last executing test programs: 32m27.879846853s ago: executing program 0 (id=251): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=@random={'user.', 'police\x00'}) 32m26.928839049s ago: executing program 0 (id=253): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect$uac1(0x2, 0xa6, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='xprt_retransmit\x00', r8, 0x0, 0x2}, 0x18) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$TCFLSH(r1, 0x400455c8, 0x40000000004) 32m23.681922277s ago: executing program 0 (id=262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x20, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_FILTER={0x4}]}, 0x20}}, 0x88d0) 32m23.203758149s ago: executing program 0 (id=264): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa1080a, &(0x7f0000000300)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES32=0x0, @ANYBLOB="64426712f6332e6dd9cb0c57614b21fa1bb9e2d8a7060e6fc4afb485e6a2e14249b9ce7bf222959ce2ac129b6a989c7f12d5966ba26791", @ANYRESDEC, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYRESDEC], 0x21, 0x150d, &(0x7f0000001f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) chdir(&(0x7f0000000100)='./bus\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000004000000080000006304000000000000", @ANYRES32, @ANYBLOB="0000fbff06000000008000e4008000008f000000", @ANYBLOB], 0x48) 32m22.215860562s ago: executing program 0 (id=270): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x109000, 0x0) read$FUSE(r6, &(0x7f00000011c0)={0x2020}, 0x2020) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x48, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) close(r0) 32m21.751907136s ago: executing program 0 (id=273): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x2, 0x0, 0x0) pwritev2(r1, 0x0, 0x0, 0xfffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) umount2(0x0, 0x4) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x20000010}) 32m20.784036777s ago: executing program 32 (id=273): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x2, 0x0, 0x0) pwritev2(r1, 0x0, 0x0, 0xfffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) umount2(0x0, 0x4) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x20000010}) 31m38.090598028s ago: executing program 1 (id=382): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@discard}, {@time_offset={'time_offset', 0x3d, 0x8001}}, {@fmask={'fmask', 0x3d, 0x4b280000}}, {@dmask={'dmask', 0x3d, 0x6a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@gid}, {@dmask={'dmask', 0x3d, 0x7fd}}, {@allow_utime={'allow_utime', 0x3d, 0xe61}}]}, 0x0, 0x14f5, &(0x7f0000001580)="$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") r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) write(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1, 0x1}, 0x20) 31m34.385262698s ago: executing program 1 (id=389): unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r2, r0, 0x12, 0x6}, 0x10) 31m33.671816567s ago: executing program 1 (id=393): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$eJzs3c1rHOUfAPDvbN7aNL9fIghaTwFBA6UbU2Or6KHiQQQLBT3bLpttqNlkS3dTmhDQIoIXQcWDoJeefak3r75c9V/w5EEsVdNixYNEZrPTbJvdNEmTbHU/H5js88zM5pnvPDPzPLvzMBtA1xpN/+QiDkbEe0nEcGN+EhF99VRvxPHV9W4uLxXTKYmVlVd+S+rr3FheKkbTe1IHGpmHI+LbtyMO5daXW11YnCmUy6Xzjfx4bfbceHWhPyIK06Xp0tzRicnJI8eeOnZ052L944fFoavvv/j4F8f/euuhK+9+l8TxGGosa45jp4zGaGOf9KW78DYv7HRhHZZ0egPYlvTU7Fk9y+NgDEdPPQUA/Je9ERErAECXSbT/ANBlsu8BbiwvFbOps99I7K1rz0fEvtX4s/ubq0t6G/fs9tXvgw7eSG67M5JExMgOlD8aEZ989dpn6ZTmf3y2u/Y/0DlvXoqI0yOj66//yboxC1v1xAbL+huvo3fM77b2Bzrp67T/83Sr/l/uVv8nWvR/Blqcu9tx1/N//w4UsoG0//dc09i2m03xN4z0NHL/q/f5+pIzZ8ul9Nr2/4gYi76BND+xQRlj1/++3m5Zc//v9w9e/zQtP31dWyP3S+/A7e+ZKtQK9xJzs2uXIh7pbRV/cqv+kzb935ObLOOlZ975uN2yNP403mxaH380RiftjpXLEY+1rP+1EW3J2vjExcNnZ+8YnzhePxzGs4OihS9/+miwXfnN9Z9OafnZZ4G9kNb/4MbxjyTN4zWrWy/j+8vD37Rbdvf4Wx///cmr9XTWj7hYqNXOT0T0Jy+vn39k7b1ZPls/jX/s0dbn/0bHf/qZ8HSrgFrUdO/VXz/ffvy7K41/akv1v/XElZszPe3K31z9T9ZTY405m7n+bXYD72XfAQAAAAAAAAAAAAAAAAAAAAAAAMBm5SJiKJJc/lY6l8vnV3/D+8EYzJUr1dqhM5X5uamo/1b2SPTlskddDjc9D3Wi8Tz8LH/kjvyTEfFARHw4sD/JnqM41eHYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBzoM3v/6d+Huj01gEAu2ZfpzcAANhz2n8A6D7afwDoPtp/AOg+2n8A6D7afwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbZyRMn0mnlz+WlYpqfurAwP1O5cHiqVJ3Jz84X88WhOJefrlSmy6V8sTJ7t/9XrlTOTcbc/MXxWqlaG68uLJ6arczP1U6dnS1Ml06V+vYkKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYmurC4kyhXC6dl9hGYuX+2IzOJ3oah9MuFJFEROcD3HAL74/N2OFEhy9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8S/wQAAP//iZYeGw==") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) 31m30.895930604s ago: executing program 1 (id=400): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) close(r3) 31m28.175383094s ago: executing program 1 (id=403): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[], 0xb0) 31m27.195845269s ago: executing program 1 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000000000000030005000000000002004e21ffffffff000000000000000001001800055f000089e04cc63ec2e5bf0fb9f7ede3f9058c472ed12ce04aab92b07a348719eb8544e6bbf1f29e6542f054ad509a8c14dc0841546aed4a2dd0a501fcc7808348f2fef8262880e50f819e591b3ba917470322"], 0x98}}, 0x0) socket$inet6(0xa, 0x80002, 0x88) socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, 0x0, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cp'], 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) 31m11.748994644s ago: executing program 33 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000000000000030005000000000002004e21ffffffff000000000000000001001800055f000089e04cc63ec2e5bf0fb9f7ede3f9058c472ed12ce04aab92b07a348719eb8544e6bbf1f29e6542f054ad509a8c14dc0841546aed4a2dd0a501fcc7808348f2fef8262880e50f819e591b3ba917470322"], 0x98}}, 0x0) socket$inet6(0xa, 0x80002, 0x88) socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, 0x0, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cp'], 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) 26m3.893748899s ago: executing program 2 (id=1169): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401", @ANYRES64], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 26m0.930712453s ago: executing program 2 (id=1184): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x3, 0xba6, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x1000000, 0x0, 0x0) 25m58.976615244s ago: executing program 2 (id=1188): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f0000000800)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a37e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731200f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e548355376ec821c05008685c055a367ea51b653eff6581710e72f1e7e4d9d1607d004d9ed64f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6611628606afadb04e0158f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x1506, &(0x7f0000002ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012800b000100697036746e6c000018000280140003"], 0x48}}, 0x0) 25m55.055840426s ago: executing program 2 (id=1197): pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000340)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d6b6f69382d752c636f6465706167653d3933322c696f636861727365743d6575632d6a702c747a3d5554432c73686f72746e616d653d6d697865642c726f6469722c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c6e66732c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c00416786a537fd"], 0x1, 0x358, &(0x7f0000000480)="$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") ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)) 25m52.513511886s ago: executing program 2 (id=1201): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000040)='./file2\x00', 0x800094, &(0x7f0000000a00)=ANY=[@ANYBLOB='shortname=winnt,uni_xlate=1,rodir,uni_xlate=0,iocharset=macgaelic,shortname=lower,utf8=1,iocharset=iso8859-13,uni_xlate=1,rodir,shortname=win95,shortname=lower,codepage=874,shortname=lower,utf8=0,shortname=lower,uni_xlate=0,uni_xlate=0,nonumtail=0,short\b\x00\x00\x00\x00\x00\x00\x0095,rodir,uni_xlate=0,rodir,shortname=mixed,sFortname=lower,nnonumtail=1,showexec,\x00', @ANYRES8, @ANYRES16], 0x6, 0x2d2, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 25m51.806086561s ago: executing program 2 (id=1205): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@discard}, {@time_offset={'time_offset', 0x3d, 0x8001}}, {@fmask={'fmask', 0x3d, 0x4b280000}}, {@dmask={'dmask', 0x3d, 0x6a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@gid}, {@dmask={'dmask', 0x3d, 0x7fd}}, {@allow_utime={'allow_utime', 0x3d, 0xe61}}]}, 0x0, 0x14f5, &(0x7f0000001580)="$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") r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) write(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1, 0x1}, 0x20) 25m36.697643368s ago: executing program 34 (id=1205): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@discard}, {@time_offset={'time_offset', 0x3d, 0x8001}}, {@fmask={'fmask', 0x3d, 0x4b280000}}, {@dmask={'dmask', 0x3d, 0x6a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@gid}, {@dmask={'dmask', 0x3d, 0x7fd}}, {@allow_utime={'allow_utime', 0x3d, 0xe61}}]}, 0x0, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) write(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1, 0x1}, 0x20) 23m23.179881355s ago: executing program 4 (id=1546): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() prctl$PR_MCE_KILL(0x21, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0xa, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100000e5f258e54664af0454e73bba5cff7d93a9588e9ce97a22a6d751d44d86103d6619e4d27f239887409adb9788d82ad1de03736853a5a9eb6f262f7a3085ebbd06c0e549230592c8910c5dde385c379598f1fb87cf970997af5fb67202e81", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom0\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf3, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10e, &(0x7f0000000740)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@grpid}], [{@smackfshat}]}, 0x4, 0x46b, &(0x7f00000009c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r8 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) 23m22.40382647s ago: executing program 4 (id=1548): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) rt_tgsigqueueinfo(r1, r1, 0x36, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {}, 0x0, 0x10}, 0x0, 0x228, 0x258, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast2, [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], @ipv4=@rand_addr=0x64010101, [0x0, 0xffffff, 0xffffff, 0xff], 0x4d5, 0x3504, 0x29, 0x0, 0x0, 0x1}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0x0, 0xffff00, 0xff], @ipv6=@loopback, [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x4d6, 0x3504, 0x2c, 0x0, 0x1e, 0xd}, {@ipv4=@local, [0x0, 0xffffffff], @ipv4=@multicast1, [0xff, 0xff, 0xffffff00, 0xffffffff], 0x4d3, 0x3502, 0x2, 0x1, 0x1, 0x1}, {@ipv6=@rand_addr=' \x01\x00', [0xffffffff, 0xff, 0x0, 0xffffffff], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0x80800000, 0x0, 0xffffffff, 0xffffffff], 0x4d2, 0x3500, 0x6, 0x1, 0x4, 0x4}], 0x3, 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x8000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x401, 0xfffffffffffffff8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10030600e0ff02000400", 0xa, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) r8 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000300)={[{@grpid}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@stripe={'stripe', 0x3d, 0x7}}, {@grpid}, {@data_ordered}, {@stripe={'stripe', 0x3d, 0xf62}}, {@max_batch_time={'max_batch_time', 0x3d, 0x200000}}, {@dax_always}]}, 0xd, 0x5f6, &(0x7f0000000c00)="$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") r9 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) linkat(r8, &(0x7f0000000100)='./file0\x00', r9, &(0x7f0000000240)='./file0\x00', 0x0) 23m20.670034569s ago: executing program 4 (id=1553): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0xfd, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x22, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001200)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x20}}, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r7, 0x0, 0x0) 23m19.107092012s ago: executing program 4 (id=1557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8d0, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES64, @ANYRESHEX=r1, @ANYRES16, @ANYRESOCT=r2], 0x1, 0x36e, &(0x7f0000000c00)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x1000) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000e68d9615000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10fff9) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = timerfd_create(0x0, 0x0) read(r8, &(0x7f0000000240)=""/123, 0x7b) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23m17.691885099s ago: executing program 4 (id=1563): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x8010aebb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000400"/20, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000021000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0x1, 