last executing test programs: 13m46.404202864s ago: executing program 32 (id=605): r0 = syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x3000002, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c66696c655f756d61736b3d30303030303030303030303030303030303030303030312c696f636861727365743d6d6163726f6d616e2c706172743d3078303030303030303030303030613565662c63726561746f723da0a54db32c706172743d3078303030303030303030303030306666662c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',codepage=macinuit,dir_umask=0000000000000codepage=cp737,func=POLICY_CHECK,\x00'/87], 0x1, 0x2f2, &(0x7f00000006c0)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000600)=""/54, 0x36) socket$inet(0x2, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff010000697f000000000000000000010000000032000000ff020400000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000060001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) socket$netlink(0x10, 0x3, 0x9) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x4000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0xc, &(0x7f00000000c0)=0x7e6, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r5, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00008af000/0x3000)=nil, 0x3000, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1c009, &(0x7f00000000c0)=ANY=[], 0x5d, 0x219, &(0x7f0000000200)="$eJzs3D1v00Acx/Gf40BIQTyKBzFVQkIsJNBWqrLRhY03gMRQtaGqcKE0LI2QoG+CjYGViZfAO2FlaAc2Jg6dfaGO4+KLQ5IKfz9SG8e+n//ntmf7GiUCUFmP4u+Bzrjnxph3i5KePpFUm2vXAEyZcY+/DIDqCRn6QEUdrYXx9f9rIH378Xbj0H2d87x/OFpLJgl2/nCYyjdPCjzL5A+C+PF2fTi/IOn8SLg+ev/yKcnfzdS/kFP6Y17/Xf2FTL5RcNzH+eT4790Zzl+UdEnSZUlXJF2VdE2Kd3tdbkOq/mam/q1k84FnNwAAAAAA+Cs7+2wNnvhO+rP5lk/LB7lr7ez5+XbUzd/qoZbkH3o1Hj3As67+Usnyg/xypk+F3AuuDZdvbbyKNkv2ASirlh7/xUYGkP/4V+6/s8IJx389zn8omQaqrbfff7EeRd29mS1I46bspbJ80eZg4Xth4892QT+TV0am/9MYnEztmkWfVOAaz+z3peI27wvaNLXXMx77mfnC68fJ3dsUStiLUnpNf9IdBtlxWh8aRF9Sf0hRZMLe7j84LrtDE/45UYTzODsBmKb2m53ddm+/f397Z32ru9V9ubLa6ayuLC912vFteXuiyTmA0+z4oj/vngAAAAAAAAAAAAAAgLJuSLo5fuzEj/cAAAAAcHqN/8agxthvJ5r3MQIAAAAAAAAAAAAA8L/7HQAA//+bqT3d") mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x10f4c2a, 0x0) mmap$usbmon(&(0x7f0000a35000/0x2000)=nil, 0x2000, 0x2000004, 0x20010, r1, 0x200) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 13m41.396469007s ago: executing program 33 (id=630): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x1000004, 0x40010, r0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 10m23.31238464s ago: executing program 34 (id=1248): r0 = socket$netlink(0x10, 0x3, 0xb) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r2) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)={0x10, 0x3b, 0x300, 0x70bd27, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}], 0x20, 0x30000814}, 0x4004044) 9m52.163556346s ago: executing program 35 (id=1364): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000300)={0x0, 0x30, 0x10, "a2811dad8af7004157e38b1ca8e772d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 9m43.806836014s ago: executing program 36 (id=1393): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800300000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), 0x0}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 9m38.560575231s ago: executing program 37 (id=1408): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000240)) 9m31.483249644s ago: executing program 38 (id=1422): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e6c733d6d61636963656c616e642c6e6f626172726965722c6e6f626172726965722c005f7b8db67a9956eaaa3dfc8e08ae68687aefcbb557d8339ee96abc3e75c2f51851dd80d3623eec4e2860287a38fe460e4280700685a84e7e8dede5e234a02e1f9fdafdac45432d06ced4b9e09e6e80559399d49f047f84834f44603988cebf80356efe00450322b76f99c7f687cf22e6e3226f8bd9ac02a7b4d13f5ad1c43c789857ad907c1acb521cf21a517cff05cac351464fdd5db7882017e7979aa663ed35ccc6f13be23bca3158d6d4c1"], 0x1, 0x601, &(0x7f0000000580)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f0000000000), &(0x7f0000000380)=ANY=[], 0x841, 0x0) 9m26.051601128s ago: executing program 39 (id=1436): pipe2$9p(&(0x7f0000000240), 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r1, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") syz_open_procfs(0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcd) chdir(0x0) listen(0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r3, &(0x7f0000003a00)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x3, @private1, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x1}], 0x1}}], 0x1, 0x4c040) 8m50.324077376s ago: executing program 40 (id=1498): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'rose0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000001140)) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 8m46.505440572s ago: executing program 41 (id=1502): r0 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0205647, &(0x7f0000000000)=0x2) syz_open_procfs(0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3m9.897000328s ago: executing program 4 (id=2933): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='snd_soc_dapm_walk_done\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x20000c2, &(0x7f0000003000), 0x1, 0x460, &(0x7f0000000440)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804000, &(0x7f0000000040)={[{@errors_remount}, {@noauto_da_alloc}, {@delalloc}, {@nobh}, {@dioread_lock}]}, 0x3, 0x4c0, &(0x7f0000000540)="$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") r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000900)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xff35) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @loopback}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x28}}, 0x8000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000000)={0x5, 0x2, 0x2}) 3m9.288259736s ago: executing program 4 (id=2939): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 3m9.047471883s ago: executing program 4 (id=2940): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4004810) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) 3m7.989801523s ago: executing program 4 (id=2942): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000007"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m7.900397957s ago: executing program 4 (id=2943): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r2}, './file0\x00'}) 3m7.785365518s ago: executing program 4 (id=2945): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$6lowpan_enable(r0, &(0x7f0000000040)='0', 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x48400) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x3) 3m7.286279714s ago: executing program 7 (id=2950): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, 0x0, 0x0, 0x0, 0x0) 3m7.23741007s ago: executing program 7 (id=2951): r0 = socket(0x200000000000011, 0x2, 0x80000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000980)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$packet(r0, &(0x7f0000000340)={0x11, 0x0, r1, 0x1, 0xfd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 3m7.133474247s ago: executing program 7 (id=2952): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0xf8}) 3m7.004032094s ago: executing program 7 (id=2954): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4004810) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) 3m4.559239623s ago: executing program 7 (id=2958): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r2}, './file0\x00'}) 3m3.785200262s ago: executing program 7 (id=2960): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c0022803400008008000300000000000800050000000000080002000000000008000300000000000800020000000000080004000000000044000080080004000000000008000700000000000800060000000000080005000000000008000100000000000800020000000000080003"], 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f00002bf000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) 3m3.567836313s ago: executing program 0 (id=2961): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x46) 3m3.403895116s ago: executing program 0 (id=2962): eventfd(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x220901) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x5608, 0x3) mprotect(&(0x7f0000008000/0x11000)=nil, 0x11000, 0x100000c) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone3(0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280060002003000"], 0x5c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) 3m0.156854238s ago: executing program 42 (id=2913): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028004001200060003001c00000006000e"], 0x48}}, 0x0) 3m0.151894711s ago: executing program 0 (id=2968): socket$packet(0x11, 0x3, 0x300) syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x2) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m59.913431726s ago: executing program 0 (id=2970): r0 = socket(0x200000100000011, 0x3, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x10, r2, 0x1, 0x0, 0x6, @random="b60d20440cdd"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="340000000200000100ffff8000000000d96e6c8d5e850800"], 0x34}], 0x1}, 0x0) 2m59.773088618s ago: executing program 0 (id=2972): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r2}, './file0\x00'}) 2m59.596176508s ago: executing program 0 (id=2973): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {0x0}, {&(0x7f0000000240)='\x00'/10, 0xa}], 0x3) 2m57.008669196s ago: executing program 2 (id=2979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x1, 0x22, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, {{0x4e23, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x82, 0x5ef, 0x0, 0x3}}}}, 0x36) 2m55.965389361s ago: executing program 2 (id=2980): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x8}, 0x1c) mount$cgroup2(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x8008, &(0x7f0000000340)=ANY=[@ANYBLOB="b63fb1831e66f9d129fab3c56debb1aeefa2ed60dc656da192cdeeb15f085e8e476121ce4a482810f097b365924bdaf7b9a4ce5f2d370600c5b1d86273557a0a3bd547b6d685a9311c61536d69a597b9172dadf14657855d3f10942c57c0bad3c66a61ec3eddae3b11ea0567a7388a65594ef7a5b7b5d32846141c04b7"]) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/106, 0x6a}], 0x1}, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 2m54.966845672s ago: executing program 43 (id=2930): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x30001845, 0x0, 0x0) 2m54.94273813s ago: executing program 2 (id=2982): execve(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 2m54.779236121s ago: executing program 2 (id=2983): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="ff", 0xa800}], 0x1, 0x5415, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f00000025c0)=ANY=[@ANYRESDEC=r0], 0x0, 0xfffffe9a, 0x0, 0x1, 0x3, 0x10000, @value=r1}, 0x28) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000100), 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r4, 0x404c4701, 0x20000000) 2m53.772711832s ago: executing program 2 (id=2984): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r2}, './file0\x00'}) 2m53.274371145s ago: executing program 2 (id=2985): r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0xac0, 0x141800) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000018c0)={0x1, 0x0, {0xe7a, 0x6, 0x3012, 0x1, 0xa, 0x8, 0x2, 0x6}}) 2m52.60424246s ago: executing program 44 (id=2945): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$6lowpan_enable(r0, &(0x7f0000000040)='0', 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x48400) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x3) 2m48.591253045s ago: executing program 45 (id=2960): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c0022803400008008000300000000000800050000000000080002000000000008000300000000000800020000000000080004000000000044000080080004000000000008000700000000000800060000000000080005000000000008000100000000000800020000000000080003"], 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f00002bf000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) 2m44.114752848s ago: executing program 46 (id=2973): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {0x0}, {&(0x7f0000000240)='\x00'/10, 0xa}], 0x3) 2m37.828353205s ago: executing program 47 (id=2985): r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0xac0, 0x141800) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000018c0)={0x1, 0x0, {0xe7a, 0x6, 0x3012, 0x1, 0xa, 0x8, 0x2, 0x6}}) 19.64093717s ago: executing program 9 (id=3666): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @time={0x8, 0x100}, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x6, 0x3, 0x79, 0x3, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0x7, 0x1}}], 0x38) r1 = syz_io_uring_setup(0xce, &(0x7f0000000140)={0x0, 0xaee3, 0x1000, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4b, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) 18.292023949s ago: executing program 9 (id=3671): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$kcm(0x29, 0x2, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000002000000008000300", @ANYRES32=r2], 0x1c}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000001080)={@local, @link_local, @val, {@ipv4={0x88a8, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @remote}, {0x300, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x804, 0x3, "7fe77f731db8aba73f3509d6e7118104224a45fe99a8fbc5252b1170535ac6fb", "c196168f72696bf9ad5b6dc51a703690", {"aa72f4bd15c2580cdc3d66fdf23cb5a3", "a02ad29d4f0c9415f88c3599baddc6ee"}}}}}}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x18, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) 17.843055852s ago: executing program 9 (id=3676): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000200)='u', 0x1, 0x20000840, &(0x7f0000000040)={0xa, 0x0, 0x7, @local, 0x13}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1, 0x0, 0x0) 16.779459193s ago: executing program 9 (id=3682): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="b8", 0x1}, {&(0x7f0000000180)="f243f6e2581899b557b3cb04aadcabd0c9d8adbb1c69bf3e133c38c1504961876f0441ef719d3ef1aab7dfb8138c12e5aca2da3ac98a6fe451202fcef2ed4b5da84ed5b0", 0x44}], 0x2, 0x401, 0xd) syz_usb_disconnect(r0) 13.686472472s ago: executing program 9 (id=3704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) 11.768573414s ago: executing program 1 (id=3710): mkdir(0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x6}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010000c"], 0x24}], 0x1}, 0x0) 9.563428425s ago: executing program 8 (id=3722): keyctl$clear(0x3, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000140)=""/123, 0x7b) 9.437172999s ago: executing program 8 (id=3723): eventfd(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x220901) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x5608, 0x3) mprotect(&(0x7f0000008000/0x11000)=nil, 0x11000, 0x100000c) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone3(0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_disconnect(r5) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) 6.146930977s ago: executing program 8 (id=3731): unshare(0x2c020400) r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$addseals(r0, 0x409, 0x95fb7d655d3442f3) 6.074198293s ago: executing program 8 (id=3732): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x6) listen(r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close_range(r0, 0xffffffffffffffff, 0x0) 5.666634493s ago: executing program 8 (id=3733): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0xfffffffffffffca6}}, 0x1006) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00') lseek(r2, 0x4, 0x1) getdents(r2, 0x0, 0x0) 4.870888156s ago: executing program 9 (id=3735): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file1\x00', 0x10080, &(0x7f0000000000)=ANY=[], 0xfd, 0x5fcc, &(0x7f00000066c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$zero(0xffffffffffffff9c, 0x0, 0x240100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000380)={0x2, @vbi={0x97, 0x3, 0x101, 0x56544943, [0x6, 0x3], [0x2, 0x10000], 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/52, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000009000000000a20000000000a01030000000000000000010000000900010073797a300000000064000000030a01040000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f746f5f626174616476000900010073797a300000000010000880090001"], 0xac}}, 0x0) 4.840589241s ago: executing program 8 (id=3736): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x0, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a00)={0x6703c7331c95c4c3, 0x0, 0x5b, "94"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000d00)={0x0, 0x8, 0x2, "9c21"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.532202407s ago: executing program 6 (id=3739): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, 0x0, 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r2) tee(r0, r3, 0x60000000000, 0x0) 4.510924177s ago: executing program 1 (id=3740): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001380)={0x50, 0x0, &(0x7f0000001200)=[@register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x50, 0x0, &(0x7f00000012c0)="251c2874d563c6525ea35a49e4784c86fa1110d42c01aea3c1dcd464584ab07c04c4e5cdbc9b0a9bb2ba79600823bbabc7643afb5286c95f1a60346dabc42f5b5c47eac174f8182c3b073263ce9cd56a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000014c0)={0x4, 0x0, &(0x7f0000001440)=[@register_looper], 0x0, 0x0, 0x0}) 4.353290915s ago: executing program 3 (id=3742): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRES16], 0x0) 4.048146862s ago: executing program 1 (id=3743): r0 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x488000) fallocate(0xffffffffffffffff, 0x3, 0x5, 0x4000200000087f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) process_vm_readv(r2, &(0x7f0000000780)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f0000000500)=""/213, 0xd5}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000700)=""/80, 0x50}], 0x6, &(0x7f0000001cc0)=[{&(0x7f0000000800)=""/77, 0x4d}, {&(0x7f0000000880)=""/121, 0x79}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6, 0x0) sched_setscheduler(r1, 0x2, 0x0) fcntl$setsig(r0, 0xa, 0x3b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0), 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 3.056122267s ago: executing program 1 (id=3745): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r3 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000002c0)={0x28, 0x4, 0x0, {0x0, 0xfffffffffffffff7}}, 0x28) sendfile(r4, r3, 0x0, 0x4000000053d2) 2.992150072s ago: executing program 6 (id=3746): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x600, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.913890916s ago: executing program 5 (id=3747): futex(0xfffffffffffffffc, 0x1, 0x2, 0x0, 0x0, 0x1) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10, 0x13, 0xffffffffffffffff, 