last executing test programs: 17m24.280466666s ago: executing program 1 (id=1472): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001500)=""/94, 0x0, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) openat$full(0xffffffffffffff9c, 0x0, 0xa0c80, 0x0) 17m22.426566824s ago: executing program 1 (id=1476): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) socket$packet(0x11, 0x3, 0x300) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r2 = gettid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) 17m19.446151279s ago: executing program 1 (id=1481): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x14e, 0xfffffffd) r5 = eventfd(0xeac) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000080)={0x1}) connect$unix(r4, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0xc3, 0x0, 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x2a, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) 17m15.3730675s ago: executing program 1 (id=1488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) recvmsg$can_bcm(r3, &(0x7f0000001580)={&(0x7f0000000240)=@nfc_llcp, 0x80, 0x0, 0x0, &(0x7f00000014c0)=""/135, 0x87}, 0x40014023) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r3, 0x0, 0x0) r5 = getpid() ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r5}}, 0x3c) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) 17m14.259710027s ago: executing program 1 (id=1490): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000003500)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) read$FUSE(r1, &(0x7f00000014c0)={0x2020}, 0x2020) 17m10.1184866s ago: executing program 1 (id=1497): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r5 = socket$inet(0x2, 0x1, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$bt_sco(r6, &(0x7f0000000280)={0x1f, @none}, 0x8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) 16m54.576820726s ago: executing program 32 (id=1497): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r5 = socket$inet(0x2, 0x1, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$bt_sco(r6, &(0x7f0000000280)={0x1f, @none}, 0x8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) 8.825758287s ago: executing program 4 (id=5323): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6.467423533s ago: executing program 3 (id=5329): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6], 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) 6.377209345s ago: executing program 3 (id=5330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "fdffb26f", "a2deb79f8c96bff4"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000000080), 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) 5.548842347s ago: executing program 3 (id=5334): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2c, 0x0, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 5.31858424s ago: executing program 2 (id=5335): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) connect$can_bcm(r1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_debug_messages', 0x8000, 0x144) recvfrom$netrom(r2, &(0x7f00000003c0)=""/18, 0x12, 0x21, &(0x7f00000014c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @private, @dev}, &(0x7f0000000340)=0xc) fcntl$dupfd(r0, 0x0, r2) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD) io_uring_enter(r7, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000000)={0xfeffffff, 0xffffffffffffffff, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 4.617465151s ago: executing program 3 (id=5336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) inotify_init() recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x400, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) userfaultfd(0x801) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004010) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200000, &(0x7f00000012c0)={[{@dax}, {@acl}]}, 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.833504783s ago: executing program 4 (id=5337): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) 3.705428854s ago: executing program 2 (id=5338): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6], 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) 3.481466318s ago: executing program 4 (id=5339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.459819188s ago: executing program 2 (id=5340): syz_open_dev$sg(&(0x7f00000007c0), 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000a00)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 3.365449019s ago: executing program 0 (id=5341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002200)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x0, 0x3}, {0x0, 0x975e}, {0x0, 0x9}], 0x20}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_extract_tcp_res(0x0, 0xfffffff7, 0x3ff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) userfaultfd(0x0) 2.876113187s ago: executing program 4 (id=5342): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "fdffb26f", "a2deb79f8c96bff4"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000000080), 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) 2.544721182s ago: executing program 0 (id=5343): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) munlockall() mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000540)='./control\x00', 0x60) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r4, &(0x7f0000fc4fbe)=""/80, 0x50) unlink(&(0x7f00000001c0)='./control/file0\x00') unlinkat(r4, &(0x7f0000000140)='./control\x00', 0x200) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000bc0)=""/84, 0x54}], 0x1, 0x6, 0x0) 2.478528193s ago: executing program 3 (id=5344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2c, 0x0, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 1.491482408s ago: executing program 0 (id=5345): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001d00)={0x2020}, 0x2020) 1.464194698s ago: executing program 3 (id=5346): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.413505749s ago: executing program 4 (id=5347): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xffe0}, {0x0, 0xfff3}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 1.412262829s ago: executing program 2 (id=5348): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6], 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) 1.33734813s ago: executing program 0 (id=5349): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000009800)="c119ed7667ec1da6ce5ad10520d9f0d916f246337b0557963a20976c5c2e3b9c50442c3aa3ad8af4490e25e8a248ad6569c868927ce88fde8f6dd47700c012579d8f5517c15a8692ebbfe31637d24da9b182159a75eb201be82b5b3482e6f7d3344eb462be4e452a789b9246974e521beb91400d62ba27d79dc7e4a2511c941b7658a426f1b03867abe8958cf54e277c8c7eba60d65881156958563b415fdfb45237d979dfffc5a2399d245c064928d88f8f2ad57fc65556fc4404b0deb7fe8b794c8f853fc356646a4bd5a3bde17b164539cde75bfbcb82189d10658affc840871f99d48a657c0a490f44959ec808a7de09590156b5f4dbe9689884f22c3388c3d735ab0a38bfa911e234a40a7700258e36df5be8b1e6e8d229a9ad553628c9e2d099d87e54328d8e75a59b5add9aa55447c933e752fc3bd90aa92645449401e7a715f3b4bcc17c799eed78a917850f05886472640ec78ba017ae6e83683db81d999696d3ad34143e5d6be46724f4086dd8480e85b070e2980ee952ef91f8467bf542428b1958ead9f7a09641d0c33c1566e77a3c923d94bee7dc9046e8b6803dc5c5a6e34ba951d2a0fe9d6d03a57391560e2328e8c581474e38e40055b45f7467b4dba95d64dac57b6fc0dc8a40f054aa801a3c022dcfadc793ecfb9968d3121157b0a8b25b99b09038c58570205b4166f3bd749d7a0f8bf89033e11c0a456bb72788cf7ccfeb980ce085711f8ea531fcc57206d8e0e0aea1f3220066c7769d71026259468604a5cc7331cc971a4cd78d8552e0e0d9955deb21282a27f0a5f8364d0f9fe91016f086c10a3662a154316891ae4fb8cc3481b2253bbd09c64629f3ffcb5e82b495e6721dce47734254ab64cc119c2a446f34d6cac813a3c0444d9a13ebbc0fa4baf1bdf78b9a9cf6620fe488bf2a1bf7e857ad6ea157542761cc6a7da8d4c2242853a1fd14629491680253603b910466927c2dd4818464d7d9c246b9cd726d123d1dda95d0325370a0f1b5751796d13501a2aa1ec0dc70a5b749f8d171cb7569d9b74354883a2216f452cc712d0829c8c5f206cc7924652473931adfd2bd3940b3adaf54967c0af599d4968da74f25d2cc309dbdbe3d6faa08f2c08205365d3c4a2c8344b1047c7d0caf6b595e5d24c89ea1b532fe3094d7a16c716110b75deb22a5a281c0f133cfcfaf5238a3c493c4f97f890bb33769ea652c67149be70e62de16b65730b3bd2f547c084ee77d456a86bf8f1f7304703d2524443c4b66ceb7d2e5d97124a6ae48158c16cefa3eb94a7ec49ae43dd02f9edd0924d73c7cec977186442518b8dc642dea31dce2b79b4ec5400210817da04caf0198e933e8c618a5f0e7123ca5786c45b10a543e7de350aa4c072c85612a99ec9534f70130eebc0ef842416091a0adba1d30730d04080928c094d49a70f0a354b918725578b27a9b65f1a43a7dc9d8b6c9a23e08ba83bb8802e69454eb316a6a0188713704b30098479f5d99497e60ffb372dbbe07642dea12bf6f3f4b6c508f1e061b0211b9be792fda7bb86f51f018085f2fd5ae316c761b35d562dcfb783b87d6da0820947f5d055f0f7cd3c50f1c61f1da1a73c7ef107f0ad957977a33cdc67f6aa82e03490f5333c1ec0a1fbd14b2aa961d2b3f6315bd06029c4c9654414bd9256de44ecf3b0485a41a9f7183d0469bd327f549201924ab80e3227f228e20e9fd3b646b3134385ed058f4bff4f714cdaa855e2c364d7bbaaf26df65bdb9dfc4f6104d219e41684493c621588ca8d01ef3211c28d613bc67e498b4b80279249bd947d029315dcabea9362e0258a5a819530459df44f7c83972299e54a29afd836fb176cdc1d86398b6c7a75cd15b1f76a0070839b5a24366603a0aee35a9f784e4a633703de42e6648a9626160a25c9033242cd97eb07ffc54a01d94c48333e832ec0eefe51a266fcb526dd2954cd1147d2a2df260affac31e4cec7ece02dce3f61078b0111b94c3bbddd41487e33820ddc8cdf7a1ebc58531f280e2c12a8514bb4e7a176208b73ec6f4cf1b660393837dea00a8474fc41039db848ad6b0375a36ba35582736cf7bdb33a051d49f966fd17a80cef2f0c458d1d5c932e4193c5018105416ff1b27eddf56d4277a49d0adbf34c998a062db4c8263f5c03696cda85a6f0db49a5c58e2809d7519e6ecaa017d90e31eef725fdb3f26d77bb15a3d924d3ccb728535dfdb7517a10b9a54a551c1ec95c6770ee0901d18f24149678f1677d1f5c447aee584c6f1dbb7a952da6b91e8af3d98fe790201b89a05b61abacfe6acd7a774e3a12436d169f54b8e2572f0ed70ca78e801bbc3b783d73c96d5424b82de2d8ba84f585c67cb4c7d8175b8a2fd75a59b24db0403064924a4a6ea5423ee818b70d1c5403da14370fbc98ab4ea6a7fe78e7d3e8da1a3f04856edd96e8b9d7e80064daed38d0ca194a638a11175a9812569a640a8d36afd90f19a1e0118ff7ecade45238544dcf5864697c4d36e444fb82bbc222a8a2bec2869c623f61aa38299d3a4e8806721d579907c31a0cf50b82dcebe08d8c5a21d97a707d5a83de1fb145227d0303334e5cc73c628e818ab6901c001ef8f02557d5ec579189b620f0e3307df5273573f707ee91985823894f9ccd80415c91d7baadd31ceedb3b26212e09a62bc22392fbbf3aa5e340dd3408c1c9e3d1d144dd5260c904812952466ba31a2dc80b8826b1354335b0d754954bc93cfce0eaf93665600f67505595ed66eb38ac98a23ae6568aac700361e784fc8ff3cf0cd19e15a3508f42fb1bca1f95a6502b5ed09df0f75859527025798b890df2f0110cc20798a7096831c9822ed5a9341fd6afc85a78736b857bbfbcae5f61fb5a3ca5577c4bfb6b1ccac7f21e95cb2c1e3fbe91f5a46522bfc49a0e11b4ccae898b5215cebacac2ac8d6685b05a9df649d39e40c66f4f1373e77a722beb0ed05167fa206fd66cae5b01741f86cc1681ce7efcee5d67cf8a89627d7d02ca8ae96e32cd5d74dffa715b7c2e0f24648932930e69667939490cadcd06b4396800152fa3dfb4810ab6c4de8f0814a9fb211517d19932befe0c0613699d481ba2d3140836d9dd074ac5dbbc27284463f190442b453d4a06e1e0053d0e097420e1406b104cc8bdc486a1fc581cf1dca50f63ce3de1403eb4a5080971aa2a2a911c3d24d0370b1c062e6b21c6a694eda76e61b877e596d34ebc507f10c3bbf969793f5b71d026d03cfcc2bdda2acdeea4b7066f07be408f6bb35ba7f3b8196e9a1d1ea30ff709d8c0fa29c40056bd53e609b5217976c422efe8052e4cbda4b12dd2a1286a4460c57bb3a138c55408fa6a0888e32299cc47efb84ad61a98385854824ec253f1279f9d1ffe6becb8c427b53c57b537e0f000000c7902347589230aa7316523108ab38842b3b97a0840d4c3eabd229232a71302edd1f3375d0092cb3a07312400c1be8a94da53a79d2fce38fed341193f6c4dc41f396774145aa18400bf108577e714f4a4c50ce408392f954eeae696d2605bb973b147ef98fa35d576c957a01f262d81157e1c8aaafc708634366afcebbf31cd4b7190d29e0b3a2960ab5ea952eecd38becbb7cf7659a95044a1ebe4240b0d26c7a932c14c1252eb24bad57be94c5632bc42aea31f722904306d39f1d0850ac029537c4425d048ecf3fcb5428638dbcb86e17d60164fc396c706c10f0a1ccb4dff2f36b47510a749dc03e32fd7f13893db135790d29a56fe1fae6d0202831d440242be2086c6e5dc71dae14089fc080a358f159faafb397da8ad8b48b1615112c76627a0e47a7cbfd2cb0e9a9c5316e96f8c2cf4ab7c875ed1bbd5a020ff2f265a1f63b6151a2288c3e83183e68cd12dce8094d392137f061d43421eeeee504e4db172c9fabc6297a5641a9a7696f16660489fd6f7ad9421068bd1294941e51b8d2b818627e3081369583e91c6b8b68c93173dc7fae27f3bb9a4c6a3d69cf5bf28b3f8b5c8fa8a8a90bfc228acd1df93c8b3f15fb318c7524ef2e8b6bc18010b4ac5b448dd3a134531654d610cfc9b393b5b1a22e90377b74ebc64aae95987881c0602311c0fa94cd612889125da49b810acf9617263b55e504b1b9160675cfbef83170fba4134640cc2be541bdb54077dd65304eddabcef91a3445804bcdbf00f53dbd3345c190c2ec117dfa986dd04c3f02b7ba9eee47538c5fda856d432cf343596c53cf3c109ada410a6e7b09c3f14b60c2c8a4cdf5ee0791017cd25f7ad96d0c51a5cc52e2647826662a99266a2f2072b7b1acf805d44d8064d419999df38537ffcd78a78ce3837bfe1faf7dc79f5e0d32ea5e62c06e6aa716e0e048cd5c5fa8b4212ac668ffaca2a4e8afb91aa7425a800fef89fd97587569489088b434510a38a49e8ee3e1b96a307dcd999268967405f354dc0478bac5229203eb9d6aacc2db83e233ce852ad55b799b6923653d3d5788ac56ffdfeb206acac33010161536e3573d54eea1925b6f4edc6aa193e9e362681e34564d146b49ed916ab8d6aea1a78e526c7a0dc56f5ca90d07862d17cb3f21307f2e012ffd011ec64d4cc23faa4a08c4128c0892be5d5999f681dd28bd6796f83e1e0b80ab61249e5049e81c2e692e360194129d1c9aa13d5302d3cbc6060159632c6d3c2db27c3fab53e0919a81ff5878f6328536292905883095b65581b696ee94a8a0dd7d0d11a2e269959a6f848c87eefef283e57fadf325b665ade2d6591b283c33ce9092ceb39df5bf6ff92cd6180353d8021cd3b8a7efb9be4f79b37ee19e4b9eccfec49b1f526420aed78424d5129afca3e28e1e6cb5cfdd894289abd5ee69d29413c548f65baea4c99ae73055000adb0dab38e7bc6c9c562a3214e3b279decf1dc731ceed1e4def2d70360953886da1eb7b18b745fd6d8751d038c6cde166d4101df1418689468d3add001cc44c8f2ab8105fc362cf5792d5c270441af890ba4bd563ce68b57a0f99b80ba93f7fea3765ec1fdadfc7274d4d7c46da05fbaf47e29de56ffc53f71188f94cc3ea26197eb9274aea10f793e348541feda0cb82915fbc966d317b74ef23a851f3a7886fe99c4bf917d5932dc9576313518276f690f400b8de28cc92c2b753ae283c7fa1639af82ab939e3be687621a525dbed50d33cd6366d559a75f1bd1cf25a0bc421c79debae4263beb171539835e6e5447d411383c3d7ebc8157892ab6d5013d49b0b777dc27f629e9e0924d889702dec588045563cc09cf1bea68fcfd0a2c6943248009b95cb6055b5c2f521c4120ecb4233c47d7f0454afa93063d5b26b94530b3b3089b85b64ebc684e5c38a561ba437b09582d38fd379e48e752cffc532bb8bec2999b2ce70fb9e5d7101d740008c935680537e8992b576c9f5dbcfb35513c11fa48caaedf52a6bc350aa2acbf1ec561680d8ee9837d3373e2d51183279a95d41eeb9558dee0fa43256b9a19012b3091a4bc1e94961beb05c33869915e69413122a953e0be0fb9759c9b8ac1254aabcce151638d60d197458e9757a1d1b0e7286fd66dbbe9deb51ca7274b3e0efb464ff44aafd5024cc534ce0d725bdd4e43601279231b6fda22ec25a680588794f086a9c094b751c575d0e0251afa27381c55a9c190ee3af55af0d20424db2411233fe46c537b41dc576639979469925a8c8e515539bebba248d3372ec80875afd26a04ef5d1aeb61390901eccf4df562680445ccd6a90fc70cf0ec08910b23e108ba9b35a689fecbeeacccda80a2acc6d2e7ed2990ac386ff3cc7992ea29d94bbe7d13c96cd31763cb8a5a150c6ee1781160e27df9b51678e650d009e95322a0a639c165288be42681e3dea6262e00ffdea6f076b9bc810880cfed87a609f1096dcf6af0f053b5ed80c2053157b97396d2876f6600149cda0fcbdac08621ae99e9fd24393d30c3911da7573c3675a695f9e014a3dc2d2e45296abaff428a733cb742a01df7059828f64e515099141081ab3a263c7c38459dbc0d32fa8768b8fc3550131d286637e25466d2a129d587663d9d0eaf4079a72cf37c9fccf5f2cdda2e9db69d82a87b4cf9c20dee03d935cf6099d1d1174344d551cb569a73c21ccafa6c59b988e0681bb175edd912cd64670598b444825c8f4a280dfee91ba18f50aa0f2fb529e5f73302fa09c4b9937f19ff6175af4f1321d3dc09e692ca7e1934f31ac91fb6e6fca4b1dda3a0063c8eeb5f68d43c820f8b9e1c6903ec1a2626ca3536bc386f42e7d865102daa82db5b2d2b580825afcfb65ca9c5cca7de06d838f84a84ee4f8381c05de2a0ec53bdcc447df8e8b9921c21cdd43312e1454790d727ae9c33487239195afc93149090e3c47dd9ec03feb51551ae92e9dc21ce5ebc4e8c8b99b9dd09ecd33a949aac69299024a52680c91244fcfefb9e2def28d0cdb621d7be8442c67c61b18a1228d341014a3116e9b8f2829e291f788e368b6e36460a6a76987918caa641f06184ab0a3910a43dfa97b3e5c31c837a12a436ee8796f9f507cfc438e6b061a59342be0c0bef0b646973d58830063a28c1cd3f434173f450c2ca3a846adcedf6b5d0bfd0813948e79fb8b6bdf9a5add644ab2a1d9795faae8ab680db6a4ad933848ec6ad09b212605ce497b2dba4eea307c45c17099a3f116508c73371d6f3dad906cf8ee9a9eab88e9365fc78112dfc8a4f865e627f1f6e11357632a3a1a2e9391f56376f8e181555ffc98ab9d93874392e81aa4183e8caec57a4a29613a3c4319595553143adf28bae56b719b8be0b2acc4b03038d48de63b19ca362945637d4a385becaaddad5b3dba297ffe71ca0cc9c9c1ff843ea5f0dff511b88ec7a6001a2570d09606c36d6bede06c4c7e93c77ca3da73f9933b16650df963a39ff34a3e83bad1c14a5a9457166f13c53502e9b9600982aa99598f711ef22720204282c9b02fea3eb55d568160f0fd62633787a77fd8acaed92f2607020c26f6f9386f9021f9123204a3f20e745caf37849b25f360e174718e1d78a32dbdab5d5aeb36c9b3366167b0fee60883a9b0f8bcd9695472ff4820462fa6f75801abe45c4ce02c6de61bddb434bf020b1145f0ca58f035f46107ca63a507498d7a1ffd9f6d3071479aec5999c1e7abc0e014c5be04b92486dce4d8bd88c321f3017050c599a6ed8888f810c75f2607fd35a8795b7478d1c346ce6694a0e1e3604cbe2ec7a31415d80508dd23ffe4db304a2ca1bc65681cff1135b95fc05f0a3b8cada0f5c83e8d0f3cdcbd4bfb48a7895cc9535d81d13ccc8f9534dfc542d9837e352eddd62577ee711d26bb07f41e9948d4b917a926eb8093944ae45cc6dd13ec9b61816950d158226