0x6, &(0x7f0000000240)="af"}) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) fcntl$lock(r7, 0x5, &(0x7f0000005e80)={0x0, 0x0, 0x0, 0x7}) 23m15.135122121s ago: executing program 4 (id=1567): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0xfd, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x22, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001200)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x20}}, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r7, 0x0, 0x0) 23m11.855007442s ago: executing program 35 (id=1567): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0xfd, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x22, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001200)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x20}}, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r7, 0x0, 0x0) 4.922310794s ago: executing program 5 (id=5696): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 4.583083281s ago: executing program 5 (id=5701): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) 4.438295397s ago: executing program 5 (id=5703): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100"], 0x0}, 0x0) 4.121723975s ago: executing program 3 (id=5708): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x30}}, 0x0) 3.91710924s ago: executing program 3 (id=5710): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x2c, 0x64, 0xf31, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x9}, {0x10, 0xffff}, {0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x337}]}, 0x2c}}, 0x0) 3.811899229s ago: executing program 6 (id=5711): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r3, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x10) 3.769795803s ago: executing program 3 (id=5712): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 3.601305735s ago: executing program 6 (id=5715): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xd8, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x70, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x54, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x11c}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.267403358s ago: executing program 3 (id=5717): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) 3.264158436s ago: executing program 6 (id=5718): syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24", @ANYRES8], 0x0) 2.588187841s ago: executing program 3 (id=5719): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x44) connect$can_j1939(r0, &(0x7f0000000600)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x1}, 0xff}, 0x18) 2.563374839s ago: executing program 3 (id=5720): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)={0x40, 0x3}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.920083386s ago: executing program 7 (id=5731): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@cgroup=r0, r0, 0x2f, 0x3020, 0x4}, 0x20) 1.899892116s ago: executing program 7 (id=5732): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xe8, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x68, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x12c}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.617904683s ago: executing program 7 (id=5733): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000880)="b9ff030768441a8cb89e14f0080086", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.511777508s ago: executing program 7 (id=5734): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x2c, 0x64, 0xf31, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x9}, {0x10, 0xffff}, {0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x337}]}, 0x2c}}, 0x0) 1.480108069s ago: executing program 7 (id=5735): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) 1.412127578s ago: executing program 7 (id=5736): syz_emit_ethernet(0x1d1, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x19b, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x1, "000000050000000026000400"}, {0x26, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x1f, 0xa, "17dcea46805d4809c2b3f90547406b18901b0aeff04c0300f3c75dc2d227a83b89483b30847434755e1545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5"}, {0x21, 0x7, "b8a3e100908f61640000000200fc00000000000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {}, {0x1f, 0x4, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f"}]}}}}}}, 0x0) set_mempolicy(0x6, &(0x7f0000000180)=0x472, 0x9) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x42a00) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000046365608b40413868f95010201010902120001000000000904"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x800) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000006c0)=[{0x0, 0x2}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd05, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xc, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x20000000c}]}}]}, 0x40}}, 0x4004048) 1.315923526s ago: executing program 5 (id=5737): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xd4, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x60, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x44, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x118}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.186849775s ago: executing program 5 (id=5738): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 928.227284ms ago: executing program 5 (id=5739): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 783.922667ms ago: executing program 8 (id=5741): r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000600)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x1}, 0xff}, 0x18) 783.085009ms ago: executing program 8 (id=5742): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800000008000900000000000800"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 763.167679ms ago: executing program 8 (id=5743): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xe8, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x68, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x12c}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 708.653887ms ago: executing program 8 (id=5744): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 628.100937ms ago: executing program 8 (id=5745): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000880)="b9ff030768441a8cb89e14f0080086", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 627.776915ms ago: executing program 8 (id=5746): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000001000)=ANY=[@ANYBLOB="440f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000980)={0x34, &(0x7f00000006c0)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 