0x550e000) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) fsopen(&(0x7f0000000080)='binder\x00', 0x0) syz_clone(0x8100, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x7) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) read$dsp(r1, &(0x7f00000002c0)=""/59, 0x3b) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 2.75552365s ago: executing program 6 (id=3748): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x34, r2, 0x1, 0xff1f0000, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) 2.536018639s ago: executing program 1 (id=3749): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$kcm(0x29, 0x2, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000002000000008000300", @ANYRES32=r2], 0x1c}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000001080)={@local, @link_local, @val, {@ipv4={0x88a8, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @remote}, {0x300, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x804, 0x3, "7fe77f731db8aba73f3509d6e7118104224a45fe99a8fbc5252b1170535ac6fb", "c196168f72696bf9ad5b6dc51a703690", {"aa72f4bd15c2580cdc3d66fdf23cb5a3", "a02ad29d4f0c9415f88c3599baddc6ee"}}}}}}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x18, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x10) 2.28308135s ago: executing program 6 (id=3750): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) write$binfmt_elf64(r2, &(0x7f0000001700)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0xd1, 0x6, 0x8, 0x2, 0x2, 0x6, 0x9, 0x277, 0x40, 0x2b6, 0xffff, 0xc, 0x38, 0x1, 0x2, 0x9db2}, [{0x6474e551, 0x7000000, 0xa29, 0x4912, 0xffffffffffffffff, 0x6, 0x6, 0x3}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x878) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000001600)="09268a927f1f6588b967481241ba7860fcfaf65ac635ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcec8044ab4ea6f7ae55d88fecf90b1a7511bf746b152124eb38d6c7a207112eb1bf554bc070626792d394df5adf7355fa5f8deb9db3da042d8803f5c0ca3642f22e4c896b5f1d4e16556e57cc2f36b50a00000063cf9528e90000000000581c7eeb130aac1cfd109c3e794fe91b5b473f244eeac47acbd809ca44d2ec59bfd29d8284c110c12383451ca080f21202c313d9e1433001c37c0cc36aa2feb07c4448ab65eb0e869e4eac424e301534d65c42cb556f46102dc89a4f3fd1af3b72abc4be573c7145547306d1", 0xf7, 0x11, 0x0, 0x0) 2.249912223s ago: executing program 5 (id=3751): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x44b, 0x70bd28, 0x25dfdbfe, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0xff}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'dvmrp1\x00'}]}, 0x50}}, 0x84) 2.20137982s ago: executing program 1 (id=3752): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="b8", 0x1}, {&(0x7f0000000180)="f243f6e2581899b557b3cb04aadcabd0c9d8adbb1c69bf3e133c38c1504961876f0441ef719d3ef1aab7dfb8138c12e5aca2da3ac98a6fe451202fcef2ed4b5da84ed5b0", 0x44}], 0x2, 0x401, 0xd) syz_usb_disconnect(r0) 2.168933232s ago: executing program 6 (id=3753): syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b"], 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e"], 0x8) 1.871972192s ago: executing program 5 (id=3754): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40}, {0x6}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) 1.871086246s ago: executing program 3 (id=3755): r0 = syz_open_dev$vim2m(0x0, 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x1, 0x0, "ff3a55f32eb68900d10052d0002000000000000400f3f7ffffffffffff00ffe8", 0x31435641}) 1.632228086s ago: executing program 3 (id=3756): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @time={0x8, 0x100}, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x6, 0x3, 0x79, 0x3, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0x7, 0x1}}], 0x38) r1 = syz_io_uring_setup(0xce, &(0x7f0000000140)={0x0, 0xaee3, 0x1000, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4b, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) 1.626799451s ago: executing program 5 (id=3757): r0 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x488000) fallocate(0xffffffffffffffff, 0x3, 0x5, 0x4000200000087f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) process_vm_readv(r2, &(0x7f0000000780)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f0000000500)=""/213, 0xd5}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000700)=""/80, 0x50}], 0x6, &(0x7f0000001cc0)=[{&(0x7f0000000800)=""/77, 0x4d}, {&(0x7f0000000880)=""/121, 0x79}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6, 0x0) sched_setscheduler(r1, 0x2, 0x0) fcntl$setsig(r0, 0xa, 0x3b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0), 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 1.407780801s ago: executing program 3 (id=3758): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @loopback, 0x1}, {0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, r1}}, 0x48) 528.074755ms ago: executing program 5 (id=3759): unshare(0x22020600) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0xa) 385.836934ms ago: executing program 3 (id=3760): pipe(0x0) r0 = epoll_create(0x5) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="83068e", 0x3}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000a00)) write(0xffffffffffffffff, &(0x7f0000001100)="94", 0x1) 273.410426ms ago: executing program 5 (id=3761): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c09, r0) 270.277618ms ago: executing program 6 (id=3762): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=3763): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x95b0, 0x400}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="8b", 0x1}], 0x1}}], 0x2, 0x40000) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.500393][T17829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.589325][T17829] hsr_slave_0: entered promiscuous mode [ 939.596646][T17829] hsr_slave_1: entered promiscuous mode [ 939.613980][T17829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 939.622100][T17829] Cannot create hsr debugfs directory [ 940.390829][ T54] Bluetooth: hci1: command tx timeout [ 940.416728][T17829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.435359][T17829] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.456507][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.463741][ T3445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.479810][T13114] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.486980][T13114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.897393][T17829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.180053][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 942.194869][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 942.209004][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 942.217173][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 942.225016][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 942.235234][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 942.367878][T17878] »»»»»» speed is unknown, defaulting to 1000 [ 942.428885][ T3445] bridge_slave_1: left allmulticast mode [ 942.435266][ T3445] bridge_slave_1: left promiscuous mode [ 942.449684][ T3445] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.459175][ T3445] bridge_slave_0: left allmulticast mode [ 942.470735][ T5838] Bluetooth: hci1: command tx timeout [ 942.472770][ T3445] bridge_slave_0: left promiscuous mode [ 942.486876][ T3445] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.904483][ T3445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.916575][ T3445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.929062][ T3445] bond0 (unregistering): Released all slaves [ 942.948144][T17878] »»»»»» speed is unknown, defaulting to 1000 [ 943.077413][T17829] veth0_vlan: entered promiscuous mode [ 943.280781][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 943.291744][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 943.298889][T17829] veth1_vlan: entered promiscuous mode [ 943.311887][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 943.357039][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 943.374146][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 943.391978][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 943.552782][T17885] »»»»»» speed is unknown, defaulting to 1000 [ 943.589040][T17829] veth0_macvtap: entered promiscuous mode [ 943.609520][T17829] veth1_macvtap: entered promiscuous mode [ 943.636302][T17878] chnl_net:caif_netlink_parms(): no params data found [ 943.717841][T17829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.734588][T17829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.746745][T17829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.757848][T17829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.769986][T17829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.780520][T17829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.790466][T17829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.801735][T17829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.812298][T17829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.823052][T17829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.834897][T17829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.847316][T17885] »»»»»» speed is unknown, defaulting to 1000 [ 943.921651][T17829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.940376][T17829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.951821][T17829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.962335][T17829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.972237][T17829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.982756][T17829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.992688][T17829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.003363][T17829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.013706][T17829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.024265][T17829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.035753][T17829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.145667][T17878] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.157379][T17878] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.168609][T17878] bridge_slave_0: entered allmulticast mode [ 944.179422][T17878] bridge_slave_0: entered promiscuous mode [ 944.192121][T17878] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.199246][T17878] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.207297][T17878] bridge_slave_1: entered allmulticast mode [ 944.214836][T17878] bridge_slave_1: entered promiscuous mode [ 944.274613][T17878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.311673][ T54] Bluetooth: hci3: command tx timeout [ 944.323782][T17878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.494637][ T3445] hsr_slave_0: left promiscuous mode [ 944.503999][ T3445] hsr_slave_1: left promiscuous mode [ 944.510090][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 944.518064][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.533441][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.541098][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.550486][ T54] Bluetooth: hci1: command tx timeout [ 944.568439][ T3445] veth1_macvtap: left promiscuous mode [ 944.574330][ T3445] veth0_macvtap: left promiscuous mode [ 944.579946][ T3445] veth1_vlan: left promiscuous mode [ 944.585434][ T3445] veth0_vlan: left promiscuous mode [ 945.059160][ T3445] team0 (unregistering): Port device team_slave_1 removed [ 945.122086][ T3445] team0 (unregistering): Port device team_slave_0 removed [ 945.435462][ T54] Bluetooth: hci4: command tx timeout [ 945.612085][T17878] team0: Port device team_slave_0 added [ 945.653024][T17878] team0: Port device team_slave_1 added [ 945.772101][T17878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.779092][T17878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.806053][T17878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.818545][T17878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.825577][T17878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.852164][T17878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.853256][T13100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.886986][T13100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.997967][T17878] hsr_slave_0: entered promiscuous mode [ 946.005964][T17878] hsr_slave_1: entered promiscuous mode [ 946.017116][T13114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.030416][T17885] chnl_net:caif_netlink_parms(): no params data found [ 946.046924][T13114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.174385][T17900] loop8: detected capacity change from 0 to 512 [ 946.242511][T17885] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.249986][T17885] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.258140][T17885] bridge_slave_0: entered allmulticast mode [ 946.274539][T17885] bridge_slave_0: entered promiscuous mode [ 946.275399][T17900] EXT4-fs (loop8): failed to open journal device unknown-block(0,0) -6 [ 946.327518][T17900] loop8: detected capacity change from 0 to 512 [ 946.336404][T17900] EXT4-fs: Ignoring removed nobh option [ 946.366360][T17900] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 946.372431][T17885] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.379461][T17900] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 946.394969][T17885] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.398143][ T54] Bluetooth: hci3: command tx timeout [ 946.415126][T17885] bridge_slave_1: entered allmulticast mode [ 946.423835][T17900] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 946.432072][T17885] bridge_slave_1: entered promiscuous mode [ 946.475857][T17885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.489774][T17885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.526876][T17829] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 947.421902][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 947.456859][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 947.481757][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 947.489644][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 947.497595][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 947.507295][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 947.514577][T17887] Bluetooth: hci4: command tx timeout [ 947.637400][ T3445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.706967][ T3445] bond_slave_0: left promiscuous mode [ 947.850108][ T3445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.862679][ T3445] bond_slave_1: left promiscuous mode [ 947.880651][ T3445] bond0 (unregistering): Released all slaves [ 948.081328][T17885] team0: Port device team_slave_0 added [ 948.095241][T17885] team0: Port device team_slave_1 added [ 948.117739][ T3445] tipc: Disabling bearer [ 948.123470][ T3445] tipc: Left network mode [ 948.187154][T17885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.194947][T17885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.206628][T17921] loop8: detected capacity change from 0 to 1024 [ 948.222432][T17885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.256305][T17921] hfsplus: Unknown parameter ' [ 948.256305][T17921] ' [ 948.281102][T17919] loop8: detected capacity change from 0 to 512 [ 948.290375][T17919] EXT4-fs: Ignoring removed bh option [ 948.298027][T17919] ext4: Unknown parameter 'smackfshat' [ 948.320698][T17885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.327865][T17885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.354648][T17885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.409567][T17910] »»»»»» speed is unknown, defaulting to 1000 [ 948.476290][ T5838] Bluetooth: hci3: command tx timeout [ 948.918171][T17921] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 948.997009][T17885] hsr_slave_0: entered promiscuous mode [ 949.007369][T17885] hsr_slave_1: entered promiscuous mode [ 949.020988][T17885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 949.028746][T17885] Cannot create hsr debugfs directory [ 949.054638][T17910] »»»»»» speed is unknown, defaulting to 1000 [ 949.523270][T17878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.604981][ T5838] Bluetooth: hci4: command tx timeout [ 949.621300][T17935] overlayfs: missing 'lowerdir' [ 950.005174][ T54] Bluetooth: hci0: command tx timeout [ 950.094753][ T3445] hsr_slave_0: left promiscuous mode [ 950.101721][ T3445] hsr_slave_1: left promiscuous mode [ 950.116207][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 950.125018][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.137947][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 950.145495][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.269909][ T3445] veth1_macvtap: left promiscuous mode [ 950.275552][ T3445] veth0_macvtap: left promiscuous mode [ 950.281558][ T3445] veth1_vlan: left promiscuous mode [ 950.286897][ T3445] veth0_vlan: left promiscuous mode [ 950.550961][ T54] Bluetooth: hci3: command tx timeout [ 951.140071][ T3445] team0 (unregistering): Port device team_slave_1 removed [ 951.210802][ T3445] team0 (unregistering): Port device team_slave_0 removed [ 951.686385][ T54] Bluetooth: hci4: command tx timeout [ 952.186916][ T54] Bluetooth: hci0: command tx timeout [ 952.620429][T17955] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 952.741757][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 952.779920][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 952.800158][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 952.825127][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 952.842872][ T5838] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 952.853336][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 953.076654][T17910] chnl_net:caif_netlink_parms(): no params data found [ 953.165672][T17959] »»»»»» speed is unknown, defaulting to 1000 [ 953.182956][T17966] loop8: detected capacity change from 0 to 1024 [ 953.202878][T17878] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.213786][T17966] hfsplus: Unknown parameter ' [ 953.213786][T17966] ' [ 953.263515][T17963] loop8: detected capacity change from 0 to 512 [ 953.271267][T17963] EXT4-fs: Ignoring removed bh option [ 953.277199][T17963] ext4: Unknown parameter 'smackfshat' [ 953.393779][T13114] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.401165][T13114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.704263][T17970] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 953.819652][T17910] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.838057][T17910] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.847714][T17910] bridge_slave_0: entered allmulticast mode [ 953.858193][T17910] bridge_slave_0: entered promiscuous mode [ 