last executing test programs: 24m3.026348667s ago: executing program 32 (id=21): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xff}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x1, 0x0, 0x0, 0x7, 0x6, 0x0, 0x10000}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) 17m10.715911038s ago: executing program 33 (id=1158): r0 = memfd_secret(0x80000) socketpair(0x1e, 0x1, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)) poll(&(0x7f0000000340), 0x0, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44804) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x16}]}, 0x10) 15m35.958797s ago: executing program 7 (id=1407): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 15m34.081105967s ago: executing program 7 (id=1408): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) clock_settime(0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(0x0) 15m32.304351255s ago: executing program 7 (id=1411): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0xfe}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x480000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) 15m28.563083472s ago: executing program 7 (id=1419): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setresgid(0xee00, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x8, @empty, 0x2}}}, 0x108) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) connect$inet6(0xffffffffffffffff, 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000003c0)=""/82) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) sync() sync() sched_setattr(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x700, 0x1, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) fcntl$addseals(r5, 0x409, 0x7) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) 15m24.934361388s ago: executing program 7 (id=1426): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {0x3}, {0x0, 0x0, 0x4}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x3ffc, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x5}) 15m23.842663185s ago: executing program 7 (id=1429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180)="89e7ee2c7cdad9b4b47380c988ca4f870a9ef905dbd95c71a94ec0a4d1f7bfead1c98d8e73e1", 0x26}], 0x1) 15m9.65088753s ago: executing program 34 (id=1427): r0 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="71b4", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)='&r', 0x2}], 0x1}}], 0x2, 0x400c404) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x618b37b523276f6c}, 0x20000000) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x3, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0xa, @win={{0x5, 0x6, 0x46, 0x1}, 0x5, 0x5, 0x0, 0xfffffeff, 0x0, 0x5f}}) 15m8.676934617s ago: executing program 35 (id=1429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180)="89e7ee2c7cdad9b4b47380c988ca4f870a9ef905dbd95c71a94ec0a4d1f7bfead1c98d8e73e1", 0x26}], 0x1) 14m48.036595316s ago: executing program 6 (id=1504): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb62", 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 14m46.833564797s ago: executing program 6 (id=1507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e86c0d85ff9782762f0800", 0x0, 0x1300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14m46.532464517s ago: executing program 6 (id=1510): sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) 14m46.275077067s ago: executing program 6 (id=1511): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) chroot(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0) 14m45.320403226s ago: executing program 6 (id=1513): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() tkill(r5, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, 0x0) 14m41.740509579s ago: executing program 6 (id=1524): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f00000000c0)="1a", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x10000}, 0x1c) 14m39.965548754s ago: executing program 36 (id=1524): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f00000000c0)="1a", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x10000}, 0x1c) 12m50.672647613s ago: executing program 0 (id=1793): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2b, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0xfeffffff, r2, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5"], 0x0}, 0x94) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x22806d, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="180000001600010a00000000000000000a000000"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 12m45.123694182s ago: executing program 0 (id=1803): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xe4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 12m42.498066385s ago: executing program 0 (id=1809): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x4004040) 12m40.564156129s ago: executing program 0 (id=1813): syz_emit_ethernet(0x71, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd607f00ef003b2c00fe8000000000000000000000000000bb0c03000000000000000000000000000100000000003b907802aadf0062df01e40d02434feee9d16d7d98ad6f435c3137cf56121fe36f6f5a0ecd9062"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRES16=r1, @ANYBLOB="020028bd7000ffdbdf2503000000080002008d236106c76dfb6813c148ad15204ca0c509250bb39baf49b3aa0a5b2c16805e32200cc2e1c8ed9f23186c9c784b20f1ed419349110540197e2d3c20159d8b4ac5f15b8262f7ac86eaedacbff6dd273670bb154b3a4923972ba0ddc8068cc2d1511d5381c0489b4286c8e9e0355f2917ec6272ec59d93f81ba1ad5c1ec645d2fec460a3aaf46d3d5e10257"], 0x24}, 0x1, 0x0, 0x0, 0x40000001}, 0x240048c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b000)=""/102400, 0x19000) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x169a82, 0x18c) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 12m38.858805743s ago: executing program 0 (id=1818): socket$nl_generic(0x10, 0x3, 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, 0x0, 0x0, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) 12m32.101864447s ago: executing program 0 (id=1822): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 12m16.861603996s ago: executing program 37 (id=1822): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 10m58.359979192s ago: executing program 9 (id=2053): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00090599"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r1, 0x0, 0x481e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="0a010100ac14140d2b7d05396a010000000300000000000000e000000100000010"], 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) migrate_pages(0x0, 0x3, 0x0, 0x0) 10m48.874798562s ago: executing program 9 (id=2084): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10m47.74118768s ago: executing program 9 (id=2089): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000480)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000080)=""/234, 0xea) 10m45.83303409s ago: executing program 9 (id=2090): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x81, 0xc, 0x3234564e, 0x6, 0x3, [{0x9, 0x4}, {0x0, 0x6}, {0x1, 0x10000}, {0x4, 0x8}, {0x2, 0x9a}, {0x55fe649d, 0x81}, {0x2c1, 0x8}, {0x3, 0x1}], 0x44, 0x56, 0x8, 0x0, 0x7}}) r1 = socket$kcm(0x10, 0x400000002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 10m43.744539961s ago: executing program 9 (id=2098): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 10m43.403982188s ago: executing program 9 (id=2103): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0xffffffffffffffe0, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 10m28.011324241s ago: executing program 38 (id=2103): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0xffffffffffffffe0, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 10.315450854s ago: executing program 5 (id=4592): r0 = socket$inet(0x2, 0x3, 0x8) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x1e) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r1, 0x0) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xfffffffffffffdb1) r6 = socket(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xbc44) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYRESDEC=r1, @ANYRES32=r5, @ANYRES16=0x0, @ANYRESDEC], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r9], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {}, {0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x124a, &(0x7f0000000400)={0x0, 0x216c, 0x2, 0x1, 0x1c0}, 0x0, &(0x7f0000000000)) 9.436525053s ago: executing program 4 (id=4593): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x1dd880}}, 0x50) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3, {0x403, 0x0, 0x80003ff, 0xfff}}, 0x20) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r1, 0x0, 0x302) 8.912205126s ago: executing program 5 (id=4595): socket$rxrpc(0x21, 0x2, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@init_itable_val={'init_itable', 0x3d, 0x2}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x2000, 0x2) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 8.337483227s ago: executing program 3 (id=4596): socket$netlink(0x10, 0x3, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20004080) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x7a, 0x0, 0x0) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {0x0, 0x0, 0x1}, 0xfd}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40000) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 7.531918724s ago: executing program 5 (id=4598): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x201440a, &(0x7f0000000340)={[{@noautodefrag}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@flushoncommit}, {@ref_verify}, {@ref_verify}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x7fffffff}}, {@space_cache}, {@space_cache_v2}, {@acl}, {@enospc_debug}, {@ssd_spread}, {@max_inline={'max_inline', 0x3d, [0x34, 0x6d, 0x36]}}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x4) copy_file_range(r2, &(0x7f00000001c0), r1, 0x0, 0xffffffffa003e45b, 0x700000000000000) 7.42062708s ago: executing program 4 (id=4599): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create1(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x26000400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 5.952319884s ago: executing program 2 (id=4601): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaa", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000105002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0) 5.834826109s ago: executing program 4 (id=4602): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0xc0386105, 0x0) 5.686246867s ago: executing program 2 (id=4603): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x0, 0x0, 0xfffffffe, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffe4f, 0x0, 0x0, 0xfc, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3f}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x20, 0x80, 0x1, 0xfffffc01, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0xc4, 0x0, 0x0, @empty, @local}}}}) 5.612428379s ago: executing program 4 (id=4605): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000040)=[{&(0x7f00000006c0)="27050200340f140006000012627b8846552fb96dbcf706060000170008005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f620102c21880b00000000010040575625ef4c51d6350b000000880000000000", 0x53}, {&(0x7f0000001280)="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", 0xd27}], 0x2}, 0x20008010) 5.47370781s ago: executing program 3 (id=4606): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r1, 0xffffffffffffffff, 0x0) 5.354839274s ago: executing program 4 (id=4607): r0 = socket$inet(0x2, 0x3, 0x8) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x1e) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r1, 0x0) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xfffffffffffffdb1) r6 = socket(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xbc44) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYRESDEC=r1, @ANYRES32=r5, @ANYRES16=0x0, @ANYRESDEC], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r9], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {}, {0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x124a, &(0x7f0000000400)={0x0, 0x216c, 0x2, 0x1, 0x1c0}, 0x0, &(0x7f0000000000)) 5.276659406s ago: executing program 2 (id=4608): bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000280)=""/239, 0xef) syz_usb_disconnect(r0) 3.997943052s ago: executing program 8 (id=4613): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8932, &(0x7f0000000000)={'netdevsim0\x00'}) 3.656686616s ago: executing program 5 (id=4614): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000001040000000000000000000071122b000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.656416136s ago: executing program 8 (id=4615): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaa", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000105002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0) 3.524889177s ago: executing program 4 (id=4617): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f0000000000), 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x0, 0x20000000000006a, 0x55cd, 0x8000000000000001, 0x400, 0x5, 0xd, 0xb446, 0x2, 0xffffffffffffffff, 0x100000000f423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0xff, 0x4, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0xc84}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1, 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}}) 3.341508053s ago: executing program 5 (id=4618): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x208000}, 0x50) syz_usb_control_io$uac1(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) dup3(0xffffffffffffffff, r1, 0x80000) write(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, 0x0) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="040e04046d0c"], 0x7) r3 = syz_open_procfs(0x0, 0x0) writev(r3, &(0x7f0000000200)=[{0x0}], 0x1) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000e40)={0x40, 0x9, 0x9, "00004700000040f400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)={0x20, 0x15, 0x2d, "d9459730533a922f381192be9ea4a903e135deafdd9b808934b119e09dd95a99c5833c9fb694f01f8bb4a7b3d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.274858617s ago: executing program 1 (id=4619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70f923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.273905274s ago: executing program 8 (id=4620): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") syz_mount_image$squashfs(&(0x7f0000000680), &(0x7f0000000280)='./file0\x00', 0x801, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0], 0x2, 0x235, &(0x7f0000000000)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJLPzxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYT4gM4sDZBADA8PkPxH3HrBIMoggmSXK8U/sVMvyVWad9xlmdExLY2A0mMXBwMCgd0R3pp0BbzcT1MziyqrsxJyc1KLiMwyo5k9m3M+kyAhSd+bv1eAHjHYM3WwMjAxyG/zVFn/7I1W5cVN95PSqiJqp3U03l66PY9im//eKidT7iRlh/x8cEtSyyMv/ME9G6fvmhjkfauqemDh2NirP5W+9/Pfd+5ja4gQ1psfiXYVs/AluWjWfnJ3c6h/PTa9u31KsuCArzWXisakX/yYcX8vAMPnCE1v9mjOH4hVjOKXcKufG3HWLF+Rapn6+7s0LhoNRnycyMDIyMDAxMMwM27kH2V/lDdDIYGBmYGBQYQApYmFIy8xJNfBgYGRghnIMWaCqYKqZGDjAEnrJ+Tkp7QyM4CQA1racgQVuhuFjBlZ+kHIQx+gxAytchoGhAWoSQzuUVoHSHlB6OZR+DKXl0ZINC9iEfihPo4GBgY2hIvE/f5EhGwMDQ0ViSUmRIUSspKTICC5mJAC3mQlq61wmVM8dZ2IYBaNgFIyCUTAKRsEoGAWjYBSMgpEMAAEAAP//8o+5Nw==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 2.879514822s ago: executing program 8 (id=4621): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) 2.753716524s ago: executing program 8 (id=4622): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 2.550176952s ago: executing program 8 (id=4623): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r9, 0x2007ffb) sendfile(r9, r9, 0x0, 0x1000000201005) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) creat(0x0, 0x8e) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[], 0x60}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.37007839s ago: executing program 1 (id=4624): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x50) syz_emit_ethernet(0x447, &(0x7f00000014c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6020064804113afffe80000000000000000000000000002efe80000000"], 0x0) 2.175030413s ago: executing program 1 (id=4625): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1a1cc04, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@shortname_lower}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@utf8no}, {@uni_xlateno}, {@uni_xlate}, {@numtail}, {@numtail}, {@rodir}, {@rodir}, {@shortname_winnt}, {@fat=@discard}]}, 0x81, 0x2ac, &(0x7f0000000840)="$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") socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) 1.616545406s ago: executing program 3 (id=4626): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b", 0x2}, {&(0x7f0000002800)}, {&(0x7f00000006c0)="0d01d0178672d04a15133f8e9db80426e03a49fed4d38f513b1ff4f5d12fe420e55c9f53175ea607198a6e654a9718f5ad302500a7b7809f2369d8cad6b31c4d5a11bb8cc39cd6adf231927440b02b5a04d279ebef52b34c07f70672c23b6fc54c068af9e4d4ff7a7b93693c85c5e7e3a93e4b2e14358b1a2ca4561c403d6cb7ea01cde1db3195a86667768b798493c365f83196a3d14df22b99b65386a8d6f23a2cb0b35e05071c82fdfd781478bdd6e39e6cf70e309068a5e2b6bb", 0xbc}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f0000000540)="f2e6", 0x2}], 