182.827421ms ago: executing program 6 (id=5747): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) 91.14803ms ago: executing program 6 (id=5748): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xd8, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x70, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x54, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x11c}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 6 (id=5749): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="f2435f01000800850800b79633c22bba902b9c239cb55cf9d4db0016fe773cd90497495ef4820c2bb0c29f849f4711c0d184d2d7c57e6f6e2276521b7acba9552f6bccd0d6a360878d2b9dda47d2e349d72c9bf38e3631f388cb3aad3bac0076cf577cebcf4621456187502654ca33742ed7919060", 0x75, 0x0, &(0x7f0000000200)={0x11, 0xf8, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) kernel console output (not intermixed with test programs): [ 1895.316891][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 1895.322406][ T5915] radio-si470x 8-1:0.0: software version 0, hardware version 0 [ 1895.364025][ T5915] radio-si470x 8-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1895.377223][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 1895.382522][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 1895.403423][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 1895.415593][ T5915] radio-si470x 8-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1895.434503][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 1895.448620][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 1895.464944][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 1895.489419][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 1895.598164][ T5915] radio-si470x 8-1:0.0: submitting int urb failed (-90) [ 1895.611784][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 1895.629896][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 1895.639162][T24018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1895.652750][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 1895.658239][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 1895.663584][ T5922] gspca_vc032x: Unknown sensor... [ 1895.672515][ T5922] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1895.734004][T24223] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4822'. [ 1896.197000][ T5915] radio-si470x 8-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1896.226905][ T5915] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -22 [ 1896.240205][ T5922] usb 4-1: USB disconnect, device number 114 [ 1896.283119][ T5915] usb 8-1: USB disconnect, device number 92 [ 1896.398757][T24018] 8021q: adding VLAN 0 to HW filter on device team0 [ 1896.415037][T12360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1896.422184][T12360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1896.493054][T12360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1896.496694][T24226] loop3: detected capacity change from 0 to 1024 [ 1896.500258][T12360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1896.737125][T24226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1896.831271][T24229] loop5: detected capacity change from 0 to 40427 [ 1896.843535][T24229] F2FS-fs (loop5): invalid crc value [ 1897.025692][T24229] F2FS-fs (loop5): Start checkpoint disabled! [ 1897.040803][T24229] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1897.207137][T24240] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 16: comm syz.3.4823: bad entry in directory: inode out of bounds - offset=108, inode=1996488721, rec_len=916, size=1024 fake=0 [ 1898.554791][T24246] F2FS-fs (loop5): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 1899.070091][T16455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1899.164286][T12358] kworker/u8:4: attempt to access beyond end of device [ 1899.164286][T12358] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1899.187783][T12358] CPU: 0 UID: 0 PID: 12358 Comm: kworker/u8:4 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 1899.187807][T12358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1899.187817][T12358] Workqueue: writeback wb_workfn (flush-7:5) [ 1899.187845][T12358] Call Trace: [ 1899.187851][T12358] [ 1899.187859][T12358] dump_stack_lvl+0x189/0x250 [ 1899.187897][T12358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1899.187915][T12358] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1899.187941][T12358] ? __pfx_queue_work_on+0x10/0x10 [ 1899.187963][T12358] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1899.187982][T12358] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1899.188003][T12358] ? f2fs_hw_is_readonly+0x39b/0x470 [ 1899.188028][T12358] f2fs_handle_critical_error+0x37c/0x540 [ 1899.188054][T12358] f2fs_write_end_io+0x495/0x810 [ 1899.188067][T12358] ? blkg_put+0x22/0x240 [ 1899.188103][T12358] __submit_merged_bio+0x27a/0x6a0 [ 1899.188131][T12358] __submit_merged_write_cond+0x255/0x530 [ 1899.188159][T12358] f2fs_write_data_pages+0x261d/0x3000 [ 1899.188216][T12358] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1899.188323][T12358] ? f2fs_write_meta_pages+0x357/0x450 [ 1899.188354][T12358] ? __lock_acquire+0xab9/0xd20 [ 1899.188378][T12358] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1899.188400][T12358] do_writepages+0x32b/0x550 [ 1899.188427][T12358] ? reacquire_held_locks+0x127/0x1d0 [ 1899.188445][T12358] ? writeback_sb_inodes+0x384/0x1010 [ 1899.188474][T12358] __writeback_single_inode+0x145/0xff0 [ 1899.188494][T12358] ? do_raw_spin_unlock+0x122/0x240 [ 1899.188514][T12358] writeback_sb_inodes+0x6c7/0x1010 [ 1899.188562][T12358] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1899.188623][T12358] ? rcu_is_watching+0x15/0xb0 [ 1899.188653][T12358] wb_writeback+0x43b/0xaf0 [ 1899.188681][T12358] ? queue_io+0x321/0x590 [ 1899.188704][T12358] ? __pfx_wb_writeback+0x10/0x10 [ 1899.188733][T12358] ? _raw_spin_unlock_irq+0x23/0x50 [ 1899.188758][T12358] wb_workfn+0x409/0xef0 [ 1899.188793][T12358] ? __pfx_wb_workfn+0x10/0x10 [ 1899.188815][T12358] ? __lock_acquire+0xab9/0xd20 [ 1899.188845][T12358] ? process_scheduled_works+0x9ef/0x17b0 [ 1899.188878][T12358] ? _raw_spin_unlock_irq+0x23/0x50 [ 1899.188896][T12358] ? process_scheduled_works+0x9ef/0x17b0 [ 1899.188914][T12358] ? process_scheduled_works+0x9ef/0x17b0 [ 1899.188934][T12358] process_scheduled_works+0xade/0x17b0 [ 1899.188985][T12358] ? __pfx_process_scheduled_works+0x10/0x10 [ 1899.189024][T12358] worker_thread+0x8a0/0xda0 [ 1899.189073][T12358] kthread+0x711/0x8a0 [ 1899.189092][T12358] ? __pfx_worker_thread+0x10/0x10 [ 1899.189110][T12358] ? __pfx_kthread+0x10/0x10 [ 1899.189128][T12358] ? _raw_spin_unlock_irq+0x23/0x50 [ 1899.189147][T12358] ? lockdep_hardirqs_on+0x9c/0x150 [ 1899.189166][T12358] ? __pfx_kthread+0x10/0x10 [ 1899.189182][T12358] ret_from_fork+0x3fc/0x770 [ 1899.189205][T12358] ? __pfx_ret_from_fork+0x10/0x10 [ 1899.189230][T12358] ? __switch_to_asm+0x39/0x70 [ 1899.189244][T12358] ? __switch_to_asm+0x33/0x70 [ 1899.189257][T12358] ? __pfx_kthread+0x10/0x10 [ 1899.189273][T12358] ret_from_fork_asm+0x1a/0x30 [ 1899.189307][T12358] [ 1899.189314][T12358] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1899.581966][T12358] CPU: 0 UID: 0 PID: 12358 Comm: kworker/u8:4 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 1899.581992][T12358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1899.582004][T12358] Workqueue: writeback wb_workfn (flush-7:5) [ 1899.582033][T12358] Call Trace: [ 1899.582041][T12358] [ 1899.582051][T12358] dump_stack_lvl+0x189/0x250 [ 1899.582081][T12358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1899.582101][T12358] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1899.582123][T12358] ? __pfx_queue_work_on+0x10/0x10 [ 1899.582145][T12358] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1899.582167][T12358] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1899.582192][T12358] ? f2fs_hw_is_readonly+0x39b/0x470 [ 1899.582223][T12358] f2fs_handle_critical_error+0x37c/0x540 [ 1899.582253][T12358] f2fs_write_end_io+0x495/0x810 [ 1899.582269][T12358] ? blkg_put+0x22/0x240 [ 1899.582310][T12358] __submit_merged_bio+0x27a/0x6a0 [ 1899.582341][T12358] __submit_merged_write_cond+0x255/0x530 [ 1899.582374][T12358] f2fs_write_data_pages+0x261d/0x3000 [ 1899.582440][T12358] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1899.582560][T12358] ? f2fs_write_meta_pages+0x357/0x450 [ 1899.582598][T12358] ? __lock_acquire+0xab9/0xd20 [ 1899.582625][T12358] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1899.582649][T12358] do_writepages+0x32b/0x550 [ 1899.582678][T12358] ? reacquire_held_locks+0x127/0x1d0 [ 1899.582700][T12358] ? writeback_sb_inodes+0x384/0x1010 [ 1899.582733][T12358] __writeback_single_inode+0x145/0xff0 [ 1899.582757][T12358] ? do_raw_spin_unlock+0x122/0x240 [ 1899.582778][T12358] writeback_sb_inodes+0x6c7/0x1010 [ 1899.582829][T12358] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1899.582905][T12358] ? rcu_is_watching+0x15/0xb0 [ 1899.582939][T12358] wb_writeback+0x43b/0xaf0 [ 1899.582972][T12358] ? queue_io+0x321/0x590 [ 1899.583000][T12358] ? __pfx_wb_writeback+0x10/0x10 [ 1899.583035][T12358] ? _raw_spin_unlock_irq+0x23/0x50 [ 1899.583065][T12358] wb_workfn+0x409/0xef0 [ 1899.583108][T12358] ? __pfx_wb_workfn+0x10/0x10 [ 1899.583134][T12358] ? __lock_acquire+0xab9/0xd20 [ 1899.583168][T12358] ? process_scheduled_works+0x9ef/0x17b0 [ 1899.583200][T12358] ? _raw_spin_unlock_irq+0x23/0x50 [ 1899.583221][T12358] ? process_scheduled_works+0x9ef/0x17b0 [ 1899.583242][T12358] ? process_scheduled_works+0x9ef/0x17b0 [ 1899.583267][T12358] process_scheduled_works+0xade/0x17b0 [ 1899.583323][T12358] ? __pfx_process_scheduled_works+0x10/0x10 [ 1899.583368][T12358] worker_thread+0x8a0/0xda0 [ 1899.583422][T12358] kthread+0x711/0x8a0 [ 1899.583445][T12358] ? __pfx_worker_thread+0x10/0x10 [ 1899.583467][T12358] ? __pfx_kthread+0x10/0x10 [ 1899.583487][T12358] ? _raw_spin_unlock_irq+0x23/0x50 [ 1899.583510][T12358] ? lockdep_hardirqs_on+0x9c/0x150 [ 1899.583533][T12358] ? __pfx_kthread+0x10/0x10 [ 1899.583552][T12358] ret_from_fork+0x3fc/0x770 [ 1899.583579][T12358] ? __pfx_ret_from_fork+0x10/0x10 [ 1899.583608][T12358] ? __switch_to_asm+0x39/0x70 [ 1899.583623][T12358] ? __switch_to_asm+0x33/0x70 [ 1899.583639][T12358] ? __pfx_kthread+0x10/0x10 [ 1899.583659][T12358] ret_from_fork_asm+0x1a/0x30 [ 1899.583697][T12358] [ 1899.583705][T12358] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1900.611221][T24018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1901.800153][T24018] veth0_vlan: entered promiscuous mode [ 1901.845355][T24018] veth1_vlan: entered promiscuous mode [ 1901.969136][T24018] veth0_macvtap: entered promiscuous mode [ 1901.984844][ T5915] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1902.030462][T24018] veth1_macvtap: entered promiscuous mode [ 1902.122342][T24018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1902.244419][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 1902.254384][ T5915] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1902.263442][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1902.312326][ T5915] usb 6-1: config 0 descriptor?? [ 1902.907925][ T5915] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1902.979692][T24018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1903.147655][T12358] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1903.167371][T12358] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1903.231546][T12358] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1903.289771][T12358] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1903.585277][ T43] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1904.075079][T24326] random: crng reseeded on system resumption [ 1904.546656][ T5915] gspca_vc032x: reg_w err -71 [ 1904.551383][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1904.564606][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1904.569931][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1904.581616][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1904.586999][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1904.592283][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1904.608065][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1904.613378][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1904.634991][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1904.640514][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1904.672285][ T43] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1904.684411][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1904.689718][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1904.704778][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.726357][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1904.731669][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1904.742448][ T43] usb 4-1: Product: syz [ 