size: 1408 [ 405.689406][ T6811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.706607][ T5161] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.758228][ T5161] usb 6-1: config 0 descriptor?? [ 405.801437][ T5161] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 406.290585][ T5109] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 406.549757][ T5109] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 406.605231][ T5109] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 406.659254][ T5109] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 407.570377][ T5109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.183634][ T5161] usb 6-1: USB disconnect, device number 39 [ 408.554636][ T58] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 408.681099][ T5098] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 408.732543][ T58] usb 2-1: device descriptor read/64, error -71 [ 408.883698][ T5098] usb 3-1: Using ep0 maxpacket: 16 [ 408.898990][ T5098] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.921347][ T5098] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.934035][ T29] audit: type=1326 audit(1721898170.237:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.5.1285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74b2575f19 code=0x0 [ 408.976718][ T5098] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 409.001199][ T5098] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 409.030377][ T5098] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.062245][ T5098] usb 3-1: config 0 descriptor?? [ 409.069015][ T5199] usb 1-1: USB disconnect, device number 36 [ 409.075594][ T58] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 409.524725][ T58] usb 2-1: device descriptor read/64, error -71 [ 409.727440][ T58] usb usb2-port1: attempt power cycle [ 410.319267][ T5098] usbhid 3-1:0.0: can't add hid device: -71 [ 410.354330][ T5098] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 410.403645][ T5098] usb 3-1: USB disconnect, device number 22 [ 410.673087][ T9591] loop0: detected capacity change from 0 to 512 [ 410.721304][ T58] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 410.772124][ T58] usb 2-1: device descriptor read/8, error -71 [ 410.783084][ T9591] EXT4-fs (loop0): 1 truncate cleaned up [ 410.819587][ T9591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.854314][ T9598] affs: No valid root block on device nullb0 [ 410.947832][ T9591] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.1290: Directory hole found for htree leaf block 0 [ 411.055680][ T9591] EXT4-fs (loop0): Remounting filesystem read-only [ 411.091094][ T58] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 411.313153][ T58] usb 2-1: device descriptor read/8, error -71 [ 411.410364][ T5161] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 411.451814][ T58] usb usb2-port1: unable to enumerate USB device [ 412.050898][ T6811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.218370][ T5161] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.280981][ T5161] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.309330][ T5161] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 412.368155][ T5161] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 412.407939][ T5161] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.457718][ T5161] usb 6-1: config 0 descriptor?? [ 412.486895][ T5161] usbhid 6-1:0.0: can't add hid device: -22 [ 412.527454][ T5161] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 412.810816][ T58] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 413.820102][ T58] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 413.985942][ T5161] usb 6-1: USB disconnect, device number 40 [ 414.011146][ T58] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 414.031115][ T58] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 414.050242][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.123360][ T29] audit: type=1326 audit(1721898175.427:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9631 comm="syz.2.1303" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19c6975f19 code=0x0 [ 414.860382][ T29] audit: type=1804 audit(1721898176.127:238): pid=9646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1306" name="/newroot/257/file0" dev="fuse" ino=1 res=1 errno=0 [ 415.593944][ T5199] usb 2-1: USB disconnect, device number 50 [ 415.759144][ T9662] fuse: Bad value for 'fd' [ 415.840452][ T5161] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 415.897916][ T9668] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1313'. [ 416.010406][ T5161] usb 1-1: device descriptor read/64, error -71 [ 416.300700][ T5161] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 418.751846][ T29] audit: type=1326 audit(1721898180.057:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.2.1320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19c6975f19 code=0x0 [ 418.930041][ T9697] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1321'. [ 419.115785][ T9699] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1324'. [ 420.148512][ T9711] fuse: Bad value for 'fd' [ 420.219650][ T29] audit: type=1800 audit(1721898181.517:240): pid=9715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1328" name="/" dev="fuse" ino=1 res=0 errno=0 [ 420.265101][ T5109] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 420.503103][ T5109] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 420.570727][ T5109] usb 6-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 420.629738][ T5109] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 420.647118][ T5109] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.871155][ T58] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 421.009917][ T9738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.041925][ T58] usb 1-1: device descriptor read/64, error -71 [ 421.057472][ T9738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 421.101539][ T9739] netlink: 