ab7f1b8d8a1465f3eef2e9a63b3ff097282d2541fef5102c8b651ded051d3219f6527d4b5b6fcb1bd0fffe7080abde84ea1acbd2b89b0c9577fd7273675527a12dcaec02b3262389b05c2c09792ce465f7a879de0270fc2b6f28403a1dca0c5fc28f0687351c5bb346de8cfea7532b834904bb012731ef8fe83036c95251c757683834672fa80ba8383308e3e9e536fb0e906a9727e6b2870c3a8ee056d353a3fafe8e9ffde7b0ce951b60b35fc2f7d1e476ad1c45f2559ac66dd007fc27253256f98877a4476ad273880a874023e3f75b14b32366172bf860eb6dbcb0a98b83972e23b02fd02027ca7f9eaa0ee38eef55ccbace6ea3051d79c6017c34b5b502a9b0e52c8b4bd80391af549e6f4accb1cfdf2071de59ba903dde378d9e66ed0cbbddd66ac365e64c8fdb93b97305a55cb39beb745d4a824d1de5282b1b839a72603fe033f8c7aae2cbab65fcfb54eff28eb0bd4c72e3e892f953e3251b88ce178641e79ab5484bff93a8eaaf601be15368b46690ca10e70188f581f999eac931fe48f31b8951ccff1ba5d6cc007246595bdb22a3dcbfb2c9fe0d010bbab856f4c651dc5ab7e8fb0193b1c9924facf3c05a255ef328d589a0a89bfe67c7d971bd7b708517c8540391f6a6b9724069e572be3f85ca86e46e6fdedd22695fd8b364f3d5aa1a585971a39e1822eac8f51661ecd13c41e6349c030434a0dff79f441cb195bb08717345cf29401c834c35d9009895b6e5c03406b202ee333d7f531898967f93aaea74265fc605fb4b5a5750305ab82203f2fb49493a5d3deb285a2777c8641b3d5df1c7cdde888786d314ccdf20b60c5e05279160fae24073027d8b8b61aa4e4760d8d7d785d2fa1e551c2ff644bb83e69fc574c754a195efbca225e7a5e5ffb1f0852cc80187661295786fa35cca2baba685f744ec9e193e212823741437dde5ca003973261a167a389f2e5ead402feecbb4045a39d3ebd76c4bfcc65f60bc841f8488d08f258a95caf36cbac22671ac59a7e3ebd22d600bc417b15daaf296b562928ca6a2d7c11c5e96d3c1f56e683f1a55c07dde2cf889be2ca901606b613a299703312e74f80092ff6128835ea200fad70e0c2d094818ba6178200a211d6b2d2b068a4a0d757361535a73ad59a309c2167c874b23b2abf4e5eaf76e7e6851d4232303b8c9073ccea7398d34732289d0530f4183d004cc4c9827668005d28799ed2b23005f70bfbdcf2f4b6a821c2ca12b7915a5bd6098753218ebc41b16475c8611f492f85b08f551fee983915a5cfc82d24abd29a281963feadfe33cfe14735168b2e0528b0493011aa234d18450d9b29322d7094f3202f6a6b49094dad52707a3a80324835bf34daf557ac5f18695069601c6011fe48084355af3b531fb0e16a6ff81a8f9708e1a610d38dda66365255c7aa3a3d37bd4b58baa13d1b910280567642f97bf4836a1fcf336bf6e9a0fb347abcd1cdccfda04acdca918766a64fe7904b2e67b8872afd4366f9feb944f9b9ae5577c76c55c24b85e44b48d464333ba1a9f6e1e8ba10b57d7d8aab05e86702637485998fecc12b3fb12ff7ba3fd26223881a06350f215a8bffc46eba2cba0af2e11439ce012c667c5cafe3d0690c77b3f1ba108caffd5726393e61f194295cf4c51d0d383632cd9b75daeceb84ec450a0d344b08596530f1b95ff8b034c04b263a530c59d822e9c8c5c7328e539a18a2905c117944e22eceb60247b7aaaabdf0859a9143ffe2935454b6a87f21bc1de97893c23b48ce03782252f60e880f56b839daae71aa8a19e753506b370739ea88294ca2e0c1af31438ea33b084c43c6fa1381b7f1b9423685c53f3438e1e8893c6d157b297b336cf7f032ab4c01248ea5b2222e24f90240d8f28f6455e36cc423dbd2888d56c3fe6bdbcacf397ac13a1983797f7ccb84a1cb83339d4e9f599a154ac406a3bee3d4b3749b4f0768b0b225f31c9c91dc26a45a2e109a218ddd22af93b86b6fe336d3a051f7e07ff1d1d5eb662de4cfda0dacce0e20c37f34c75a97815591da22aacaa1e3a8028af1b5e15e470e800fd1dbdc99f21687724f07737c2c315e0836cb169f71e689fca00a2c73fe666699cd6571ea106767bd7f0bca061f0b4a21991fd02b8e695b78474ee1c9bc13bcdb9e477c02acf2343d449f9b85bd618bf7a2bc353c356b9578d3316b17f8bd3fc20f2b1a7a4cdc518e79c77d472c5cb6762693388d3124579d884a49a69d7f07c332be891c3244525c2e6b9387c041b93706a0121365cdf69aa839346e5e180945d8af7da0a8f65cd1bad1377d13ff6d02e7ea54d4377a1d3d49d3d357e61890034409b19f44fc02f5574f40fe535bd423bbd96a0a542ccade1b478b78265b25c1322fbbb8ec99cb45b22d737ee248169fe08f8a2958b925ace6372bcf1d1be57e9b4de97bd0db62425c53d869794d4390312b67db5e61d1b42c5afa549065005f359c47734f54b7f30918be1e2d0ff21596258caa287159fbe6dc0090242c43815367bb45067a55e0658d58eefd081b1541cf393561a5a369fe90c6d5d8caba63198c84fa0467fae813ecd3fb740a3783a53dfad07c9493fb3936b802e1bd9fb558bae88c44d9a4795aa634c13a5fba50923636ac6e2952da6c8424cc616eb364c11f876663d105fed392c15dbb00f9caf50af20c44e4fea91480cb4bfecaf126451e6f19146bb2ff26d310416c62410c37b000a1d1f0480419e5f5f320827fce26fbb25c9ab882ad4bdf6a674aaee87b85309a9783bbd34606ed46f6f761c5e124825b0e5df507c505814c769323bfa36170015e1720e2cbf30f79cc8515df1fb7d58695ecf8825e924e098d0dfcd5e396093d996a2fd4a9c5de03254b12dfcd2342f49acbecf18dc3417382e5b507652b1d089eed0805479546eba0fc7d17ecf11d692b4ce817f270720cf20737d3f02e302cf5e18d649bf3405fd262dba305e916280a38e3511307033dd70d2cde39d528e676f6a051ebc73b6ff0d5f63b58970e38e39ea366977a0809e22eed665620f65bbdd2f94ad82f3faaba1bfac309f60f843fe89573787092c8f7a7b44018ba7daba13e6b093b496f79adc0732574cac1cc33e5234d7770ad6cb534dab9856e390e172a91532ae77f4ec98054f4c12b02d0438ddf8d8d173e6a59f66564accb785693897b335199d9d8338e242703ad120f465a19153a1a330dcc275a399af921e0dac2b6d79ea51ec72fe932be071352c12933367487d7385de66d62b2bf5cae6c4d54f099d7c4ee10919dcb33a2b31498d979504b619a6eaf64ed400e491859f9c78c1d9d434d6ac69d570796088d76a47b4999816eb3b15e8de155f1392b75c1517e91df38ef0793610451ad31a0906eecf14c80b679202a6df9f00c7d28d1449988410c652740dde2ace85080e2a4f16824cde15ec4023b1fc4537d6947f1e001d37c90acae2995aab5476a99d3a20af07ae2e564e27e31b30d7bc3b8aa016e3b5c38feb9fc947ace24e83e7ba4f69f72e92f8f26bda8dd09ca791fe9cb1d0e14278c89a20ee2896924e88ba9cb3b916aff3b7a5924a91b4495d0305fb4adb3e036a31e2f200f272d4fa7285f96ab7e7b934464227e108511ded2ae4337aee944e4067c7b741d2f55483243d641b8bcca425bb69f591065a3b45c6f9513b472aff95c1b3e71133b3479cd5fc51e9eefe5bf0f7c2f9256f8d49a2ceb2d11ca0f0eab1e42464cb7d6aaa0c023147c1f108c3d6d1fa379638979170cb6d94fa92e5cf5f69316fd64c027eb10ddfd9b91fc91829f347cd73433e5197fd97fb10e99d2ed8868d49e24d59efa6758667f6ffc18e5258f98afeb01a3d794813fc2b9190090ccceaca0526f06a948d45bc7e2e40cdec3cf78c10676a8bb8a3e5e7200b3726b3407bf666862f9038d8216f9505cf7aa9a04f934d6da311d6500452676dccfd60977c4c99d56dcb7bb45fb2081e19803841a8edd8cc55b08082d9798a5c3a80de66f4ba2ccd90566d393d94608f17724719393b9df7725baacdf0e4e984b454576ad4f793143f4c8dc5f1ca822fbcdc90e9636727ee0638fb26759e6ff79b19c97ad224e5a85e1075833fe7fd2f3424420a5197eaa9d440c52807fc3e96c447dd745e49189f427454aae6aede782a8ac40582d85acc9ae68f95af556945889ae1fe381e69ed18aecb08866f5558ae36b6ff61c86fdb2b6f3eca083dc41c0", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsync(r2) 1.281114361s ago: executing program 4 (id=5350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.259234701s ago: executing program 2 (id=5351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002200)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x0, 0x3}, {0x0, 0x975e}, {0x0, 0x9}], 0x20}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_extract_tcp_res(0x0, 0xfffffff7, 0x3ff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r5 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) userfaultfd(0x0) 782.187808ms ago: executing program 2 (id=5352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) inotify_init() recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x400, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) userfaultfd(0x801) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004010) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200000, &(0x7f00000012c0)={[{@dax}, {@acl}]}, 0xfe, 0x244, &(0x7f0000000400)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) 374.990014ms ago: executing program 0 (id=5353): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003fc0)=[{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)="7965d14fb8567f04793baef94494084bf8bd2bfb", 0x14}, {&(0x7f00000000c0)="bb72da6df228aed940be15bede25643c4c47e67ec120b2e66eb943f5462cf3dab0b079eb7f1512920c6ca8f1", 0x2c}], 0x2, 0x0, 0x0, 0x20040011}], 0x1, 0x40800) 0s ago: executing program 0 (id=5354): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2c, 0x0, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) kernel console output (not intermixed with test programs): : entered promiscuous mode [ 1353.905174][T19345] macvtap1: entered allmulticast mode [ 1353.922619][T19345] erspan0: entered allmulticast mode [ 1355.048162][T19366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3963'. [ 1356.160941][T16448] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1357.174325][T16448] usb 1-1: Using ep0 maxpacket: 16 [ 1357.234037][T16448] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1357.281294][T16448] usb 1-1: config 0 has no interface number 0 [ 1357.296113][T16448] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1357.311290][T16448] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1357.325853][T16448] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1357.335522][T16448] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1357.344828][T16448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.353172][T16448] usb 1-1: Product: syz [ 1357.357471][T16448] usb 1-1: Manufacturer: syz [ 1357.362244][T16448] usb 1-1: SerialNumber: syz [ 1357.377895][T16448] usb 1-1: config 0 descriptor?? [ 1357.383942][T19381] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1357.488631][T19381] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1358.318319][T19381] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1358.341214][T19381] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1358.549786][ T27] audit: type=1326 audit(1751742121.307:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.4.3974" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96a138e929 code=0x0 [ 1358.787599][T16448] Error reading MAC address [ 1358.801957][T19381] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1358.825163][T19381] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1359.043564][T16448] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 1359.078408][T16448] usb 1-1: USB disconnect, device number 23 [ 1361.678447][ T27] audit: type=1326 audit(1751742124.437:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19447 comm="syz.4.3989" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96a138e929 code=0x0 [ 1361.735584][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.742071][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.166746][T19467] netlink: 'syz.0.3994': attribute type 7 has an invalid length. [ 1363.865959][T19488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4001'. [ 1364.533563][ T27] audit: type=1326 audit(1751742127.287:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19490 comm="syz.2.4003" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f735d18e929 code=0x0 [ 1366.357811][T19527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4011'. [ 1370.991271][ T5102] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1371.007200][ T5102] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1371.041156][ T5102] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1371.059932][ T5102] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1371.068419][ T5102] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1371.080094][ T5102] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1371.527223][T19568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4025'. [ 1373.175438][ T5102] Bluetooth: hci3: command tx timeout [ 1373.313106][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.698265][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.261725][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.545516][T19552] chnl_net:caif_netlink_parms(): no params data found [ 1374.642066][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.909285][ T5102] Bluetooth: hci3: command tx timeout [ 1376.955485][T19614] block device autoloading is deprecated and will be removed. [ 1377.439485][T19552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.542931][T19552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.640959][T19552] bridge_slave_0: entered allmulticast mode [ 1377.681042][T19552] bridge_slave_0: entered promiscuous mode [ 1377.811259][T19552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.831349][T19552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.850628][T19552] bridge_slave_1: entered allmulticast mode [ 1378.086222][T19552] bridge_slave_1: entered promiscuous mode [ 1378.930857][ T5102] Bluetooth: hci3: command tx timeout [ 1379.263347][T19552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.294450][T19552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1380.271478][T19552] team0: Port device team_slave_0 added [ 1380.400552][T19652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4047'. [ 1380.715816][T19552] team0: Port device team_slave_1 added [ 1381.011246][ T5102] Bluetooth: hci3: command tx timeout [ 1381.365061][T19552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1381.389110][T19552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1381.468776][T19552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1381.579025][T19552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1381.647873][T19552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1381.715747][T19552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1382.469250][ T11] erspan0 (unregistering): left allmulticast mode [ 1383.472569][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4055'. [ 1385.215057][T19552] hsr_slave_0: entered promiscuous mode [ 1385.284622][T19552] hsr_slave_1: entered promiscuous mode [ 1385.316266][T19552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1385.350794][T19552] Cannot create hsr debugfs directory [ 1386.573369][T19720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4065'. [ 1386.668288][T19720] bond_slave_0: entered promiscuous mode [ 1386.674062][T19720] bond_slave_1: entered promiscuous mode [ 1386.708085][T19720] macvtap2: entered promiscuous mode [ 1386.718085][T19720] bond0: entered promiscuous mode [ 1386.731349][T19720] macvtap2: entered allmulticast mode [ 1386.747019][T19720] bond0: entered allmulticast mode [ 1386.767472][T19720] bond_slave_0: entered allmulticast mode [ 1386.789841][T19720] bond_slave_1: entered allmulticast mode [ 1386.806810][T19720] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1388.268942][T19746] sctp: [Deprecated]: syz.2.4073 (pid 19746) Use of int in max_burst socket option deprecated. [ 1388.268942][T19746] Use struct sctp_assoc_value instead [ 1388.970203][T19762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4075'. [ 1389.939089][ T11] hsr_slave_0: left promiscuous mode [ 1389.959713][ T11] hsr_slave_1: left promiscuous mode [ 1389.969601][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1389.978729][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1389.988960][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1390.007347][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1390.022328][ T11] bridge_slave_1: left allmulticast mode [ 1390.031049][ T11] bridge_slave_1: left promiscuous mode [ 1390.038352][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.058478][ T11] bridge_slave_0: left allmulticast mode [ 1390.065032][ T11] bridge_slave_0: left promiscuous mode [ 1390.078025][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.126707][ T11] veth1_macvtap: left promiscuous mode [ 1390.132626][ T11] veth0_macvtap: left promiscuous mode [ 1390.138265][ T11] veth1_vlan: left promiscuous mode [ 1390.144914][ T11] veth0_vlan: left promiscuous mode [ 1390.371828][T16775] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1390.590274][T16775] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1390.623842][T16775] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1390.660812][T16775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.709732][T16775] usb 1-1: Product: syz [ 1390.737252][T16775] usb 1-1: Manufacturer: syz [ 1390.764737][T16775] usb 1-1: SerialNumber: syz [ 1391.282507][T16775] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1392.140030][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1392.173536][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1392.217089][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1392.260099][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1392.729748][ T11] bond0 (unregistering): Released all slaves [ 1392.994993][ T28] usb 1-1: USB disconnect, device number 24 [ 1393.004581][ T28] usblp0: removed [ 1393.347672][T19552] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1393.423878][T19792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4084'. [ 1393.625011][T19552] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1393.729417][T19801] Cannot find add_set index 0 as target [ 1393.762054][T19801] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1393.883020][T19552] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1394.009540][T19552] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1395.091092][T19821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4087'. [ 1395.706267][T19552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.804806][T19552] 8021q: adding VLAN 0 to HW filter on device team0 [ 1395.851967][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.859104][ T6174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.898518][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.905690][ T6174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.795091][T19864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4099'. [ 1399.315910][T19876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4102'. [ 1399.373887][T19876] bond_slave_0: entered promiscuous mode [ 1399.379629][T19876] bond_slave_1: entered promiscuous mode [ 1399.391357][T19876] macvtap1: entered promiscuous mode [ 1399.396719][T19876] bond0: entered promiscuous mode [ 1399.412254][T19876] macvtap1: entered allmulticast mode [ 1399.417650][T19876] bond0: entered allmulticast mode [ 1399.457841][T19876] bond_slave_0: entered allmulticast mode [ 1399.490937][T19876] bond_slave_1: entered allmulticast mode [ 1399.510433][T19876] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1399.777721][T19552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1402.250040][T19923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4109'. [ 1403.111105][T19552] veth0_vlan: entered promiscuous mode [ 1403.149043][T19552] veth1_vlan: entered promiscuous mode [ 1403.214224][T19552] veth0_macvtap: entered promiscuous mode [ 1403.280253][T19552] veth1_macvtap: entered promiscuous mode [ 1403.497265][T19552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.603912][T19552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.691959][T19552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.726666][T19552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.805236][T19552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.858165][T19552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.912457][T19552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1405.033614][T19552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1405.079975][T19552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.125366][T19552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1405.183371][T19552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.205710][T19552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1405.240754][T19552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.269017][T19552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1405.433889][T19552] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.444588][T19552] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.457871][T19552] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.467629][T19552] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.913500][T19963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4121'. [ 1407.453743][ T2889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1407.523206][ T2889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1407.645297][ T6174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1407.654616][ T6174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.795641][T19997] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4131'. [ 1409.919865][T19999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4132'. [ 1411.914553][T20025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4142'. [ 1413.751578][T20055] overlayfs: missing 'lowerdir' [ 1415.237162][T20063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4153'. [ 1415.353715][T20061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4154'. [ 1416.443182][T20092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4164'. [ 1416.457839][T20092] vxcan0: entered promiscuous mode [ 1416.464560][T20092] vxcan0: entered allmulticast mode [ 1416.611792][T20086] overlayfs: missing 'lowerdir' [ 1420.171500][T20130] overlayfs: missing 'lowerdir' [ 1422.877616][T20162] overlayfs: missing 'lowerdir' [ 1423.194281][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.205434][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.682816][T20167] loop4: detected capacity change from 0 to 1024 [ 1423.734714][T20167] EXT4-fs: Ignoring removed mblk_io_submit option [ 1423.781853][T20167] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1423.800972][T20167] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (22856!=20869) [ 1423.816546][T20167] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1423.827680][T20167] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 1423.837989][T20173] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1423.837989][T20173] The task syz.3.4190 (20173) triggered the difference, watch for misbehavior. [ 1423.883033][T20070] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1425.431165][T20192] overlayfs: missing 'lowerdir' [ 1426.521029][T20202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4202'. [ 1427.544504][T20212] vxcan1: entered allmulticast mode [ 1427.595830][T20194] loop4: detected capacity change from 0 to 32768 [ 1427.634795][T20194] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.4198 (20194) [ 1427.833006][T20194] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1427.862921][T20194] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1428.471198][T20218] overlayfs: missing 'lowerdir' [ 1429.201177][T20194] BTRFS info (device loop4): turning on sync discard [ 1429.209172][T20194] BTRFS info (device loop4): use zlib compression, level 3 [ 1429.249145][T20194] BTRFS info (device loop4): turning off barriers [ 1429.301233][T20194] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1429.349757][T20194] BTRFS info (device loop4): trying to use backup root at mount time [ 1429.390225][T20194] BTRFS info (device loop4): enabling auto defrag [ 1429.420898][T20194] BTRFS info (device loop4): max_inline at 0 [ 1429.441113][T20194] BTRFS info (device loop4): using free space tree [ 1429.465013][T20194] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1429.490661][T20194] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1429.571845][T20194] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1429.627782][T20194] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1429.698120][T20194] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1429.834246][T20194] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1429.862316][T20194] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1429.912197][T20194] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1429.941694][T20194] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1430.000844][T20194] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1430.036635][T20194] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1430.105709][T20194] BTRFS error (device loop4): open_ctree failed: -12 [ 1430.152669][T20246] binder: BINDER_SET_CONTEXT_MGR already set [ 1430.159076][T20246] binder: 20243:20246 ioctl 4018620d 200000000040 returned -16 [ 1430.221392][T20248] binder: 20243:20248 ioctl c0306201 2000000003c0 returned -14 [ 1432.646498][T20284] netlink: 'syz.4.4221': attribute type 1 has an invalid length. [ 1432.814243][T20293] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4225'. [ 1437.368557][T20342] loop4: detected capacity change from 0 to 32768 [ 1438.856743][T20342] read_mapping_page failed! [ 1438.893862][T20342] jfs_mount: Failed to read AGGREGATE_I [ 1438.943612][T20342] Mount JFS Failure: -5 [ 1438.972769][T20342] jfs_mount failed w/return code = -5 [ 1439.201324][T20070] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1440.900354][ T5102] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1440.910466][ T5102] CPU: 0 PID: 5102 Comm: kworker/u5:1 Not tainted 6.6.95-syzkaller #0 [ 1440.918641][ T5102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1440.928714][ T5102] Workqueue: hci0 hci_rx_work [ 1440.933431][ T5102] Call Trace: [ 1440.936705][ T5102] [ 1440.939629][ T5102] dump_stack_lvl+0x16c/0x230 [ 1440.944309][ T5102] ? show_regs_print_info+0x20/0x20 [ 1440.949501][ T5102] ? load_image+0x3b0/0x3b0 [ 1440.954008][ T5102] sysfs_create_dir_ns+0x256/0x280 [ 1440.959115][ T5102] ? hci_rx_work+0x43a/0xd80 [ 1440.963704][ T5102] ? sysfs_warn_dup+0xa0/0xa0 [ 1440.968376][ T5102] ? do_raw_spin_unlock+0x121/0x230 [ 1440.973573][ T5102] kobject_add_internal+0x6b8/0xc70 [ 1440.978765][ T5102] kobject_add+0x156/0x220 [ 1440.983170][ T5102] ? __rwlock_init+0x150/0x150 [ 1440.987928][ T5102] ? kobject_init+0x1e0/0x1e0 [ 1440.992594][ T5102] ? _raw_spin_unlock+0x28/0x40 [ 1440.997438][ T5102] ? get_device_parent+0x366/0x390 [ 1441.002544][ T5102] device_add+0x408/0xc20 [ 1441.006868][ T5102] hci_conn_add_sysfs+0xd5/0x1e0 [ 1441.011800][ T5102] le_conn_complete_evt+0xc37/0x1220 [ 1441.017079][ T5102] ? hci_event_packet+0x4a7/0x1210 [ 1441.022187][ T5102] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1441.028423][ T5102] ? __copy_skb_header+0xa7/0x550 [ 1441.033454][ T5102] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1441.039093][ T5102] ? skb_pull_data+0xfb/0x200 [ 1441.043774][ T5102] hci_le_conn_complete_evt+0x187/0x440 [ 1441.049326][ T5102] ? hci_remote_host_features_evt+0x160/0x160 [ 1441.055391][ T5102] hci_event_packet+0x795/0x1210 [ 1441.060327][ T5102] ? bis_list+0x290/0x290 [ 1441.064656][ T5102] ? lockdep_hardirqs_on+0x98/0x150 [ 1441.069847][ T5102] ? hci_send_to_monitor+0xd7/0x4f0 [ 1441.075042][ T5102] hci_rx_work+0x43a/0xd80 [ 1441.079465][ T5102] ? process_scheduled_works+0x957/0x15b0 [ 1441.085180][ T5102] process_scheduled_works+0xa45/0x15b0 [ 1441.090751][ T5102] ? assign_work+0x400/0x400 [ 1441.095357][ T5102] ? assign_work+0x39e/0x400 [ 1441.099947][ T5102] worker_thread+0xa55/0xfc0 [ 1441.104552][ T5102] kthread+0x2fa/0x390 [ 1441.108610][ T5102] ? pr_cont_work+0x560/0x560 [ 1441.113282][ T5102] ? kthread_blkcg+0xd0/0xd0 [ 1441.117859][ T5102] ret_from_fork+0x48/0x80 [ 1441.122269][ T5102] ? kthread_blkcg+0xd0/0xd0 [ 1441.126852][ T5102] ret_from_fork_asm+0x11/0x20 [ 1441.131628][ T5102] [ 1441.143190][ T5102] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1441.157708][ T5102] Bluetooth: hci0: failed to register connection device [ 1441.397018][T20395] loop4: detected capacity change from 0 to 1024 [ 1441.431718][T20395] EXT4-fs: Ignoring removed i_version option [ 1441.467656][T20395] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1441.608809][T20395] EXT4-fs error (device loop4): ext4_map_blocks:718: inode #3: block 1: comm syz.4.4264: lblock 1 mapped to illegal pblock 1 (length 1) [ 1441.676424][T20408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4262'. [ 1442.273600][T20395] Quota error (device loop4): write_blk: dquota write failed [ 1442.295387][T20395] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1442.313935][T20395] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.4264: Failed to acquire dquot type 0 [ 1442.341298][T20395] EXT4-fs error (device loop4): ext4_free_blocks:6681: comm syz.4.4264: Freeing blocks not in datazone - block = 0, count = 4096 [ 1442.373931][T20395] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.4264: Invalid inode bitmap blk 0 in block_group 0 [ 1442.396402][ T6174] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 1442.418811][T20395] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 1442.442794][T20395] EXT4-fs (loop4): 1 orphan inode deleted [ 1442.445945][ T6174] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 1442.462079][T20395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1442.501417][ T6174] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:11: Failed to release dquot type 0 [ 1442.673432][T19552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1444.023336][T20431] netlink: 4696 bytes leftover after parsing attributes in process `syz.2.4275'. [ 1444.440903][T16775] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1444.490871][ T23] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1444.681128][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 1444.689029][ T23] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1444.700242][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1444.714257][ T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1444.724306][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.738682][ T23] usb 5-1: Product: syz [ 1444.750231][ T23] usb 5-1: Manufacturer: syz [ 1444.757299][ T23] usb 5-1: SerialNumber: syz [ 1444.988110][ T23] usb 5-1: 0:2 : does not exist [ 1445.013758][ T23] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1445.091684][ T23] usb 5-1: USB disconnect, device number 18 [ 1445.154224][T20070] udevd[20070]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1445.234458][T20459] veth1_virt_wifi: entered promiscuous mode [ 1445.263207][T20458] veth1_virt_wifi: left promiscuous mode [ 1445.375714][T20463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4286'. [ 1445.654834][T20469] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1445.663665][T20469] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1447.849958][T20484] binder: 20477:20484 ioctl 4018620d 0 returned -22 [ 1447.947682][T20486] binder: 20477:20486 ioctl 4018620d 0 returned -22 [ 1451.471443][T20529] binder: 20525:20529 ioctl 4018620d 0 returned -22 [ 1451.563642][T20530] binder: 20525:20530 ioctl 4018620d 0 returned -22 [ 1452.309418][T20534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4309'. [ 1452.974281][T20547] loop4: detected capacity change from 0 to 2048 [ 1453.760528][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1453.771474][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1453.779825][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1453.789241][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1453.823174][ T5785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1453.851010][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1454.339342][T20567] binder: 20564:20567 ioctl 4018620d 0 returned -22 [ 1454.421969][T20568] binder: 20564:20568 ioctl 4018620d 0 returned -22 [ 1455.191798][ T5919] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.486205][ T5919] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.600993][ T5919] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.645032][T20551] chnl_net:caif_netlink_parms(): no params data found [ 1455.882650][ T5919] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.000974][T20388] Bluetooth: hci4: command tx timeout [ 1456.090463][T20551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.136068][T20551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.151735][T20551] bridge_slave_0: entered allmulticast mode [ 1456.166564][T20551] bridge_slave_0: entered promiscuous mode [ 1456.196276][T20551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.225134][T20551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.247035][T20551] bridge_slave_1: entered allmulticast mode [ 1456.263431][T20551] bridge_slave_1: entered promiscuous mode [ 1456.403955][T20551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1456.439790][T20551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1456.634545][T20551] team0: Port device team_slave_0 added [ 1456.691575][T20551] team0: Port device team_slave_1 added [ 1456.796581][T20551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1456.812244][T20551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.890784][T20551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1456.922877][T20551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1456.929835][T20551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.010894][T20551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1457.285037][T20551] hsr_slave_0: entered promiscuous mode [ 1457.317871][T20551] hsr_slave_1: entered promiscuous mode [ 1457.340777][T20551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1457.348357][T20551] Cannot create hsr debugfs directory [ 1458.052811][T20388] Bluetooth: hci4: command tx timeout [ 1459.206825][ T5919] hsr_slave_0: left promiscuous mode [ 1459.234212][ T5919] hsr_slave_1: left promiscuous mode [ 1459.248602][ T5919] batman_adv: batadv0: Interface deactivated: dummy0 [ 1459.274422][ T5919] batman_adv: batadv0: Removing interface: dummy0 [ 1459.301572][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1459.316982][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1459.333003][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1459.347454][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1459.367813][ T5919] bridge_slave_0: left allmulticast mode [ 1459.382788][ T5919] bridge_slave_0: left promiscuous mode [ 1459.401846][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.507296][ T5919] bond0: left allmulticast mode [ 1459.530778][ T5919] bond_slave_0: left allmulticast mode [ 1459.536388][ T5919] bond_slave_1: left allmulticast mode [ 1459.546954][ T5919] bond0: left promiscuous mode [ 1459.561341][ T5919] bond_slave_0: left promiscuous mode [ 1459.567156][ T5919] bond_slave_1: left promiscuous mode [ 1459.603618][ T5919] veth1_macvtap: left promiscuous mode [ 1459.609178][ T5919] veth0_macvtap: left promiscuous mode [ 1459.625375][ T5919] veth1_vlan: left promiscuous mode [ 1459.645557][ T5919] veth0_vlan: left promiscuous mode [ 1460.131163][T20388] Bluetooth: hci4: command tx timeout [ 1460.210852][ T28] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1460.410863][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 1460.428772][ T28] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1460.455342][ T28] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1460.476073][ T28] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1460.486704][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.503511][ T28] usb 1-1: Product: syz [ 1460.507690][ T28] usb 1-1: Manufacturer: syz [ 1460.515174][ T28] usb 1-1: SerialNumber: syz [ 1460.759110][T20687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4347'. [ 1460.970774][ T28] usb 1-1: 0:2 : does not exist [ 1461.110674][ T28] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1461.339907][ T28] usb 1-1: USB disconnect, device number 26 [ 1461.984812][ T5919] team0 (unregistering): Port device team_slave_1 removed [ 1462.043763][ T5919] team0 (unregistering): Port device team_slave_0 removed [ 1462.116774][ T5919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1462.166478][ T5919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1462.221735][T20388] Bluetooth: hci4: command tx timeout [ 1463.753385][ T5919] bond0 (unregistering): Released all slaves [ 1465.621074][T20551] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1465.720454][T20551] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1465.805173][T20551] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1465.851502][T20551] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1466.090788][ T8109] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1466.187491][T20551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1466.227192][T20551] 8021q: adding VLAN 0 to HW filter on device team0 [ 1466.242014][ T3431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.249154][ T3431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1466.287865][ T3431] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.287969][ T8109] usb 4-1: Using ep0 maxpacket: 16 [ 1466.295006][ T3431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1466.329985][T20551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1466.362503][ T8109] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1466.381627][ T8109] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1466.409584][ T8109] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1466.430785][ T8109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.456854][ T8109] usb 4-1: Product: syz [ 1466.477115][ T8109] usb 4-1: Manufacturer: syz [ 1466.487242][ T8109] usb 4-1: SerialNumber: syz [ 1466.678488][T20765] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4365'. [ 1466.730584][ T8109] usb 4-1: 0:2 : does not exist [ 1466.773049][ T8109] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1466.833002][ T8109] usb 4-1: USB disconnect, device number 28 [ 1466.849695][T20551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1466.917330][T20070] udevd[20070]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1466.966047][T20551] veth0_vlan: entered promiscuous mode [ 1467.027749][T20551] veth1_vlan: entered promiscuous mode [ 1467.122229][T20551] veth0_macvtap: entered promiscuous mode [ 1467.148898][T20551] veth1_macvtap: entered promiscuous mode [ 1467.190766][T20551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1467.235185][T20551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1467.268634][T20551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1467.286943][T20551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1467.298913][T20551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1467.359153][T20775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4366'. [ 1467.514577][T20551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1467.714056][T20551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1467.893738][T20551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1467.955363][T20551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1468.009307][T20551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1468.019868][T20551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1468.029724][T20551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1468.048081][T20551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1468.059711][T20551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1468.089412][T20551] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.112044][T20551] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.138775][T20551] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.170738][T20551] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.201234][ T8399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1469.209086][ T8399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1469.362882][ T6174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1469.393945][ T6174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1469.593844][T20815] netlink: 'syz.4.4378': attribute type 7 has an invalid length. [ 1469.619217][T20814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4308'. [ 1469.644036][T20814] gre0: entered promiscuous mode [ 1469.649085][T20814] gre0: entered allmulticast mode [ 1470.312310][ T8109] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1470.502711][ T8109] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1470.514991][ T8109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.546907][ T8109] usb 5-1: config 0 descriptor?? [ 1470.567531][ T8109] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1470.776209][T20849] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1470.806518][T20852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4392'. [ 1470.833255][T20852] syz_tun: entered promiscuous mode [ 1470.838486][T20852] syz_tun: entered allmulticast mode [ 1471.151458][T20867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4397'. [ 1472.568171][ T8109] gspca_stv06xx: I2C: Read error writing address: -71 [ 1472.611597][ T8109] usb 5-1: USB disconnect, device number 19 [ 1473.742968][T20890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4404'. [ 1473.822033][T20894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4408'. [ 1474.468414][T20907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4414'. [ 1474.753081][ T8109] IPVS: starting estimator thread 0... [ 1475.854338][T20910] IPVS: using max 17 ests per chain, 40800 per kthread [ 1476.214252][T20924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4419'. [ 1476.907813][ T8109] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1477.244621][ T8109] usb 3-1: Using ep0 maxpacket: 16 [ 1477.283847][ T8109] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1477.308573][ T8109] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1477.365270][ T8109] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1477.405455][ T8109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.433151][ T8109] usb 3-1: Product: syz [ 1477.447547][ T8109] usb 3-1: Manufacturer: syz [ 1477.472886][ T8109] usb 3-1: SerialNumber: syz [ 1477.498329][T20938] loop4: detected capacity change from 0 to 1024 [ 1477.522928][T20938] EXT4-fs: Ignoring removed mblk_io_submit option [ 1477.554998][T20938] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1477.630876][T20938] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (22856!=20869) [ 1477.714105][T20938] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1477.726511][ T8109] usb 3-1: 0:2 : does not exist [ 1477.741230][T20938] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 1477.746048][ T8109] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1477.778529][ T8109] usb 3-1: USB disconnect, device number 13 [ 1477.830632][T20070] udevd[20070]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1478.554027][T20953] loop4: detected capacity change from 0 to 512 [ 1478.622312][T20953] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1478.643790][T20953] EXT4-fs (loop4): Remounting filesystem read-only [ 1478.651777][T20953] EXT4-fs (loop4): 1 truncate cleaned up [ 1478.658070][T20953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1481.563568][T19552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1482.105731][T20978] binder: 20971:20978 ioctl 4018620d 0 returned -22 [ 1482.187359][T20980] binder: 20971:20980 ioctl 4018620d 0 returned -22 [ 1483.352875][T20982] loop4: detected capacity change from 0 to 1024 [ 1483.376254][T20982] EXT4-fs: Ignoring removed mblk_io_submit option [ 1483.407164][T20982] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1483.433437][T20982] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (22856!=20869) [ 1483.444750][T20982] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1483.455477][T20982] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 1483.901557][ T28] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1484.768371][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.775150][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.883993][ T28] usb 3-1: Using ep0 maxpacket: 16 [ 1484.910828][ T28] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1484.932584][ T28] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1484.958567][ T28] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1484.978364][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.000030][ T28] usb 3-1: Product: syz [ 1485.008704][ T28] usb 3-1: Manufacturer: syz [ 1485.029063][ T28] usb 3-1: SerialNumber: syz [ 1485.283528][ T28] usb 3-1: 0:2 : does not exist [ 1485.309639][ T28] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1485.369111][ T28] usb 3-1: USB disconnect, device number 14 [ 1485.457545][T20070] udevd[20070]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1486.600742][T21023] binder: 21014:21023 ioctl 4018620d 0 returned -22 [ 1486.722705][T21024] binder: 21014:21024 ioctl 4018620d 0 returned -22 [ 1487.543169][ T28] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1487.910537][T21031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4455'. [ 1487.919713][ T28] usb 3-1: Using ep0 maxpacket: 16 [ 1487.935144][ T28] usb 3-1: config 0 has an invalid interface number: 177 but max is 0 [ 1487.955726][ T28] usb 3-1: config 0 has no interface number 0 [ 1487.983433][ T28] usb 3-1: config 0 interface 177 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1488.040603][ T28] usb 3-1: config 0 interface 177 has no altsetting 0 [ 1488.049553][ T28] usb 3-1: New USB device found, idVendor=0a07, idProduct=0082, bcdDevice=aa.af [ 1488.058859][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.067192][ T28] usb 3-1: Product: syz [ 1488.072795][ T28] usb 3-1: Manufacturer: syz [ 1488.077412][ T28] usb 3-1: SerialNumber: syz [ 1489.055621][ T28] usb 3-1: config 0 descriptor?? [ 1489.941255][ T28] usb 3-1: can't set config #0, error -71 [ 1489.950962][ T28] usb 3-1: USB disconnect, device number 15 [ 1490.010835][ T23] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1490.692571][T21058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4463'. [ 1491.884321][T21060] binder: 21055:21060 ioctl 4018620d 0 returned -22 [ 1491.979931][T21061] binder: 21055:21061 ioctl 4018620d 0 returned -22 [ 1492.495684][ T23] usb 1-1: device not accepting address 27, error -71 [ 1492.710807][ T8111] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1492.912480][ T8111] usb 5-1: config 2 has an invalid interface number: 174 but max is 0 [ 1492.927188][ T8111] usb 5-1: config 2 has no interface number 0 [ 1492.941189][ T8111] usb 5-1: config 2 interface 174 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 1492.956912][ T8111] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1492.980135][ T8111] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1493.003319][ T8111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.046376][ T8111] usb 5-1: Product: syz [ 1493.060259][ T8111] usb 5-1: Manufacturer: syz [ 1493.071207][ T8111] usb 5-1: SerialNumber: syz [ 1493.106865][T21071] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1493.445445][ T8111] usb 5-1: probing VID:PID(0424:012C) [ 1493.560129][ T8111] usb 5-1: vub300 testing UNKNOWN EndPoint(0) 08 [ 1493.638346][ T8111] usb 5-1: vub300 ignoring EndPoint(0) 08 [ 1493.838894][ T8111] usb 5-1: vub300 testing BULK IN EndPoint(1) 82 [ 1493.972107][ T8111] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 1494.226301][ T8111] vub300: probe of 5-1:2.174 failed with error -22 [ 1494.473771][ T8111] usb 5-1: USB disconnect, device number 20 [ 1495.348444][T21090] loop4: detected capacity change from 0 to 32768 [ 1495.411560][T21090] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1495.494938][T21090] XFS (loop4): Ending clean mount [ 1495.527484][T21090] XFS (loop4): Quotacheck needed: Please wait. [ 1495.617431][T21090] XFS (loop4): Quotacheck: Done. [ 1495.812312][T19552] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1496.121014][T21109] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1497.228818][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 1497.253077][T21110] binder: 21103:21110 ioctl 4018620d 0 returned -22 [ 1500.148352][T21134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4485'. [ 1501.104420][T21140] loop4: detected capacity change from 0 to 40427 [ 1501.289247][T21140] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 1501.320243][T21140] F2FS-fs (loop4): invalid crc value [ 1502.128478][T21140] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1502.250014][T21140] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1502.612891][ T27] audit: type=1804 audit(1751742265.267:220): pid=21140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4487" name="/newroot/93/file1/file1" dev="loop4" ino=10 res=1 errno=0 [ 1502.904153][ T27] audit: type=1800 audit(1751742265.267:221): pid=21140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4487" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1503.251120][T19552] syz-executor: attempt to access beyond end of device [ 1503.251120][T19552] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1503.273765][T21154] netlink: 14220 bytes leftover after parsing attributes in process `syz.3.4490'. [ 1503.310917][T19552] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1507.112720][T21190] netlink: 4696 bytes leftover after parsing attributes in process `syz.0.4503'. [ 1507.143397][T21190] netlink: 508 bytes leftover after parsing attributes in process `syz.0.4503'. [ 1507.184967][T21194] 9pnet_fd: Insufficient options for proto=fd [ 1507.754833][T21211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4509'. [ 1508.851355][T21215] loop4: detected capacity change from 0 to 512 [ 1508.915168][T21215] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1508.937097][T21215] EXT4-fs (loop4): Remounting filesystem read-only [ 1508.943885][T21215] EXT4-fs (loop4): 1 truncate cleaned up [ 1508.950804][T21215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1509.094143][T19552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1509.276137][T21223] netlink: 4696 bytes leftover after parsing attributes in process `syz.3.4517'. [ 1509.305765][T21223] netlink: 508 bytes leftover after parsing attributes in process `syz.3.4517'. [ 1509.473942][T21227] 9pnet_fd: Insufficient options for proto=fd [ 1510.000536][T21235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4522'. [ 1510.993511][T21252] ubi31: attaching mtd0 [ 1511.017569][T21252] ubi31: scanning is finished [ 1511.022399][T21252] ubi31: empty MTD device detected [ 1511.532288][T21254] netlink: 4696 bytes leftover after parsing attributes in process `syz.0.4529'. [ 1511.550441][T21254] netlink: 380 bytes leftover after parsing attributes in process `syz.0.4529'. [ 1511.554405][T21252] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1511.571013][T21252] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1511.578297][T21252] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1511.586330][T21252] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1511.594600][T21252] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1511.601504][T21252] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1511.609545][T21252] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1640152213 [ 1511.619602][T21252] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1511.682886][ T23] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1511.691561][T21255] ubi31: background thread "ubi_bgt31d" started, PID 21255 [ 1511.821785][T21257] 9pnet_fd: Insufficient