953.879342][T13098] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.886511][T13098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.926654][T17910] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.934107][T17959] »»»»»» speed is unknown, defaulting to 1000 [ 953.942389][T17910] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.950087][T17910] bridge_slave_1: entered allmulticast mode [ 953.964258][T17910] bridge_slave_1: entered promiscuous mode [ 954.057484][T17910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.074079][T17910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.183649][T17910] team0: Port device team_slave_0 added [ 954.226611][ T3445] bridge_slave_1: left allmulticast mode [ 954.232864][ T54] Bluetooth: hci0: command tx timeout [ 954.240010][ T3445] bridge_slave_1: left promiscuous mode [ 954.246468][ T3445] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.258130][ T3445] bridge_slave_0: left allmulticast mode [ 954.264008][ T3445] bridge_slave_0: left promiscuous mode [ 954.270074][ T3445] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.305182][ T3445] bridge_slave_1: left allmulticast mode [ 954.318880][ T3445] bridge_slave_1: left promiscuous mode [ 954.326050][ T3445] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.345233][ T3445] bridge_slave_0: left allmulticast mode [ 954.357635][ T3445] bridge_slave_0: left promiscuous mode [ 954.365859][ T3445] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.614556][T17977] overlayfs: missing 'lowerdir' [ 955.174655][ T54] Bluetooth: hci5: command tx timeout [ 956.010179][ T3445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.033469][ T3445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.048933][ T3445] bond0 (unregistering): Released all slaves [ 956.067660][ T3445] bond1 (unregistering): Released all slaves [ 956.094680][ T3445] bond2 (unregistering): Released all slaves [ 956.310422][ T54] Bluetooth: hci0: command tx timeout [ 956.324426][ T3445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.354583][ T3445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.373382][ T3445] bond0 (unregistering): Released all slaves [ 956.514281][ T3445] bond1 (unregistering): Released all slaves [ 956.526405][ T3445] bond2 (unregistering): Released all slaves [ 956.538939][ T3445] bond3 (unregistering): Released all slaves [ 956.558195][T17910] team0: Port device team_slave_1 added [ 956.685251][T17910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.703781][T17910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.768691][T17910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.904885][T17910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.920374][T17910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.003563][T17910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.328523][ T54] Bluetooth: hci5: command tx timeout [ 957.961859][T17885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.979265][T17885] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.010462][T17885] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 958.020996][T17885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 958.098340][T12863] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.105552][T12863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.115188][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 958.126943][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 958.138015][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 958.149318][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 958.165945][ T5838] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 958.173400][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 958.191955][T12863] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.199138][T12863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.302172][T17910] hsr_slave_0: entered promiscuous mode [ 958.309617][T17910] hsr_slave_1: entered promiscuous mode [ 958.464065][T17910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 958.482079][T17910] Cannot create hsr debugfs directory [ 959.266324][T17878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.295331][T17959] chnl_net:caif_netlink_parms(): no params data found [ 959.348375][T17885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.441208][ T5838] Bluetooth: hci5: command tx timeout [ 959.546045][T18008] »»»»»» speed is unknown, defaulting to 1000 [ 960.017887][T18008] »»»»»» speed is unknown, defaulting to 1000 [ 960.061579][T17959] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.082548][T17959] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.089894][T17959] bridge_slave_0: entered allmulticast mode [ 960.115464][T17959] bridge_slave_0: entered promiscuous mode [ 960.202669][T17959] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.209892][T17959] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.217510][T17959] bridge_slave_1: entered allmulticast mode [ 960.229804][T17959] bridge_slave_1: entered promiscuous mode [ 960.240487][ T5838] Bluetooth: hci6: command tx timeout [ 960.949167][T17959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.295028][T17959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.408889][T17885] veth0_vlan: entered promiscuous mode [ 961.510767][ T5838] Bluetooth: hci5: command tx timeout [ 961.536767][T17959] team0: Port device team_slave_0 added [ 961.577840][T17878] veth0_vlan: entered promiscuous mode [ 961.641110][T17959] team0: Port device team_slave_1 added [ 961.744254][T17910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.760670][ T5935] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 961.769082][T17959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.776764][T17959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.802889][T17959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.815560][T17959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.822932][T17959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.850320][T17959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.872851][ T3445] hsr_slave_0: left promiscuous mode [ 961.878802][ T3445] hsr_slave_1: left promiscuous mode [ 961.890448][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 961.897887][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.906346][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 961.915159][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 961.927897][ T3445] hsr_slave_0: left promiscuous mode [ 961.940133][ T3445] hsr_slave_1: left promiscuous mode [ 961.946339][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 961.953936][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.962702][ T5935] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 961.972516][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 961.979937][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 961.987154][ T5935] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 961.997724][ T5935] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 962.012688][ T5935] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 962.023856][ T5935] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 962.036685][ T5935] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 962.046007][ T5935] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 962.054331][ T5935] usb 9-1: Product: syz [ 962.057076][ T3445] veth1_macvtap: left promiscuous mode [ 962.058489][ T5935] usb 9-1: Manufacturer: syz [ 962.069970][ T3445] veth0_macvtap: left promiscuous mode [ 962.074899][ T5935] cdc_wdm 9-1:1.0: skipping garbage [ 962.081756][ T3445] veth1_vlan: left promiscuous mode [ 962.087161][ T3445] veth0_vlan: left promiscuous mode [ 962.091169][ T5935] cdc_wdm 9-1:1.0: skipping garbage [ 962.098369][ T3445] veth1_macvtap: left promiscuous mode [ 962.104284][ T3445] veth0_macvtap: left promiscuous mode [ 962.105669][ T5935] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 962.109908][ T3445] veth1_vlan: left promiscuous mode [ 962.121492][ T3445] veth0_vlan: left promiscuous mode [ 962.128778][ T5935] cdc_wdm 9-1:1.0: Unknown control protocol [ 962.293079][ T8] usb 9-1: USB disconnect, device number 2 [ 962.310798][ T5838] Bluetooth: hci6: command tx timeout [ 962.331952][ T3445] infiniband sz1: set down [ 962.748127][ T3445] team0 (unregistering): Port device team_slave_1 removed [ 962.797004][ T3445] team0 (unregistering): Port device team_slave_0 removed [ 964.402110][ T5838] Bluetooth: hci6: command tx timeout [ 965.293973][ T3445] team0 (unregistering): Port device team_slave_1 removed [ 965.430127][ T3445] team0 (unregistering): Port device team_slave_0 removed [ 966.474662][ T5838] Bluetooth: hci6: command tx timeout [ 966.661020][ T11] smc: removing ib device sz1 [ 966.675999][T17885] veth1_vlan: entered promiscuous mode [ 966.775997][ T5935] »»»»»» speed is unknown, defaulting to 1000 [ 966.776022][ T5891] »»»»»» speed is unknown, defaulting to 1000 [ 966.783113][ T5935] infiniband syz2: ib_query_port failed (-19) [ 966.914487][T17885] veth0_macvtap: entered promiscuous mode [ 966.950541][T17878] veth1_vlan: entered promiscuous mode [ 967.171238][T18008] chnl_net:caif_netlink_parms(): no params data found [ 967.212636][T17910] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.252813][T17885] veth1_macvtap: entered promiscuous mode [ 967.418225][T17959] hsr_slave_0: entered promiscuous mode [ 967.462552][T17959] hsr_slave_1: entered promiscuous mode [ 967.471974][T17959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 967.480211][T17959] Cannot create hsr debugfs directory [ 967.610211][T17885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.630813][T17885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.646082][T17885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.660903][T17885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.693068][T17885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.717468][T17885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.760824][T17885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.800737][T17885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.830482][T17885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.845209][T17885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.983566][T13114] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.990919][T13114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.195103][T17878] veth0_macvtap: entered promiscuous mode [ 968.218403][T13114] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.225715][T13114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.375327][T17878] veth1_macvtap: entered promiscuous mode [ 968.613909][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.624474][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.637607][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.650071][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.664945][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.677329][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.689360][T17878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 968.811251][T18008] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.818409][T18008] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.828296][T18008] bridge_slave_0: entered allmulticast mode [ 968.850677][T18008] bridge_slave_0: entered promiscuous mode [ 968.889392][T18008] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.908643][T18008] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.931242][T18008] bridge_slave_1: entered allmulticast mode [ 968.939491][T18008] bridge_slave_1: entered promiscuous mode [ 968.956947][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.990933][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.000469][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.010310][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.028835][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.054149][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.072031][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.089433][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.101620][T17878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 969.290700][T18008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.320424][T13114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.328617][T13114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.339690][T18008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.354820][ T3445] IPVS: stop unused estimator thread 0... [ 969.419885][T17910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 969.457587][T18008] team0: Port device team_slave_0 added [ 969.500956][T18008] team0: Port device team_slave_1 added [ 969.586594][T18008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 969.604267][T18008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.645924][T18008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 969.727526][T18008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 969.749405][T18008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.795560][T18008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.044192][ T3445] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.064082][ T3445] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.208393][T18008] hsr_slave_0: entered promiscuous mode [ 970.228771][T18008] hsr_slave_1: entered promiscuous mode [ 970.240010][T18008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 970.250089][T18008] Cannot create hsr debugfs directory [ 970.320644][ T3445] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.331116][ T3445] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.357735][T18139] netlink: 'syz.8.3041': attribute type 12 has an invalid length. [ 970.476091][ T3445] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.487142][ T3445] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.539282][T13098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.557935][T13098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.628967][ T3445] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.642185][ T3445] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.904753][T17910] veth0_vlan: entered promiscuous mode [ 970.916913][T13098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.936050][T13098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.361252][T17910] veth1_vlan: entered promiscuous mode [ 971.947915][T17910] veth0_macvtap: entered promiscuous mode [ 971.995123][T17959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.046517][T17910] veth1_macvtap: entered promiscuous mode [ 972.147610][T17959] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.191712][T17910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.290395][T17910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.307713][T17910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.350394][T17910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.390494][T17910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.430428][T17910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.466089][T17910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.520547][T17910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.541675][T17910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 972.575171][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.582363][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.641440][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.648591][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.675769][ T3445] bridge_slave_1: left allmulticast mode [ 972.699305][ T3445] bridge_slave_1: left promiscuous mode [ 972.720632][ T3445] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.761131][ T3445] bridge_slave_0: left allmulticast mode [ 972.766839][ T3445] bridge_slave_0: left promiscuous mode [ 972.787587][ T3445] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.362391][T18182] fuse: Unknown parameter 'user_id00000000000000000000' [ 974.475467][ T3445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.500844][ T3445] bond_slave_0: left promiscuous mode [ 974.521393][ T3445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.546493][ T3445] bond_slave_1: left promiscuous mode [ 974.567453][ T3445] bond0 (unregistering): Released all slaves [ 974.601693][ T3445] bond1 (unregistering): Released all slaves [ 974.614615][ T3445] bond2 (unregistering): Released all slaves [ 974.631963][ T3445] bond3 (unregistering): Released all slaves [ 974.650137][T17910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.664213][T17910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.674887][T17910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.685549][T17910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.695718][T17910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.706762][T17910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.723981][T17910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.734513][T17910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.745708][T17910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.910995][ T3445] tipc: Disabling bearer [ 974.920868][ T3445] tipc: Left network mode [ 975.354653][T18008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.384809][T18189] netlink: 'syz.5.3051': attribute type 12 has an invalid length. [ 975.423453][T12863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.441780][T17959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 975.452598][T12863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.640623][ T5899] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 975.661370][T18008] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.841051][ T5899] usb 10-1: Using ep0 maxpacket: 32 [ 975.872374][ T5899] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 975.872792][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.888139][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 975.890327][ T5899] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 975.980751][ T5899] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 976.000504][ T5899] usb 10-1: config 1 has no interface number 0 [ 976.000513][ T3445] hsr_slave_0: left promiscuous mode [ 976.015002][ T3445] hsr_slave_1: left promiscuous mode [ 976.029935][ T5899] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 976.030011][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 976.057034][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.064857][ T5899] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 976.064917][ T5899] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 976.064947][ T5899] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.113161][ T5899] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 976.131152][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 