0x2}}, {{&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="db6a17c67d10beecea12519c84fe5395a32ca73436ce6975b46e5aaff7be26a1dff05c02a3e57710a7289df43f1d96dc1910a0d0e141e1ffd99503fa87475cd9552b0de94dc481d078c634a329327a61d069e7afd887", 0x56}, {&(0x7f0000000440)="028d9a7c7dc3d9decf249e204d8fd31920b3ceaf81d132403d926018086f8183304c9ba0791798c013e7d20c659eaa2171981edb1c37928d2a466c7192bb0c5534672b04798af4bbb1486bdf1e9e49f862f7cb464c3cf7aaa2d18bd01ab0f21a0c65f36ca0696f91f6424b6b635e0ed21be4476746c0f666166dc302bacec49a795f97869cbf1c3a91e6ca5bbcf281433f54f005bbc0c9858beea8715b67fb97cbced0995c9220e5f14ddb7016abec23fb", 0xb1}, {&(0x7f0000003d80)="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", 0xd14}], 0x3, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="cfe8a11f41791e5676ed67571c05417ae7", 0x11}, {&(0x7f0000000940)="01f6e883f4aa68617c2a4ee06224007ad07bc6771dd012152784849c119394e54f48d1071c1400e6b396767ffd19777e1f3f36849febade8952b507455d9fa443c7929ac600f5524ac257bb4873a0f7677c45370029ea99cfd6f30b4e05793de2937c7d4f4806988878dc66d9555e2889ba0a247c6f97ea09975373d95a6a3b600ed4e8c7a33184ec0e1eaf1016888b2b2", 0x91}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f0000000200)="fadd6d25cdaf10ad9edbe24774daacddc0dba4052548a9dc09cb05582bfc57aaa02c015dad737890aae02f293260b8d077e564bd170b60c9545a0a7d120658c3d3e050b855d5232f3228fa1ed5184f84b0e46da42d79c6fbe47fc1f56d625006735314a24cabeb4781a410c501c0b5d4effbfc70c2afaebf9b59581e574e266b2ffb76c32ce9c104", 0x88}], 0x4, &(0x7f0000000880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0x18}}], 0x4, 0x4000000) 983.162623ms ago: executing program 1 (id=4627): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x660}}, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$inet(r0, &(0x7f0000000c00)={&(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x8044) close(r0) 866.858038ms ago: executing program 2 (id=4628): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea608641602f36504001a00381931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb3678a40cb53fc8d8faaafe63e09e8b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000003980)=""/4043, 0xfcb}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/209, 0xd1}, {&(0x7f00000006c0)=""/238, 0xee}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f00000008c0)=""/203, 0xcb}, {&(0x7f0000000000)=""/112, 0x70}], 0xb}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 569.206091ms ago: executing program 3 (id=4629): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0xde5f, 0x10100, 0x2, 0x33a}, &(0x7f0000002bc0)=0x0, &(0x7f0000002900)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 460.673037ms ago: executing program 2 (id=4630): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 446.322332ms ago: executing program 1 (id=4631): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x8000000000000, 0x28dc, 0x0, 0x440000, 0x1, {0x1, 0xfffffffffffffffd, 0x0, 0x1000, 0xfffffffffffffffc, 0x100, 0x0, 0x0, 0x4, 0xc000, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001810000481100fe8000000000000000000000000000aafe8000000000000000000000000000aa"], 0x0) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000005c0)='./file0/../file0/file0\x00') 320.480467ms ago: executing program 3 (id=4632): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 208.516448ms ago: executing program 2 (id=4633): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 149.037957ms ago: executing program 5 (id=4634): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r0, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 8.881457ms ago: executing program 3 (id=4635): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000280)=""/239, 0xef) read$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'dvmrp0\x00', @ifru_flags=0x400}}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r1) 0s ago: executing program 1 (id=4636): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) kernel console output (not intermixed with test programs): umber 26 [ 1374.626666][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055efa800: rx timeout, send abort [ 1374.635166][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055efa800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 1374.649683][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056b85c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 1375.438251][T17981] fuse: Unknown parameter 'group_id00000000000000000000' [ 1375.719436][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3709'. [ 1375.771169][T17988] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3709'. [ 1377.033566][ T6013] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1377.468415][ T6013] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1377.495409][ T6013] usb 9-1: config 0 has no interface number 0 [ 1377.518162][ T6013] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1377.547257][ T6013] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.295104][ T6013] usb 9-1: Product: syz [ 1378.307764][ T6013] usb 9-1: Manufacturer: syz [ 1378.335357][ T6013] usb 9-1: SerialNumber: syz [ 1378.362831][ T6013] usb 9-1: config 0 descriptor?? [ 1378.720976][ T6013] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1378.766227][ T6013] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1378.835166][ T6013] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1378.884017][ T6013] usb 9-1: media controller created [ 1379.028335][ T6013] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1379.151520][T18027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3724'. [ 1379.160446][T18027] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3724'. [ 1379.205171][ T6013] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 1379.294056][T18032] input: syz1 as /devices/virtual/input/input38 [ 1380.711626][ T6013] usb 9-1: USB disconnect, device number 27 [ 1382.456011][T18051] fuse: Unknown parameter 'group_id00000000000000000000' [ 1384.601542][T10174] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1384.748507][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3745'. [ 1384.784077][T18092] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3745'. [ 1384.811924][T10174] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1384.819960][T10174] usb 5-1: config 0 has no interface number 0 [ 1384.862140][T10174] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1384.896257][T10174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.906891][T18095] fuse: Bad value for 'user_id' [ 1384.931645][T18095] fuse: Bad value for 'user_id' [ 1384.945437][T10174] usb 5-1: Product: syz [ 1384.949638][T10174] usb 5-1: Manufacturer: syz [ 1384.959589][T10174] usb 5-1: SerialNumber: syz [ 1384.992885][T10174] usb 5-1: config 0 descriptor?? [ 1385.233372][T10174] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1385.270516][T10174] usb 5-1: USB disconnect, device number 42 [ 1385.595053][T18115] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3755'. [ 1386.198753][T18125] netlink: 'syz.3.3758': attribute type 12 has an invalid length. [ 1386.207088][T18125] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.3758'. [ 1386.533642][T18132] fuse: Bad value for 'user_id' [ 1386.568989][T18132] fuse: Bad value for 'user_id' [ 1386.590984][ T6013] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1386.654872][ T6013] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1386.771357][ T5972] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1386.997203][ T5972] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1387.114230][ T5972] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.226038][ T5972] usb 9-1: Product: syz [ 1387.286388][ T5972] usb 9-1: Manufacturer: syz [ 1387.352665][ T5972] usb 9-1: SerialNumber: syz [ 1387.751071][ T5972] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1387.910120][T18151] fuse: Bad value for 'user_id' [ 1387.951474][T18151] fuse: Bad value for 'user_id' [ 1388.031441][ T10] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1388.220580][T18161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3771'. [ 1388.250300][T18131] random: crng reseeded on system resumption [ 1388.675651][T18169] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3773'. [ 1388.731881][ T1535] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1389.079334][ T1535] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1389.217864][ T10] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1389.245988][ T1535] usb 5-1: config 0 has no interface number 0 [ 1389.328061][ T10] ath9k_htc: Failed to initialize the device [ 1389.353042][ T1535] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1389.379571][ T1535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.416143][ T10] usb 9-1: ath9k_htc: USB layer deinitialized [ 1389.432167][ T1535] usb 5-1: Product: syz [ 1389.458572][ T1535] usb 5-1: Manufacturer: syz [ 1389.525593][ T1535] usb 5-1: SerialNumber: syz [ 1389.583304][ T5848] usb 9-1: USB disconnect, device number 28 [ 1389.678941][T18183] fuse: Bad value for 'user_id' [ 1389.722410][ T1535] usb 5-1: config 0 descriptor?? [ 1389.726723][T18183] fuse: Bad value for 'user_id' [ 1390.932568][ T1535] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1391.022584][ T1535] usb 5-1: USB disconnect, device number 43 [ 1391.464551][T18200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3784'. [ 1391.785811][T18206] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 1391.792380][T18206] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1391.826555][T18206] vhci_hcd vhci_hcd.0: Device attached [ 1392.206882][ T5815] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 1392.413979][T18207] vhci_hcd: connection reset by peer [ 1392.505488][ T13] vhci_hcd: stop threads [ 1392.603105][ T13] vhci_hcd: release socket [ 1392.657278][ T13] vhci_hcd: disconnect device [ 1392.708898][T18224] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3791'. [ 1392.963286][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1393.047434][ T10] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1393.060700][T18229] fuse: Bad value for 'fd' [ 1393.825169][T18247] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3798'. [ 1394.297676][T18250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3800'. [ 1394.711323][ T6013] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1395.883511][ T6013] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1395.893968][ T6013] usb 9-1: config 0 has no interface number 0 [ 1395.903306][ T6013] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1395.918852][ T6013] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.927242][ T6013] usb 9-1: Product: syz [ 1395.931671][ T6013] usb 9-1: Manufacturer: syz [ 1395.936259][ T6013] usb 9-1: SerialNumber: syz [ 1395.947956][ T6013] usb 9-1: config 0 descriptor?? [ 1396.173430][ T6013] dvb_usb_ec168 9-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1396.261921][ T6013] usb 9-1: USB disconnect, device number 29 [ 1396.407326][T18269] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1396.413869][T18269] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1396.449233][T18269] vhci_hcd vhci_hcd.0: Device attached [ 1396.476940][T18275] fuse: Bad value for 'fd' [ 1396.566916][T18270] vhci_hcd: connection closed [ 1396.574526][ T6735] vhci_hcd: stop threads [ 1396.639723][ T6735] vhci_hcd: release socket [ 1396.656931][ T6735] vhci_hcd: disconnect device [ 1396.711987][ T44] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 1396.746943][ T44] usb 43-1: enqueue for inactive port 0 [ 1396.857479][ T44] vhci_hcd: vhci_device speed not set [ 1397.381418][ T5815] vhci_hcd: vhci_device speed not set [ 1397.405020][ T6013] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1397.435715][ T6013] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1397.637619][ T1535] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1397.700079][T18306] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3818'. [ 1398.075163][ T1535] usb 2-1: Using ep0 maxpacket: 8 [ 1398.083335][ T1535] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1398.138848][T18308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3821'. [ 1398.171613][ T1535] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1398.271825][ T1535] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1398.355182][ T1535] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1398.423007][ T1535] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1398.454970][ T1535] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1398.494643][ T1535] usb 2-1: string descriptor 0 read error: -22 [ 1398.501095][ T1535] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1398.512569][ T1535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.540089][ T1535] adutux 2-1:168.0: interrupt endpoints not found [ 1398.756739][T18311] fuse: Bad value for 'fd' [ 1398.757935][ T1535] usb 2-1: USB disconnect, device number 28 [ 1399.768093][T18329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3829'. [ 1399.894667][T18333] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 1399.901269][T18333] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1399.968554][T18333] vhci_hcd vhci_hcd.0: Device attached [ 1400.261380][ T1535] usb 49-1: new high-speed USB device number 3 using vhci_hcd [ 1400.352736][T18334] vhci_hcd: connection closed [ 1400.354290][ T13] vhci_hcd: stop threads [ 1400.436804][ T13] vhci_hcd: release socket [ 1400.451808][ T13] vhci_hcd: disconnect device [ 1400.548881][T18348] fuse: Bad value for 'fd' [ 1400.648490][ T5815] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1400.851876][ T5815] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1400.951260][T18354] ubi: mtd0 is already attached to ubi31 [ 1401.790204][ T30] audit: type=1326 audit(1751545831.194:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18355 comm="syz.3.3837" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc5ec78e929 code=0x0 [ 1402.501859][T18369] ptrace attach of "./syz-executor exec"[13287] was attempted by "./syz-executor exec"[18369] [ 1403.549307][T18391] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3845'. [ 1404.134703][T18398] fuse: Bad value for 'fd' [ 1404.350919][ T5972] IPVS: starting estimator thread 0... [ 1404.441672][T18406] IPVS: using max 33 ests per chain, 79200 per kthread [ 1404.963009][ T44] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1405.045890][ T44] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1405.370262][T18422] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3859'. [ 1405.481418][ T1535] vhci_hcd: vhci_device speed not set [ 1405.751583][T18430] ubi: mtd0 is already attached to ubi31 [ 1407.122380][T18438] fuse: Bad value for 'fd' [ 1407.699478][T18458] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3875'. [ 1407.782760][T18464] fuse: Invalid rootmode [ 1408.150125][T18475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3882'. [ 1408.209869][T18478] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3882'. [ 1408.280722][T18475] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3882'. [ 1408.296289][T18478] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3882'. [ 1409.387648][T18502] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3892'. [ 1409.725296][T18515] fuse: Bad value for 'fd' [ 1410.595754][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 1410.672107][T18481] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1410.681779][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 1410.745837][T18481] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1410.781069][T18481] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1410.788889][T18481] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1410.809271][T18481] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1410.819072][T18481] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1410.829349][T18481] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1410.838102][T18481] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1411.192646][T18527] ubi: mtd0 is already attached to ubi31 [ 1412.041301][ T1535] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1412.267747][ T1535] usb 5-1: Using ep0 maxpacket: 8 [ 1412.303425][ T1535] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1412.397252][ T1535] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1412.479688][T18537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3904'. [ 1412.481280][ T1535] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1412.510585][T18537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3904'. [ 1412.526604][T18537] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3904'. [ 1412.539651][T18537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3904'. [ 1412.646859][ T1535] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1412.723637][ T1535] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1412.755670][T12397] Bluetooth: hci2: command 0x0c1a tx timeout [ 1412.808050][ T1535] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1412.832161][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 1412.838318][T12397] Bluetooth: hci4: command 0x0406 tx timeout [ 