options for proto=fd [ 1511.870729][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 1511.905971][ T23] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1511.941515][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.967262][ T23] usb 3-1: Product: syz [ 1512.010723][ T23] usb 3-1: Manufacturer: syz [ 1512.073006][ T23] usb 3-1: SerialNumber: syz [ 1512.090178][ T23] usb 3-1: config 0 descriptor?? [ 1512.835895][ T23] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1514.439156][ T23] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1514.470076][ T23] usb 3-1: USB disconnect, device number 16 [ 1514.882992][T21287] netlink: 4696 bytes leftover after parsing attributes in process `syz.3.4541'. [ 1514.892239][T21287] netlink: 380 bytes leftover after parsing attributes in process `syz.3.4541'. [ 1514.938428][T21289] 9pnet_fd: Insufficient options for proto=fd [ 1514.950897][ T8109] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1515.140792][ T8109] usb 5-1: Using ep0 maxpacket: 16 [ 1515.155662][ T8109] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1515.170857][ T8109] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1515.184649][ T8109] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1515.198260][ T8109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.209815][ T8109] usb 5-1: Product: syz [ 1515.216532][ T8109] usb 5-1: Manufacturer: syz [ 1515.230881][ T8109] usb 5-1: SerialNumber: syz [ 1515.445256][ T8109] usb 5-1: 0:2 : does not exist [ 1515.465447][ T8109] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1515.510249][ T8109] usb 5-1: USB disconnect, device number 21 [ 1515.594104][T20070] udevd[20070]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1517.383003][T21321] 9pnet_fd: Insufficient options for proto=fd [ 1519.021025][ T8109] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1519.927214][T20388] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1519.936347][T20388] Bluetooth: hci4: Injecting HCI hardware error event [ 1519.946246][T20388] Bluetooth: hci4: hardware error 0x00 [ 1520.101494][ T8109] usb 1-1: Using ep0 maxpacket: 16 [ 1520.109213][T21352] loop4: detected capacity change from 0 to 1024 [ 1520.112420][ T8109] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1520.153336][ T8109] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1520.173174][ T8109] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1520.183130][ T8109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.207678][ T8109] usb 1-1: Product: syz [ 1520.217791][ T8109] usb 1-1: Manufacturer: syz [ 1520.226684][ T8109] usb 1-1: SerialNumber: syz [ 1520.399229][ T8403] hfsplus: b-tree write err: -5, ino 4 [ 1520.492163][ T8109] usb 1-1: 0:2 : does not exist [ 1520.524715][ T8109] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1520.566884][ T8109] usb 1-1: USB disconnect, device number 29 [ 1520.709707][T20070] udevd[20070]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1522.050854][T20388] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1522.380905][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 1524.647392][T21411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4583'. [ 1526.380972][T20794] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1526.629901][T20794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1526.712263][T20794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1526.784478][T20794] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1526.862885][T20794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.987486][T20794] usb 5-1: config 0 descriptor?? [ 1528.878960][T20794] razer 0003:1532:010E.0016: failed to enable macro keys: -71 [ 1528.892416][T20794] razer 0003:1532:010E.0016: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.4-1/input0 [ 1528.913847][T20794] usb 5-1: USB disconnect, device number 22 [ 1529.052684][T21441] fido_id[21441]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1529.282099][T21445] ceph: No source [ 1531.359896][T21472] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1531.510810][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1532.510748][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1532.525575][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.551004][ T9] usb 1-1: config 0 has no interfaces? [ 1532.561798][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1532.580703][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.589356][ T9] usb 1-1: Product: syz [ 1532.593931][ T9] usb 1-1: Manufacturer: syz [ 1532.598547][ T9] usb 1-1: SerialNumber: syz [ 1532.610341][ T9] usb 1-1: config 0 descriptor?? [ 1532.876201][ T9] usb 1-1: USB disconnect, device number 30 [ 1534.134033][T21513] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4619'. [ 1534.441121][ T23] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1534.471555][T21514] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1534.671353][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 1534.686708][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1534.699302][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1534.739773][ T23] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1534.756083][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.768960][ T23] usb 3-1: config 0 descriptor?? [ 1535.016375][T21520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4621'. [ 1535.661262][ T23] savu 0003:1E7D:2D5A.0017: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1535.741263][T21526] input: syz1 as /devices/virtual/input/input22 [ 1535.799073][ T23] usb 3-1: USB disconnect, device number 17 [ 1535.883893][T21525] fido_id[21525]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1536.262741][T21542] binder: 21535:21542 ioctl 4018620d 0 returned -22 [ 1537.497301][T21557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4632'. [ 1539.436602][T21566] loop4: detected capacity change from 0 to 512 [ 1539.486710][T21566] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1539.511245][T21566] EXT4-fs (loop4): Remounting filesystem read-only [ 1539.518010][T21566] EXT4-fs (loop4): 1 truncate cleaned up [ 1539.524949][T21566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1539.670633][T19552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1539.911414][T21576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4638'. [ 1540.286070][T21585] binder: 21578:21585 ioctl 4018620d 0 returned -22 [ 1543.919471][T21601] loop4: detected capacity change from 0 to 40427 [ 1543.967468][T21601] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1543.977926][T21601] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1544.025485][T21601] F2FS-fs (loop4): invalid crc value [ 1544.057712][T21601] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1544.107412][T21601] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1544.114560][T21601] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1544.142352][ T27] audit: type=1800 audit(1751742306.897:222): pid=21601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4649" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1545.471159][ T8111] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1545.720927][ T8111] usb 3-1: Using ep0 maxpacket: 16 [ 1545.769280][ T8111] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1545.875314][ T8111] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1545.982434][ T8111] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1546.057237][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.083418][ T8111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.098632][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.163165][ T8111] usb 3-1: Product: syz [ 1546.221577][ T8111] usb 3-1: Manufacturer: syz [ 1546.226201][ T8111] usb 3-1: SerialNumber: syz [ 1546.491720][ T8111] usb 3-1: 0:2 : does not exist [ 1546.512665][ T8111] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1546.593600][ T8111] usb 3-1: USB disconnect, device number 18 [ 1547.773223][T21618] udevd[21618]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1550.509767][T21663] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4666'. [ 1552.039539][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f21f400: rx timeout, send abort [ 1552.549760][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f21f400: abort rx timeout. Force session deactivation [ 1552.740935][ T8109] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1552.858363][T20388] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1552.869161][T20388] CPU: 1 PID: 20388 Comm: kworker/u5:0 Not tainted 6.6.95-syzkaller #0 [ 1552.877434][T20388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1552.887502][T20388] Workqueue: hci3 hci_rx_work [ 1552.892216][T20388] Call Trace: [ 1552.895508][T20388] [ 1552.898451][T20388] dump_stack_lvl+0x16c/0x230 [ 1552.903154][T20388] ? show_regs_print_info+0x20/0x20 [ 1552.908375][T20388] ? load_image+0x3b0/0x3b0 [ 1552.912910][T20388] sysfs_create_dir_ns+0x256/0x280 [ 1552.918040][T20388] ? hci_rx_work+0x43a/0xd80 [ 1552.920712][ T8109] usb 1-1: Using ep0 maxpacket: 16 [ 1552.922635][T20388] ? sysfs_warn_dup+0xa0/0xa0 [ 1552.922702][T20388] ? do_raw_spin_unlock+0x121/0x230 [ 1552.922728][T20388] kobject_add_internal+0x6b8/0xc70 [ 1552.922757][T20388] kobject_add+0x156/0x220 [ 1552.922774][T20388] ? __rwlock_init+0x150/0x150 [ 1552.922799][T20388] ? kobject_init+0x1e0/0x1e0 [ 1552.922818][T20388] ? _raw_spin_unlock+0x28/0x40 [ 1552.922840][T20388] ? get_device_parent+0x366/0x390 [ 1552.922861][T20388] device_add+0x408/0xc20 [ 1552.922881][T20388] hci_conn_add_sysfs+0xd5/0x1e0 [ 1552.922905][T20388] le_conn_complete_evt+0xc37/0x1220 [ 1552.922931][T20388] ? hci_event_packet+0x4a7/0x1210 [ 1552.922958][T20388] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1552.922980][T20388] ? __copy_skb_header+0xa7/0x550 [ 1552.923000][T20388] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1552.947888][ T8109] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1552.952280][T20388] ? skb_pull_data+0xfb/0x200 [ 1552.952318][T20388] hci_le_conn_complete_evt+0x187/0x440 [ 1552.952350][T20388] ? hci_remote_host_features_evt+0x160/0x160 [ 1552.952373][T20388] hci_event_packet+0x795/0x1210 [ 1552.952403][T20388] ? bis_list+0x290/0x290 [ 1552.952426][T20388] ? lockdep_hardirqs_on+0x98/0x150 [ 1552.952448][T20388] ? hci_send_to_monitor+0xd7/0x4f0 [ 1552.952477][T20388] hci_rx_work+0x43a/0xd80 [ 1552.952512][T20388] ? process_scheduled_works+0x957/0x15b0 [ 1552.952534][T20388] process_scheduled_works+0xa45/0x15b0 [ 1552.983718][ T8109] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1552.986755][T20388] ? assign_work+0x400/0x400 [ 1553.013917][ T8109] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1553.018397][T20388] ? assign_work+0x39e/0x400 [ 1553.018429][T20388] worker_thread+0xa55/0xfc0 [ 1553.032370][ T8109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.034917][T20388] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1553.034945][T20388] ? _raw_spin_unlock+0x40/0x40 [ 1553.034962][T20388] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1553.044932][ T8109] usb 1-1: Product: syz [ 1553.049645][T20388] kthread+0x2fa/0x390 [ 1553.049667][T20388] ? pr_cont_work+0x560/0x560 [ 1553.071901][ T8109] usb 1-1: Manufacturer: syz [ 1553.074129][T20388] ? kthread_blkcg+0xd0/0xd0 [ 1553.074150][T20388] ret_from_fork+0x48/0x80 [ 1553.079849][ T8109] usb 1-1: SerialNumber: syz [ 1553.087712][T20388] ? kthread_blkcg+0xd0/0xd0 [ 1553.087734][T20388] ret_from_fork_asm+0x11/0x20 [ 1553.087772][T20388] [ 1553.089177][T20388] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1553.186992][T20388] Bluetooth: hci3: failed to register connection device [ 1553.239584][T21684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4674'. [ 1553.395872][ T8109] usb 1-1: 0:2 : does not exist [ 1553.423498][ T8109] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1553.491147][ T8109] usb 1-1: USB disconnect, device number 31 [ 1553.575113][T21618] udevd[21618]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1557.897053][T21718] netlink: 'syz.3.4683': attribute type 10 has an invalid length. [ 1558.163612][T21718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1558.172482][T21718] batadv0: entered promiscuous mode [ 1558.179093][T21718] batadv0: entered allmulticast mode [ 1558.185644][T21718] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1558.422756][T21727] loop4: detected capacity change from 0 to 1024 [ 1559.379480][T21736] netlink: 4696 bytes leftover after parsing attributes in process `syz.2.4691'. [ 1559.402125][T21736] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4691'. [ 1559.415042][ T11] hfsplus: b-tree write err: -5, ino 8 [ 1559.547969][T21742] loop4: detected capacity change from 0 to 128 [ 1559.566971][T21742] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1559.650425][T21742] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1559.686444][T21742] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1559.970898][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 1562.027867][T21742] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 1563.224515][T19552] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1563.563654][ T5855] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1563.827351][ T5855] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.839699][ T5855] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1563.964364][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.737935][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 1565.828851][ T5855] usb 1-1: config 0 descriptor?? [ 1565.852865][ T5855] pwc: Askey VC010 type 2 USB webcam detected. [ 1566.281145][ T5855] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1566.964259][ T5855] pwc: recv_control_msg error -32 req 02 val 2700 [ 1566.971579][ T5855] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1566.978772][ T5855] pwc: recv_control_msg error -32 req 04 val 1000 [ 1567.081111][ T5855] pwc: recv_control_msg error -32 req 04 val 1300 [ 1567.099252][ T5855] pwc: recv_control_msg error -32 req 04 val 1400 [ 1567.118994][ T5855] pwc: recv_control_msg error -32 req 02 val 2000 [ 1568.493248][ T5855] pwc: recv_control_msg error -71 req 02 val 2100 [ 1568.557142][T21808] binder: 21802:21808 ioctl 4018620d 0 returned -22 [ 1568.568387][T21808] binder: 21802:21808 ioctl 4018620d 0 returned -22 [ 1569.352959][ T5855] pwc: recv_control_msg error -71 req 04 val 1500 [ 1569.377295][ T5855] pwc: recv_control_msg error -71 req 02 val 2500 [ 1569.594924][T21814] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1569.691522][ T5855] pwc: recv_control_msg error -71 req 02 val 2400 [ 1569.702761][ T5855] pwc: recv_control_msg error -71 req 02 val 2600 [ 1569.711116][ T5855] pwc: recv_control_msg error -71 req 02 val 2900 [ 1569.719068][ T5855] pwc: recv_control_msg error -71 req 02 val 2800 [ 1569.727924][ T5855] pwc: recv_control_msg error -71 req 04 val 1100 [ 1569.736148][ T5855] pwc: recv_control_msg error -71 req 04 val 1200 [ 1569.766291][T21814] CIFS mount error: No usable UNC path provided in device string! [ 1569.766291][T21814] [ 1569.875036][T21814] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1569.884545][ T5855] pwc: Registered as video103. [ 1569.913521][ T5855] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23 [ 1570.041700][ T5855] usb 1-1: USB disconnect, device number 32 [ 1572.693199][T21847] binder: 21839:21847 ioctl 4018620d 0 returned -22 [ 1572.732897][T21847] binder: 21839:21847 ioctl 4018620d 0 returned -22 [ 1572.782194][T21847] loop4: detected capacity change from 0 to 128 [ 1572.829087][T21847] EXT4-fs (loop4): DAX unsupported by block device. [ 1575.944316][T21855] vxcan1: left allmulticast mode [ 1576.044001][T21855] macvtap1: left allmulticast mode [ 1576.056734][T21855] bond0: left allmulticast mode [ 1576.080134][T21855] bond_slave_0: left allmulticast mode [ 1576.090926][T21855] bond_slave_1: left allmulticast mode [ 1578.492264][T21880] binder: 21877:21880 ioctl 4018620d 0 returned -22 [ 1578.503447][T21880] binder: 21877:21880 ioctl 4018620d 0 returned -22 [ 1579.062077][T21876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1579.069932][T21876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1579.079746][T21876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1579.087298][T21876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.396937][T21885] netlink: 4696 bytes leftover after parsing attributes in process `syz.3.4732'. [ 1579.523245][T21890] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4735'. [ 1582.699722][T21919] binder: 21916:21919 ioctl 4018620d 0 returned -22 [ 1582.805728][T21921] binder: 21916:21921 ioctl 4018620d 0 returned -22 [ 