1904.766865][ T43] usb 4-1: Manufacturer: syz [ 1904.774795][T12358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1904.782628][T12358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1904.790307][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1904.804724][ T43] usb 4-1: SerialNumber: syz [ 1904.829767][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1904.843626][ T43] usb 4-1: config 0 descriptor?? [ 1904.858880][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1904.871432][ T8821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1904.881606][ T43] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1904.892643][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1904.898498][ T8821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1904.914618][ T5915] gspca_vc032x: Unknown sensor... [ 1904.930136][ T5915] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 1905.000265][ T5915] usb 6-1: USB disconnect, device number 99 [ 1905.483165][ T9] usb 9-1: new full-speed USB device number 79 using dummy_hcd [ 1906.116663][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1906.160883][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1906.171634][ T5915] usb 4-1: USB disconnect, device number 115 [ 1906.211648][ T9] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1906.259048][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.339890][ T9] usb 9-1: config 0 descriptor?? [ 1906.366553][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1906.373214][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1906.505946][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1906.560553][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1907.141454][ T9] usb 9-1: media controller created [ 1907.148863][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1907.162126][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1907.173309][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1907.194620][T12964] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 1907.213242][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input31 [ 1907.233886][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 1907.244853][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1907.374896][T12964] usb 8-1: Using ep0 maxpacket: 32 [ 1907.410739][ T5894] dvb-usb: bulk message failed: -22 (1/0) [ 1907.422112][T12964] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8347, setting to 64 [ 1907.443891][ T9] usb 9-1: USB disconnect, device number 79 [ 1907.459746][ T5894] dvb-usb: error while querying for an remote control event. [ 1907.483124][T12964] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1907.517066][T12964] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.638982][T12964] usb 8-1: config 0 descriptor?? [ 1907.645320][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1907.697247][ T43] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1907.712497][T12964] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1907.906361][ T43] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1907.923856][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.965903][ T43] usb 6-1: Product: syz [ 1907.978878][ T43] usb 6-1: Manufacturer: syz [ 1907.993362][ T43] usb 6-1: SerialNumber: syz [ 1908.020103][ T43] usb 6-1: config 0 descriptor?? [ 1908.035156][ T43] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1908.144546][ T9] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 1908.314517][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 1908.323507][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1908.359375][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1908.394746][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.415262][ T9] usb 9-1: Product: syz [ 1908.419461][ T9] usb 9-1: Manufacturer: syz [ 1908.429381][ T9] usb 9-1: SerialNumber: syz [ 1908.462274][ T9] usb 9-1: config 0 descriptor?? [ 1908.677023][T12964] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1908.852198][T12964] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1908.855296][ T43] usb 6-1: USB disconnect, device number 100 [ 1908.866519][T12964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.875948][T12964] usb 4-1: Product: syz [ 1908.880245][T12964] usb 4-1: Manufacturer: syz [ 1908.884959][T12964] usb 4-1: SerialNumber: syz [ 1908.892408][T12964] usb 4-1: config 0 descriptor?? [ 1908.988828][T24423] loop6: detected capacity change from 0 to 1024 [ 1909.029796][T24423] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1909.407024][T24431] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 16: comm syz.6.4860: bad entry in directory: inode out of bounds - offset=108, inode=1996488721, rec_len=916, size=1024 fake=0 [ 1909.765521][ T5915] usb 4-1: USB disconnect, device number 116 [ 1909.924862][T12964] usb 8-1: USB disconnect, device number 93 [ 1909.951136][T18187] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1910.263594][T24439] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4861'. [ 1910.900363][ T9] usb 9-1: USB disconnect, device number 80 [ 1910.954673][T12964] usb 8-1: new full-speed USB device number 94 using dummy_hcd [ 1911.689842][T12964] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1911.718534][T12964] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1911.745535][T12964] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1911.791694][T12964] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.835960][T12964] usb 8-1: config 0 descriptor?? [ 1911.897454][T12964] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1911.904126][T12964] dvb-usb: bulk message failed: -22 (3/0) [ 1911.961361][T12964] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1912.005079][T12964] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1912.019824][T12964] usb 8-1: media controller created [ 1912.031199][T12964] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1912.065038][T12964] dvb-usb: bulk message failed: -22 (6/0) [ 1912.076066][T12964] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1912.092304][T12964] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input32 [ 1912.138981][T12964] dvb-usb: schedule remote query interval to 150 msecs. [ 1912.163033][T12964] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1912.172340][T24464] bond0: entered promiscuous mode [ 1912.184390][T24464] bond_slave_0: entered promiscuous mode [ 1912.190254][T24464] bond_slave_1: entered promiscuous mode [ 1912.193216][T12964] usb 8-1: USB disconnect, device number 94 [ 