1412.844559][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 1412.872583][ T1535] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1412.886122][T18542] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1412.892633][T18542] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1412.912304][ T1535] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1413.060710][T18542] vhci_hcd vhci_hcd.0: Device attached [ 1413.078353][ T1535] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1413.105328][ T1535] usb 5-1: string descriptor 0 read error: -22 [ 1413.112614][ T1535] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1413.141425][ T1535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.301328][ T5972] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 1413.333010][ T1535] usb 5-1: can't set config #168, error -71 [ 1413.367886][T18543] vhci_hcd: connection reset by peer [ 1413.377326][ T1535] usb 5-1: USB disconnect, device number 44 [ 1413.402441][ T3495] vhci_hcd: stop threads [ 1413.426824][ T3495] vhci_hcd: release socket [ 1413.433714][T18555] input: syz0 as /devices/virtual/input/input39 [ 1413.463599][ T3495] vhci_hcd: disconnect device [ 1413.631406][T18559] netlink: 'syz.8.3910': attribute type 12 has an invalid length. [ 1413.640058][T18559] netlink: 9472 bytes leftover after parsing attributes in process `syz.8.3910'. [ 1414.691340][ T5815] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1414.911406][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 1414.911491][T12397] Bluetooth: hci0: command 0x0406 tx timeout [ 1414.917604][T18541] Bluetooth: hci4: command 0x0406 tx timeout [ 1414.934171][ T5815] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1414.964014][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.991490][ T5815] usb 3-1: Product: syz [ 1414.995989][ T5815] usb 3-1: Manufacturer: syz [ 1415.000607][ T5815] usb 3-1: SerialNumber: syz [ 1415.019136][ T5815] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1415.038464][ T6013] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1415.446237][T18575] random: crng reseeded on system resumption [ 1416.133576][ T6013] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1416.163595][ T6013] ath9k_htc: Failed to initialize the device [ 1416.260509][ T6013] usb 3-1: ath9k_htc: USB layer deinitialized [ 1416.922281][ T5815] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1417.091318][ T5815] usb 6-1: Using ep0 maxpacket: 8 [ 1417.098477][ T5815] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1417.120827][ T5815] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1417.148386][ T5815] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1417.165666][ T5815] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1417.181122][ T5815] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1417.194431][ T5815] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1417.209452][ T5815] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1417.226235][ T5815] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1417.252278][ T1535] usb 3-1: USB disconnect, device number 45 [ 1417.269436][ T5815] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1417.292955][ T5815] usb 6-1: string descriptor 0 read error: -22 [ 1417.299502][ T5815] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1417.323622][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.347129][ T5815] adutux 6-1:168.0: interrupt endpoints not found [ 1417.595912][ T1535] usb 6-1: USB disconnect, device number 35 [ 1417.726223][T18614] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1417.732814][T18614] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1418.724440][T18614] vhci_hcd vhci_hcd.0: Device attached [ 1418.823180][ T5972] vhci_hcd: vhci_device speed not set [ 1418.895635][T18619] vhci_hcd: connection closed [ 1418.896030][ T34] vhci_hcd: stop threads [ 1418.966186][ T34] vhci_hcd: release socket [ 1418.970997][ T34] vhci_hcd: disconnect device [ 1419.021783][ T5848] vhci_hcd: vhci_device speed not set [ 1419.744291][T18647] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3937'. [ 1422.652555][T18686] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1422.659129][T18686] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1422.693867][T18686] vhci_hcd vhci_hcd.0: Device attached [ 1422.945174][T18687] vhci_hcd: connection closed [ 1422.945747][T15720] vhci_hcd: stop threads [ 1422.963479][T15720] vhci_hcd: release socket [ 1422.991558][ T1535] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 1423.004377][T15720] vhci_hcd: disconnect device [ 1423.145263][T18694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3955'. [ 1423.203318][T18694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.115668][T18704] overlayfs: overlapping lowerdir path [ 1424.531607][ T5848] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1424.721452][ T5848] usb 4-1: Using ep0 maxpacket: 8 [ 1424.767201][ T5848] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1424.822494][ T5848] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1424.868593][ T5848] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1425.130725][ T5848] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1425.141372][ T5848] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1425.152869][ T5848] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1425.167345][ T5848] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1425.250353][T18734] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3969'. [ 1426.053871][ T5848] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1426.141430][ T5848] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1426.254996][ T5848] usb 4-1: string descriptor 0 read error: -22 [ 1426.348331][ T5848] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1426.401326][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.507657][ T5848] adutux 4-1:168.0: interrupt endpoints not found [ 1426.697338][ T5848] usb 4-1: USB disconnect, device number 53 [ 1427.773299][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3975'. [ 1427.808277][T18757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3975'. [ 1427.891508][T18757] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1427.900506][T18757] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1427.909310][T18757] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1427.918328][T18757] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1428.121754][ T1535] vhci_hcd: vhci_device speed not set [ 1428.780011][T18775] fuse: Unknown parameter 'use00000000000000000000' [ 1429.367456][T18785] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3983'. [ 1430.488354][T18801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3988'. [ 1430.757559][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1430.764066][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1431.604172][T18812] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3994'. [ 1431.820679][T18818] fuse: Unknown parameter 'use00000000000000000000' [ 1432.181328][ T1535] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1432.531546][ T1535] usb 3-1: Using ep0 maxpacket: 8 [ 1432.573366][ T1535] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1432.611038][ T1535] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1432.663629][ T1535] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1432.763651][ T1535] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1432.826255][ T1535] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1432.871815][ T1535] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1432.885032][ T1535] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1432.910959][ T1535] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1432.938990][ T1535] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1433.006156][ T1535] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1433.033573][ T1535] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1433.043308][ T1535] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1433.070053][ T1535] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1433.094516][ T1535] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1433.161727][ T1535] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1433.235918][ T1535] usb 3-1: string descriptor 0 read error: -22 [ 1433.242890][ T1535] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1433.252428][ T1535] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.285540][ T1535] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1433.872632][T18824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.903453][T18824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.322650][ T44] usb 3-1: USB disconnect, device number 46 [ 1434.423269][ T1535] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1434.591597][ T1535] usb 4-1: Using ep0 maxpacket: 8 [ 1434.624761][ T1535] usb 4-1: config 10 has an invalid interface number: 193 but max is 0 [ 1434.659809][ T1535] usb 4-1: config 10 has no interface number 0 [ 1434.698980][ T1535] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=be.93 [ 1434.741232][ T1535] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.777140][ T1535] usb 4-1: Product: syz [ 1434.790065][ T1535] usb 4-1: Manufacturer: syz [ 1434.808531][ T1535] usb 4-1: SerialNumber: syz [ 1435.079563][ T1535] rtsx_usb 4-1:10.193: probe with driver rtsx_usb failed with error -22 [ 1435.151377][ T1535] usb 4-1: USB disconnect, device number 54 [ 1435.164954][T18873] fuse: Unknown parameter 'user_i00000000000000000000' [ 1437.481689][T18909] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1437.544911][T18909] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1437.588656][T18909] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1437.595497][T18909] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1437.623920][T18909] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1437.971798][ T6013] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1438.171710][ T6013] usb 3-1: Using ep0 maxpacket: 8 [ 1438.208956][ T6013] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1438.308943][ T6013] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1438.351532][ T6013] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1438.368571][ T6013] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1438.522913][ T6013] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1438.542623][ T6013] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1438.603947][ T6013] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1438.646530][ T6013] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1438.683176][ T6013] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1438.767149][ T6013] usb 3-1: string descriptor 0 read error: -22 [ 1438.786680][ T6013] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1438.796114][ T6013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.837129][ T6013] adutux 3-1:168.0: interrupt endpoints not found [ 1439.030375][ T6013] usb 3-1: USB disconnect, device number 47 [ 1439.391499][T18541] Bluetooth: hci1: command 0x0406 tx timeout [ 1439.540409][T18936] loop2: detected capacity change from 0 to 7 [ 1439.561415][T18541] Bluetooth: hci2: command 0x0c1a tx timeout [ 1439.591401][T18936] Dev loop2: unable to read RDB block 7 [ 1439.602781][T18936] loop2: unable to read partition table [ 1439.620424][T18936] loop2: partition table beyond EOD, truncated [ 1439.631548][T12397] Bluetooth: hci3: command 0x0406 tx timeout [ 1439.637677][T18541] Bluetooth: hci0: command 0x0406 tx timeout [ 1439.650496][T18936] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1439.711495][T18541] Bluetooth: hci4: command 0x0406 tx timeout [ 1440.672463][T18953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4040'. [ 1440.787951][T18953] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1441.428464][T18965] fuse: Unknown parameter 'group_i00000000000000000000' [ 1442.075135][T18973] netlink: 'syz.3.4047': attribute type 12 has an invalid length. [ 1442.083340][T18973] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.4047'. [ 1443.097611][T18984] tipc: Enabling of bearer rejected, failed to enable media [ 1443.137608][T18984] syzkaller0: entered promiscuous mode [ 1443.161966][T18984] syzkaller0: entered allmulticast mode [ 1444.308638][T19006] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4054'. [ 1444.359078][T19024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4059'. [ 1445.080728][T19006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1445.469217][T19006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1445.563261][T19006] bond0 (unregistering): Released all slaves [ 1451.993785][T19095] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4082'. [ 1453.883731][T19123] netlink: 'syz.2.4093': attribute type 12 has an invalid length. [ 1453.891829][T19123] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.4093'. [ 1455.766950][T19141] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4098'. [ 1455.819233][T19142] vxcan1: tx address claim with different name [ 1457.037900][T19153] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4100'. [ 1457.701541][T19165] fuse: Bad value for 'fd' [ 1457.750118][T19166] fuse: Bad value for 'fd' [ 1458.092555][ T5815] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1458.371313][ T5815] usb 5-1: Using ep0 maxpacket: 32 [ 1458.427483][ T5815] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1458.559221][ T5815] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1458.664755][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.829801][ T5815] usb 5-1: Product: syz [ 1458.900665][T19178] syzkaller1: entered promiscuous mode [ 1458.901316][ T5815] usb 5-1: Manufacturer: syz [ 1458.906629][T19178] syzkaller1: entered allmulticast mode [ 1458.910719][ T5815] usb 5-1: SerialNumber: syz [ 1458.949145][T19180] fuse: Unknown parameter '00000000000000000000003' [ 1459.082188][ T5815] usb 5-1: config 0 descriptor?? [ 1459.307366][T19189] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4117'. [ 1459.361570][ T1535] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1459.537699][T18541] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 1459.552276][ T1535] usb 3-1: Using ep0 maxpacket: 32 [ 1459.561384][ T5815] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 1459.567576][ T1535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1459.586229][ T5815] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 1459.593254][ T1535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1459.634467][T19199] loop2: detected capacity change from 0 to 7 [ 1459.653831][ T1535] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1459.668817][T19199] Dev loop2: unable to read RDB block 7 [ 1459.683826][ T1535] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.692443][T19199] loop2: unable to read partition table [ 1459.698311][T19199] loop2: partition table beyond EOD, truncated [ 1459.718205][ T1535] usb 3-1: config 0 descriptor?? [ 1459.750986][T19199] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1459.797669][ T1535] hub 3-1:0.0: USB hub found [ 1459.839242][T19201] fuse: Bad value for 'fd' [ 1460.052428][ T1535] hub 3-1:0.0: 1 port detected [ 1460.976473][T19212] fuse: Unknown parameter '00000000000000000000003' [ 1461.446452][ T6013] usb 5-1: USB disconnect, device number 45 [ 1461.476912][ T1535] hub 3-1:0.0: activate --> -90 [ 1461.678005][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 1461.685869][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 1461.693404][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 1461.700821][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 1461.708210][ T1535] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 1461.931781][ T1535] usb 3-1: USB disconnect, device number 48 [ 1461.981755][T19223] syzkaller1: entered promiscuous mode [ 1462.018794][T19223] syzkaller1: entered allmulticast mode [ 1462.120273][T19226] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4132'. [ 1462.649126][T19245] fuse: Unknown parameter '00000000000000000000003' [ 1462.659321][T19242] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4138'. [ 1462.680709][T19242] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4138'. [ 1462.744050][T19242] netlink: 84 bytes leftover after parsing attributes in process `syz.8.4138'. [ 1462.811478][T19242] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4138'. [ 1462.856538][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4138'. [ 1463.481621][ T44] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1463.514461][T19269] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4150'. [ 1463.664860][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.694121][ T44] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1463.733102][ T44] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1463.751633][ T6013] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1463.768515][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.793400][ T44] usb 4-1: Product: syz [ 1463.797938][ T44] usb 4-1: Manufacturer: syz [ 1463.804455][ T44] usb 4-1: SerialNumber: syz [ 1463.818327][ T44] usb 4-1: config 0 descriptor?? [ 1463.941290][ T6013] usb 3-1: Using ep0 maxpacket: 32 [ 1463.954133][ T6013] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1463.974936][T19274] syzkaller1: entered promiscuous mode [ 1463.986151][ T6013] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1464.001143][T19274] syzkaller1: entered allmulticast mode [ 1464.021259][ T6013] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1464.031720][ T6013] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.053813][ T6013] usb 3-1: config 0 descriptor?? [ 1464.087250][ T6013] hub 3-1:0.0: USB hub found [ 1464.288848][ T6013] hub 3-1:0.0: 1 port detected [ 1464.882111][T19284] fuse: Bad value for 'fd' [ 1464.900630][ T6013] hub 3-1:0.0: activate --> -90 [ 1464.927539][T19287] loop2: detected capacity change from 0 to 7 [ 1464.954272][T19287] Dev loop2: unable to read RDB block 7 [ 1464.976263][T19287] loop2: unable to read partition table [ 1465.034761][T19287] loop2: partition table beyond EOD, truncated [ 1465.044653][T19287] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1465.077211][T19290] ptrace attach of "./syz-executor exec"[15661] was attempted by "./syz-executor exec"[19290] [ 1465.226233][ T5972] usb 3-1: USB disconnect, device number 49 [ 1465.339748][T19295] fuse: Unknown parameter 'grou00000000000000000000' [ 1465.631509][ T5848] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1465.828045][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 1465.846505][ T5848] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1465.894799][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1465.959921][ T5848] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1466.043418][T19306] ubi: mtd0 is already attached to ubi31 [ 1466.656868][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1466.668039][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1466.681081][ T5848] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1466.773627][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1466.947544][ T44] usb 4-1: USB disconnect, device number 55 [ 1466.961535][ T5848] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1466.975125][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1466.996410][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1467.019043][ T5848] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1467.028742][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1467.042084][ T5848] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1467.054847][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1467.066415][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1467.083512][ T5848] usb 2-1: string descriptor 0 read error: -22 [ 1467.090534][ T5848] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1467.100936][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.119213][ T5848] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1467.338455][T19298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.370938][T19298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.795924][ T44] usb 2-1: USB disconnect, device number 29 [ 1467.895831][T19317] syzkaller1: entered promiscuous mode [ 1467.919484][T19317] syzkaller1: entered allmulticast mode [ 1468.169740][T19330] fuse: Bad value for 'fd' [ 1468.416968][T19335] loop2: detected capacity change from 0 to 7 [ 1468.426227][T19335] Dev loop2: unable to read RDB block 7 [ 1468.432063][T19335] loop2: unable to read partition table [ 1468.438065][T19335] loop2: partition table beyond EOD, truncated [ 1468.450898][T19335] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1471.273622][T19364] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4186'. [ 1471.312234][T19348] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1471.348804][T19348] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1471.383485][T19348] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1471.402979][T19348] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1471.416979][T19348] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1471.427411][T19370] fuse: Bad value for 'fd' [ 1471.815647][T19387] loop2: detected capacity change from 0 to 7 [ 1471.829575][T19387] Dev loop2: unable to read RDB block 7 [ 1471.835974][T19387] loop2: unable to read partition table [ 1471.852657][T19387] loop2: partition table beyond EOD, truncated [ 1471.874488][T19387] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1472.084128][T19392] ubi: mtd0 is already attached to ubi31 [ 1472.591373][T18541] Bluetooth: hci1: command 0x0406 tx timeout [ 1472.939956][T19393] ksmbd: Unknown IPC event: 3, ignore. [ 1473.002380][T19393] usb usb8: usbfs: process 19393 (syz.5.4191) did not claim interface 0 before use [ 1473.392744][T18541] Bluetooth: hci3: command 0x0406 tx timeout [ 1473.392760][T12397] Bluetooth: hci2: command 0x0c1a tx timeout [ 1473.474455][T18541] Bluetooth: hci4: command 0x0406 tx timeout [ 1473.480658][T18541] Bluetooth: hci0: command 0x0406 tx timeout [ 1473.961160][ T6013] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1473.992299][T19412] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4199'. [ 1474.117021][T19417] fuse: Bad value for 'fd' [ 1474.188353][T19419] fuse: Bad value for 'fd' [ 1474.287621][ T6013] usb 4-1: Using ep0 maxpacket: 8 [ 1474.361445][ T6013] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1474.406007][ T6013] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1474.497637][T19424] input: syz1 as /devices/virtual/input/input41 [ 1476.573879][ T6013] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1476.669314][ T6013] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1476.755380][ T6013] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1476.808570][ T6013] usb 4-1: unable to read config index 1 descriptor/start: -71 [ 1476.841244][ T6013] usb 4-1: can't read configurations, error -71 [ 1477.023326][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1477.258633][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1477.328904][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.407260][ T10] usb 5-1: Product: syz [ 1477.467334][ T10] usb 5-1: Manufacturer: syz [ 1477.550429][ T10] usb 5-1: SerialNumber: syz [ 1477.583105][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1477.627047][ T5848] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1477.891895][T19426] random: crng reseeded on system resumption [ 1479.727726][ T5848] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1479.737994][ T5972] usb 5-1: USB disconnect, device number 46 [ 1479.761461][ T5848] ath9k_htc: Failed to initialize the device [ 1479.817412][ T5972] usb 5-1: ath9k_htc: USB layer deinitialized [ 1480.096981][T19448] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4213'. [ 1480.398150][T19453] fuse: Bad value for 'fd' [ 1481.012472][T19464] input: syz1 as /devices/virtual/input/input42 [ 1483.021599][ T5955] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1483.211481][ T5955] usb 2-1: Using ep0 maxpacket: 8 [ 1483.228502][ T5955] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1483.257258][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1483.327859][T19470] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4223'. [ 1483.329613][ T5955] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1483.382102][T19470] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1483.417422][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1483.438290][T19472] loop3: detected capacity change from 0 to 2048 [ 1483.463251][T19472] EXT4-fs: Ignoring removed mblk_io_submit option [ 1483.469169][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1483.533018][ T5955] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1483.540461][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1483.600491][ T5955] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1483.602552][T19472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1483.638083][T19485] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4228'. [ 1483.643166][T19481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4227'. [ 1483.654968][T19485] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4228'. [ 1483.691066][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1483.764380][ T5955] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1483.943119][ T5955] usb 2-1: unable to read config index 2 descriptor/all [ 1483.973934][ T5955] usb 2-1: can't read configurations, error -71 [ 1483.997963][T12297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1484.051315][ T5815] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1484.122699][T19499] fuse: Bad value for 'fd' [ 1484.211382][ T5815] usb 9-1: Using ep0 maxpacket: 16 [ 1484.253475][ T5815] usb 9-1: config 3 has an invalid interface number: 71 but max is 0 [ 1484.342246][ T5815] usb 9-1: config 3 has no interface number 0 [ 1484.396615][ T5815] usb 9-1: config 3 interface 71 has no altsetting 0 [ 1484.484477][ T5815] usb 9-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1484.735128][ T5815] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.775377][ T5815] usb 9-1: Product: syz [ 1484.792319][ T5815] usb 9-1: Manufacturer: syz [ 1484.805966][ T5815] usb 9-1: SerialNumber: syz [ 1485.478756][T19514] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1485.618562][ T5815] go7007 9-1:3.71: Sensoray 2250 found [ 1485.733907][ T5815] go7007 9-1:3.71: probe with driver go7007 failed with error -12 [ 1486.072969][ T5815] usb 9-1: USB disconnect, device number 30 [ 1486.150205][T19517] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4238'. [ 1486.655023][ T5815] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1486.729728][T19529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4242'. [ 1486.872607][ T5815] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1486.894199][T19531] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4243'. [ 1486.993469][ T5815] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1487.191640][ T5815] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1487.223145][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.573184][T19522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.715092][T19522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.866973][ T5815] usb 6-1: usb_control_msg returned -32 [ 1487.940256][ T5815] usbtmc 6-1:16.0: can't read capabilities [ 1488.135756][ T5815] usb 6-1: USB disconnect, device number 36 [ 1488.198640][T19549] fuse: Bad value for 'fd' [ 1488.595433][T19557] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4254'. [ 1489.041442][ T5815] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1489.231626][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 1489.265845][ T5815] usb 4-1: config 3 has an invalid interface number: 71 but max is 0 [ 1489.299074][ T5815] usb 4-1: config 3 has no interface number 0 [ 1489.332781][ T5815] usb 4-1: config 3 interface 71 has no altsetting 0 [ 1489.620808][ T5815] usb 4-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1489.650210][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.690547][ T5815] usb 4-1: Product: syz [ 1489.709390][ T5815] usb 4-1: Manufacturer: syz [ 1489.729878][ T5815] usb 4-1: SerialNumber: syz [ 1490.403068][T19579] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1491.023538][ T5815] go7007 4-1:3.71: Sensoray 2250 found [ 1491.054377][ T5815] go7007 4-1:3.71: probe with driver go7007 failed with error -12 [ 1491.104196][ T5815] usb 4-1: USB disconnect, device number 58 [ 1491.223647][T19561] loop8: detected capacity change from 0 to 40427 [ 1491.328389][T19561] F2FS-fs (loop8): invalid crc value [ 1492.460360][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1492.468924][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1493.143983][T19600] loop1: detected capacity change from 0 to 512 [ 1493.285563][T19600] EXT4-fs: Ignoring removed nobh option [ 1493.429653][T19600] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1493.943389][T19600] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 1494.411602][ T5848] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1494.591489][ T10] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1494.599167][ T5848] usb 3-1: device descriptor read/64, error -71 [ 1494.932763][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1494.958932][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1495.581377][ T5848] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1495.594156][T19611] Can't find ip_set type hash:net,por [ 1495.651353][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1495.690943][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.791944][ T5848] usb 3-1: device descriptor read/64, error -71 [ 1495.893514][T19623] loop8: detected capacity change from 0 to 256 [ 1495.904670][T19623] exfat: Invalid uid '0x00000000ffffffff' [ 1495.911645][ T5848] usb usb3-port1: attempt power cycle [ 1495.947725][T19609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.977792][T19609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.992187][ T1535] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1496.023881][ T10] usb 6-1: usb_control_msg returned -32 [ 1496.045823][ T10] usbtmc 6-1:16.0: can't read capabilities [ 1496.101361][ T10] usb 6-1: USB disconnect, device number 37 [ 1496.212082][ T1535] usb 5-1: Using ep0 maxpacket: 8 [ 1496.227116][ T1535] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1496.236913][ T1535] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1496.274435][ T1535] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1496.305650][ T1535] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1496.317175][ T5848] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1496.332420][ T1535] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1496.351790][ T1535] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1496.359516][ T5848] usb 3-1: device descriptor read/8, error -71 [ 1496.375888][ T1535] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1496.387321][ T1535] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1496.399961][ T1535] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1496.415748][ T1535] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1496.430192][ T1535] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1496.641335][ T1535] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1496.656616][ T5815] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1496.665110][ T1535] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1496.841512][ T5815] usb 2-1: Using ep0 maxpacket: 16 [ 1497.409033][ T1535] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1497.420195][ T1535] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1497.461326][ T5848] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1497.528076][ T5815] usb 2-1: config 3 has an invalid interface number: 71 but max is 0 [ 1497.536565][ T5815] usb 2-1: config 3 has no interface number 0 [ 1497.542764][ T5815] usb 2-1: config 3 interface 71 has no altsetting 0 [ 1497.563277][ T5815] usb 2-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1497.572394][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.580382][ T5815] usb 2-1: Product: syz [ 1497.591703][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1497.593533][ T5815] usb 2-1: Manufacturer: syz [ 1497.599055][ T5848] usb 3-1: device descriptor read/8, error -32 [ 1497.604636][ T5815] usb 2-1: SerialNumber: syz [ 1497.691307][ T1535] usb 5-1: string descriptor 0 read error: -22 [ 1497.697627][ T1535] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1497.747951][T19641] loop2: detected capacity change from 0 to 7 [ 1497.762834][T19641] Dev loop2: unable to read RDB block 7 [ 1497.769025][T19639] loop3: detected capacity change from 0 to 512 [ 1497.775444][ T1535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.779215][T19641] loop2: unable to read partition table [ 1497.784253][ T5848] usb usb3-port1: unable to enumerate USB device [ 1497.804934][T19639] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1497.881705][ T1535] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1497.940000][T19641] loop2: partition table beyond EOD, truncated [ 1498.006046][T19641] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1498.088938][T19639] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1498.215756][T19649] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1498.829414][ T1535] usb 5-1: USB disconnect, device number 47 [ 1498.896837][ T5815] go7007 2-1:3.71: Sensoray 2250 found [ 1498.953235][T19639] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1498.953865][ T5815] go7007 2-1:3.71: probe with driver go7007 failed with error -12 [ 1499.048585][T19639] EXT4-fs (loop3): 1 truncate cleaned up [ 1499.107621][T19639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1499.119255][ T5815] usb 2-1: USB disconnect, device number 32 [ 1500.258623][T19663] loop4: detected capacity change from 0 to 2048 [ 1500.327277][T19663] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1500.463490][T12297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1500.936024][T19667] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4288'. [ 1501.037438][T19657] loop5: detected capacity change