1583.361423][T21929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4746'. [ 1583.624768][T13628] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1583.950776][T13628] usb 3-1: Using ep0 maxpacket: 8 [ 1583.962017][T13628] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1583.976589][T13628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.989269][T13628] usb 3-1: Product: syz [ 1583.994200][T13628] usb 3-1: Manufacturer: syz [ 1584.001868][T13628] usb 3-1: SerialNumber: syz [ 1584.009826][T13628] usb 3-1: config 0 descriptor?? [ 1584.301554][T13628] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1584.328529][T21938] wg2: entered promiscuous mode [ 1584.414385][T21938] wg2: entered allmulticast mode [ 1584.988028][T21945] loop4: detected capacity change from 0 to 4096 [ 1586.004519][T13628] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 1586.087486][T13628] usb 3-1: USB disconnect, device number 19 [ 1592.787588][T22021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4774'. [ 1593.814682][T13628] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1594.690771][T13628] usb 5-1: Using ep0 maxpacket: 8 [ 1594.707738][T13628] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1594.720714][T13628] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1594.742117][T13628] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1594.765340][T13628] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1594.807483][T13628] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1595.023914][T13628] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1595.038851][T13628] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1595.049140][T13628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.069887][T22044] fuse: Bad value for 'fd' [ 1595.515890][T13628] usb 5-1: GET_CAPABILITIES returned 0 [ 1595.617341][T13628] usbtmc 5-1:16.0: can't read capabilities [ 1595.727511][T13628] usb 5-1: USB disconnect, device number 23 [ 1596.430136][T22055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4786'. [ 1597.798126][T22070] fuse: Bad value for 'fd' [ 1602.060293][ T8109] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1602.950971][ T8109] usb 1-1: Using ep0 maxpacket: 8 [ 1602.964972][ T8109] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1602.976352][ T8109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.984889][ T8109] usb 1-1: Product: syz [ 1602.989068][ T8109] usb 1-1: Manufacturer: syz [ 1602.994053][ T8109] usb 1-1: SerialNumber: syz [ 1603.001083][ T8109] usb 1-1: config 0 descriptor?? [ 1603.287184][ T8109] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1603.601728][T22138] loop4: detected capacity change from 0 to 164 [ 1603.830024][T22138] Unable to read rock-ridge attributes [ 1605.554270][ T8109] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 1605.594086][ T8109] usb 1-1: USB disconnect, device number 33 [ 1607.337916][T20388] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1607.349819][T20388] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1607.360436][T20388] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1607.385404][T20388] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1607.396025][T20388] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1607.403781][T20388] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1607.496865][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.503336][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.186569][ T8399] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.818786][ T8399] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.902273][ T8399] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.082031][ T8111] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1609.090340][ T8399] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.156078][T22174] chnl_net:caif_netlink_parms(): no params data found [ 1609.273943][T22174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1609.278330][ T8111] usb 4-1: Using ep0 maxpacket: 8 [ 1609.281627][T22174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.294130][T22174] bridge_slave_0: entered allmulticast mode [ 1609.297715][ T8111] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1609.301760][T22174] bridge_slave_0: entered promiscuous mode [ 1609.348578][T22174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1609.354997][ T8111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.358658][T22174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.371412][T22174] bridge_slave_1: entered allmulticast mode [ 1609.378980][T22174] bridge_slave_1: entered promiscuous mode [ 1609.380846][ T8111] usb 4-1: Product: syz [ 1609.418574][ T8111] usb 4-1: Manufacturer: syz [ 1609.440329][ T8111] usb 4-1: SerialNumber: syz [ 1609.443474][T22174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1609.469728][ T8111] usb 4-1: config 0 descriptor?? [ 1609.473352][T22174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1609.491281][ T5102] Bluetooth: hci0: command tx timeout [ 1609.711661][ T8111] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1609.739134][T22174] team0: Port device team_slave_0 added [ 1609.793885][T22174] team0: Port device team_slave_1 added [ 1610.782805][T22174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1610.799346][T22174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.847526][T22174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1610.925040][T22174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1610.943730][T22174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.979568][T22174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1610.996476][ T23] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1611.189789][T22174] hsr_slave_0: entered promiscuous mode [ 1611.190844][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 1611.212928][T22174] hsr_slave_1: entered promiscuous mode [ 1611.214448][ T23] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1611.229923][T22174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1611.248258][T22174] Cannot create hsr debugfs directory [ 1611.255125][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1611.266792][ T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1611.289490][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.305168][ T23] usb 5-1: Product: syz [ 1611.309353][ T23] usb 5-1: Manufacturer: syz [ 1611.316818][ T23] usb 5-1: SerialNumber: syz [ 1611.555583][ T23] usb 5-1: 0:2 : does not exist [ 1611.570998][ T5102] Bluetooth: hci0: command tx timeout [ 1611.581346][ T23] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1611.607010][ T8111] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1611.643465][ T23] usb 5-1: USB disconnect, device number 24 [ 1611.649986][ T8111] usb 4-1: USB disconnect, device number 29 [ 1611.759721][T21962] udevd[21962]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1612.028519][ T8399] hsr_slave_0: left promiscuous mode [ 1612.047987][ T8399] hsr_slave_1: left promiscuous mode [ 1612.058967][ T8399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1612.079147][ T8399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1612.171343][ T8399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1612.300284][ T8399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1612.421077][ T8399] bridge_slave_1: left allmulticast mode [ 1612.601725][ T8399] bridge_slave_1: left promiscuous mode [ 1612.671991][ T8399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.761815][ T8399] bridge_slave_0: left allmulticast mode [ 1612.767928][ T8399] bridge_slave_0: left promiscuous mode [ 1612.820965][ T8399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.946184][ T8399] bond0: left promiscuous mode [ 1612.961441][ T8399] bond_slave_0: left promiscuous mode [ 1612.966893][ T8399] bond_slave_1: left promiscuous mode [ 1613.013977][T22258] loop4: detected capacity change from 0 to 128 [ 1613.052125][ T8399] veth1_macvtap: left promiscuous mode [ 1613.057686][ T8399] veth0_macvtap: left promiscuous mode [ 1613.070987][ T8399] veth1_vlan: left promiscuous mode [ 1613.082208][ T8399] veth0_vlan: left promiscuous mode [ 1613.650746][ T5102] Bluetooth: hci0: command tx timeout [ 1613.767741][T22262] syz.3.4844 uses old SIOCAX25GETINFO [ 1613.922414][ T27] audit: type=1326 audit(1751742376.667:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22257 comm="syz.4.4843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf0d8e929 code=0x7fc00000 [ 1614.184282][ T8399] bond1 (unregistering): (slave veth5): Releasing active interface [ 1614.925247][ T8399] bond1 (unregistering): Released all slaves [ 1615.067658][T11685] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1615.280881][T11685] usb 5-1: Using ep0 maxpacket: 16 [ 1615.312294][T11685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1615.368708][T11685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1615.431729][T11685] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1615.489921][T11685] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1615.535379][T11685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.661229][T11685] usb 5-1: config 0 descriptor?? [ 1615.752254][ T5102] Bluetooth: hci0: command tx timeout [ 1616.163774][ T8399] team0 (unregistering): Port device team_slave_1 removed [ 1616.190835][ T23] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1616.209339][T11685] HID 045e:07da: Invalid code 65791 type 1 [ 1616.232740][T11685] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0018/input/input24 [ 1616.233231][ T8399] team0 (unregistering): Port device team_slave_0 removed [ 1616.272017][T11685] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1616.362538][ T8399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1616.391012][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 1616.402046][ T23] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1616.416132][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1616.427932][ T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1616.438272][ T8399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1616.442951][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.459478][ T23] usb 4-1: Product: syz [ 1616.465044][ T23] usb 4-1: Manufacturer: syz [ 1616.469736][ T23] usb 4-1: SerialNumber: syz [ 1616.498323][ T8111] usb 5-1: USB disconnect, device number 25 [ 1616.702606][ T23] usb 4-1: 0:2 : does not exist [ 1616.712733][ T23] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1616.748214][ T23] usb 4-1: USB disconnect, device number 30 [ 1616.799217][T21962] udevd[21962]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1617.070979][ T8399] bond0 (unregistering): Released all slaves [ 1617.125050][T22279] loop9: detected capacity change from 0 to 7 [ 1617.136010][T21962] Dev loop9: unable to read RDB block 7 [ 1617.142375][T21962] loop9: unable to read partition table [ 1617.148180][T21962] loop9: partition table beyond EOD, truncated [ 1617.158265][T22279] Dev loop9: unable to read RDB block 7 [ 1617.165211][T22279] loop9: unable to read partition table [ 1617.171286][T22279] loop9: partition table beyond EOD, truncated [ 1617.178059][T22279] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1617.657573][T22292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4852'. [ 1618.244492][T22174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1618.293373][T22174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1618.332870][T22174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1618.360881][T22174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1618.651952][T22174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1618.707627][T22174] 8021q: adding VLAN 0 to HW filter on device team0 [ 1618.738792][ T8401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1618.746007][ T8401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1618.782608][ T8399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.789756][ T8399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1619.223528][T22174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1619.314979][T22174] veth0_vlan: entered promiscuous mode [ 1619.364430][T22174] veth1_vlan: entered promiscuous mode [ 1619.436679][T22174] veth0_macvtap: entered promiscuous mode [ 1619.449916][T22174] veth1_macvtap: entered promiscuous mode [ 1619.476373][T22174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1619.505000][T22174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.541229][T22174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1619.570932][T22174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.597430][T22174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1619.644203][T22174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1619.690205][T22174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.700137][T22174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1619.714660][T22174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.728171][T22174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1619.760553][T22174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.772740][T22174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.785034][T22174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.796004][T22174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.967969][ T3431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1619.990663][ T3431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1620.060125][ T3431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1620.084310][ T3431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1620.460403][T22345] loop4: detected capacity change from 0 to 32768 [ 1622.534511][T22367] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4865'. [ 1624.103006][T20388] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1624.118995][T20388] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1624.131979][T20388] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1624.145222][T20388] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1624.153623][T20388] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1624.161070][T20388] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1624.313364][ T8109] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1624.378392][ T8401] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1624.496812][ T8401] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1624.502555][ T8109] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1624.523054][ T8109] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1624.538076][ T8109] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1624.547354][ T8109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.562882][ T8109] usb 1-1: config 0 descriptor?? [ 1624.576148][ T8109] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1624.776150][ T8401] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.146094][T22395] chnl_net:caif_netlink_parms(): no params data found [ 1625.374220][ T8401] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.539700][T22395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.547451][T22395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1625.554758][T22395] bridge_slave_0: entered allmulticast mode [ 1625.562881][T22395] bridge_slave_0: entered promiscuous mode [ 1625.577855][T22395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.586819][T22395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1625.594100][T22395] bridge_slave_1: entered allmulticast mode [ 1625.602253][T22395] bridge_slave_1: entered promiscuous mode [ 1625.682643][T22395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1625.732779][T22395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1625.789838][T22395] team0: Port device team_slave_0 added [ 1625.815184][T22395] team0: Port device team_slave_1 added [ 1625.943984][T22395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1625.959944][T22395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.020842][T22395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.041664][T22413] loop4: detected capacity change from 0 to 32768 [ 1626.107405][T22395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.137720][T22395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.210938][T20388] Bluetooth: hci1: command tx timeout [ 1626.226951][T22395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1626.549632][T22395] hsr_slave_0: entered promiscuous mode [ 1626.572603][T22395] hsr_slave_1: entered promiscuous mode [ 1626.589572][T22395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1626.622932][T22395] Cannot create hsr debugfs directory [ 1626.930944][ T8401] erspan0 (unregistering): left allmulticast mode [ 1627.187272][T22421] loop4: detected capacity change from 0 