'syz.4.1337': attribute type 4 has an invalid length. [ 421.320342][ T58] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 421.668422][ T58] usb 1-1: device descriptor read/64, error -71 [ 526.750170][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 526.757156][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9744/1:b..l [ 526.765623][ C1] rcu: (detected by 1, t=10502 jiffies, g=40737, q=272 ncpus=2) [ 526.773329][ C1] task:syz.1.1339 state:R running task stack:26816 pid:9744 tgid:9743 ppid:5097 flags:0x00000004 [ 526.786066][ C1] Call Trace: [ 526.789340][ C1] [ 526.792271][ C1] __schedule+0x1800/0x4a60 [ 526.796788][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 526.803142][ C1] ? __pfx___schedule+0x10/0x10 [ 526.808253][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.813882][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 526.819106][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 526.824241][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 526.829966][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.835626][ C1] irqentry_exit+0x5e/0x90 [ 526.840041][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 526.846017][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 526.851318][ C1] Code: 2b 00 74 08 4c 89 f7 e8 1a 0e 8b 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 526.870948][ C1] RSP: 0018:ffffc9000310fb00 EFLAGS: 00000206 [ 526.877012][ C1] RAX: 0000000000000001 RBX: 1ffff92000621f6c RCX: 91e2de62539e0f00 [ 526.884975][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcae720 RDI: ffffffff8c206820 [ 526.892939][ C1] RBP: ffffc9000310fc48 R08: ffffffff92ffd807 R09: 1ffffffff25ffb00 [ 526.900906][ C1] R10: dffffc0000000000 R11: fffffbfff25ffb01 R12: 1ffff92000621f68 [ 526.908889][ C1] R13: dffffc0000000000 R14: ffffc9000310fb60 R15: 0000000000000246 [ 526.916897][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.922580][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 526.927634][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.933265][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 526.939338][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 526.945683][ C1] __fget_files+0x49/0x470 [ 526.950102][ C1] ? __fget_files+0x29/0x470 [ 526.954703][ C1] ? __fget_files+0x29/0x470 [ 526.959294][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 526.964486][ C1] ? get_signal+0x144f/0x1740 [ 526.969164][ C1] __fdget+0x16c/0x1e0 [ 526.973239][ C1] __se_sys_flock+0x113/0x6c0 [ 526.977947][ C1] ? __pfx_get_signal+0x10/0x10 [ 526.982796][ C1] ? __pfx___se_sys_flock+0x10/0x10 [ 526.988019][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 526.994371][ C1] ? do_syscall_64+0x100/0x230 [ 526.999136][ C1] ? do_syscall_64+0xb6/0x230 [ 527.003811][ C1] do_syscall_64+0xf3/0x230 [ 527.008319][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.014221][ C1] RIP: 0033:0x7f6f34d75f19 [ 527.018650][ C1] RSP: 002b:00007f6f35a6c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 527.027091][ C1] RAX: ffffffffffffffda RBX: 00007f6f34f05f60 RCX: 00007f6f34d75f19 [ 527.035060][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 527.043023][ C1] RBP: 00007f6f34de4e68 R08: 0000000000000000 R09: 0000000000000000 [ 527.050988][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.058950][ C1] R13: 000000000000000b R14: 00007f6f34f05f60 R15: 00007ffd18a6bb08 [ 527.066931][ C1] [ 527.069940][ C1] rcu: rcu_preempt kthread starved for 10233 jiffies! g40737 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 527.081133][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 527.091100][ C1] rcu: RCU grace-period kthread stack dump: [ 527.096976][ C1] task:rcu_preempt state:R running task stack:25168 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 527.108731][ C1] Call Trace: [ 527.112004][ C1] [ 527.114930][ C1] __schedule+0x1800/0x4a60 [ 527.119450][ C1] ? __pfx___schedule+0x10/0x10 [ 527.124300][ C1] ? __pfx_lock_release+0x10/0x10 [ 527.129329][ C1] ? __asan_memset+0x23/0x50 [ 527.133931][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 527.139735][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 527.146067][ C1] ? schedule+0x90/0x320 [ 527.150314][ C1] schedule+0x14b/0x320 [ 527.154487][ C1] schedule_timeout+0x1be/0x310 [ 527.159340][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 527.164717][ C1] ? __pfx_process_timeout+0x10/0x10 [ 527.170028][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.175655][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 527.181205][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 527.186058][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 527.191255][ C1] ? rcu_gp_init+0x1256/0x1630 [ 527.196021][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 527.200955][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 527.207019][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 527.212302][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 527.218192][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.223843][ C1] ? finish_swait+0xd4/0x1e0 [ 527.228437][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 527.233049][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 527.238245][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 527.244137][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.249769][ C1] ? __kthread_parkme+0x169/0x1d0 [ 527.254991][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 527.260201][ C1] kthread+0x2f2/0x390 [ 527.264292][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 527.269487][ C1] ? __pfx_kthread+0x10/0x10 [ 527.274089][ C1] ret_from_fork+0x4d/0x80 [ 527.278505][ C1] ? __pfx_kthread+0x10/0x10 [ 527.283087][ C1] ret_from_fork_asm+0x1a/0x30 [ 527.287864][ C1] [ 527.290872][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 527.297181][ C1] Sending NMI from CPU 1 to CPUs 0: [ 527.302397][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30