976.138903][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.174116][ T3445] veth1_macvtap: left promiscuous mode [ 976.176810][T18208] loop5: detected capacity change from 0 to 1024 [ 976.179773][ T3445] veth0_macvtap: left promiscuous mode [ 976.202077][ T3445] veth1_vlan: left promiscuous mode [ 976.210753][ T3445] veth0_vlan: left promiscuous mode [ 976.317965][ T5899] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 976.776640][ T5899] usb 10-1: USB disconnect, device number 2 [ 976.786066][ T5899] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 976.868172][ T3445] team0 (unregistering): Port device team_slave_1 removed [ 976.910164][ T3445] team0 (unregistering): Port device team_slave_0 removed [ 977.388538][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.395762][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.504089][T13114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.590314][T13114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.224481][T18222] fuse: Bad value for 'fd' [ 978.273893][T17959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.295869][T18224] tipc: Started in network mode [ 978.303994][T18224] tipc: Node identity 7, cluster identity 4711 [ 978.335520][T18224] tipc: Node number set to 7 [ 978.913495][T17959] veth0_vlan: entered promiscuous mode [ 978.982255][T17959] veth1_vlan: entered promiscuous mode [ 979.024592][T18008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.080130][T17959] veth0_macvtap: entered promiscuous mode [ 979.102486][T17959] veth1_macvtap: entered promiscuous mode [ 979.156629][T17959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.187338][T17959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.218520][T17959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.244926][T17959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.263648][T17959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.285438][T17959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.299241][T17959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.323988][T17959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.352720][T17959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 979.411916][T17959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.446369][T17959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.477354][T17959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.488753][ T5891] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 979.517081][T17959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.547394][T17959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.559376][T17959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.569508][T17959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.580388][T17959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.592787][T17959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.640670][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 979.655832][ T5891] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 979.713818][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 979.758771][ T5891] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 979.768367][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.786447][ T5891] usb 6-1: Product: syz [ 979.809023][ T5891] usb 6-1: Manufacturer: syz [ 979.818912][ T5891] usb 6-1: SerialNumber: syz [ 979.854146][ T5891] usb 6-1: config 0 descriptor?? [ 979.865801][ T5891] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 979.900554][ T5891] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 979.951625][ T3445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.959464][ T3445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.114589][T12138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.115057][T18008] veth0_vlan: entered promiscuous mode [ 980.142618][T12138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.208224][T18008] veth1_vlan: entered promiscuous mode [ 980.346081][T18008] veth0_macvtap: entered promiscuous mode [ 980.408452][T18008] veth1_macvtap: entered promiscuous mode [ 980.474198][ T5891] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 980.484790][T18296] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2999'. [ 980.507106][T18008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.570752][ T5891] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 980.586197][T18008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.596186][T18008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.607327][T18008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.617753][T18008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.628723][T18008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.640117][T18008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.650925][T18008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.660950][T18008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.671564][T18008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.683395][T18008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.697098][T18008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.707797][T18008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.718589][T18008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.729902][T18008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.740067][T18008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.753703][T18008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.763705][T18008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.786155][T18008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.796178][T18008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.806771][T18008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.818766][T18008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.042937][T14843] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 981.087437][T18310] fuse: Bad value for 'fd' [ 981.105429][T13100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.129177][T13100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.181603][ T5891] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 981.200931][ T5891] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 981.230537][T14843] usb 10-1: Using ep0 maxpacket: 16 [ 981.238955][T14843] usb 10-1: config 0 has an invalid descriptor of length 142, skipping remainder of the config [ 981.250027][ T5891] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 981.259871][T14843] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 981.290621][ T5891] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 981.315074][ T5891] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 981.316094][T14843] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 148, changing to 11 [ 981.324736][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.375711][T14843] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 9388, setting to 1024 [ 981.395169][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.400755][ T5891] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 981.419633][T14843] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 981.466528][T14843] usb 10-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 981.480433][T14843] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.500756][T14843] usb 10-1: Product: syz [ 981.515224][T14843] usb 10-1: Manufacturer: syz [ 981.526526][T14843] usb 10-1: SerialNumber: syz [ 981.568622][T14843] usb 10-1: config 0 descriptor?? [ 981.592062][T18301] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 981.711690][T14843] rc_core: IR keymap rc-xbox-dvd not found [ 981.722808][ T5891] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 981.730157][T14843] Registered IR keymap rc-empty [ 981.752627][ T5891] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 981.781932][T14843] rc rc0: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 981.801465][ T5891] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 981.843482][T14843] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input32 [ 981.843769][ T5891] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 981.932757][ T5891] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 982.010542][ T5891] usb 6-1: USB disconnect, device number 12 [ 982.039004][T14843] usb 10-1: USB disconnect, device number 3 [ 982.045536][ C1] xbox_remote 10-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 982.075300][T18324] loop3: detected capacity change from 0 to 1024 [ 982.137678][T18324] hfsplus: Unknown parameter ' [ 982.137678][T18324] ' [ 982.256258][T18324] loop3: detected capacity change from 0 to 512 [ 982.280031][T18324] EXT4-fs: Ignoring removed bh option [ 982.290024][T18324] ext4: Unknown parameter 'smackfshat' [ 983.053178][T18329] netlink: 'syz.5.3082': attribute type 1 has an invalid length. [ 983.062608][T18329] netlink: 'syz.5.3082': attribute type 2 has an invalid length. [ 983.200949][T18321] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 984.910953][ T5838] Bluetooth: hci5: unknown advertising packet type: 0xaa [ 984.911026][ T5838] Bluetooth: hci5: unknown advertising packet type: 0xac [ 984.918378][ T5838] Bluetooth: hci5: Dropping invalid advertising data [ 984.932392][ T5838] Bluetooth: hci5: Malformed LE Event: 0x02 [ 985.613485][T18398] fuse: Bad value for 'fd' [ 988.790433][ T46] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 988.805818][ T5838] Bluetooth: hci0: unknown advertising packet type: 0xaa [ 988.805882][ T5838] Bluetooth: hci0: unknown advertising packet type: 0xac [ 988.814945][ T5838] Bluetooth: hci0: Dropping invalid advertising data [ 988.828945][ T5838] Bluetooth: hci0: Malformed LE Event: 0x02 [ 988.961916][ T46] usb 10-1: Using ep0 maxpacket: 32 [ 989.021664][T18463] fuse: Unknown parameter '0x0000000000000004' [ 989.031007][ T46] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.043824][ T46] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.070394][ T46] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 989.186697][ T46] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.489245][ T46] usb 10-1: config 0 descriptor?? [ 989.682778][ T46] hub 10-1:0.0: USB hub found [ 989.912078][ T46] hub 10-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 990.737880][ T46] usbhid 10-1:0.0: can't add hid device: -32 [ 991.020948][ T46] usbhid 10-1:0.0: probe with driver usbhid failed with error -32 [ 992.321382][T14843] usb 10-1: USB disconnect, device number 4 [ 992.468762][T18504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3123'. [ 992.508888][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.521939][ T5838] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 992.531630][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: kworker/u9:4 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 992.542513][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 992.552598][ T5838] Workqueue: hci0 hci_rx_work [ 992.557334][ T5838] Call Trace: [ 992.560637][ T5838] [ 992.563592][ T5838] dump_stack_lvl+0x241/0x360 [ 992.568316][ T5838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 992.573566][ T5838] ? __pfx__printk+0x10/0x10 [ 992.578192][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.583857][ T5838] ? __kmalloc_cache_noprof+0x243/0x390 [ 992.589430][ T5838] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 992.594737][ T5838] sysfs_create_dir_ns+0x2ce/0x3a0 [ 992.599866][ T5838] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 992.605505][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.611161][ T5838] kobject_add_internal+0x435/0x8d0 [ 992.616376][ T5838] kobject_add+0x152/0x220 [ 992.620806][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.626627][ T5838] ? do_raw_spin_unlock+0x13c/0x8b0 [ 992.631837][ T5838] ? device_add+0x3e7/0xbf0 [ 992.636527][ T5838] ? __pfx_kobject_add+0x10/0x10 [ 992.641477][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.647129][ T5838] ? _raw_spin_unlock+0x28/0x50 [ 992.651997][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.657648][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.663378][ T5838] ? get_device_parent+0x165/0x410 [ 992.668509][ T5838] device_add+0x4e5/0xbf0 [ 992.672858][ T5838] hci_conn_add_sysfs+0xe8/0x200 [ 992.677907][ T5838] le_conn_complete_evt+0xc9f/0x12e0 [ 992.683222][ T5838] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 992.688956][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.694605][ T5838] ? __mutex_unlock_slowpath+0x21e/0x790 [ 992.700279][ T5838] ? __pfx___mutex_lock+0x10/0x10 [ 992.705352][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.711010][ T5838] ? skb_pull_data+0x112/0x230 [ 992.715800][ T5838] hci_le_conn_complete_evt+0x18c/0x420 [ 992.721375][ T5838] hci_event_packet+0xa57/0x1540 [ 992.726429][ T5838] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 992.731842][ T5838] ? __pfx_hci_event_packet+0x10/0x10 [ 992.737281][ T5838] ? do_raw_spin_unlock+0x13c/0x8b0 [ 992.742548][ T5838] ? hci_send_to_monitor+0xd8/0x7f0 [ 992.747765][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.753418][ T5838] ? kcov_remote_start+0x97/0x7d0 [ 992.758461][ T5838] hci_rx_work+0x3f3/0xdb0 [ 992.762915][ T5838] ? process_scheduled_works+0x976/0x1840 [ 992.768681][ T5838] process_scheduled_works+0xa68/0x1840 [ 992.774292][ T5838] ? __pfx_process_scheduled_works+0x10/0x10 [ 992.780313][ T5838] ? assign_work+0x364/0x3d0 [ 992.784930][ T5838] worker_thread+0x870/0xd30 [ 992.789589][ T5838] ? __kthread_parkme+0x169/0x1d0 [ 992.794660][ T5838] ? __pfx_worker_thread+0x10/0x10 [ 992.799794][ T5838] kthread+0x2f2/0x390 [ 992.803925][ T5838] ? __pfx_worker_thread+0x10/0x10 [ 992.809066][ T5838] ? __pfx_kthread+0x10/0x10 [ 992.813678][ T5838] ret_from_fork+0x4d/0x80 [ 992.818108][ T5838] ? __pfx_kthread+0x10/0x10 [ 992.822718][ T5838] ret_from_fork_asm+0x1a/0x30 [ 992.827515][ T5838] [ 992.831931][ T5838] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 992.841882][ T46] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 992.847195][ T5838] Bluetooth: hci0: failed to register connection device [ 993.048350][ T46] usb 6-1: device descriptor read/64, error -71 [ 993.680648][ T5935] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 993.804469][T18524] netlink: 'syz.8.3129': attribute type 1 has an invalid length. [ 993.855860][T18528] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3127'. [ 993.884517][ T5935] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 993.893794][ T5935] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 993.924374][T18530] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3129'. [ 993.948368][T18532] fuse: Unknown parameter '0x0000000000000004' [ 993.949144][ T5935] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 994.003255][ T5935] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 994.046390][ T5935] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 994.084124][ T5935] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 994.098315][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 994.130898][ T5935] usb 4-1: Product: syz [ 994.142965][ T5935] usb 4-1: Manufacturer: syz [ 994.166828][ T5935] cdc_wdm 4-1:1.0: skipping garbage [ 994.180339][ T5935] cdc_wdm 4-1:1.0: skipping garbage [ 994.192169][ T5935] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 994.217200][ T5935] cdc_wdm 4-1:1.0: Unknown control protocol [ 994.545902][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 994.553149][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 994.562290][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 994.568915][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 994.576003][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 994.582659][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 994.590569][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 994.597197][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 994.605367][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 994.611988][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 994.618422][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 994.625123][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 994.631512][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 994.638152][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 994.645036][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 994.651650][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 994.658426][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 994.665037][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 994.671317][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 994.677926][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 994.690181][ T5891] usb 4-1: USB disconnect, device number 42 [ 994.690446][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 998.064085][T18600] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3140'. [ 998.076862][T18600] netlink: 'syz.1.3140': attribute type 1 has an invalid length. [ 998.380948][T18603] fuse: Unknown parameter '0x0000000000000004' [ 1000.319198][T18652] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (65) [ 1000.342503][T18655] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3163'. [ 1000.440332][ T5935] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1001.481975][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 1001.866978][T18688] usb usb8: usbfs: process 18688 (syz.8.3173) did not claim interface 0 before use [ 1002.312314][ T5935] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.324283][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1002.336003][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1002.345810][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1002.619156][ T54] Bluetooth: hci4: unknown advertising packet type: 0xaa [ 1002.619365][ T54] Bluetooth: hci4: unknown advertising packet type: 0xac [ 1002.628814][ T54] Bluetooth: hci4: Dropping invalid advertising data [ 1002.643235][ T54] Bluetooth: hci4: Malformed LE Event: 0x02 [ 1002.990375][ T5935] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1002.999515][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.020307][ T5935] usb 2-1: Product: syz [ 1003.024650][ T5935] usb 2-1: Manufacturer: syz [ 1003.029293][ T5935] usb 2-1: SerialNumber: syz [ 1003.193403][ T5935] usb 2-1: config 0 descriptor?? [ 1003.331163][ T5935] usb 2-1: can't set config #0, error -71 [ 1003.338279][ T5935] usb 2-1: USB disconnect, device number 8 [ 1003.347557][T18702] could not allocate digest TFM handle vmac(twofish-asm) [ 1003.994401][T18725] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3180'. [ 1005.362140][ T5892] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1005.806506][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.822258][ T5892] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1006.079130][ T54] Bluetooth: hci0: unknown advertising packet type: 0xaa [ 1006.079262][ T54] Bluetooth: hci0: unknown advertising packet type: 0xac [ 1006.089281][ T54] Bluetooth: hci0: Dropping invalid advertising data [ 1006.105499][ T54] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1006.344187][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.354501][ T5892] usb 4-1: config 0 descriptor?? [ 1006.378178][ T5892] pwc: Askey VC010 type 2 USB webcam detected. [ 1007.085801][ T5892] pwc: recv_control_msg error -71 req 02 val 2700 [ 1007.096760][ T5892] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1007.263650][ T5892] pwc: recv_control_msg error -71 req 04 val 1000 [ 1007.404535][ T5892] pwc: recv_control_msg error -71 req 04 val 1300 [ 1007.657407][ T5892] pwc: recv_control_msg error -71 req 04 val 1400 [ 1007.740818][ T5891] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1007.822852][ T5892] pwc: recv_control_msg error -71 req 02 val 2000 [ 1007.949434][ T5892] pwc: recv_control_msg error -71 req 02 val 2100 [ 1007.959267][ T5892] pwc: recv_control_msg error -71 req 04 val 1500 [ 1007.974081][ T5892] pwc: recv_control_msg error -71 req 02 val 2500 [ 1007.995926][ T5892] pwc: recv_control_msg error -71 req 02 val 2400 [ 1008.027054][ T5892] pwc: recv_control_msg error -71 req 02 val 2600 [ 1008.048406][ T5892] pwc: recv_control_msg error -71 req 02 val 2900 [ 1008.057566][T18804] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3208'. [ 1008.065478][ T5892] pwc: recv_control_msg error -71 req 02 val 2800 [ 1008.089020][ T5892] pwc: recv_control_msg error -71 req 04 val 1100 [ 1008.096949][ T5892] pwc: recv_control_msg error -71 req 04 val 1200 [ 1008.117870][ T5892] pwc: Registered as video103. [ 1008.124472][ T5892] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33 [ 1008.166915][ T5891] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1008.177111][ T5891] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1008.187132][ T5891] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1008.208920][ T5892] usb 4-1: USB disconnect, device number 43 [ 1008.265683][ T5891] usb 10-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1008.276038][ T5891] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.285771][ T5891] usb 10-1: Product: syz [ 1008.290123][ T5891] usb 10-1: Manufacturer: syz [ 1008.300053][ T5891] usb 10-1: SerialNumber: syz [ 1008.310483][ T46] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1008.326136][ T5891] usb 10-1: config 0 descriptor?? [ 1008.471450][ T46] usb 6-1: Using ep0 maxpacket: 32 [ 1008.597649][ T5892] usb 10-1: USB disconnect, device number 5 [ 1009.256617][ T54] Bluetooth: hci6: unknown advertising packet type: 0xaa [ 1009.256721][ T54] Bluetooth: hci6: unknown advertising packet type: 0xac [ 1009.264536][ T54] Bluetooth: hci6: Dropping invalid advertising data [ 1009.279909][ T54] Bluetooth: hci6: Malformed LE Event: 0x02 [ 1009.531537][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.542562][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.552650][ T46] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1009.561974][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.639449][T18824] loop8: detected capacity change from 0 to 32768 [ 1009.649838][ T46] usb 6-1: config 0 descriptor?? [ 1009.908836][ T46] hub 6-1:0.0: USB hub found [ 1009.914923][ T46] hub 6-1:0.0: 1 port detected [ 1010.032898][T18841] netlink: 100 bytes leftover after parsing attributes in process `syz.8.3215'. [ 1010.047461][T18841] netlink: 'syz.8.3215': attribute type 1 has an invalid length. [ 1010.876248][ T5891] usb 6-1: USB disconnect, device number 15 [ 1011.403484][T18872] fuse: Unknown parameter 'use00000000000000000000' [ 1011.755003][T18887] fuse: Bad value for 'fd' [ 1012.050097][ T54] Bluetooth: hci3: unknown advertising packet type: 0xaa [ 1012.050269][ T54] Bluetooth: hci3: unknown advertising packet type: 0xac [ 1012.057961][ T54] Bluetooth: hci3: Dropping invalid advertising data [ 1012.080439][ T54] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1013.257093][T18917] syzkaller1: entered promiscuous mode [ 1013.308680][T18917] syzkaller1: entered allmulticast mode [ 1013.345188][T18904] could not allocate digest TFM handle vmac(twofish-asm) [ 1013.795709][ T5891] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1013.967803][T18941] fuse: Bad value for 'fd' [ 1013.972475][ T5891] usb 9-1: Using ep0 maxpacket: 32 [ 1013.998815][ T5891] usb 9-1: no configurations [ 1014.019397][T18944] tipc: Started in network mode [ 1014.026420][ T5891] usb 9-1: can't read configurations, error -22 [ 1014.053263][T18944] tipc: Node identity 7, cluster identity 4711 [ 1014.059500][T18944] tipc: Node number set to 7 [ 1014.179020][T18951] fuse: Unknown parameter 'use00000000000000000000' [ 1014.185802][ T5899] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1014.190558][ T5891] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1014.340987][ T5899] usb 6-1: Using ep0 maxpacket: 32 [ 1014.372257][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.392482][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.448022][ T5899] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1014.536506][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.585115][ T5891] usb 9-1: Using ep0 maxpacket: 32 [ 1014.588850][ T5899] usb 6-1: config 0 descriptor?? [ 1014.591524][ T5891] usb 9-1: no configurations [ 1014.600031][ T5891] usb 9-1: can't read configurations, error -22 [ 1014.608005][ T5891] usb usb9-port1: attempt power cycle [ 1014.617819][ T5899] hub 6-1:0.0: USB hub found [ 1014.823181][ T5899] hub 6-1:0.0: 1 port detected [ 1014.829960][T18962] netlink: 'syz.1.3257': attribute type 12 has an invalid length. [ 1014.990437][ T5891] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1015.028421][ T5891] usb 9-1: Using ep0 maxpacket: 32 [ 1015.036087][ T5891] usb 9-1: no configurations [ 1015.049203][ T5891] usb 9-1: can't read configurations, error -22 [ 1015.210387][ T5891] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1015.260400][ T5891] usb 9-1: Using ep0 maxpacket: 32 [ 1015.296990][ T5891] usb 9-1: no configurations [ 1015.310350][ T5891] usb 9-1: can't read configurations, error -22 [ 1015.321128][ T5891] usb usb9-port1: unable to enumerate USB device [ 1015.445119][T14843] usb 6-1: USB disconnect, device number 16 [ 1016.188049][T19012] fuse: Unknown parameter 'use00000000000000000000' [ 1018.334601][T19063] tipc: Started in network mode [ 1018.620793][T19063] tipc: Node identity 7, cluster identity 4711 [ 1018.643040][T19063] tipc: Node number set to 7 [ 1018.930314][ T5892] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1019.082537][ T5892] usb 10-1: Using ep0 maxpacket: 32 [ 1019.098501][T19088] fuse: Unknown parameter 'user_i00000000000000000000' [ 1019.143437][ T5892] usb 10-1: no configurations [ 1019.156325][ T5892] usb 10-1: can't read configurations, error -22 [ 1019.300512][ T5892] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1019.544621][ T5892] usb 10-1: Using ep0 maxpacket: 32 [ 1019.607767][ T5892] usb 10-1: no configurations [ 1019.638424][ T5892] usb 10-1: can't read configurations, error -22 [ 1019.857258][ T5892] usb usb10-port1: attempt power cycle [ 1020.378081][T19103] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1020.861591][ T5892] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1021.078955][T19121] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3302'. [ 1021.245976][ T5892] usb 10-1: Using ep0 maxpacket: 32 [ 1021.252729][ T5892] usb 10-1: no configurations [ 1021.257489][ T5892] usb 10-1: can't read configurations, error -22 [ 1021.430341][ T5892] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1021.512801][ T5892] usb 10-1: Using ep0 maxpacket: 32 [ 1021.522894][ T5892] usb 10-1: no configurations [ 1021.527606][ T5892] usb 10-1: can't read configurations, error -22 [ 1021.570839][ T5892] usb usb10-port1: unable to enumerate USB device [ 1021.792738][T19140] netlink: 'syz.1.3306': attribute type 12 has an invalid length. [ 1021.993677][ T54] Bluetooth: hci5: unknown advertising packet type: 0xaa [ 1021.994393][ T54] Bluetooth: hci5: unknown advertising packet type: 0xac [ 1022.001708][ T54] Bluetooth: hci5: Dropping invalid advertising data [ 1022.016146][ T54] Bluetooth: hci5: Malformed LE Event: 0x02 [ 1022.842933][T19152] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1024.420034][T19188] fuse: Unknown parameter '0x0000000000000004' [ 1025.520417][ T54] Bluetooth: hci3: unknown advertising packet type: 0xaa [ 1025.520463][ T54] Bluetooth: hci3: unknown advertising packet type: 0xac [ 1025.531286][ T54] Bluetooth: hci3: Dropping invalid advertising data [ 1025.545779][ T54] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1025.741310][T10250] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1026.423584][T10250] usb 10-1: Using ep0 maxpacket: 32 [ 1027.042670][T19235] loop3: detected capacity change from 0 to 2048 [ 1027.097147][T19235] loop3: p1 < > p4 [ 1027.114372][T19235] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1027.825637][T10250] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1027.833862][T10250] usb 10-1: can't read configurations, error -71 [ 1028.431213][T19261] fuse: Unknown parameter '0x0000000000000004' [ 1029.115237][T19268] 9pnet_fd: Insufficient options for proto=fd [ 1029.961271][T19288] loop5: detected capacity change from 0 to 2048 [ 1030.658463][T19290] loop6: detected capacity change from 0 to 2048 [ 1030.911643][T10250] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1032.913413][ T5199] loop6: p1 < > p4 [ 1032.920529][ T5199] loop6: p4 size 8388608 extends beyond EOD, truncated [ 1032.981734][T10250] usb 10-1: Using ep0 maxpacket: 32 [ 1033.126628][T10250] usb 10-1: device descriptor read/all, error -71 [ 1033.156141][T19288] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1033.156681][T19288] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1033.385835][T19299] binder: 19298:19299 ioctl c0306201 0 returned -14 [ 1033.398302][T12392] udevd[12392]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1033.434239][T12392] udevd[12392]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1033.989770][T19312] fuse: Unknown parameter '0x0000000000000004' [ 1034.150420][ T5892] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1034.441890][ T5892] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1034.493638][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.530525][ T5892] usb 7-1: Product: syz [ 1034.553055][ T5892] usb 7-1: Manufacturer: syz [ 1034.557720][ T5892] usb 7-1: SerialNumber: syz [ 1034.636749][ T5892] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1034.644037][ T5892] r8152-cfgselector 7-1: config 0 descriptor?? [ 1035.271105][ T5892] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1035.277756][ T5892] r8152-cfgselector 7-1: bad CDC descriptors [ 1035.289825][ T5892] r8152-cfgselector 7-1: USB disconnect, device number 28 [ 1036.370450][ T5899] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1036.469297][T19360] binder: 19359:19360 ioctl c0306201 0 returned -14 [ 1036.604538][ T5899] usb 10-1: Using ep0 maxpacket: 32 [ 1036.617993][ T5899] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.631772][ T5899] usb 10-1: config 0 has no interfaces? [ 1036.637645][ T5899] usb 10-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1036.649335][ T5899] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.666412][ T5899] usb 10-1: config 0 descriptor?? [ 1036.746601][T19372] netlink: 'syz.8.3374': attribute type 1 has an invalid length. [ 1036.758168][T19372] netlink: 'syz.8.3374': attribute type 2 has an invalid length. [ 1036.910469][ T5893] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1037.078912][ T5893] usb 7-1: Using ep0 maxpacket: 16 [ 1037.086697][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.097281][T19385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3377'. [ 1037.129336][ T5893] usb 7-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1037.193310][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.267992][ T5893] usb 7-1: config 0 descriptor?? [ 1039.412314][ T1206] usb 10-1: USB disconnect, device number 14 [ 1039.825955][ T1206] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1040.106256][ T1206] usb 10-1: device descriptor read/64, error -71 [ 1040.380431][ T1206] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1040.459909][T19438] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3393'. [ 1040.700832][ T1206] usb 10-1: device descriptor read/64, error -71 [ 1040.730437][ T5892] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1040.820978][ T1206] usb usb10-port1: attempt power cycle [ 1040.880539][ T5892] usb 2-1: device descriptor read/64, error -71 [ 1041.310424][ T1206] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1041.499476][ T1206] usb 10-1: device descriptor read/8, error -71 [ 1041.880426][ T1206] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1042.550478][ T5892] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1042.573870][ T1206] usb 10-1: device descriptor read/8, error -71 [ 1042.872424][ T5893] usbhid 7-1:0.0: can't add hid device: -32 [ 1042.897820][ T5893] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1043.299172][ T1206] usb usb10-port1: unable to enumerate USB device [ 1043.430659][ T5934] usb 7-1: USB disconnect, device number 29 [ 1043.510090][ T5892] usb 2-1: device descriptor read/64, error -71 [ 1043.631608][ T5892] usb usb2-port1: attempt power cycle [ 1045.014467][ T5892] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1045.082319][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 1045.513255][ T5892] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1045.525589][ T5892] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.537511][ T5892] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1045.687245][ T5892] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1045.696459][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.710867][ T5892] usb 2-1: Product: syz [ 1045.713896][T19512] fuse: Unknown parameter '0x0000000000000004' [ 1045.715056][ T5892] usb 2-1: Manufacturer: syz [ 1045.741813][ T5892] usb 2-1: SerialNumber: syz [ 1045.821887][ T1206] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1046.027524][ T1206] usb 9-1: Using ep0 maxpacket: 16 [ 1046.030354][ T5893] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1046.059919][ T1206] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1046.060354][T10250] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1046.068893][ T1206] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.086712][ T1206] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1046.133428][ T1206] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1046.143434][ T1206] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.152352][ T1206] usb 9-1: Product: syz [ 1046.156542][ T1206] usb 9-1: Manufacturer: syz [ 1046.161207][ T1206] usb 9-1: SerialNumber: syz [ 1046.172186][ T5893] usb 7-1: device descriptor read/64, error -71 [ 1046.228589][ T5892] usb 2-1: 0:2 : does not exist [ 1046.250316][T10250] usb 4-1: Using ep0 maxpacket: 32 [ 1046.258467][ T5892] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1046.278920][T10250] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1046.313430][T10250] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1046.324607][T10250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.354134][T10250] usb 4-1: Product: syz [ 1046.376847][ T5892] usb 2-1: USB disconnect, device number 11 [ 1046.393723][T10250] usb 4-1: Manufacturer: syz [ 1046.422003][T10250] usb 4-1: SerialNumber: syz [ 1046.450542][ T5893] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1046.460674][T10250] usb 4-1: config 0 descriptor?? [ 1046.466750][T19518] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1046.491717][T10250] hub 4-1:0.0: bad descriptor, ignoring hub [ 1046.511135][T10250] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1046.536141][T10250] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input34 [ 1046.624801][ T5893] usb 7-1: device descriptor read/64, error -71 [ 1047.012158][ T1206] usb 9-1: 0:2 : does not exist [ 1047.132406][ T1206] usb 9-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1047.407677][T10250] usb 4-1: USB disconnect, device number 44 [ 1047.413722][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1047.464169][ T1206] usb 9-1: USB disconnect, device number 7 [ 1047.511094][ T5893] usb usb7-port1: attempt power cycle [ 1047.691323][T12482] udevd[12482]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1047.880354][ T5893] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1047.900355][ T5892] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1047.914473][ T5893] usb 7-1: device descriptor read/8, error -71 [ 1048.121496][ T5892] usb 2-1: config 7 has an invalid interface number: 109 but max is 0 [ 1048.142341][ T5892] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.162665][T19558] loop5: detected capacity change from 0 to 512 [ 1048.175913][ T5893] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1048.809345][ T5892] usb 2-1: config 7 has no interface number 0 [ 1048.852222][ T5892] usb 2-1: config 7 interface 109 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1048.893622][ T5893] usb 7-1: device descriptor read/8, error -71 [ 1048.903066][ T5892] usb 2-1: config 7 interface 109 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1048.961162][ T5892] usb 2-1: config 7 interface 109 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1049.093234][ T5892] usb 2-1: config 7 interface 109 altsetting 4 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1049.106552][ T5892] usb 2-1: config 7 interface 109 has no altsetting 0 [ 1049.119614][ T5893] usb usb7-port1: unable to enumerate USB device [ 1049.165690][ T5892] usb 2-1: New USB device found, idVendor=1965, idProduct=0018, bcdDevice=d9.4d [ 1049.175147][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.185472][ T5892] usb 2-1: Product: syz [ 1049.189707][ T5892] usb 2-1: Manufacturer: syz [ 1049.202423][ T5892] usb 2-1: SerialNumber: syz [ 1049.246709][T19539] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1049.446842][T19574] fuse: Unknown parameter '0x0000000000000004' [ 1049.459811][T19558] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 1049.614725][T19578] loop6: detected capacity change from 0 to 2048 [ 1049.779579][T19578] loop6: p1 < > p4 [ 1049.831322][T19578] loop6: p4 size 8388608 extends beyond EOD, truncated [ 1049.948790][ T5199] loop6: p1 < > p4 [ 1050.081716][ T5199] loop6: p4 size 8388608 extends beyond EOD, truncated [ 1050.285706][ T5892] usbhid 2-1:7.109: couldn't find an input interrupt endpoint [ 1050.299114][T12392] udevd[12392]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1050.315912][ T5892] usb 2-1: USB disconnect, device number 12 [ 1050.351966][T19558] loop5: detected capacity change from 0 to 512 [ 1050.390939][T19558] EXT4-fs: Ignoring removed nobh option [ 1050.525504][T15460] udevd[15460]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1050.525668][T15471] udevd[15471]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1050.559756][T19558] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.620412][T19558] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1050.670073][T12482] udevd[12482]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1050.691212][T11976] udevd[11976]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1051.660667][T19589] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1051.765645][T19589] EXT4-fs (loop5): Remounting filesystem read-only [ 1052.078846][T17878] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1052.483167][T19614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3437'. [ 1053.264816][T19627] loop8: detected capacity change from 0 to 2048 [ 1053.916507][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.133545][ T1206] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1054.211131][ T5199] loop8: p1 < > p4 [ 1054.240768][ T5199] loop8: p4 size 8388608 extends beyond EOD, truncated [ 1054.291296][ T1206] usb 2-1: device descriptor read/64, error -71 [ 1054.333143][T12482] udevd[12482]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 1054.365350][T12392] udevd[12392]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1054.460679][ T5899] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1054.509563][T19644] loop5: detected capacity change from 0 to 512 [ 1054.550664][ T1206] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1054.624606][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 1054.634527][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1054.649921][ T5899] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1054.660098][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.689220][ T5899] usb 4-1: Product: syz [ 1054.693907][ T5899] usb 4-1: Manufacturer: syz [ 1054.700615][ T5892] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1054.708353][ T1206] usb 2-1: device descriptor read/64, error -71 [ 1054.718392][ T5899] usb 4-1: SerialNumber: syz [ 1054.735964][ T5899] usb 4-1: config 0 descriptor?? [ 1054.754768][ T5899] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1054.770361][ T5899] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1054.821366][ T1206] usb usb2-port1: attempt power cycle [ 1054.862467][T19644] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 1054.880732][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 1054.900519][ T5892] usb 7-1: config 0 has no interfaces? [ 1054.910319][ T5935] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1054.912543][ T5892] usb 7-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=76.8e [ 1054.939444][T19644] loop5: detected capacity change from 0 to 512 [ 1054.945810][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.945845][ T5892] usb 7-1: Product: syz [ 1054.948195][ T5892] usb 7-1: Manufacturer: syz [ 1054.990417][ T5892] usb 7-1: SerialNumber: syz [ 1054.995104][T19644] EXT4-fs: Ignoring removed nobh option [ 1055.057565][ T5892] usb 7-1: config 0 descriptor?? [ 1055.066782][T19644] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.088264][ T5935] usb 10-1: Using ep0 maxpacket: 16 [ 1055.088636][T19644] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1055.134442][ T5935] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.170369][ T1206] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1055.179687][ T5935] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.198622][T17878] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1055.220585][ T1206] usb 2-1: device descriptor read/8, error -71 [ 1055.236577][ T5935] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1055.263369][ T5935] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.343893][ T5935] usb 10-1: config 0 descriptor?? [ 1055.376384][ T5892] usb 7-1: USB disconnect, device number 34 [ 1055.381710][ T5899] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1055.462121][ T1206] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1055.492874][ T1206] usb 2-1: device descriptor read/8, error -71 [ 1055.610742][ T1206] usb usb2-port1: unable to enumerate USB device [ 1055.775616][ T5935] elan 0003:04F3:0755.0005: failed to start in urb: -90 [ 1055.811312][ T5935] elan 0003:04F3:0755.0005: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 1055.906095][T19683] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3459'. [ 1056.080940][ T5892] usb 10-1: USB disconnect, device number 19 [ 1056.589055][T19692] loop8: detected capacity change from 0 to 2048 [ 1057.136549][ T5199] loop8: p1 < > p4 [ 1057.151023][ T5199] loop8: p4 size 8388608 extends beyond EOD, truncated [ 1057.180370][ T5899] em28xx 4-1:0.0: write to i2c device at 0xa0 failed with unknown error (status=1) [ 1057.194357][ T5899] em28xx 4-1:0.0: failed to read eeprom (err=-5) [ 1057.200885][ T5899] em28xx 4-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1057.340774][T19704] binder: 19702:19704 ioctl c0306201 0 returned -14 [ 1057.470384][ T5899] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1057.478286][ T5899] em28xx 4-1:0.0: dvb set to bulk mode. [ 1057.505669][ T1206] em28xx 4-1:0.0: Binding DVB extension [ 1057.522173][T12482] udevd[12482]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1057.653631][T11976] udevd[11976]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 1057.683654][ T5899] usb 4-1: USB disconnect, device number 45 [ 1057.701738][ T5899] em28xx 4-1:0.0: Disconnecting em28xx [ 1057.761570][T19712] loop8: detected capacity change from 0 to 512 [ 1058.161482][T19712] EXT4-fs (loop8): failed to open journal device unknown-block(0,0) -6 [ 1058.184389][ T1206] em28xx 4-1:0.0: Registering input extension [ 1058.207951][T19712] loop8: detected capacity change from 0 to 512 [ 1058.234547][ T5899] em28xx 4-1:0.0: Closing input extension [ 1058.349777][T19712] EXT4-fs: Ignoring removed nobh option [ 1058.464984][T19712] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1058.535425][ T5899] em28xx 4-1:0.0: Freeing device [ 1058.543258][T19712] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1058.806398][T17829] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1059.177949][T19747] loop8: detected capacity change from 0 to 2048 [ 1059.198891][ T5935] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1059.306560][T19747] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1059.318681][T19747] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1059.691059][ T5935] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1059.881889][ T5935] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1059.950295][ T5935] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1060.030730][ T5935] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1060.039838][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.318936][ T5935] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1060.745823][ T5935] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1060.779051][T15471] udevd[15471]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1062.561484][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 1063.761220][ T5935] usb 2-1: USB disconnect, device number 17 [ 1063.890987][T19766] netlink: 'syz.5.3475': attribute type 1 has an invalid length. [ 1063.935007][T19766] netlink: 'syz.5.3475': attribute type 2 has an invalid length. [ 1064.457186][T19783] loop5: detected capacity change from 0 to 512 [ 1064.554910][ T5899] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1064.761112][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 1064.782177][ T5899] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1064.840963][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1064.860750][T19783] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 1064.907813][ T5899] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1064.946994][T19783] loop5: detected capacity change from 0 to 512 [ 1064.958126][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.005960][T19783] EXT4-fs: Ignoring removed nobh option [ 1065.027131][ T5899] usb 2-1: Product: syz [ 1065.045355][ T5899] usb 2-1: Manufacturer: syz [ 1065.057166][ T5899] usb 2-1: SerialNumber: syz [ 1065.158966][T19783] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1065.238794][T19783] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1065.377326][ T5899] usb 2-1: config 0 descriptor?? [ 1065.385922][ T5899] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1065.396369][ T5899] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1065.791691][T17878] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1066.133752][ T5935] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1066.241893][T17831] Bluetooth: hci3: command 0x0406 tx timeout [ 1066.248528][T17831] Bluetooth: hci4: command 0x0406 tx timeout [ 1066.447837][ T5899] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1066.458078][ T5899] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1066.618818][ T5935] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1066.662802][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.680902][ T5935] usb 4-1: Product: syz [ 1066.924139][ T5935] usb 4-1: Manufacturer: syz [ 1066.964170][ T5935] usb 4-1: SerialNumber: syz [ 1067.037496][ T5935] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1067.126479][ T1206] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1067.266692][ T5899] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1067.317055][ T5899] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1067.345386][T19813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.375191][ T5899] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1067.416232][ T5899] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1067.439995][T19813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.678798][T10250] usb 4-1: USB disconnect, device number 46 [ 1068.170506][ T5891] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1068.185587][ T5899] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1068.195380][ T5899] usb 2-1: USB disconnect, device number 18 [ 1068.205226][T19865] netlink: 'syz.5.3506': attribute type 12 has an invalid length. [ 1068.353396][ T5891] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.389056][ T5891] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1068.422771][ T5891] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1068.489518][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.550321][ T1206] usb 4-1: Service connection timeout for: 256 [ 1068.556749][ T1206] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1068.706520][ T5891] usb 7-1: config 0 descriptor?? [ 1069.563055][ T1206] ath9k_htc: Failed to initialize the device [ 1069.576627][T10250] usb 4-1: ath9k_htc: USB layer deinitialized [ 1071.355935][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 1071.387293][T19926] raw_sendmsg: syz.8.3520 forgot to set AF_INET. Fix it! [ 1071.590696][T10250] usb 7-1: USB disconnect, device number 35 [ 1073.730759][T19965] netlink: 'syz.1.3533': attribute type 3 has an invalid length. [ 1074.322513][T19996] netlink: 'syz.8.3543': attribute type 29 has an invalid length. [ 1074.361483][T19996] netlink: 'syz.8.3543': attribute type 29 has an invalid length. [ 1074.402133][T19996] netlink: 'syz.8.3543': attribute type 29 has an invalid length. [ 1075.519384][T20013] netlink: 'syz.6.3550': attribute type 12 has an invalid length. [ 1076.060372][ T1206] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1076.253058][ T1206] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1076.278673][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.300642][ T1206] usb 2-1: Product: syz [ 1076.304894][ T1206] usb 2-1: Manufacturer: syz [ 1076.309592][ T1206] usb 2-1: SerialNumber: syz [ 1076.444449][ T1206] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1076.478431][T10250] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1076.487008][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 1076.490429][ T1206] r8152-cfgselector 2-1: config 0 descriptor?? [ 1076.662123][T10250] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.673546][T10250] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1076.684473][T10250] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1076.694552][T10250] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1076.703293][T10250] usb 10-1: SerialNumber: syz [ 1076.756949][ T1206] r8152-cfgselector 2-1: Unknown version 0x0010 [ 1076.764924][ T1206] r8152-cfgselector 2-1: bad CDC descriptors [ 1077.104907][ T1206] r8152-cfgselector 2-1: USB disconnect, device number 19 [ 1077.276555][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022753c00: rx timeout, send abort [ 1077.290307][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888022753c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1077.723313][T10250] usb 10-1: 0:2 : does not exist [ 1077.745804][T10250] usb 10-1: USB disconnect, device number 20 [ 1078.670502][T10250] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1078.730593][ T1206] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1078.840958][T10250] usb 10-1: Using ep0 maxpacket: 16 [ 1078.867184][T10250] usb 10-1: config index 0 descriptor too short (expected 13689, got 36) [ 1078.902741][T10250] usb 10-1: config 222 has too many interfaces: 104, using maximum allowed: 32 [ 1078.921374][ T1206] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1078.930617][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.938639][ T1206] usb 4-1: Product: syz [ 1078.943071][ T1206] usb 4-1: Manufacturer: syz [ 1078.947693][ T1206] usb 4-1: SerialNumber: syz [ 1078.964261][ T1206] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1078.970765][T10250] usb 10-1: config 222 has an invalid descriptor of length 58, skipping remainder of the config [ 1079.025915][T10250] usb 10-1: config 222 has 0 interfaces, different from the descriptor's value: 104 [ 1079.038851][T10250] usb 10-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1079.041567][ T5899] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1079.049016][T10250] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.166690][T10250] usb 10-1: Product: syz [ 1079.192478][T10250] usb 10-1: Manufacturer: syz [ 1079.241953][T10250] usb 10-1: SerialNumber: syz [ 1079.271565][T20094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.280180][T20094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.335773][ T1206] usb 4-1: USB disconnect, device number 47 [ 1080.171641][ T5899] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1080.178738][ T5899] ath9k_htc: Failed to initialize the device [ 1080.187475][ T1206] usb 4-1: ath9k_htc: USB layer deinitialized [ 1080.233475][T10250] usb 10-1: USB disconnect, device number 21 [ 1080.475305][T12392] udevd[12392]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1080.845003][T20139] hsr0: entered promiscuous mode [ 1081.563165][T20155] netlink: 'syz.6.3593': attribute type 12 has an invalid length. [ 1082.410342][ T5838] Bluetooth: hci6: command 0x0406 tx timeout [ 1084.347517][T20222] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3615'. [ 1085.610740][ T5874] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1085.793007][ T5874] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1085.811537][ T5874] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1085.840891][ T5874] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1085.851009][ T1198] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1085.881520][ T5874] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1085.912044][ T5874] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.949722][ T5874] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1086.046198][ T1198] usb 6-1: Using ep0 maxpacket: 16 [ 1086.058128][ T5874] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1086.068804][ T1198] usb 6-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 1086.089334][ T1198] usb 6-1: config 0 interface 0 altsetting 40 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 1086.136460][ T1198] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1086.169683][T15471] udevd[15471]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1086.172435][ T1198] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1087.016578][ T1198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.024748][ T1198] usb 6-1: Product: syz [ 1087.028937][ T1198] usb 6-1: Manufacturer: syz [ 1087.033705][ T1198] usb 6-1: SerialNumber: syz [ 1087.040790][ T1198] usb 6-1: config 0 descriptor?? [ 1087.291781][ T1206] usb 10-1: USB disconnect, device number 22 [ 1088.311501][ T1198] usb 6-1: USB disconnect, device number 17 [ 1090.460340][ T1206] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1090.688630][ T1206] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1090.736071][ T1206] usb 10-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1090.783348][ T1206] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1090.834664][ T1206] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1090.899903][ T1206] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1090.932635][ T1206] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1091.010994][ T1206] usb 10-1: Product: syz [ 1091.030354][ T1206] usb 10-1: Manufacturer: syz [ 1091.078248][ T1206] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1091.351704][ T5899] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1091.378561][ T1206] usb 10-1: USB disconnect, device number 23 [ 1092.250278][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 1092.256908][ T5899] usb 2-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 1092.267435][ T5899] usb 2-1: config 0 interface 0 altsetting 40 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 1092.300339][T14843] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1092.330726][ T5899] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1092.385948][ T5899] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1092.397691][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.426200][ T5899] usb 2-1: Product: syz [ 1092.441244][ T5899] usb 2-1: Manufacturer: syz [ 1092.445888][ T5899] usb 2-1: SerialNumber: syz [ 1092.470065][ T5899] usb 2-1: config 0 descriptor?? [ 