to 32768 [ 1627.213051][T22421] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1627.221948][T22421] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1627.323084][T22421] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1627.530717][T22421] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1627.617366][ T23] usb 1-1: USB disconnect, device number 34 [ 1628.027434][T22451] kernel read not supported for file /!selinuÿ (pid: 22451 comm: syz.0.4882) [ 1628.071550][ T27] audit: type=1800 audit(1751742390.837:224): pid=22451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4882" name=2173656C696E75FF7F dev="mqueue" ino=77022 res=0 errno=0 [ 1628.166489][ T8401] hsr_slave_0: left promiscuous mode [ 1628.182097][ T8401] hsr_slave_1: left promiscuous mode [ 1628.208251][ T8401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1628.231112][ T8401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1628.261822][ T8401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1628.269244][ T8401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1628.296932][T20388] Bluetooth: hci1: command tx timeout [ 1628.306134][ T8401] bridge_slave_1: left allmulticast mode [ 1628.315480][ T8401] bridge_slave_1: left promiscuous mode [ 1628.322510][ T8401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.332162][ T8401] bridge_slave_0: left allmulticast mode [ 1628.366524][ T8401] bridge_slave_0: left promiscuous mode [ 1628.381012][ T8401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1628.515513][ T8401] bond0: left allmulticast mode [ 1628.522884][ T8401] bond_slave_0: left allmulticast mode [ 1628.546830][ T8401] bond_slave_1: left allmulticast mode [ 1628.560717][ T8401] batadv0: left allmulticast mode [ 1628.569312][ T8401] bond0: left promiscuous mode [ 1628.584965][ T8401] bond_slave_0: left promiscuous mode [ 1628.590879][ T8401] bond_slave_1: left promiscuous mode [ 1628.596433][ T8401] batadv0: left promiscuous mode [ 1628.613074][ T8401] veth1_macvtap: left promiscuous mode [ 1628.618632][ T8401] veth0_macvtap: left promiscuous mode [ 1628.632689][ T8401] veth1_vlan: left promiscuous mode [ 1628.641869][ T8401] veth0_vlan: left promiscuous mode [ 1630.428536][T20388] Bluetooth: hci1: command tx timeout [ 1630.505767][ T8401] team0 (unregistering): Port device team_slave_1 removed [ 1630.545320][ T8401] team0 (unregistering): Port device team_slave_0 removed [ 1630.595466][ T8401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1630.647834][ T8401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1630.852944][ T8401] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1631.141201][ T8401] bond0 (unregistering): Released all slaves [ 1631.423281][T22395] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1631.433425][T22395] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1631.443576][T22395] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1631.468122][T22395] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1632.452829][T20388] Bluetooth: hci1: command tx timeout [ 1632.575865][T22395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1632.705059][T22395] 8021q: adding VLAN 0 to HW filter on device team0 [ 1632.775881][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.783063][ T6174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1632.875968][T21146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.883130][T21146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1634.575336][T22395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1634.703583][T22395] veth0_vlan: entered promiscuous mode [ 1634.739883][T22395] veth1_vlan: entered promiscuous mode [ 1634.835794][T22395] veth0_macvtap: entered promiscuous mode [ 1634.906437][T22395] veth1_macvtap: entered promiscuous mode [ 1634.964758][T22395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1634.983064][T22395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1634.999432][T22395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1635.022449][T22395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1635.048458][T22395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1635.078371][T22395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1635.113835][T22395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1635.127138][T22395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1635.139876][T22395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1635.154933][T22395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1635.279130][T22395] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.370891][T22395] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.454914][T22395] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.499574][T22395] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.871939][T21770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1635.905145][T21770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1635.928451][ T3431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1635.946825][ T3431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1637.140355][T22593] fuse: Bad value for 'fd' [ 1637.809948][T22585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4866'. [ 1640.042187][T22632] loop4: detected capacity change from 0 to 40427 [ 1640.068312][T22632] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 1640.079503][T22632] F2FS-fs (loop4): invalid crc value [ 1640.089245][T22632] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1640.143836][T22632] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1643.164676][T22660] loop4: detected capacity change from 0 to 32768 [ 1643.297264][T22660] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 1643.374453][T22660] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1643.808934][T19552] ocfs2: Unmounting device (7,4) on (node local) [ 1645.865269][T22701] CIFS mount error: No usable UNC path provided in device string! [ 1645.865269][T22701] [ 1645.875607][ T23] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1645.883759][T22701] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1646.070688][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 1646.079796][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1646.100733][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1646.145303][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1646.198538][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1646.242746][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.291487][ T23] usb 1-1: config 0 descriptor?? [ 1646.831069][ T23] HID 045e:07da: Invalid code 65791 type 1 [ 1646.878422][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0019/input/input26 [ 1646.926989][ T23] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1647.516866][ T9] usb 1-1: USB disconnect, device number 35 [ 1647.684669][T22722] fido_id[22722]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1648.517771][T22731] CIFS mount error: No usable UNC path provided in device string! [ 1648.517771][T22731] [ 1648.550691][T22731] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1648.659343][T22727] loop4: detected capacity change from 0 to 32768 [ 1652.249162][T22767] CIFS mount error: No usable UNC path provided in device string! [ 1652.249162][T22767] [ 1652.276873][T22767] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1652.412237][T22774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4970'. [ 1655.522487][T22806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4981'. [ 1655.531733][T22788] loop4: detected capacity change from 0 to 40427 [ 1655.555689][T22788] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 1655.588265][T22788] F2FS-fs (loop4): invalid crc value [ 1655.604074][T22788] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1655.727740][T22788] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1655.775282][ T27] audit: type=1804 audit(1751742418.527:225): pid=22788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4974" name="/newroot/203/file1/file1" dev="loop4" ino=10 res=1 errno=0 [ 1655.844391][T19552] syz-executor: attempt to access beyond end of device [ 1655.844391][T19552] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1655.860399][ T27] audit: type=1800 audit(1751742418.527:226): pid=22788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4974" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1655.890866][T19552] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1660.099815][T22848] binder: 22845:22848 ioctl 4018620d 0 returned -22 [ 1660.216707][T22849] binder: 22845:22849 ioctl 4018620d 0 returned -22 [ 1661.036925][T22852] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4995'. [ 1663.918954][T22882] syzkaller0: entered promiscuous mode [ 1663.924807][T22882] syzkaller0: entered allmulticast mode [ 1664.020788][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1664.230865][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1664.242372][ T9] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1664.260651][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1664.292763][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1664.310650][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.326348][ T9] usb 3-1: Product: syz [ 1664.340642][ T9] usb 3-1: Manufacturer: syz [ 1664.345413][ T9] usb 3-1: SerialNumber: syz [ 1664.594361][ T9] usb 3-1: 0:2 : does not exist [ 1664.644657][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1664.722449][ T9] usb 3-1: USB disconnect, device number 20 [ 1664.772324][T21962] udevd[21962]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1665.649260][ T23] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1667.102300][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 1667.114433][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1667.125452][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1667.136219][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1667.149236][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1667.158413][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.169451][ T23] usb 1-1: config 0 descriptor?? [ 1667.609986][ T23] HID 045e:07da: Invalid code 65791 type 1 [ 1667.628287][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001A/input/input27 [ 1667.655292][ T23] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1667.825795][T14033] usb 1-1: USB disconnect, device number 36 [ 1668.539167][T22908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5014'. [ 1668.937161][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.943778][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.734207][T22926] loop4: detected capacity change from 0 to 256 [ 1669.761739][T22926] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1669.787784][T22926] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1669.798176][T13628] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1669.826971][T22926] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1670.110807][T13628] usb 3-1: Using ep0 maxpacket: 16 [ 1671.849590][T13628] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1671.870324][T13628] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1672.178088][T13628] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1672.222294][T13628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.452267][T13628] usb 3-1: Product: syz [ 1674.024549][T22952] loop4: detected capacity change from 0 to 40427 [ 1674.130917][T22952] F2FS-fs (loop4): heap/no_heap options were deprecated [ 1674.139937][T22952] F2FS-fs (loop4): invalid crc value [ 1674.193313][T22952] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1674.224880][T13628] usb 3-1: Manufacturer: syz [ 1674.229498][T13628] usb 3-1: SerialNumber: syz [ 1674.244773][T13628] usb 3-1: can't set config #1, error -71 [ 1674.250746][T22952] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1674.288822][T13628] usb 3-1: USB disconnect, device number 21 [ 1675.929749][T22968] binder: 22963:22968 ioctl 4018620d 0 returned -22 [ 1676.062978][T22970] binder: 22963:22970 ioctl 4018620d 0 returned -22 [ 1678.964638][T22989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5037'. [ 1679.332615][T20794] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1679.593546][T20794] usb 3-1: Using ep0 maxpacket: 16 [ 1679.621903][T20794] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1679.639207][T20794] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1680.082485][T20794] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1680.091621][T20794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.099615][T20794] usb 3-1: Product: syz [ 1680.103855][T20794] usb 3-1: Manufacturer: syz [ 1680.108450][T20794] usb 3-1: SerialNumber: syz [ 1680.866317][T20794] usb 3-1: 0:2 : does not exist [ 1680.884922][T20794] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1680.981785][T20794] usb 3-1: USB disconnect, device number 22 [ 1681.190722][ T28] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1682.512943][T21962] udevd[21962]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1682.716734][T23020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5049'. [ 1682.725674][T23020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5049'. [ 1682.770649][ T28] usb 5-1: Using ep0 maxpacket: 8 [ 1682.789336][ T28] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1682.803671][ T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.812281][ T28] usb 5-1: Product: syz [ 1682.816505][ T28] usb 5-1: Manufacturer: syz [ 1682.832972][ T28] usb 5-1: SerialNumber: syz [ 1682.911892][ T28] usb 5-1: config 0 descriptor?? [ 1683.159670][ T28] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1684.045924][T23033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5052'. [ 1685.390772][T23044] binder: 23040:23044 ioctl 4018620d 0 returned -22 [ 1685.871467][T23045] binder: 23040:23045 ioctl 4018620d 0 returned -22 [ 1686.310077][ T28] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1686.320106][ T28] usb 5-1: USB disconnect, device number 26 [ 1686.412305][T23052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5059'. [ 1686.490471][T23052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5059'. [ 1688.766702][T23079] binder: 23075:23079 ioctl 4018620d 0 returned -22 [ 1688.846771][T23081] binder: 23075:23081 ioctl 4018620d 0 returned -22 [ 1688.956725][ T8111] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1689.768552][T23087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5070'. [ 1689.777581][T23087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5070'. [ 1689.880658][ T8111] usb 1-1: Using ep0 maxpacket: 8 [ 1689.921120][ T8111] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1689.930191][ T8111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.950636][ T8111] usb 1-1: Product: syz [ 1689.954825][ T8111] usb 1-1: Manufacturer: syz [ 1689.959427][ T8111] usb 1-1: SerialNumber: syz [ 1690.012616][ T8111] usb 1-1: config 0 descriptor?? [ 1690.258211][ T8111] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1691.947952][ T8111] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 1691.974752][ T8111] usb 1-1: USB disconnect, device number 37 [ 1693.054156][T23120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5080'. [ 1693.063881][T23120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5080'. [ 1693.091972][T23122] binder: 23115:23122 ioctl 4018620d 0 returned -22 [ 1693.171432][T23124] binder: 23115:23124 ioctl 4018620d 0 returned -22 [ 1694.602972][T23135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5083'. [ 1696.000703][ T8111] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1696.201184][ T8111] usb 4-1: Using ep0 maxpacket: 8 [ 1696.425243][ T8111] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1696.434465][ T8111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.442675][ T8111] usb 4-1: Product: syz [ 1696.446851][ T8111] usb 4-1: Manufacturer: syz [ 1696.452966][ T8111] usb 4-1: SerialNumber: syz [ 1696.810260][ T8111] usb 4-1: config 0 descriptor?? [ 1696.867199][T23155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5090'. [ 1696.878589][T23155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5090'. [ 1697.126875][ T8111] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1698.598304][T23171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5097'. [ 1699.452212][T23181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5099'. [ 1699.461212][T23181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5099'. [ 1699.521034][ T8111] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1699.560709][ T8111] usb 4-1: USB disconnect, device number 31 [ 