from 0 to 32768 [ 1501.112762][T19657] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4285 (19657) [ 1501.143044][ T1535] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1501.330809][T19657] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1501.373176][ T1535] usb 2-1: Using ep0 maxpacket: 8 [ 1501.400301][ T1535] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1501.454446][T19657] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 1501.457542][ T1535] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1501.511502][T19657] BTRFS info (device loop5): using free-space-tree [ 1501.591335][ T1535] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1501.731304][ T1535] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1501.774347][ T1535] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1501.823917][ T1535] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1501.902715][ T1535] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1501.955126][T19657] BTRFS info (device loop5): rebuilding free space tree [ 1502.010093][ T1535] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1502.097907][ T1535] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1502.189010][ T1535] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1502.305164][ T1535] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1502.361281][ T1535] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1502.410503][ T1535] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1502.427941][T15661] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1502.504326][ T1535] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1502.592024][ T1535] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1502.639855][T19671] loop4: detected capacity change from 0 to 32768 [ 1502.700066][ T1535] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1502.748807][ T1535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.801245][ T1535] usb 2-1: Product: syz [ 1502.805466][ T1535] usb 2-1: Manufacturer: syz [ 1502.810079][ T1535] usb 2-1: SerialNumber: syz [ 1502.996825][T19671] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1503.167946][ T1535] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1503.236594][ T1535] usb 2-1: USB disconnect, device number 33 [ 1503.594919][T16236] ocfs2: Unmounting device (7,4) on (node local) [ 1503.786174][ T1535] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1503.820367][T19714] loop2: detected capacity change from 0 to 64 [ 1503.901031][ T30] audit: type=1800 audit(1751545933.304:217): pid=19714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4301" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 1503.961467][ T1535] usb 6-1: Using ep0 maxpacket: 8 [ 1503.991799][ T1535] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1503.995651][T19694] loop8: detected capacity change from 0 to 32768 [ 1504.011271][T16237] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1504.027985][ T1535] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1504.080235][ T1535] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1504.124116][ T1535] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1504.186228][ T1535] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1504.197844][T16237] usb 4-1: Using ep0 maxpacket: 8 [ 1504.221949][T16237] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1504.250095][T19718] netlink: 'syz.2.4303': attribute type 10 has an invalid length. [ 1504.258519][T16237] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1504.289118][ T1535] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1504.318917][T19718] netlink: 'syz.2.4303': attribute type 27 has an invalid length. [ 1504.330784][T19721] loop2: detected capacity change from 0 to 7 [ 1504.411652][T19721] Dev loop2: unable to read RDB block 7 [ 1504.449391][T19721] loop2: unable to read partition table [ 1504.503532][T19721] loop2: partition table beyond EOD, truncated [ 1504.754911][T19721] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1504.794920][T19694] JBD2: Ignoring recovery information on journal [ 1504.960563][T19694] jbd2_journal_bmap: journal block not found at offset 32 on loop8-75 [ 1505.005711][T19694] JBD2: bad block at offset 32 [ 1505.049468][T19694] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1505.076368][ T1535] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1505.088082][T16237] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1505.121230][ T1535] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1505.132973][T16237] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1505.151742][ T1535] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1505.165355][T16237] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1505.197088][ T1535] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1505.231376][T16237] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1505.238837][T16237] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1505.287919][ T1535] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1505.316972][T16237] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1505.329223][ T1535] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1505.368233][ T1535] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1505.383083][T16237] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1505.396955][ T1535] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1505.411270][T16237] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1505.435025][T16319] ocfs2: Unmounting device (7,8) on (node local) [ 1505.441297][ T1535] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1505.454521][T16237] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1505.462241][T16237] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1505.522528][ T1535] usb 6-1: string descriptor 0 read error: -22 [ 1505.528890][ T1535] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1505.539720][T16237] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1505.570008][ T1535] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.580320][T16237] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1505.655497][ T1535] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1505.669915][T16237] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1505.736702][T16237] usb 4-1: string descriptor 0 read error: -22 [ 1505.747811][T16237] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1505.813585][T16237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.892291][ T1535] usb 6-1: USB disconnect, device number 38 [ 1505.929819][T16237] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1506.118577][T19710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1506.181672][T19710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1506.299079][T19739] netlink: 1276 bytes leftover after parsing attributes in process `syz.8.4309'. [ 1506.360542][T16237] usb 4-1: USB disconnect, device number 59 [ 1506.558886][T19730] loop2: detected capacity change from 0 to 32768 [ 1506.625525][T19730] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4307 (19730) [ 1506.746427][T19730] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1506.769007][T19730] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 1506.891281][ T5815] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1506.931141][T19730] BTRFS info (device loop2): rebuilding free space tree [ 1506.965612][T19730] BTRFS info (device loop2): disabling free space tree [ 1506.981410][T19730] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1507.015741][T19730] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1507.097874][ T5815] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1507.164819][ T5815] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1507.220486][ T5815] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1507.247063][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.516815][T19744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1507.569254][T19744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1507.622495][ T5815] usb 5-1: usb_control_msg returned -32 [ 1507.671313][ T5815] usbtmc 5-1:16.0: can't read capabilities [ 1507.746519][T13287] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1507.767077][ T5815] usb 5-1: USB disconnect, device number 48 [ 1508.154215][T19781] loop1: detected capacity change from 0 to 512 [ 1508.232250][T19781] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1508.300845][T19781] EXT4-fs (loop1): invalid journal inode [ 1508.362011][T19781] EXT4-fs (loop1): can't get journal size [ 1508.514100][T19781] EXT4-fs (loop1): 1 truncate cleaned up [ 1508.608709][T19781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1509.322662][T19787] loop8: detected capacity change from 0 to 2048 [ 1509.524876][T11113] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1510.171359][T19807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1510.261894][T16237] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1510.991378][T16237] usb 5-1: Using ep0 maxpacket: 8 [ 1511.023557][T16237] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1511.046968][T16237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1511.084323][T19810] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4328'. [ 1511.109173][T16237] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1511.166130][T16237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1511.229678][T16237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1511.317185][T16237] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1511.340441][T16237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1511.403542][T16237] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1511.481287][T16237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1511.530456][T16237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1511.558584][T16237] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1511.570767][T16237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1511.582964][T16237] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1511.595189][T16237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1511.612274][T16237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1511.637157][T16237] usb 5-1: string descriptor 0 read error: -22 [ 1511.666548][T16237] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1511.731306][T16237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.799693][T16237] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1511.801673][ T6013] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1511.994551][T19803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1512.023432][ T6013] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1512.081897][T19803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1512.131475][ T6013] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1512.186033][T16237] usb 5-1: USB disconnect, device number 49 [ 1512.223859][T19835] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4337'. [ 1512.245544][ T6013] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1512.410699][ T6013] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.428300][T19828] syzkaller0: entered promiscuous mode [ 1512.439073][T19828] syzkaller0: entered allmulticast mode [ 1512.684711][T19819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1512.731679][T19819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1512.789693][ T6013] usb 6-1: usb_control_msg returned -32 [ 1512.820195][ T6013] usbtmc 6-1:16.0: can't read capabilities [ 1512.890706][ T6013] usb 6-1: USB disconnect, device number 39 [ 1513.182324][T19854] netlink: 1276 bytes leftover after parsing attributes in process `syz.8.4341'. [ 1513.192290][T16237] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1513.201694][T19853] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4342'. [ 1513.369094][ T1535] hid-generic 00A0:0008:0003.0010: unknown main item tag 0x7 [ 1513.383038][T16237] usb 3-1: Using ep0 maxpacket: 8 [ 1513.393784][ T1535] hid-generic 00A0:0008:0003.0010: item fetching failed at offset 14/15 [ 1513.405873][T16237] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1513.414175][ T1535] hid-generic 00A0:0008:0003.0010: probe with driver hid-generic failed with error -22 [ 1513.431802][T16237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1513.452012][T16237] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1513.470517][T16237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1513.520973][T16237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1513.560029][T16237] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1513.579276][T16237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1513.628888][T16237] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1513.668668][T16237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1513.700683][T16237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1513.718206][T16237] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1513.741250][T16237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1513.812975][T16237] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1513.871201][T16237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1513.911225][T16237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1514.003575][T16237] usb 3-1: string descriptor 0 read error: -22 [ 1514.009954][T16237] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1514.089592][T16237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.193717][T16237] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1514.359121][T19875] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4351'. [ 1514.410445][T19848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1514.439543][T19877] loop1: detected capacity change from 0 to 512 [ 1514.444342][T19848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1514.494498][T19877] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.4352: casefold flag without casefold feature [ 1514.596207][T19877] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.4352: couldn't read orphan inode 15 (err -117) [ 1514.644533][T19877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1514.716068][T19888] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4356'. [ 1514.952639][ T5955] usb 3-1: USB disconnect, device number 54 [ 1515.211532][ T1535] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1515.442120][T19897] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4359'. [ 1515.459301][ T1535] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1515.471822][ T1535] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1515.505579][ T1535] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1515.548939][ T1535] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.568655][ T6013] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1515.591752][T11113] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1515.741647][ T6013] usb 6-1: Using ep0 maxpacket: 8 [ 1515.759524][ T6013] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1515.777911][ T6013] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1515.816089][ T6013] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1515.847291][ T6013] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1515.874411][ T1535] usb 5-1: usb_control_msg returned -32 [ 1515.877536][ T6013] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1515.899372][ T1535] usbtmc 5-1:16.0: can't read capabilities [ 1515.901092][ T6013] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1515.921378][ T6013] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1515.938058][ T6013] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1516.607526][ T1535] usb 5-1: USB disconnect, device number 50 [ 1516.679252][ T6013] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1516.691612][ T6013] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1516.707900][ T6013] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1516.762326][ T5815] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1516.770084][ T6013] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1516.782320][ T6013] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1516.794460][ T6013] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1516.805679][ T6013] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1516.821720][ T6013] usb 6-1: string descriptor 0 read error: -22 [ 1516.828112][ T6013] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1516.839761][ T6013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.878535][ T6013] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1516.938082][ T5815] usb 2-1: Using ep0 maxpacket: 8 [ 1516.961776][ T5815] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1516.969225][ T5815] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1517.021115][T19914] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4366'. [ 1517.021262][ T5815] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1517.058747][ T5815] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1517.071091][ T5815] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1517.099054][T19886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1517.114427][ T5815] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1517.128459][ T5815] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1517.148058][T19886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1517.180487][ T5815] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1517.213114][T10174] usb 6-1: USB disconnect, device number 40 [ 1517.243706][ T5815] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1517.301608][ T5815] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1517.329145][ T5815] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1517.344195][ T5815] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1517.596952][ T5815] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1517.615878][ T5815] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1517.627831][ T5815] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1517.644369][ T5815] usb 2-1: string descriptor 0 read error: -22 [ 1517.650680][ T5815] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1517.660110][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.982204][ T5815] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1518.524341][ T5815] usb 2-1: USB disconnect, device number 34 [ 1518.650438][T19934] fuse: Bad value for 'fd' [ 1518.721324][T16237] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1518.754875][T19912] loop8: detected capacity change from 0 to 40427 [ 1518.808737][T19912] F2FS-fs (loop8): build fault injection rate: 690 [ 1518.860662][T19937] loop5: detected capacity change from 0 to 2048 [ 1518.870093][T19912] F2FS-fs (loop8): invalid crc value [ 1518.952108][T16237] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1518.977004][T16237] usb 4-1: config 0 has no interface number 0 [ 1518.997267][T19943] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1519.025595][T16237] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1519.057194][T16237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.091439][T16237] usb 4-1: Product: syz [ 1519.106153][T16237] usb 4-1: Manufacturer: syz [ 1519.110771][T16237] usb 4-1: SerialNumber: syz [ 1519.121278][T19945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4379'. [ 1519.172224][T16237] usb 4-1: config 0 descriptor?? [ 1519.347021][T19912] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1519.386326][T16237] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1519.552282][T16319] syz-executor: attempt to access beyond end of device [ 1519.552282][T16319] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1519.617343][T16319] CPU: 0 UID: 0 PID: 16319 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1519.617378][T16319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1519.617394][T16319] Call Trace: [ 1519.617405][T16319] [ 1519.617417][T16319] dump_stack_lvl+0x189/0x250 [ 1519.617473][T16319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1519.617511][T16319] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1519.617589][T16319] ? __pfx_queue_work_on+0x10/0x10 [ 1519.617670][T16319] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.617698][T16319] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1519.617741][T16319] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1519.617776][T16319] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.617803][T16319] ? f2fs_hw_is_readonly+0x39b/0x470 [ 1519.617921][T16319] f2fs_handle_critical_error+0x37c/0x540 [ 1519.617959][T16319] f2fs_write_end_io+0x495/0x810 [ 1519.618016][T16319] ? blkg_put+0x22/0x240 [ 1519.618139][T16319] __submit_merged_bio+0x27a/0x6a0 [ 1519.618177][T16319] __submit_merged_write_cond+0x255/0x530 [ 1519.618215][T16319] f2fs_write_data_pages+0x261d/0x3000 [ 1519.618294][T16319] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1519.618323][T16319] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.618421][T16319] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.618481][T16319] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.618510][T16319] ? __lock_acquire+0xab9/0xd20 [ 1519.618627][T16319] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.618656][T16319] ? do_raw_spin_lock+0x121/0x290 [ 1519.618701][T16319] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.618743][T16319] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.618771][T16319] ? do_raw_spin_unlock+0x122/0x240 [ 1519.618802][T16319] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1519.618838][T16319] do_writepages+0x32e/0x550 [ 1519.618976][T16319] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.619011][T16319] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.619040][T16319] ? do_raw_spin_unlock+0x122/0x240 [ 1519.619076][T16319] filemap_fdatawrite+0x191/0x230 [ 1519.619128][T16319] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1519.619213][T16319] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.619249][T16319] ? do_raw_spin_unlock+0x122/0x240 [ 1519.619286][T16319] f2fs_sync_dirty_inodes+0x31f/0x830 [ 1519.619371][T16319] f2fs_write_checkpoint+0x94a/0x1de0 [ 1519.619443][T16319] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1519.619542][T16319] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 1519.619579][T16319] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.619608][T16319] ? kfree+0x18e/0x440 [ 1519.619700][T16319] ? kill_f2fs_super+0x298/0x6c0 [ 1519.619751][T16319] kill_f2fs_super+0x2c3/0x6c0 [ 1519.619797][T16319] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1519.619831][T16319] ? radix_tree_delete_item+0x2b6/0x400 [ 1519.619937][T16319] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.619966][T16319] ? shrinker_free+0x2ce/0x3e0 [ 1519.620059][T16319] deactivate_locked_super+0xbc/0x130 [ 1519.620157][T16319] cleanup_mnt+0x425/0x4c0 [ 1519.620218][T16319] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.620246][T16319] ? lockdep_hardirqs_on+0x9c/0x150 [ 1519.620289][T16319] task_work_run+0x1d4/0x260 [ 1519.620354][T16319] ? __pfx_task_work_run+0x10/0x10 [ 1519.620383][T16319] ? __x64_sys_umount+0x122/0x160 [ 1519.620432][T16319] ? exit_to_user_mode_loop+0x40/0x110 [ 1519.620524][T16319] exit_to_user_mode_loop+0xec/0x110 [ 1519.620562][T16319] do_syscall_64+0x2bd/0x3b0 [ 1519.620599][T16319] ? lockdep_hardirqs_on+0x9c/0x150 [ 1519.620636][T16319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.620659][T16319] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1519.620688][T16319] ? exc_page_fault+0x9f/0xf0 [ 1519.620736][T16319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.620762][T16319] RIP: 0033:0x7ff01698fc57 [ 1519.620785][T16319] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1519.620807][T16319] RSP: 002b:00007ffe237d7838 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1519.620834][T16319] RAX: 0000000000000000 RBX: 00007ff016a10925 RCX: 00007ff01698fc57 [ 1519.620852][T16319] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe237d78f0 [ 1519.620868][T16319] RBP: 00007ffe237d78f0 R08: 0000000000000000 R09: 0000000000000000 [ 1519.620885][T16319] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe237d8980 [ 1519.620901][T16319] R13: 00007ff016a10925 R14: 0000000000172f4c R15: 00007ffe237d89c0 [ 1519.620945][T16319] [ 1520.106580][T16319] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1520.122133][ T5815] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1520.247931][T19960] loop2: detected capacity change from 0 to 7 [ 1520.281413][T19940] Dev loop2: unable to read RDB block 7 [ 1520.287339][T19940] loop2: unable to read partition table [ 1520.293628][T19940] loop2: partition table beyond EOD, truncated [ 1520.307070][ T5815] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1520.322292][T19960] Dev loop2: unable to read RDB block 7 [ 1520.338043][T19960] loop2: unable to read partition table [ 1520.346402][ T5815] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1520.348342][T19960] loop2: partition table beyond EOD, truncated [ 1520.369567][T19960] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1520.447679][ T5815] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1520.511677][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.790395][ T5815] usb 6-1: usb_control_msg returned -32 [ 1520.793407][T19970] fuse: Bad value for 'fd' [ 1520.820955][ T5815] usbtmc 6-1:16.0: can't read capabilities [ 1521.305981][T19975] netlink: 'syz.2.4392': attribute type 12 has an invalid length. [ 1521.314643][T19975] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.4392'. [ 1521.595044][ T5815] usb 4-1: USB disconnect, device number 60 [ 1521.799175][T19984] loop1: detected capacity change from 0 to 2048 [ 1521.843093][T19984] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1523.761074][ T1535] usb 6-1: USB disconnect, device number 41 [ 1524.110344][T19995] trusted_key: syz.3.4396 sent an empty control message without MSG_MORE. [ 1524.594810][T20008] loop8: detected capacity change from 0 to 8 [ 1524.619962][T20008] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1524.664444][T13201] udevd[13201]: incorrect cramfs checksum on /dev/loop8 [ 1524.701024][T20011] fuse: Bad value for 'fd' [ 1524.879103][T13201] udevd[13201]: incorrect cramfs checksum on /dev/loop8 [ 1525.121581][ T1535] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1525.131354][ T5815] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1525.321645][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 1525.348421][ T5815] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.355635][ T1535] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1525.389984][ T5815] usb 2-1: config 0 has no interfaces? [ 1525.390932][ T1535] usb 5-1: config 0 has no interface number 0 [ 1525.420377][ T5815] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1525.429673][ T5955] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1525.457319][ T1535] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1525.457413][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.484320][ T5815] usb 2-1: config 0 descriptor?? [ 1525.519995][ T1535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.569594][ T1535] usb 5-1: Product: syz [ 1525.579663][ T1535] usb 5-1: Manufacturer: syz [ 1525.593719][ T1535] usb 5-1: SerialNumber: syz [ 1525.601358][ T5955] usb 6-1: Using ep0 maxpacket: 8 [ 1525.627860][ T1535] usb 5-1: config 0 descriptor?? [ 1525.634497][ T5955] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1525.662004][T20031] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1525.674792][ T5955] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1525.687572][T20031] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1525.699057][T20031] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1525.717911][T20031] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1525.751631][ T5955] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1525.770085][T16237] usb 2-1: USB disconnect, device number 35 [ 1525.783645][T20031] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1525.789809][ T5955] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1525.815227][ T5955] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1525.840161][ T5955] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1525.848558][ T5955] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1525.872523][ T5955] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1525.887223][ T1535] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1525.898914][ T5955] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1525.914086][ T5955] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1525.928261][ T5955] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1525.943891][ T5955] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1525.956453][ T5955] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1525.968557][ T5955] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1525.980362][ T5955] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1525.997572][ T5955] usb 6-1: string descriptor 0 read error: -22 [ 1526.004461][ T5955] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1526.033000][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.075266][ T5955] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1526.416912][T20047] loop3: detected capacity change from 0 to 256 [ 1526.439087][T20028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1527.208165][T20028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1527.551255][T12397] Bluetooth: hci1: command 0x0406 tx timeout [ 1527.711429][T12397] Bluetooth: hci3: command 0x0406 tx timeout [ 1527.717719][T12397] Bluetooth: hci2: command 0x0c1a tx timeout [ 1527.791389][T12397] Bluetooth: hci0: command 0x0406 tx timeout [ 1527.797579][T18541] Bluetooth: hci4: command 0x0406 tx timeout [ 1528.612489][ T5815] usb 5-1: USB disconnect, device number 51 [ 1528.680692][ T1535] usb 6-1: USB disconnect, device number 42 [ 1529.985037][T20064] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4423'. [ 1530.406165][T20073] loop8: detected capacity change from 0 to 64 [ 1530.813961][T20080] fuse: Bad value for 'fd' [ 1531.006568][T20085] input: syz1 as /devices/virtual/input/input43 [ 1532.227108][T20089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4434'. [ 1532.518913][T20098] loop5: detected capacity change from 0 to 65 [ 1532.552556][T20097] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4439'. [ 1532.573240][T20098] bfs: Unknown parameter 'v4S%KpwsQ29.QG†Gф?&c' [ 1533.441532][T20106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4442'. [ 1533.450444][T20106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4442'. [ 1533.783937][T20115] loop4: detected capacity change from 0 to 24 [ 1533.853861][T20115] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1534.004390][T20115] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1534.473717][T20115] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1534.700984][T20122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4450'. [ 1534.721099][T20122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4450'. [ 1534.778379][T20120] loop2: detected capacity change from 0 to 512 [ 1534.843242][T20127] input: syz1 as /devices/virtual/input/input44 [ 1534.982176][T20120] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1535.042877][T20128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4450'. [ 1535.176990][T20120] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1535.269603][T20120] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.4447: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 1535.668019][T20120] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.4447: Bad quota inode: 3, type: 0 [ 1535.701908][T20122] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4450'. [ 1535.830873][T20120] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1535.846197][T20120] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1535.855311][T20120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1535.978100][T13287] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.245512][ T1535] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1536.444159][ T1535] usb 9-1: Using ep0 maxpacket: 32 [ 1536.480396][ T1535] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1536.507791][ T1535] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1536.531084][ T1535] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1536.552824][ T1535] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.596594][ T1535] usb 9-1: config 0 descriptor?? [ 1536.603430][T20145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1536.611051][T20145] IPv6: NLM_F_CREATE should be set when creating new route [ 1536.618398][T20145] IPv6: NLM_F_CREATE should be set when creating new route [ 1536.625632][T20145] IPv6: NLM_F_CREATE should be set when creating new route [ 1536.667820][T20146] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1536.694935][T20148] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4458'. [ 1536.707166][T20146] netlink: 'syz.2.4455': attribute type 20 has an invalid length. [ 1536.730394][T20150] loop4: detected capacity change from 0 to 64 [ 1536.866304][T20150] Trying to free block not in datazone [ 1537.091413][ T5848] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1538.101665][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 1538.109603][ T5848] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1538.122145][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1538.133691][ T5848] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1538.147770][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1538.191397][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1538.261819][ T5848] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1538.269254][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1538.391199][ T5848] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1538.474041][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1538.618496][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1538.919159][ T5848] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1538.927039][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1539.017113][T20171] input: syz1 as /devices/virtual/input/input45 [ 1539.251894][ T5848] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1539.647085][T10174] usb 