1092.499246][T14843] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1092.528072][T14843] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1092.577862][T14843] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1092.629599][T14843] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1092.630468][ T1198] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1092.667397][T14843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.715547][ T5899] usb 2-1: USB disconnect, device number 20 [ 1092.741982][T14843] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1092.846597][T14843] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1092.870480][ T1198] usb 9-1: Using ep0 maxpacket: 8 [ 1092.894936][T15471] udevd[15471]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1092.899546][ T1198] usb 9-1: config index 0 descriptor too short (expected 12306, got 18) [ 1093.186952][ T1198] usb 9-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 1093.196905][ T1198] usb 9-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 1093.446933][T14843] usb 4-1: USB disconnect, device number 48 [ 1094.196033][ T1198] usb 9-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 1094.229873][ T1198] usb 9-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1095.197303][ T1198] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.205557][ T1198] usb 9-1: Product: syz [ 1095.209787][ T1198] usb 9-1: Manufacturer: syz [ 1095.214440][ T1198] usb 9-1: SerialNumber: syz [ 1095.551039][ T1198] usb 9-1: can't set config #48, error -71 [ 1095.558443][ T1198] usb 9-1: USB disconnect, device number 8 [ 1097.820288][T14843] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1098.050491][T14843] usb 4-1: Using ep0 maxpacket: 16 [ 1098.061136][T14843] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1098.069997][T14843] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.087581][T14843] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1098.107150][T14843] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1098.127856][T14843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.152087][T14843] usb 4-1: Product: syz [ 1098.164139][T14843] usb 4-1: Manufacturer: syz [ 1098.183726][T14843] usb 4-1: SerialNumber: syz [ 1098.728427][T14843] usb 4-1: 0:2 : does not exist [ 1099.120456][T10250] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1099.177643][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1099.185275][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1099.192804][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1099.200414][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1099.207843][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1099.215334][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1099.222837][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1099.230520][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1099.238328][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1099.245800][T14843] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1099.253613][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1099.261854][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1099.269391][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1099.270343][T10250] usb 10-1: device descriptor read/64, error -71 [ 1099.277154][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1099.290212][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1099.399217][T14843] usb 4-1: USB disconnect, device number 49 [ 1099.571919][T12392] udevd[12392]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1099.600420][T10250] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1099.630632][ T1206] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1099.654532][ T1198] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1099.740576][T10250] usb 10-1: device descriptor read/64, error -71 [ 1099.850698][ T1198] usb 9-1: Using ep0 maxpacket: 8 [ 1099.895100][T10250] usb usb10-port1: attempt power cycle [ 1099.921176][ T1198] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1100.057127][ T1198] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1100.196051][ T1198] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1100.284161][T10250] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1100.376494][T10250] usb 10-1: device descriptor read/8, error -71 [ 1100.415339][ T1198] usb 9-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1100.458883][ T1198] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.508947][ T1198] usb 9-1: Product: syz [ 1100.525546][ T1198] usb 9-1: Manufacturer: syz [ 1100.539236][ T1198] usb 9-1: SerialNumber: syz [ 1100.572117][ T1206] usb 7-1: Using ep0 maxpacket: 32 [ 1100.583821][ T1198] usb 9-1: config 0 descriptor?? [ 1100.595323][ T1206] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1100.608575][ T1206] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1100.614717][ T1198] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1100.620809][ T5934] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1100.650295][ T1198] imon 9-1:0.0: unable to initialize intf0, err -19 [ 1100.659925][ T1206] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1100.659982][ T1198] imon:imon_probe: failed to initialize context! [ 1100.698916][T10250] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1100.718418][ T1198] imon 9-1:0.0: unable to register, err -19 [ 1100.725258][T10250] usb 10-1: device descriptor read/8, error -71 [ 1100.725258][ T1206] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1100.725296][ T1206] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1100.826433][ T5934] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 1100.847791][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.849420][ T1198] usb 9-1: USB disconnect, device number 9 [ 1100.859325][ T54] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 1100.879469][ T5934] usb 6-1: Product: syz [ 1100.883312][T10250] usb usb10-port1: unable to enumerate USB device [ 1100.883788][ T5934] usb 6-1: Manufacturer: syz [ 1100.895026][ T5934] usb 6-1: SerialNumber: syz [ 1100.903409][ T1206] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1100.912692][ T1206] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.921435][ T1206] usb 7-1: Product: syz [ 1100.925810][ T1206] usb 7-1: Manufacturer: syz [ 1100.930584][ T1206] usb 7-1: SerialNumber: syz [ 1100.936072][ T5934] usb 6-1: config 0 descriptor?? [ 1100.942996][ T1206] usb 7-1: config 0 descriptor?? [ 1101.185409][ T1198] usb 6-1: USB disconnect, device number 18 [ 1101.359934][ T1206] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1101.388705][ T1206] input input36: Device does not respond to id packet M [ 1101.424908][ T1206] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1101.440406][ T1206] input input36: Device does not respond to id packet P [ 1101.473805][ T1206] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1101.494192][ T1206] input input36: Device does not respond to id packet B [ 1101.519137][ T1206] input input36: Limiting number of effects to 32 (device reports 105) [ 1101.614405][ T5899] IPVS: starting estimator thread 0... [ 1101.661359][T20518] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1101.710326][T20523] IPVS: using max 19 ests per chain, 45600 per kthread [ 1101.720923][ T1206] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1101.728526][ T1206] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1101.820420][T10250] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1101.845696][ T1206] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1101.887333][ T1206] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1101.990459][T10250] usb 9-1: Using ep0 maxpacket: 8 [ 1102.009498][T10250] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1102.020931][T10250] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1102.037702][T10250] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1102.070426][ T5874] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1102.084849][ T1206] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input36 [ 1102.110812][ T1206] usb 7-1: USB disconnect, device number 36 [ 1102.124581][ T1206] iforce 7-1:0.0: usb_submit_urb failed -19 [ 1102.150603][T10250] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1102.160808][T10250] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1102.174294][T10250] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1102.183582][T10250] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.407093][T10250] usb 9-1: GET_CAPABILITIES returned 0 [ 1102.413224][T10250] usbtmc 9-1:16.0: can't read capabilities [ 1102.420542][ T5874] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1102.429859][ T5874] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 1102.480460][ T5874] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1102.490639][ T5874] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1102.515735][ T5874] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1102.536147][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1102.549970][ T5874] usb 2-1: Product: syz [ 1102.555313][ T5874] usb 2-1: Manufacturer: syz [ 1102.623352][ T5874] cdc_wdm 2-1:1.0: skipping garbage [ 1102.628728][ T5874] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1102.760958][T20520] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 1102.773423][ T5874] usb 9-1: USB disconnect, device number 10 [ 1102.918083][T10250] usb 2-1: USB disconnect, device number 21 [ 1103.038529][T14843] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1103.210411][T14843] usb 7-1: Using ep0 maxpacket: 16 [ 1103.252303][T14843] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1103.286655][T14843] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.312027][T14843] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1103.349445][T14843] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1103.368885][T14843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.380820][T14843] usb 7-1: Product: syz [ 1103.385016][T14843] usb 7-1: Manufacturer: syz [ 1103.389678][T14843] usb 7-1: SerialNumber: syz [ 1104.064370][T14843] usb 7-1: 0:2 : does not exist [ 1104.122941][T20559] netlink: 'syz.1.3710': attribute type 12 has an invalid length. [ 1104.170366][ T5934] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 1104.334820][ T5934] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1104.358775][ T5934] usb 9-1: config 0 has no interface number 0 [ 1104.387385][ T5934] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1104.399296][ T5934] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1104.447699][ T5934] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1104.472928][ T5934] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.497958][ T5934] usb 9-1: config 0 descriptor?? [ 1104.511182][T20556] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1104.610599][ T5934] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1104.752713][T14843] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1104.820673][ T5934] usb 9-1: USB disconnect, device number 11 [ 1104.841142][T14843] usb 7-1: USB disconnect, device number 37 [ 1104.870373][ T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1104.882854][ T54] Bluetooth: hci1: Injecting HCI hardware error event [ 1104.893908][ T5838] Bluetooth: hci1: hardware error 0x00 [ 1104.910914][T12392] udevd[12392]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1105.710674][T14843] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1105.875398][T14843] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1105.884469][T14843] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.898343][T14843] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1105.908583][T20581] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3719'. [ 1105.924173][T14843] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.955893][T14843] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.984526][T14843] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1106.004286][T14843] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1106.018300][T14843] usb 7-1: Product: syz [ 1106.023953][T14843] usb 7-1: Manufacturer: syz [ 1106.036628][T14843] cdc_wdm 7-1:1.0: skipping garbage [ 1106.052492][T14843] cdc_wdm 7-1:1.0: skipping garbage [ 1106.066220][T14843] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1106.076602][T14843] cdc_wdm 7-1:1.0: Unknown control protocol [ 1106.250468][ T5874] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1106.270790][T20572] cdc_wdm 7-1:1.0: Error submitting int urb - -90 [ 1106.290696][T14843] usb 7-1: USB disconnect, device number 38 [ 1106.412037][ T5874] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1106.421061][ T5874] usb 4-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 1106.446697][ T5874] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1106.468119][ T5874] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1106.501798][ T5874] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1106.524012][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1106.537283][ T5874] usb 4-1: Product: syz [ 1106.551879][ T5874] usb 4-1: Manufacturer: syz [ 1106.584262][ T5874] cdc_wdm 4-1:1.0: skipping garbage [ 1106.647186][ T5874] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1106.819093][T14843] usb 4-1: USB disconnect, device number 50 [ 1106.950633][ T5838] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1108.077544][T20600] syz.6.3728 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1110.773601][T20622] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3734'. [ 1111.140320][T14843] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1111.310517][T14843] usb 9-1: Using ep0 maxpacket: 32 [ 1111.322250][T14843] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1111.341913][T14843] usb 9-1: config 0 has no interface number 0 [ 1111.371373][T14843] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1111.432327][T14843] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1111.449274][T14843] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.479050][T14843] usb 9-1: Product: syz [ 1111.483792][T14843] usb 9-1: Manufacturer: syz [ 1111.488419][T14843] usb 9-1: SerialNumber: syz [ 1111.521628][T14843] usb 9-1: config 0 descriptor?? [ 1111.630588][ T5892] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1111.807281][ T29] audit: type=1326 audit(1737253793.594:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20656 comm="syz.5.3744" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae0dd85d29 code=0x0 [ 1111.831819][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 1111.944416][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1112.134355][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1112.309331][ T5892] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1112.500790][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 1112.587113][ T5892] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1112.622446][ T5892] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1112.639073][T20624] loop9: detected capacity change from 0 to 32768 [ 1112.671929][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.714155][ T5892] usb 4-1: config 0 descriptor?? [ 1112.735020][T20647] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1112.785165][ T29] audit: type=1804 audit(1737253794.584:29): pid=20671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3745" name="bus" dev="ramfs" ino=55273 res=1 errno=0 [ 1112.993341][ T5838] Bluetooth: hci2: Opcode 0x0c03 failed: -71 [ 1113.006598][ T5892] usb 4-1: USB disconnect, device number 51 [ 1113.362466][T20688] netlink: 100 bytes leftover after parsing attributes in process `syz.9.3735'. [ 1113.555788][T20688] netlink: 'syz.9.3735': attribute type 1 has an invalid length. [ 1113.700503][ T5874] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1113.790681][ T5892] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1113.890288][ T5874] usb 7-1: Using ep0 maxpacket: 8 [ 1113.897528][ T5874] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1113.928641][ T5874] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1113.955850][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1113.991036][ T5892] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1113.999733][ T5892] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.037030][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1114.051933][ T5892] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1114.065116][ T5874] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1114.090920][ T5892] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.114541][ T5874] usb 7-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1114.130866][ T5892] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.150560][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.168941][ T5874] usb 7-1: Product: syz [ 1114.177160][ T5892] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1114.194059][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1114.205379][ T5874] usb 7-1: Manufacturer: syz [ 1114.210079][ T5874] usb 7-1: SerialNumber: syz [ 1114.258757][ T5892] usb 2-1: Product: syz [ 1114.265915][ T5874] usb 7-1: config 0 descriptor?? [ 1114.379209][ T5892] usb 2-1: Manufacturer: syz [ 1114.487649][ T5874] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1114.666345][ T5838] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 1114.740005][ T5874] imon 7-1:0.0: unable to initialize intf0, err -90 [ 1114.780914][ T5892] cdc_wdm 2-1:1.0: skipping garbage [ 1114.928752][ T5892] cdc_wdm 2-1:1.0: skipping garbage [ 1114.980496][ T5874] imon:imon_probe: failed to initialize context! [ 1115.002545][ T5892] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1115.013949][ T5874] imon 7-1:0.0: unable to register, err -19 [ 1115.051178][ T5892] cdc_wdm 2-1:1.0: Unknown control protocol [ 1115.078118][ T5874] usb 7-1: USB disconnect, device number 39 [ 1115.112261][ T5892] usb 2-1: USB disconnect, device number 22 [ 1115.239976][T14843] f81534 9-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 1115.248474][T14843] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1115.270385][T14843] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1115.278061][T14843] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1115.340540][T14843] usb 9-1: USB disconnect, device number 12 [ 1115.355726][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.487402][T20731] loop6: detected capacity change from 0 to 524287999 [ 1115.508560][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1115.518138][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1115.528646][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1115.537940][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1115.556111][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1115.565374][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1115.576627][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1115.585880][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1115.597489][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1115.606708][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1115.615084][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1115.624303][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1115.670900][T20733] [ 1115.673275][T20733] ====================================================== [ 1115.680316][T20733] WARNING: possible circular locking dependency detected [ 1115.687348][T20733] 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 Not tainted [ 1115.694722][T20733] ------------------------------------------------------ [ 1115.701748][T20733] syz.5.3761/20733 is trying to acquire lock: [ 1115.707857][T20733] ffff888143fd5f00 (&q->limits_lock){+.