1700.030809][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1700.220658][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1700.231875][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.248388][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1700.269281][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1700.283248][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.292579][ T9] usb 3-1: Product: syz [ 1700.297203][ T9] usb 3-1: Manufacturer: syz [ 1700.302271][ T9] usb 3-1: SerialNumber: syz [ 1700.571915][T23200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5106'. [ 1700.580108][ T9] usb 3-1: 0:2 : does not exist [ 1700.597792][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1700.845551][ T9] usb 3-1: USB disconnect, device number 23 [ 1701.574490][T21962] udevd[21962]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1701.644106][T23213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5111'. [ 1701.653576][T23213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5111'. [ 1702.514240][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1702.701141][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1702.717895][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1702.728428][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.836078][ T9] usb 1-1: Product: syz [ 1702.840430][ T9] usb 1-1: Manufacturer: syz [ 1702.845089][ T9] usb 1-1: SerialNumber: syz [ 1702.964813][ T9] usb 1-1: config 0 descriptor?? [ 1703.027841][T23233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5116'. [ 1703.192852][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1703.941445][ T8109] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1704.150768][ T8109] usb 5-1: Using ep0 maxpacket: 16 [ 1704.158637][ T8109] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1704.180687][ T8109] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1704.204849][ T8109] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1704.219002][ T8109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.240683][ T8109] usb 5-1: Product: syz [ 1704.244908][ T8109] usb 5-1: Manufacturer: syz [ 1704.249540][ T8109] usb 5-1: SerialNumber: syz [ 1704.501124][ T8109] usb 5-1: 0:2 : does not exist [ 1704.513112][T23244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5120'. [ 1704.513629][ T8109] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1704.524689][T23244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5120'. [ 1704.579590][ T8109] usb 5-1: USB disconnect, device number 27 [ 1704.644670][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1704.652005][ T9] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 1704.670092][ T9] usb 1-1: USB disconnect, device number 38 [ 1704.741878][T21962] udevd[21962]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1706.822565][T23271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5129'. [ 1706.850862][T23271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5129'. [ 1707.480904][ T8111] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1708.310863][ T8111] usb 3-1: Using ep0 maxpacket: 16 [ 1708.322671][ T8111] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1708.340664][ T8111] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1708.362689][ T8111] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1708.380644][ T8111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.398901][ T8111] usb 3-1: Product: syz [ 1708.403341][ T8111] usb 3-1: Manufacturer: syz [ 1708.407966][ T8111] usb 3-1: SerialNumber: syz [ 1708.420826][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1708.610651][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1708.631594][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1708.658566][ T8111] usb 3-1: 0:2 : does not exist [ 1708.663596][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.681080][ T9] usb 5-1: Product: syz [ 1708.690110][ T8111] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1708.701783][ T9] usb 5-1: Manufacturer: syz [ 1708.707304][ T9] usb 5-1: SerialNumber: syz [ 1708.737147][ T9] usb 5-1: config 0 descriptor?? [ 1708.742998][ T8111] usb 3-1: USB disconnect, device number 24 [ 1708.814261][T21962] udevd[21962]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1708.967281][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1710.522822][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 1710.557975][ T9] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 1710.593011][ T9] usb 5-1: USB disconnect, device number 28 [ 1710.657959][T23313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5143'. [ 1712.146004][T23330] binder: 23324:23330 ioctl 4018620d 0 returned -22 [ 1712.212416][T23332] binder: 23324:23332 ioctl 4018620d 0 returned -22 [ 1712.520691][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1712.774430][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1712.782855][ T9] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1712.793938][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1712.807416][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1712.817032][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.825100][ T9] usb 5-1: Product: syz [ 1712.829272][ T9] usb 5-1: Manufacturer: syz [ 1712.833960][ T9] usb 5-1: SerialNumber: syz [ 1713.061585][ T9] usb 5-1: 0:2 : does not exist [ 1713.075822][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1713.105140][ T9] usb 5-1: USB disconnect, device number 29 [ 1713.140189][T21962] udevd[21962]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1713.687859][T23351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5153'. [ 1714.900725][T23367] binder: 23363:23367 ioctl 4018620d 0 returned -22 [ 1715.260986][T23368] binder: 23363:23368 ioctl 4018620d 0 returned -22 [ 1717.166495][T23396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5165'. [ 1718.266600][T23406] binder: 23402:23406 ioctl 4018620d 0 returned -22 [ 1718.334289][T23407] binder: 23402:23407 ioctl 4018620d 0 returned -22 [ 1721.690898][T23427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5175'. [ 1722.133214][T23434] binder: 23433:23434 ioctl 4018620d 0 returned -22 [ 1722.340972][T23437] binder: 23433:23437 ioctl 4018620d 0 returned -22 [ 1725.604435][T23466] binder: 23465:23466 ioctl 4018620d 0 returned -22 [ 1725.663707][T23470] binder: 23465:23470 ioctl 4018620d 0 returned -22 [ 1726.051525][T11685] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1726.972470][T11685] usb 1-1: Using ep0 maxpacket: 16 [ 1726.982469][T11685] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1726.993215][T11685] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1727.018446][T11685] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1727.049367][T11685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.057669][T11685] usb 1-1: Product: syz [ 1727.069929][T11685] usb 1-1: Manufacturer: syz [ 1727.075156][T11685] usb 1-1: SerialNumber: syz [ 1727.401141][T11685] usb 1-1: 0:2 : does not exist [ 1727.421455][T11685] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1727.480044][T11685] usb 1-1: USB disconnect, device number 39 [ 1727.916351][T23474] udevd[23474]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1728.638108][T23502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5197'. [ 1728.699386][T23506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5200'. [ 1728.827006][T23508] binder: 23507:23508 ioctl 4018620d 0 returned -22 [ 1728.886495][T23510] binder: 23507:23510 ioctl 4018620d 0 returned -22 [ 1730.735267][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.744991][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.984782][T23542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5210'. [ 1732.395125][T23550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5211'. [ 1733.042683][T11685] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1733.045856][T20388] Bluetooth: hci0: command 0x0406 tx timeout [ 1733.480990][T11685] usb 5-1: Using ep0 maxpacket: 8 [ 1733.641105][T11685] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1733.768337][T11685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.055016][T11685] usb 5-1: Product: syz [ 1734.059432][T11685] usb 5-1: Manufacturer: syz [ 1734.064487][T11685] usb 5-1: SerialNumber: syz [ 1734.072318][T11685] usb 5-1: config 0 descriptor?? [ 1734.383098][T11685] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1734.430376][T23571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5219'. [ 1734.840636][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1734.989319][T23585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5224'. [ 1735.040641][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1735.069527][ T9] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1735.080060][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1735.099629][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1735.121002][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.132848][ T9] usb 3-1: Product: syz [ 1735.137135][ T9] usb 3-1: Manufacturer: syz [ 1735.146951][ T9] usb 3-1: SerialNumber: syz [ 1735.383653][ T9] usb 3-1: 0:2 : does not exist [ 1735.407743][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1735.447452][ T9] usb 3-1: USB disconnect, device number 25 [ 1735.507179][T23587] udevd[23587]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1736.126418][T11685] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 1736.155174][T11685] usb 5-1: USB disconnect, device number 30 [ 1738.383929][T23616] binder: 23610:23616 ioctl 4018620d 0 returned -22 [ 1738.474555][T23617] binder: 23610:23617 ioctl 4018620d 0 returned -22 [ 1740.847230][T23645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5242'. [ 1741.443900][T23648] binder: 23644:23648 ioctl 4018620d 0 returned -22 [ 1741.542334][T23649] binder: 23644:23649 ioctl 4018620d 0 returned -22 [ 1743.851395][T23678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5253'. [ 1745.040825][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1745.330718][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1745.373856][ T9] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1745.455575][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1745.578793][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1745.688170][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.778529][ T9] usb 4-1: Product: syz [ 1745.804160][ T9] usb 4-1: Manufacturer: syz [ 1745.819531][ T9] usb 4-1: SerialNumber: syz [ 1746.396492][ T9] usb 4-1: 0:2 : does not exist [ 1746.414152][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1746.465121][ T9] usb 4-1: USB disconnect, device number 32 [ 1746.538657][T23587] udevd[23587]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1747.849079][ T5102] Bluetooth: hci1: command 0x0406 tx timeout [ 1750.602902][T23754] binder: 23749:23754 ioctl 4018620d 0 returned -22 [ 1750.830221][T23760] binder: 23749:23760 ioctl 4018620d 0 returned -22 [ 1751.229000][T23763] loop4: detected capacity change from 0 to 128 [ 1751.611078][T23763] EXT4-fs (loop4): DAX unsupported by block device. [ 1756.154702][T23782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5291'. [ 1757.310631][T16448] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1758.485623][T16448] usb 5-1: Using ep0 maxpacket: 8 [ 1758.594912][T16448] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1758.607601][T16448] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.617037][T16448] usb 5-1: Product: syz [ 1758.626802][T16448] usb 5-1: Manufacturer: syz [ 1758.633170][T16448] usb 5-1: SerialNumber: syz [ 1758.643474][T16448] usb 5-1: config 0 descriptor?? [ 1758.661420][T23815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5302'. [ 1758.861109][T16448] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1758.966249][T23826] binder: 23817:23826 ioctl 4018620d 0 returned -22 [ 1759.156680][T23829] binder: 23817:23829 ioctl 4018620d 0 returned -22 [ 1760.277632][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1760.284982][T16448] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 1760.317496][T16448] usb 5-1: USB disconnect, device number 31 [ 1761.549174][T23849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5314'. [ 1762.533734][T23859] loop4: detected capacity change from 0 to 164 [ 1762.555846][T23859] Unable to read rock-ridge attributes [ 1762.666868][T23867] binder: 23860:23867 ioctl 4018620d 0 returned -22 [ 1762.802074][T23870] binder: 23860:23870 ioctl 4018620d 0 returned -22 [ 1763.638499][T23880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5324'. [ 1764.500886][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1764.713547][T16448] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1764.740737][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1764.798927][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1764.844368][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.883964][ T9] usb 5-1: Product: syz [ 1764.907573][ T9] usb 5-1: Manufacturer: syz [ 1764.935000][ T9] usb 5-1: SerialNumber: syz [ 1764.962815][T16448] usb 1-1: Using ep0 maxpacket: 16 [ 1765.004869][ T9] usb 5-1: config 0 descriptor?? [ 1765.027360][T16448] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1765.118193][T16448] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1765.203204][T16448] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1765.222923][T16448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.246355][T16448] usb 1-1: Product: syz [ 1765.264384][T16448] usb 1-1: Manufacturer: syz [ 1765.269037][T16448] usb 1-1: SerialNumber: syz [ 1765.289343][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1765.545957][T16448] usb 1-1: 0:2 : does not exist [ 1765.588539][T16448] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1765.640935][T16448] usb 1-1: USB disconnect, device number 40 [ 1765.754843][T23894] udevd[23894]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1766.953843][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1767.006305][ T9] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 1767.036173][ T9] usb 5-1: USB disconnect, device number 32 [ 1768.093265][T23918] binder: 23914:23918 ioctl 4018620d 0 returned -22 [ 1768.470488][T23919] binder: 23914:23919 ioctl 4018620d 0 returned -22 [ 1769.479756][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1769.672669][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1769.691190][ T9] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1769.701519][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1769.716722][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1769.736230][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.756299][ T9] usb 3-1: Product: syz [ 1769.760479][ T9] usb 3-1: Manufacturer: syz [ 1769.773329][ T9] usb 3-1: SerialNumber: syz [ 1770.127281][ T9] usb 3-1: 0:2 : does not exist [ 1770.143605][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1770.161378][ T9] usb 3-1: USB disconnect, device number 26 [ 1770.272407][T23894] udevd[23894]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1771.027968][T23951] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5347'. [ 1771.552734][T16448] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1771.811100][T16448] usb 4-1: Using ep0 maxpacket: 8 [ 1771.822026][T16448] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1771.831813][T16448] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.840054][T16448] usb 4-1: Product: syz [ 1771.860518][T16448] usb 4-1: Manufacturer: syz [ 1771.866643][T23965] binder: 23961:23965 ioctl 4018620d 0 returned -22 [ 1771.878379][T16448] usb 4-1: SerialNumber: syz [ 1771.907500][T16448] usb 4-1: config 0 descriptor?? [ 1772.037806][T23968] binder: 23961:23968 ioctl 4018620d 0 returned -22 [ 1772.170445][T16448] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1772.631522][ T8401] unregister_netdevice: waiting for lo to become free. Usage count = 71 [ 1772.640115][ T8401] ref_tracker: lo@ffff88802f2825b8 has 70/70 users at [ 1772.640115][ T8401] dst_init+0xd9/0x460 [ 1772.640115][ T8401] dst_alloc+0x12e/0x170 [ 1772.640115][ T8401] rt_dst_clone+0x58/0x680 [ 1772.640115][ T8401] ip_mc_finish_output+0x10b/0x5f0 [ 1772.640115][ T8401] ip_mc_output+0x39c/0x580 [ 1772.640115][ T8401] ip_send_skb+0x12d/0x1d0 [ 1772.640115][ T8401] udp_send_skb+0xa37/0x13a0 [ 1772.640115][ T8401] udp_sendmsg+0x19b8/0x2330 [ 1772.640115][ T8401] ____sys_sendmsg+0x5bf/0x950 [ 1772.640115][ T8401] ___sys_sendmsg+0x220/0x290 [ 1772.640115][ T8401] __sys_sendmmsg+0x275/0x4a0 [ 1772.640115][ T8401] __x64_sys_sendmmsg+0xa0/0xb0 [ 1772.640115][ T8401] do_syscall_64+0x55/0xb0 [ 1772.640115][ T8401] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1772.640115][ T8401] [ 1774.089500][T16448] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1774.101588][T16448] usb 4-1: USB disconnect, device number 33