9-1: USB disconnect, device number 31 [ 1540.121876][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1540.161585][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1540.227234][ T5848] usb 2-1: string descriptor 0 read error: -71 [ 1540.239431][ T5848] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1540.254893][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.286438][ T5848] usb 2-1: can't set config #168, error -71 [ 1540.321847][ T5848] usb 2-1: USB disconnect, device number 36 [ 1540.904653][ T5848] libceph: connect (1)[c::]:6789 error -101 [ 1541.004999][ T5848] libceph: mon0 (1)[c::]:6789 connect error [ 1541.231619][T20184] ceph: No mds server is up or the cluster is laggy [ 1541.277553][T20176] loop5: detected capacity change from 0 to 4096 [ 1541.627790][T20192] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1541.660546][T20195] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4476'. [ 1542.178464][T20217] input: syz1 as /devices/virtual/input/input46 [ 1543.807327][T20222] tmpfs: Bad value for 'mpol' [ 1543.934810][T16237] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1543.957971][T20211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.103797][T16237] usb 5-1: Using ep0 maxpacket: 8 [ 1544.177904][T16237] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1544.210615][T16237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1544.221136][T20211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.271263][T16237] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1544.303502][T16237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1544.341203][T16237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1544.371687][T16237] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1544.443998][T16237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1544.503155][T16237] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1544.574922][T20211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.581342][T16237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1544.617886][T16237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1544.651256][T16237] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1544.661051][T16237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1544.708839][T16237] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1544.727507][T16237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1544.756937][T16237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1544.774810][T16237] usb 5-1: string descriptor 0 read error: -22 [ 1544.785327][T16237] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1544.794585][T16237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.822599][T16237] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1544.843187][T20229] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1544.880801][T20229] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1544.888237][T20229] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1544.896919][T20229] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1544.923382][T20229] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1544.933355][T20211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.068197][T20220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1545.150241][T20211] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.191885][ T5955] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1545.201771][T20220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.260433][T20211] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.282749][ T1535] usb 5-1: USB disconnect, device number 52 [ 1545.366461][T20211] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.375267][ T5955] usb 4-1: Using ep0 maxpacket: 16 [ 1545.390306][ T5955] usb 4-1: config 3 has an invalid interface number: 71 but max is 0 [ 1545.412350][ T5955] usb 4-1: config 3 has no interface number 0 [ 1545.443453][ T5955] usb 4-1: config 3 interface 71 has no altsetting 0 [ 1545.458989][ T5955] usb 4-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1545.476947][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.490173][T20211] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.500111][ T5955] usb 4-1: Product: syz [ 1545.509179][ T5955] usb 4-1: Manufacturer: syz [ 1545.520573][ T5955] usb 4-1: SerialNumber: syz [ 1546.135686][T20250] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1546.762419][T20248] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4491'. [ 1546.785620][ T5955] go7007 4-1:3.71: Sensoray 2250 found [ 1546.833832][ T5955] go7007 4-1:3.71: probe with driver go7007 failed with error -12 [ 1546.911322][T18541] Bluetooth: hci2: command 0x0c1a tx timeout [ 1546.911414][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 1546.932048][ T5955] usb 4-1: USB disconnect, device number 61 [ 1546.991445][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 1546.991607][T12397] Bluetooth: hci3: command 0x0406 tx timeout [ 1547.003630][T18541] Bluetooth: hci0: command 0x0406 tx timeout [ 1547.347079][T20263] input: syz1 as /devices/virtual/input/input47 [ 1547.478093][T20268] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4498'. [ 1548.174224][T20281] loop4: detected capacity change from 0 to 256 [ 1548.982098][ T5815] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1549.071291][T20293] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4507'. [ 1549.143413][ T5815] usb 6-1: Using ep0 maxpacket: 8 [ 1549.178690][ T5815] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1549.204351][T20297] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4506'. [ 1549.220827][ T5815] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1549.268384][ T5815] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1549.307999][ T5815] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1549.340962][ T5815] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1549.415219][ T5815] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1549.451280][ T5815] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1549.456246][T20284] loop1: detected capacity change from 0 to 32768 [ 1549.515086][ T5815] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1549.534266][ T5815] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1549.547459][ T5815] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1549.559782][T20284] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1549.566230][ T5815] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1549.587255][ T5815] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1549.608875][ T5815] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1549.641238][ T5815] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1549.662630][ T5815] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1549.691706][ T5815] usb 6-1: string descriptor 0 read error: -22 [ 1549.702873][ T5815] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1549.721556][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.760429][ T5815] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1549.906083][T20284] XFS (loop1): Ending clean mount [ 1549.993178][T20289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1550.044262][T20289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1550.086672][T20314] input: syz1 as /devices/virtual/input/input48 [ 1550.156050][ T5815] usb 6-1: USB disconnect, device number 43 [ 1550.281016][T11113] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1550.565838][T10174] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1550.898797][T10174] usb 5-1: Using ep0 maxpacket: 16 [ 1550.990922][T10174] usb 5-1: config 3 has an invalid interface number: 71 but max is 0 [ 1551.195200][T10174] usb 5-1: config 3 has no interface number 0 [ 1551.209049][T10174] usb 5-1: config 3 interface 71 has no altsetting 0 [ 1551.223607][T10174] usb 5-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1551.240032][T10174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.248485][T10174] usb 5-1: Product: syz [ 1551.252933][T10174] usb 5-1: Manufacturer: syz [ 1551.257538][T10174] usb 5-1: SerialNumber: syz [ 1552.502221][T20317] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1552.539248][T10174] go7007 5-1:3.71: Sensoray 2250 found [ 1552.551433][T10174] go7007 5-1:3.71: probe with driver go7007 failed with error -12 [ 1552.579994][T10174] usb 5-1: USB disconnect, device number 53 [ 1552.627028][T20336] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4520'. [ 1552.837981][T20340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4521'. [ 1553.365439][T20355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4523'. [ 1553.642428][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1553.648964][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1554.061384][T20361] input: syz1 as /devices/virtual/input/input49 [ 1554.086891][T20340] hsr_slave_1 (unregistering): left promiscuous mode [ 1554.507436][T20370] input: syz1 as /devices/virtual/input/input50 [ 1554.931236][ T44] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1555.112759][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 1555.123731][ T44] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1555.143542][ T44] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1555.173343][T20386] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4536'. [ 1555.182483][ T44] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1555.221576][ T44] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1555.262105][ T44] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1555.307549][ T44] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1555.334054][ T44] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1555.365082][ T44] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1555.391442][ T44] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1555.438178][T20390] syzkaller1: entered promiscuous mode [ 1555.441213][ T44] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1555.449997][T20367] loop4: detected capacity change from 0 to 32768 [ 1555.466226][T20390] syzkaller1: entered allmulticast mode [ 1555.513257][ T44] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1555.536754][ T44] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1555.536891][T20367] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1555.558028][ T44] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1555.570309][ T44] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1555.582237][ T44] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1555.597703][ T44] usb 4-1: string descriptor 0 read error: -22 [ 1555.641512][ T44] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1555.652948][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.700192][ T44] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1555.892387][T20367] XFS (loop4): Ending clean mount [ 1555.909746][T20376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1555.951997][T20376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1556.018289][T10174] usb 4-1: USB disconnect, device number 62 [ 1556.056611][T20406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4540'. [ 1556.127390][T16236] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1556.668014][T20401] loop2: detected capacity change from 0 to 32768 [ 1558.536646][T20437] loop3: detected capacity change from 0 to 4096 [ 1558.937694][T20437] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1558.956800][T20449] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4550'. [ 1558.982049][T20437] ntfs3(loop3): Failed to load $Extend (-22). [ 1559.005424][T20437] ntfs3(loop3): Failed to initialize $Extend. [ 1560.441258][T16237] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1560.485040][T20465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4558'. [ 1560.799096][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4558'. [ 1561.641284][T16237] usb 4-1: Using ep0 maxpacket: 32 [ 1561.648665][T16237] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1561.664881][T16237] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1561.675314][T16237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.706743][T16237] usb 4-1: config 0 descriptor?? [ 1562.344086][T20474] loop4: detected capacity change from 0 to 8 [ 1562.369594][T20474] squashfs: Unknown parameter '00000000000000000000' [ 1562.491248][ T5848] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1562.831363][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 1563.477418][ T1535] usb 4-1: USB disconnect, device number 63 [ 1563.489520][ T5848] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1563.577939][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1563.722975][ T5848] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1563.746535][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1563.759201][ T5848] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1563.772672][ T5848] usb 2-1: unable to read config index 1 descriptor/start: -71 [ 1563.823953][ T5848] usb 2-1: can't read configurations, error -71 [ 1564.174723][T20485] loop1: detected capacity change from 0 to 40427 [ 1565.378373][T20503] loop3: detected capacity change from 0 to 1024 [ 1566.511874][T20517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4574'. [ 1568.023774][T20535] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4580'. [ 1568.087356][T20540] vxcan1: tx address claim with different name [ 1568.187807][T20542] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 1568.281265][ T1535] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1568.380053][T20547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4586'. [ 1568.394135][T20547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4586'. [ 1568.407322][T20547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4586'. [ 1568.420010][T20547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4586'. [ 1568.603964][ T1535] usb 4-1: Using ep0 maxpacket: 8 [ 1568.629859][ T1535] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1569.459672][ T1535] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1569.480526][ T1535] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1569.517113][ T1535] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1569.554805][ T1535] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1569.578006][ T1535] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1569.599426][ T1535] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1569.624714][ T1535] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1569.639121][ T1535] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1569.720127][ T1535] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1569.940801][ T1535] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1569.959700][ T1535] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1569.975763][ T1535] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1569.991186][ T1535] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1569.998024][T20558] loop4: detected capacity change from 0 to 512 [ 1570.002749][ T1535] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1570.023548][ T1535] usb 4-1: string descriptor 0 read error: -22 [ 1570.029846][ T1535] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1570.047574][ T1535] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.089208][ T1535] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1570.138353][T20558] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.4589: casefold flag without casefold feature [ 1570.213076][T20558] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.4589: couldn't read orphan inode 15 (err -117) [ 1570.257997][T20564] netlink: 'syz.5.4591': attribute type 10 has an invalid length. [ 1570.289196][T20558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1570.369831][T20537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1570.421723][T20537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1570.654864][ T5955] usb 4-1: USB disconnect, device number 64 [ 1571.163570][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4592'. [ 1571.324498][T16236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1571.974263][T20587] fuse: Bad value for 'fd' [ 1571.995925][T20586] loop5: detected capacity change from 0 to 512 [ 1572.032951][T20586] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1572.087052][T20586] EXT4-fs (loop5): 1 truncate cleaned up [ 1572.102723][T20586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1573.132840][T15661] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1573.305076][T20597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4596'. [ 1574.791050][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4601'. [ 1574.834551][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4601'. [ 1575.477220][T20620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4607'. [ 1575.556292][ T10] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1575.678770][T20600] loop5: detected capacity change from 0 to 32768 [ 1575.797773][T10174] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1575.851251][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1575.865428][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1575.880534][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1576.617598][T20600] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4598 (20600) [ 1576.645522][T20632] loop2: detected capacity change from 0 to 7 [ 1576.675901][T20632] loop2: [ 1576.678973][T20632] loop2: partition table partially beyond EOD, truncated [ 1576.686275][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1576.686311][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1576.686342][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1576.687968][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1576.729467][T10174] usb 3-1: Using ep0 maxpacket: 8 [ 1576.773789][T10174] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1576.793396][T10174] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1576.813606][T10174] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1576.826166][T10174] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1576.848585][T20620] hsr_slave_1 (unregistering): left promiscuous mode [ 1576.884238][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1576.890258][T10174] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1576.928290][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1576.947399][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1576.993734][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1577.073755][T10174] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1577.084447][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1577.101289][T10174] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1577.133172][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1577.164652][T20637] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4615'. [ 1577.171390][T10174] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1577.185193][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1577.185229][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1577.185261][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1577.189562][ T10] usb 4-1: string descriptor 0 read error: -22 [ 1577.252030][T20637] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4615'. [ 1577.281926][T10174] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1577.313408][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1577.322465][T10174] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1577.324682][T10174] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1577.377263][T10174] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1577.433310][T10174] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1577.433340][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.506117][T10174] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1577.510573][T20652] loop8: detected capacity change from 0 to 16 [ 1577.568453][ T10] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1577.585658][T20652] erofs (device loop8): mounted with root inode @ nid 36. [ 1577.602863][T10174] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1577.623345][T20651] tipc: Enabled bearer , priority 0 [ 1577.679353][T20651] tipc: Resetting bearer [ 1577.687604][T10174] usb 3-1: string descriptor 0 read error: -22 [ 1577.699507][T10174] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1577.712176][ T1535] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1577.720871][T10174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.765100][T10174] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1577.800880][T20649] tipc: Disabling bearer [ 1577.902884][ T1535] usb 6-1: Using ep0 maxpacket: 32 [ 1577.909857][ T1535] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1577.930284][ T1535] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1577.945857][ T1535] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.978759][T16237] usb 4-1: USB disconnect, device number 65 [ 1578.010331][ T1535] usb 6-1: Product: syz [ 1578.024090][ T1535] usb 6-1: Manufacturer: syz [ 1578.040073][ T1535] usb 6-1: SerialNumber: syz [ 1578.056076][ T1535] usb 6-1: config 0 descriptor?? [ 1578.080030][T20619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1578.129739][T20619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1578.241493][ T5955] usb 3-1: USB disconnect, device number 55 [ 1578.505314][T18541] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 1578.514066][ T1535] gs_usb 6-1:0.0: Couldn't get device config: (err=-121) [ 1578.541261][ T1535] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 1578.583550][T20666] loop1: detected capacity change from 0 to 256 [ 1579.946494][T20675] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4628'. [ 1579.988976][T20675] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4628'. [ 1580.028734][T20675] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4628'. [ 1580.476923][ T5955] usb 6-1: USB disconnect, device number 44 [ 1580.493958][T20682] fuse: Unknown parameter 'use00000000000000000000' [ 1580.807300][T20688] ================================================================== [ 1580.815395][T20688] BUG: KASAN: slab-out-of-bounds in rose_transmit_link+0x1ab/0x740 [ 1580.823448][T20688] Write of size 4 at addr ffff888028b963e0 by task syz.5.4634/20688 [ 1580.831416][T20688] [ 1580.833732][T20688] CPU: 1 UID: 0 PID: 20688 Comm: syz.5.4634 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1580.833756][T20688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1580.833768][T20688] Call Trace: [ 1580.833777][T20688] [ 1580.833785][T20688] dump_stack_lvl+0x189/0x250 [ 1580.833818][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1580.833840][T20688] ? __kasan_check_byte+0x12/0x40 [ 1580.833861][T20688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1580.833888][T20688] ? rcu_is_watching+0x15/0xb0 [ 1580.833917][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1580.833939][T20688] ? lock_release+0x4b/0x3e0 [ 1580.833974][T20688] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1580.834009][T20688] ? __virt_addr_valid+0x1c8/0x5c0 [ 1580.834097][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1580.834127][T20688] ? __virt_addr_valid+0x4a5/0x5c0 [ 1580.834155][T20688] print_report+0xd2/0x2b0 [ 1580.834209][T20688] ? rose_transmit_link+0x1ab/0x740 [ 1580.834235][T20688] kasan_report+0x118/0x150 [ 1580.834252][T20688] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1580.834307][T20688] ? rose_transmit_link+0x1ab/0x740 [ 1580.834337][T20688] kasan_check_range+0x2b0/0x2c0 [ 1580.834358][T20688] rose_transmit_link+0x1ab/0x740 [ 1580.834386][T20688] rose_write_internal+0x11dc/0x1ac0 [ 1580.834414][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1580.834435][T20688] ? lockdep_hardirqs_on+0x9c/0x150 [ 1580.834471][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1580.834494][T20688] ? __pfx_rose_write_internal+0x10/0x10 [ 1580.834523][T20688] ? 0xffffffff81000000 [ 1580.834537][T20688] ? rose_route_free_lci+0x140/0x170 [ 1580.834563][T20688] ? rose_connect+0x677/0x10a0 [ 1580.834591][T20688] rose_connect+0x8ee/0x10a0 [ 1580.834612][T20688] ? __pfx_current_check_access_socket+0x10/0x10 [ 1580.834682][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1580.834704][T20688] ? aa_sk_perm+0x81e/0x950 [ 1580.834751][T20688] ? __pfx_rose_connect+0x10/0x10 [ 1580.834773][T20688] ? aa_af_perm+0x230/0x2b0 [ 1580.834791][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1580.834812][T20688] ? tomoyo_socket_connect_permission+0x164/0x290 [ 1580.834874][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1580.834897][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1580.834920][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1580.834941][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1580.834964][T20688] __sys_connect+0x316/0x440 [ 1580.834986][T20688] ? __pfx___sys_connect+0x10/0x10 [ 1580.835010][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1580.835031][T20688] ? rcu_is_watching+0x15/0xb0 [ 1580.835062][T20688] __x64_sys_connect+0x7a/0x90 [ 1580.835081][T20688] do_syscall_64+0xfa/0x3b0 [ 1580.835108][T20688] ? lockdep_hardirqs_on+0x9c/0x150 [ 1580.835143][T20688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.835168][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1580.835196][T20688] ? exc_page_fault+0x9f/0xf0 [ 1580.835232][T20688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.835257][T20688] RIP: 0033:0x7f7b83d8e929 [ 1580.835278][T20688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1580.835299][T20688] RSP: 002b:00007f7b81bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1580.835326][T20688] RAX: ffffffffffffffda RBX: 00007f7b83fb5fa0 RCX: 00007f7b83d8e929 [ 1580.835345][T20688] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000004 [ 1580.835358][T20688] RBP: 00007f7b83e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1580.835370][T20688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1580.835381][T20688] R13: 0000000000000000 R14: 00007f7b83fb5fa0 R15: 00007ffd2716d7f8 [ 1580.835403][T20688] [ 1580.835410][T20688] [ 1581.194719][T20688] Allocated by task 141: [ 1581.198950][T20688] kasan_save_track+0x3e/0x80 [ 1581.203640][T20688] __kasan_kmalloc+0x93/0xb0 [ 1581.208221][T20688] __kmalloc_noprof+0x27a/0x4f0 [ 1581.213065][T20688] fib6_info_alloc+0x30/0xf0 [ 1581.217817][T20688] ip6_route_info_create+0x142/0x860 [ 1581.223101][T20688] addrconf_f6i_alloc+0x1d2/0x450 [ 1581.228122][T20688] ipv6_add_addr+0x56e/0x1090 [ 1581.232861][T20688] addrconf_add_linklocal+0x28c/0x6c0 [ 1581.238224][T20688] addrconf_addr_gen+0x490/0x580 [ 1581.243160][T20688] addrconf_init_auto_addrs+0x711/0xb50 [ 1581.248707][T20688] addrconf_notify+0xacc/0x1010 [ 1581.253556][T20688] notifier_call_chain+0x1b6/0x3e0 [ 1581.258749][T20688] netif_state_change+0x284/0x3a0 [ 1581.263855][T20688] linkwatch_do_dev+0x117/0x170 [ 1581.268775][T20688] __linkwatch_run_queue+0x56d/0x7e0 [ 1581.274059][T20688] linkwatch_event+0x4c/0x60 [ 1581.278646][T20688] process_scheduled_works+0xae1/0x17b0 [ 1581.284200][T20688] worker_thread+0x8a0/0xda0 [ 1581.288795][T20688] kthread+0x711/0x8a0 [ 1581.292860][T20688] ret_from_fork+0x3fc/0x770 [ 1581.297543][T20688] ret_from_fork_asm+0x1a/0x30 [ 1581.302304][T20688] [ 1581.304615][T20688] The buggy address belongs to the object at ffff888028b96000 [ 1581.304615][T20688] which belongs to the cache kmalloc-512 of size 512 [ 1581.318662][T20688] The buggy address is located 688 bytes to the right of [ 1581.318662][T20688] allocated 304-byte region [ffff888028b96000, ffff888028b96130) [ 1581.333324][T20688] [ 1581.335638][T20688] The buggy address belongs to the physical page: [ 1581.342047][T20688] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28b94 [ 1581.350797][T20688] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1581.359287][T20688] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1581.366824][T20688] page_type: f5(slab) [ 1581.370798][T20688] raw: 00fff00000000040 ffff88801a441c80 ffffea0001538900 dead000000000002 [ 1581.379371][T20688] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1581.387948][T20688] head: 00fff00000000040 ffff88801a441c80 ffffea0001538900 dead000000000002 [ 1581.396612][T20688] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1581.405276][T20688] head: 00fff00000000002 ffffea0000a2e501 00000000ffffffff 00000000ffffffff [ 1581.413943][T20688] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1581.422599][T20688] page dumped because: kasan: bad access detected [ 1581.429033][T20688] page_owner tracks the page as allocated [ 1581.434743][T20688] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 21209582761, free_ts 0 [ 1581.452922][T20688] post_alloc_hook+0x240/0x2a0 [ 1581.457694][T20688] get_page_from_freelist+0x21e4/0x22c0 [ 1581.463248][T20688] __alloc_frozen_pages_noprof+0x181/0x370 [ 1581.469052][T20688] alloc_pages_mpol+0x232/0x4a0 [ 1581.473948][T20688] allocate_slab+0x8a/0x3b0 [ 1581.478450][T20688] ___slab_alloc+0xbfc/0x1480 [ 1581.483122][T20688] __kmalloc_cache_noprof+0x296/0x3d0 [ 1581.488485][T20688] usb_cache_string+0x66/0x130 [ 1581.493421][T20688] usb_new_device+0x29a/0x16c0 [ 1581.498186][T20688] register_root_hub+0x275/0x590 [ 1581.503120][T20688] usb_add_hcd+0xba1/0x1050 [ 1581.507616][T20688] vhci_hcd_probe+0x1c1/0x380 [ 1581.512382][T20688] platform_probe+0x148/0x1d0 [ 1581.517179][T20688] really_probe+0x26d/0x9a0 [ 1581.521716][T20688] __driver_probe_device+0x18c/0x2f0 [ 1581.527030][T20688] driver_probe_device+0x4f/0x430 [ 1581.532049][T20688] page_owner free stack trace missing [ 1581.537400][T20688] [ 1581.539713][T20688] Memory state around the buggy address: [ 1581.545387][T20688] ffff888028b96280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1581.553443][T20688] ffff888028b96300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1581.561498][T20688] >ffff888028b96380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1581.569547][T20688] ^ [ 1581.576727][T20688] ffff888028b96400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1581.584778][T20688] ffff888028b96480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1581.592825][T20688] ================================================================== [ 1581.789420][T20688] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1581.796645][T20688] CPU: 1 UID: 0 PID: 20688 Comm: syz.5.4634 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1581.808692][T20688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1581.818731][T20688] Call Trace: [ 1581.821996][T20688] [ 1581.824909][T20688] dump_stack_lvl+0x99/0x250 [ 1581.829500][T20688] ? __asan_memcpy+0x40/0x70 [ 1581.834141][T20688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1581.839339][T20688] ? __pfx__printk+0x10/0x10 [ 1581.843923][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1581.849548][T20688] panic+0x2db/0x790 [ 1581.853439][T20688] ? __pfx_preempt_schedule+0x10/0x10 [ 1581.858810][T20688] ? __pfx_panic+0x10/0x10 [ 1581.863222][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1581.868847][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1581.874482][T20688] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1581.880376][T20688] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1581.886704][T20688] ? rose_transmit_link+0x1ab/0x740 [ 1581.891900][T20688] check_panic_on_warn+0x89/0xb0 [ 1581.896896][T20688] ? rose_transmit_link+0x1ab/0x740 [ 1581.902089][T20688] end_report+0x78/0x160 [ 1581.906317][T20688] kasan_report+0x129/0x150 [ 1581.910804][T20688] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1581.916520][T20688] ? rose_transmit_link+0x1ab/0x740 [ 1581.921741][T20688] kasan_check_range+0x2b0/0x2c0 [ 1581.926682][T20688] rose_transmit_link+0x1ab/0x740 [ 1581.931706][T20688] rose_write_internal+0x11dc/0x1ac0 [ 1581.936988][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1581.942609][T20688] ? lockdep_hardirqs_on+0x9c/0x150 [ 1581.947803][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1581.953428][T20688] ? __pfx_rose_write_internal+0x10/0x10 [ 1581.959072][T20688] ? 0xffffffff81000000 [ 1581.963209][T20688] ? rose_route_free_lci+0x140/0x170 [ 1581.968487][T20688] ? rose_connect+0x677/0x10a0 [ 1581.973242][T20688] rose_connect+0x8ee/0x10a0 [ 1581.977822][T20688] ? __pfx_current_check_access_socket+0x10/0x10 [ 1581.984140][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1581.989760][T20688] ? aa_sk_perm+0x81e/0x950 [ 1581.994251][T20688] ? __pfx_rose_connect+0x10/0x10 [ 1581.999264][T20688] ? aa_af_perm+0x230/0x2b0 [ 1582.003754][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1582.009373][T20688] ? tomoyo_socket_connect_permission+0x164/0x290 [ 1582.015796][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1582.021419][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1582.027058][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1582.032676][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1582.038298][T20688] __sys_connect+0x316/0x440 [ 1582.042877][T20688] ? __pfx___sys_connect+0x10/0x10 [ 1582.047979][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1582.053599][T20688] ? rcu_is_watching+0x15/0xb0 [ 1582.058362][T20688] __x64_sys_connect+0x7a/0x90 [ 1582.063113][T20688] do_syscall_64+0xfa/0x3b0 [ 1582.067614][T20688] ? lockdep_hardirqs_on+0x9c/0x150 [ 1582.072805][T20688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.078860][T20688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1582.084483][T20688] ? exc_page_fault+0x9f/0xf0 [ 1582.089152][T20688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.095031][T20688] RIP: 0033:0x7f7b83d8e929 [ 1582.099434][T20688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1582.119044][T20688] RSP: 002b:00007f7b81bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1582.127456][T20688] RAX: ffffffffffffffda RBX: 00007f7b83fb5fa0 RCX: 00007f7b83d8e929 [ 1582.135416][T20688] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000004 [ 1582.143376][T20688] RBP: 00007f7b83e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1582.151331][T20688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1582.159283][T20688] R13: 0000000000000000 R14: 00007f7b83fb5fa0 R15: 00007ffd2716d7f8 [ 1582.167245][T20688] [ 1582.170695][T20688] Kernel Offset: disabled [ 1582.175021][T20688] Rebooting in 86400 seconds..