+.}-{4:4}, at: loop_reconfigure_limits+0x43f/0x900 [ 1115.717835][T20733] [ 1115.717835][T20733] but task is already holding lock: [ 1115.725294][T20733] ffff888143fd58b0 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 1115.735106][T20733] [ 1115.735106][T20733] which lock already depends on the new lock. [ 1115.735106][T20733] [ 1115.745613][T20733] [ 1115.745613][T20733] the existing dependency chain (in reverse order) is: [ 1115.754644][T20733] [ 1115.754644][T20733] -> #6 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 1115.763294][T20733] lock_acquire+0x1ed/0x550 [ 1115.768337][T20733] blk_mq_submit_bio+0x1536/0x2390 [ 1115.774069][T20733] __submit_bio+0x2c6/0x560 [ 1115.779105][T20733] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 1115.785268][T20733] ext4_read_block_bitmap_nowait+0x7c5/0xa80 [ 1115.791871][T20733] ext4_mb_init_cache+0x413/0x13f0 [ 1115.797605][T20733] ext4_mb_init_group+0x329/0x600 [ 1115.803161][T20733] ext4_mb_load_buddy_gfp+0xc49/0xe60 [ 1115.809065][T20733] ext4_mb_find_by_goal+0x1e7/0xed0 [ 1115.814836][T20733] ext4_mb_regular_allocator+0x24a/0x3bb0 [ 1115.821092][T20733] ext4_mb_new_blocks+0x10a8/0x4e00 [ 1115.826822][T20733] ext4_ext_map_blocks+0x1be0/0x7d30 [ 1115.832680][T20733] ext4_map_blocks+0x8bf/0x1990 [ 1115.838059][T20733] _ext4_get_block+0x239/0x6b0 [ 1115.843436][T20733] ext4_get_block_unwritten+0x2f/0x100 [ 1115.849425][T20733] ext4_block_write_begin+0x4d8/0x1510 [ 1115.855585][T20733] ext4_write_begin+0x6c8/0x1280 [ 1115.861061][T20733] ext4_da_write_begin+0x300/0xa60 [ 1115.866694][T20733] pagecache_write+0x230/0x610 [ 1115.871979][T20733] enable_verity+0x199c/0x2050 [ 1115.877275][T20733] fsverity_ioctl_enable+0x471/0x5c0 [ 1115.883092][T20733] ext4_ioctl+0x1957/0x58d0 [ 1115.888291][T20733] __se_sys_ioctl+0xf7/0x170 [ 1115.893401][T20733] do_syscall_64+0xf3/0x230 [ 1115.898603][T20733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.905036][T20733] [ 1115.905036][T20733] -> #5 (&ei->i_data_sem){++++}-{4:4}: [ 1115.912724][T20733] lock_acquire+0x1ed/0x550 [ 1115.917806][T20733] down_write+0x99/0x220 [ 1115.922598][T20733] ext4_map_blocks+0x7a6/0x1990 [ 1115.927978][T20733] ext4_do_writepages+0x21c7/0x3df0 [ 1115.933717][T20733] ext4_writepages+0x213/0x3c0 [ 1115.939129][T20733] do_writepages+0x361/0x880 [ 1115.944248][T20733] __writeback_single_inode+0x14f/0x10d0 [ 1115.950408][T20733] writeback_sb_inodes+0x820/0x1360 [ 1115.956130][T20733] __writeback_inodes_wb+0x11b/0x260 [ 1115.962022][T20733] wb_writeback+0x427/0xb80 [ 1115.967148][T20733] wb_workfn+0xc4b/0x1080 [ 1115.972105][T20733] process_scheduled_works+0xa68/0x1840 [ 1115.978173][T20733] worker_thread+0x870/0xd30 [ 1115.983398][T20733] kthread+0x2f2/0x390 [ 1115.988100][T20733] ret_from_fork+0x4d/0x80 [ 1115.993050][T20733] ret_from_fork_asm+0x1a/0x30 [ 1115.998344][T20733] [ 1115.998344][T20733] -> #4 (jbd2_handle){++++}-{0:0}: [ 1116.005668][T20733] lock_acquire+0x1ed/0x550 [ 1116.010793][T20733] start_this_handle+0x1eb4/0x2110 [ 1116.016428][T20733] jbd2__journal_start+0x2da/0x5d0 [ 1116.022067][T20733] __ext4_journal_start_sb+0x239/0x600 [ 1116.028147][T20733] ext4_dirty_inode+0x92/0x110 [ 1116.033446][T20733] __mark_inode_dirty+0x2f0/0xe90 [ 1116.039007][T20733] touch_atime+0x413/0x690 [ 1116.044020][T20733] ext4_file_mmap+0x18c/0x540 [ 1116.049240][T20733] __mmap_region+0x2250/0x2d30 [ 1116.054542][T20733] mmap_region+0x226/0x2c0 [ 1116.059499][T20733] do_mmap+0x97a/0x10d0 [ 1116.064191][T20733] vm_mmap_pgoff+0x1dd/0x3d0 [ 1116.069305][T20733] ksys_mmap_pgoff+0x4eb/0x720 [ 1116.074606][T20733] do_syscall_64+0xf3/0x230 [ 1116.079639][T20733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.086077][T20733] [ 1116.086077][T20733] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 1116.093661][T20733] lock_acquire+0x1ed/0x550 [ 1116.098692][T20733] __might_fault+0xc6/0x120 [ 1116.103730][T20733] _copy_from_user+0x2a/0xc0 [ 1116.108861][T20733] blk_trace_ioctl+0x1ad/0x9a0 [ 1116.114178][T20733] blkdev_ioctl+0x40c/0x6a0 [ 1116.119309][T20733] __se_sys_ioctl+0xf7/0x170 [ 1116.124423][T20733] do_syscall_64+0xf3/0x230 [ 1116.129461][T20733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.135892][T20733] [ 1116.135892][T20733] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1116.143732][T20733] lock_acquire+0x1ed/0x550 [ 1116.148773][T20733] __mutex_lock+0x1ac/0xee0 [ 1116.153813][T20733] blk_mq_init_sched+0x3fa/0x830 [ 1116.159275][T20733] elevator_init_mq+0x20e/0x320 [ 1116.164651][T20733] add_disk_fwnode+0x10d/0xf80 [ 1116.169937][T20733] sd_probe+0xba6/0x1100 [ 1116.174708][T20733] really_probe+0x2ba/0xad0 [ 1116.179741][T20733] __driver_probe_device+0x1a2/0x390 [ 1116.185555][T20733] driver_probe_device+0x50/0x430 [ 1116.191109][T20733] __device_attach_driver+0x2d6/0x530 [ 1116.197009][T20733] bus_for_each_drv+0x250/0x2e0 [ 1116.202394][T20733] __device_attach_async_helper+0x22d/0x300 [ 1116.208818][T20733] async_run_entry_fn+0xaa/0x420 [ 1116.214368][T20733] process_scheduled_works+0xa68/0x1840 [ 1116.220697][T20733] worker_thread+0x870/0xd30 [ 1116.225814][T20733] kthread+0x2f2/0x390 [ 1116.230412][T20733] ret_from_fork+0x4d/0x80 [ 1116.235355][T20733] ret_from_fork_asm+0x1a/0x30 [ 1116.240729][T20733] [ 1116.240729][T20733] -> #1 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 1116.249630][T20733] lock_acquire+0x1ed/0x550 [ 1116.254662][T20733] blk_queue_enter+0xe1/0x600 [ 1116.259877][T20733] blk_mq_alloc_request+0x4fa/0xaa0 [ 1116.265608][T20733] scsi_execute_cmd+0x16c/0x10e0 [ 1116.271075][T20733] read_capacity_16+0x2b4/0x1450 [ 1116.276547][T20733] sd_revalidate_disk+0x1013/0xbce0 [ 1116.282366][T20733] sd_probe+0x9fa/0x1100 [ 1116.287163][T20733] really_probe+0x2ba/0xad0 [ 1116.292209][T20733] __driver_probe_device+0x1a2/0x390 [ 1116.298020][T20733] driver_probe_device+0x50/0x430 [ 1116.303684][T20733] __device_attach_driver+0x2d6/0x530 [ 1116.309583][T20733] bus_for_each_drv+0x250/0x2e0 [ 1116.314971][T20733] __device_attach_async_helper+0x22d/0x300 [ 1116.321405][T20733] async_run_entry_fn+0xaa/0x420 [ 1116.326869][T20733] process_scheduled_works+0xa68/0x1840 [ 1116.332944][T20733] worker_thread+0x870/0xd30 [ 1116.338062][T20733] kthread+0x2f2/0x390 [ 1116.342685][T20733] ret_from_fork+0x4d/0x80 [ 1116.347649][T20733] ret_from_fork_asm+0x1a/0x30 [ 1116.352957][T20733] [ 1116.352957][T20733] -> #0 (&q->limits_lock){+.+.}-{4:4}: [ 1116.360644][T20733] validate_chain+0x18ef/0x5920 [ 1116.366041][T20733] __lock_acquire+0x1397/0x2100 [ 1116.371428][T20733] lock_acquire+0x1ed/0x550 [ 1116.376461][T20733] __mutex_lock+0x1ac/0xee0 [ 1116.381509][T20733] loop_reconfigure_limits+0x43f/0x900 [ 1116.387496][T20733] lo_ioctl+0x1351/0x1f50 [ 1116.392350][T20733] blkdev_ioctl+0x57f/0x6a0 [ 1116.397379][T20733] __se_sys_ioctl+0xf7/0x170 [ 1116.402495][T20733] do_syscall_64+0xf3/0x230 [ 1116.407521][T20733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.413958][T20733] [ 1116.413958][T20733] other info that might help us debug this: [ 1116.413958][T20733] [ 1116.424628][T20733] Chain exists of: [ 1116.424628][T20733] &q->limits_lock --> &ei->i_data_sem --> &q->q_usage_counter(io)#23 [ 1116.424628][T20733] [ 1116.438689][T20733] Possible unsafe locking scenario: [ 1116.438689][T20733] [ 1116.446150][T20733] CPU0 CPU1 [ 1116.451519][T20733] ---- ---- [ 1116.457055][T20733] lock(&q->q_usage_counter(io)#23); [ 1116.462453][T20733] lock(&ei->i_data_sem); [ 1116.469400][T20733] lock(&q->q_usage_counter(io)#23); [ 1116.477404][T20733] lock(&q->limits_lock); [ 1116.481838][T20733] [ 1116.481838][T20733] *** DEADLOCK *** [ 1116.481838][T20733] [ 1116.489977][T20733] 3 locks held by syz.5.3761/20733: [ 1116.495171][T20733] #0: ffff88801eb4cb60 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x606/0x1f50 [ 1116.504178][T20733] #1: ffff888143fd58b0 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 1116.514431][T20733] #2: ffff888143fd58e8 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 1116.525098][T20733] [ 1116.525098][T20733] stack backtrace: [ 1116.530983][T20733] CPU: 1 UID: 0 PID: 20733 Comm: syz.5.3761 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 1116.541754][T20733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1116.551811][T20733] Call Trace: [ 1116.555093][T20733] [ 1116.558022][T20733] dump_stack_lvl+0x241/0x360 [ 1116.562729][T20733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1116.567955][T20733] ? __pfx__printk+0x10/0x10 [ 1116.572565][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.578210][T20733] print_circular_bug+0x13a/0x1b0 [ 1116.583567][T20733] check_noncircular+0x36a/0x4a0 [ 1116.588530][T20733] ? __pfx_check_noncircular+0x10/0x10 [ 1116.594016][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.599666][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.605312][T20733] validate_chain+0x18ef/0x5920 [ 1116.610195][T20733] ? __pfx_validate_chain+0x10/0x10 [ 1116.615415][T20733] ? __pfx_validate_chain+0x10/0x10 [ 1116.620666][T20733] ? __pfx_validate_chain+0x10/0x10 [ 1116.625882][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.631549][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.637189][T20733] ? mark_lock+0x9a/0x360 [ 1116.641535][T20733] __lock_acquire+0x1397/0x2100 [ 1116.646838][T20733] lock_acquire+0x1ed/0x550 [ 1116.651349][T20733] ? loop_reconfigure_limits+0x43f/0x900 [ 1116.656993][T20733] ? __pfx_lock_acquire+0x10/0x10 [ 1116.662113][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.667764][T20733] ? __pfx___might_resched+0x10/0x10 [ 1116.673056][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.678696][T20733] ? mark_lock+0x9a/0x360 [ 1116.683042][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.688687][T20733] __mutex_lock+0x1ac/0xee0 [ 1116.693211][T20733] ? loop_reconfigure_limits+0x43f/0x900 [ 1116.698852][T20733] ? loop_reconfigure_limits+0x43f/0x900 [ 1116.704492][T20733] ? __pfx___mutex_lock+0x10/0x10 [ 1116.709535][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.715176][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.720819][T20733] loop_reconfigure_limits+0x43f/0x900 [ 1116.726292][T20733] ? __pfx_loop_reconfigure_limits+0x10/0x10 [ 1116.732300][T20733] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1116.738221][T20733] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1116.744568][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.750210][T20733] ? finish_wait+0xd4/0x1e0 [ 1116.754984][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.760625][T20733] ? blk_mq_freeze_queue_wait+0x132/0x190 [ 1116.766456][T20733] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 1116.772547][T20733] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1116.778662][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.784312][T20733] ? percpu_ref_kill_and_confirm+0xa0/0x130 [ 1116.790230][T20733] ? lo_ioctl+0x1344/0x1f50 [ 1116.794751][T20733] lo_ioctl+0x1351/0x1f50 [ 1116.799090][T20733] ? mark_lock+0x9a/0x360 [ 1116.803437][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.809082][T20733] ? validate_chain+0x11e/0x5920 [ 1116.814037][T20733] ? __pfx_lo_ioctl+0x10/0x10 [ 1116.818718][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.824364][T20733] ? mark_lock+0x9a/0x360 [ 1116.828715][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.834361][T20733] ? __lock_acquire+0x1397/0x2100 [ 1116.839408][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.845052][T20733] ? __pfx_lock_acquire+0x10/0x10 [ 1116.850088][T20733] ? is_bpf_text_address+0x26/0x2a0 [ 1116.855308][T20733] ? __pfx_lock_release+0x10/0x10 [ 1116.860352][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.866106][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.871759][T20733] ? preempt_count_add+0x93/0x190 [ 1116.876807][T20733] ? 0xffffffffa0003d80 [ 1116.881052][T20733] ? 0xffffffffa0003d80 [ 1116.885207][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.890849][T20733] ? is_bpf_text_address+0x285/0x2a0 [ 1116.896143][T20733] ? is_bpf_text_address+0x26/0x2a0 [ 1116.901353][T20733] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1116.907515][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.913157][T20733] ? kernel_text_address+0xa7/0xe0 [ 1116.918283][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.923932][T20733] ? __kernel_text_address+0xd/0x40 [ 1116.929148][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.934792][T20733] ? unwind_get_return_address+0x4d/0x90 [ 1116.940438][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.946078][T20733] ? arch_stack_walk+0xfd/0x150 [ 1116.950946][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.956591][T20733] ? stack_trace_save+0x118/0x1d0 [ 1116.961621][T20733] ? __pfx_stack_trace_save+0x10/0x10 [ 1116.966997][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.972643][T20733] ? stack_depot_save_flags+0x37/0x940 [ 1116.978108][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1116.983752][T20733] ? kasan_save_track+0x51/0x80 [ 1116.988608][T20733] ? kasan_save_track+0x3f/0x80 [ 1116.993461][T20733] ? kasan_save_free_info+0x40/0x50 [ 1116.998703][T20733] ? __kasan_slab_free+0x59/0x70 [ 1117.003680][T20733] ? kfree+0x196/0x430 [ 1117.007762][T20733] ? tomoyo_path_number_perm+0x679/0x860 [ 1117.013412][T20733] ? security_file_ioctl+0xc6/0x2a0 [ 1117.018652][T20733] ? __se_sys_ioctl+0x46/0x170 [ 1117.023420][T20733] ? do_syscall_64+0xf3/0x230 [ 1117.028103][T20733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.034194][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.039835][T20733] ? do_vfs_ioctl+0xf07/0x2e40 [ 1117.044610][T20733] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1117.049645][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.055287][T20733] ? mark_lock+0x9a/0x360 [ 1117.059665][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.065312][T20733] ? tomoyo_path_number_perm+0x206/0x860 [ 1117.070967][T20733] ? __pfx_lock_release+0x10/0x10 [ 1117.076003][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.081647][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.087287][T20733] ? tomoyo_path_number_perm+0x679/0x860 [ 1117.093407][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.099048][T20733] ? tomoyo_path_number_perm+0x679/0x860 [ 1117.104703][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.110350][T20733] ? blkdev_common_ioctl+0xfb2/0x2460 [ 1117.115727][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.121374][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.127016][T20733] ? __lock_acquire+0x1397/0x2100 [ 1117.132054][T20733] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1117.137952][T20733] ? tomoyo_path_number_perm+0x206/0x860 [ 1117.143605][T20733] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1117.149621][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.155260][T20733] ? file_to_blk_mode+0xcc/0x140 [ 1117.160209][T20733] ? __pfx_lo_ioctl+0x10/0x10 [ 1117.164895][T20733] blkdev_ioctl+0x57f/0x6a0 [ 1117.169406][T20733] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1117.174435][T20733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.180076][T20733] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1117.185105][T20733] __se_sys_ioctl+0xf7/0x170 [ 1117.189706][T20733] do_syscall_64+0xf3/0x230 [ 1117.194219][T20733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.200130][T20733] RIP: 0033:0x7fae0dd85d29 [ 1117.204546][T20733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1117.224335][T20733] RSP: 002b:00007fae0ec58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.232768][T20733] RAX: ffffffffffffffda RBX: 00007fae0df76080 RCX: 00007fae0dd85d29 [ 1117.240832][T20733] RDX: 0000000000000003 RSI: 0000000000004c09 RDI: 0000000000000004 [ 1117.248805][T20733] RBP: 00007fae0de01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1117.256781][T20733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.264760][T20733] R13: 0000000000000001 R14: 00007fae0df76080 R15: 00007fffd525ee38 [ 1117.272762][T20733] [ 1117.277851][ T5874] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1117.290689][T20733] Invalid logical block size (3) [ 1117.321944][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1117.331253][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1117.339196][T20731] ldm_validate_partition_table(): Disk read failed. [ 1117.346633][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1117.355903][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1117.363910][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1117.373279][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1117.384206][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1117.393423][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1117.419342][T20731] Dev loop6: unable to read RDB block 0 [ 1117.436215][T20731] loop6: unable to read partition table [ 1117.442409][T20731] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1117.523972][ T5874] usb 7-1: Using ep0 maxpacket: 8 [ 1117.575823][ T5874] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1117.585657][ T5874] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1117.593961][ T5874] usb 7-1: Product: syz [ 1117.598132][ T5874] usb 7-1: Manufacturer: syz [ 1117.602902][ T5874] usb 7-1: SerialNumber: syz [ 1117.610607][ T5874] usb 7-1: config 0 descriptor?? [ 1117.619897][ T5874] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1118.237387][ T5874] gspca_zc3xx: reg_w_i err -71 [ 1118.242350][ T5874] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1118.264113][ T5874] usb 7-1: USB disconnect, device number 40 [ 1118.710698][ T5838] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1118.719034][ T5838] Bluetooth: hci5: Injecting HCI hardware error event [ 1118.727609][ T54] Bluetooth: hci5: hardware error 0x00 [ 1120.791092][ T54] Bluetooth: hci5: Opcode 0x0c03 failed: -110