1912.240536][T24464] bond0: entered allmulticast mode [ 1912.258447][T24464] bond_slave_0: entered allmulticast mode [ 1912.271007][T24464] bond_slave_1: entered allmulticast mode [ 1912.277122][T22567] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1912.325518][T24463] bridge1: entered promiscuous mode [ 1912.330931][T24463] bridge1: entered allmulticast mode [ 1912.337587][T24463] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 1912.517158][T12964] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1912.560879][T22567] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1912.574573][T22567] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.574602][T22567] usb 7-1: Product: syz [ 1912.574617][T22567] usb 7-1: Manufacturer: syz [ 1912.574631][T22567] usb 7-1: SerialNumber: syz [ 1912.579514][T22567] usb 7-1: config 0 descriptor?? [ 1912.604575][ T5915] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1912.610800][T22567] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1912.710021][T23439] Bluetooth: hci5: unexpected Set CIG Parameters response data [ 1912.719559][T23439] Bluetooth: hci5: unexpected event for opcode 0x2062 [ 1912.755553][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 1912.772211][ T5915] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1913.761563][T24472] random: crng reseeded on system resumption [ 1913.949174][T22567] gspca_sunplus: reg_r err -110 [ 1913.955151][T22567] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 1914.064682][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.072733][ T5915] usb 4-1: Product: syz [ 1914.084966][ T5915] usb 4-1: Manufacturer: syz [ 1914.089631][ T5915] usb 4-1: SerialNumber: syz [ 1914.259346][ T5915] usb 4-1: config 0 descriptor?? [ 1914.504643][ T5915] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1914.592917][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.599624][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.004116][T24490] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4878'. [ 1915.526631][T22567] usb 7-1: USB disconnect, device number 80 [ 1915.746017][ T5915] usb write operation failed. (-71) [ 1915.817366][ T5915] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1915.866543][ T5915] dvbdev: DVB: registering new adapter (Terratec H7) [ 1915.884515][ T5915] usb 4-1: media controller created [ 1915.894045][ T5915] usb read operation failed. (-71) [ 1915.899748][ T5915] usb write operation failed. (-71) [ 1916.088684][ T5915] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1916.953082][T23439] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1916.963523][T23439] Bluetooth: hci5: Injecting HCI hardware error event [ 1916.978318][T16457] Bluetooth: hci5: hardware error 0x00 [ 1917.113352][ T5915] usb 4-1: USB disconnect, device number 117 [ 1917.318839][T24486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1917.793357][T24505] loop6: detected capacity change from 0 to 40427 [ 1917.800813][ T43] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 1917.858939][T24505] F2FS-fs (loop6): invalid crc value [ 1918.020659][T24507] loop3: detected capacity change from 0 to 40427 [ 1918.087819][T24507] F2FS-fs (loop3): invalid crc value [ 1918.136960][T24505] F2FS-fs (loop6): Start checkpoint disabled! [ 1918.188131][ T43] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1918.214091][T24505] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1918.214143][ T43] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1918.232010][ T43] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1918.245068][T24507] F2FS-fs (loop3): Start checkpoint disabled! [ 1918.254506][T24507] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1918.294645][ T43] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1918.364822][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.777925][T24516] F2FS-fs (loop6): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 1919.286587][ T43] usb 8-1: Product: syz [ 1919.301017][ T43] usb 8-1: Manufacturer: syz [ 1919.305922][ T43] usb 8-1: SerialNumber: syz [ 1919.351725][T16457] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1919.446801][T24441] kworker/u8:0: attempt to access beyond end of device [ 1919.446801][T24441] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1919.633833][T24518] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 1920.044456][T24441] CPU: 1 UID: 0 PID: 24441 Comm: kworker/u8:0 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 1920.044485][T24441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1920.044497][T24441] Workqueue: writeback wb_workfn (flush-7:6) [ 1920.044526][T24441] Call Trace: [ 1920.044534][T24441] [ 1920.044543][T24441] dump_stack_lvl+0x189/0x250 [ 1920.044577][T24441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1920.044598][T24441] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1920.044623][T24441] ? __pfx_queue_work_on+0x10/0x10 [ 1920.044647][T24441] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1920.044670][T24441] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1920.044694][T24441] ? f2fs_hw_is_readonly+0x39b/0x470 [ 1920.044729][T24441] f2fs_handle_critical_error+0x37c/0x540 [ 1920.044759][T24441] f2fs_write_end_io+0x495/0x810 [ 1920.044774][T24441] ? blkg_put+0x22/0x240 [ 1920.044813][T24441] __submit_merged_bio+0x27a/0x6a0 [ 1920.044843][T24441] __submit_merged_write_cond+0x255/0x530 [ 1920.044874][T24441] f2fs_write_data_pages+0x261d/0x3000 [ 1920.044933][T24441] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1920.045032][T24441] ? f2fs_write_meta_pages+0x357/0x450 [ 1920.045064][T24441] ? __lock_acquire+0xab9/0xd20 [ 1920.045088][T24441] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1920.045114][T24441] do_writepages+0x32b/0x550 [ 1920.045142][T24441] ? reacquire_held_locks+0x127/0x1d0 [ 1920.045164][T24441] ? writeback_sb_inodes+0x384/0x1010 [ 1920.045196][T24441] __writeback_single_inode+0x145/0xff0 [ 1920.045219][T24441] ? do_raw_spin_unlock+0x122/0x240 [ 1920.045241][T24441] writeback_sb_inodes+0x6c7/0x1010 [ 1920.045291][T24441] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1920.045358][T24441] ? rcu_is_watching+0x15/0xb0 [ 1920.045391][T24441] wb_writeback+0x43b/0xaf0 [ 1920.045423][T24441] ? queue_io+0x321/0x590 [ 1920.045453][T24441] ? __pfx_wb_writeback+0x10/0x10 [ 1920.045484][T24441] ? _raw_spin_unlock_irq+0x23/0x50 [ 1920.045512][T24441] wb_workfn+0x409/0xef0 [ 1920.045548][T24441] ? __pfx_wb_workfn+0x10/0x10 [ 1920.045573][T24441] ? __lock_acquire+0xab9/0xd20 [ 1920.045605][T24441] ? process_scheduled_works+0x9ef/0x17b0 [ 1920.045634][T24441] ? _raw_spin_unlock_irq+0x23/0x50 [ 1920.045655][T24441] ? process_scheduled_works+0x9ef/0x17b0 [ 1920.045675][T24441] ? process_scheduled_works+0x9ef/0x17b0 [ 1920.045698][T24441] process_scheduled_works+0xade/0x17b0 [ 1920.045750][T24441] ? __pfx_process_scheduled_works+0x10/0x10 [ 1920.045791][T24441] worker_thread+0x8a0/0xda0 [ 1920.045817][T24441] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1920.045848][T24441] ? __kthread_parkme+0x7b/0x200 [ 1920.045881][T24441] kthread+0x711/0x8a0 [ 1920.045902][T24441] ? __pfx_worker_thread+0x10/0x10 [ 1920.045923][T24441] ? __pfx_kthread+0x10/0x10 [ 1920.045942][T24441] ? _raw_spin_unlock_irq+0x23/0x50 [ 1920.045963][T24441] ? lockdep_hardirqs_on+0x9c/0x150 [ 1920.045986][T24441] ? __pfx_kthread+0x10/0x10 [ 1920.046004][T24441] ret_from_fork+0x3fc/0x770 [ 1920.046029][T24441] ? __pfx_ret_from_fork+0x10/0x10 [ 1920.046058][T24441] ? __switch_to_asm+0x39/0x70 [ 1920.046074][T24441] ? __switch_to_asm+0x33/0x70 [ 1920.046088][T24441] ? __pfx_kthread+0x10/0x10 [ 1920.046107][T24441] ret_from_fork_asm+0x1a/0x30 [ 1920.046141][T24441] [ 1920.046170][T24441] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1920.443762][ T43] usb 8-1: can't set config #1, error -71 [ 1920.474684][ T43] usb 8-1: USB disconnect, device number 95 [ 1920.486511][T24441] CPU: 1 UID: 0 PID: 24441 Comm: kworker/u8:0 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 1920.486532][T24441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1920.486541][T24441] Workqueue: writeback wb_workfn (flush-7:6) [ 1920.486565][T24441] Call Trace: [ 1920.486571][T24441] [ 1920.486578][T24441] dump_stack_lvl+0x189/0x250 [ 1920.486602][T24441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1920.486618][T24441] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1920.486636][T24441] ? __pfx_queue_work_on+0x10/0x10 [ 1920.486656][T24441] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1920.486674][T24441] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1920.486694][T24441] ? f2fs_hw_is_readonly+0x39b/0x470 [ 1920.486718][T24441] f2fs_handle_critical_error+0x37c/0x540 [ 1920.486743][T24441] f2fs_write_end_io+0x495/0x810 [ 1920.486756][T24441] ? blkg_put+0x22/0x240 [ 1920.486790][T24441] __submit_merged_bio+0x27a/0x6a0 [ 1920.486815][T24441] __submit_merged_write_cond+0x255/0x530 [ 1920.486840][T24441] f2fs_write_data_pages+0x261d/0x3000 [ 1920.486896][T24441] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1920.487002][T24441] ? f2fs_write_meta_pages+0x357/0x450 [ 1920.487031][T24441] ? __lock_acquire+0xab9/0xd20 [ 1920.487052][T24441] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1920.487073][T24441] do_writepages+0x32b/0x550 [ 1920.487097][T24441] ? reacquire_held_locks+0x127/0x1d0 [ 1920.487113][T24441] ? writeback_sb_inodes+0x384/0x1010 [ 1920.487142][T24441] __writeback_single_inode+0x145/0xff0 [ 1920.487162][T24441] ? do_raw_spin_unlock+0x122/0x240 [ 1920.487182][T24441] writeback_sb_inodes+0x6c7/0x1010 [ 1920.487228][T24441] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1920.487291][T24441] ? rcu_is_watching+0x15/0xb0 [ 1920.487324][T24441] wb_writeback+0x43b/0xaf0 [ 1920.487353][T24441] ? queue_io+0x321/0x590 [ 1920.487378][T24441] ? __pfx_wb_writeback+0x10/0x10 [ 1920.487419][T24441] ? _raw_spin_unlock_irq+0x23/0x50 [ 1920.487449][T24441] wb_workfn+0x409/0xef0 [ 1920.487487][T24441] ? __pfx_wb_workfn+0x10/0x10 [ 1920.487512][T24441] ? __lock_acquire+0xab9/0xd20 [ 1920.487540][T24441] ? process_scheduled_works+0x9ef/0x17b0 [ 1920.487568][T24441] ? _raw_spin_unlock_irq+0x23/0x50 [ 1920.487588][T24441] ? process_scheduled_works+0x9ef/0x17b0 [ 1920.487607][T24441] ? process_scheduled_works+0x9ef/0x17b0 [ 1920.487632][T24441] process_scheduled_works+0xade/0x17b0 [ 1920.487688][T24441] ? __pfx_process_scheduled_works+0x10/0x10 [ 1920.487732][T24441] worker_thread+0x8a0/0xda0 [ 1920.487758][T24441] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1920.487791][T24441] ? __kthread_parkme+0x7b/0x200 [ 1920.487825][T24441] kthread+0x711/0x8a0 [ 1920.487845][T24441] ? __pfx_worker_thread+0x10/0x10 [ 1920.487865][T24441] ? __pfx_kthread+0x10/0x10 [ 1920.487880][T24441] ? _raw_spin_unlock_irq+0x23/0x50 [ 1920.487899][T24441] ? lockdep_hardirqs_on+0x9c/0x150 [ 1920.487922][T24441] ? __pfx_kthread+0x10/0x10 [ 1920.487941][T24441] ret_from_fork+0x3fc/0x770 [ 1920.487967][T24441] ? __pfx_ret_from_fork+0x10/0x10 [ 1920.487995][T24441] ? __switch_to_asm+0x39/0x70 [ 1920.488010][T24441] ? __switch_to_asm+0x33/0x70 [ 1920.488024][T24441] ? __pfx_kthread+0x10/0x10 [ 1920.488043][T24441] ret_from_fork_asm+0x1a/0x30 [ 1920.488086][T24441] [ 1920.488094][T24441] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1920.488192][T17256] kworker/u8:2: attempt to access beyond end of device [ 1920.488192][T17256] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1920.824852][T17256] CPU: 0 UID: 0 PID: 17256 Comm: kworker/u8:2 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 1920.824878][T17256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1920.824890][T17256] Workqueue: writeback wb_workfn (flush-7:3) [ 1920.824917][T17256] Call Trace: [ 1920.824924][T17256] [ 1920.824933][T17256] dump_stack_lvl+0x189/0x250 [ 1920.824963][T17256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1920.824984][T17256] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1920.825007][T17256] ? __pfx_queue_work_on+0x10/0x10 [ 1920.825032][T17256] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1920.825054][T17256] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1920.825078][T17256] ? f2fs_hw_is_readonly+0x39b/0x470 [ 1920.825107][T17256] f2fs_handle_critical_error+0x37c/0x540 [ 1920.825146][T17256] f2fs_write_end_io+0x495/0x810 [ 1920.825162][T17256] ? blkg_put+0x22/0x240 [ 1920.825202][T17256] __submit_merged_bio+0x27a/0x6a0 [ 1920.825231][T17256] __submit_merged_write_cond+0x255/0x530 [ 1920.825257][T17256] f2fs_write_data_pages+0x261d/0x3000 [ 1920.825308][T17256] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1920.825401][T17256] ? f2fs_write_meta_pages+0x357/0x450 [ 1920.825430][T17256] ? __lock_acquire+0xab9/0xd20 [ 1920.825451][T17256] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1920.825472][T17256] do_writepages+0x32b/0x550 [ 1920.825496][T17256] ? reacquire_held_locks+0x127/0x1d0 [ 1920.825513][T17256] ? writeback_sb_inodes+0x384/0x1010 [ 1920.825540][T17256] __writeback_single_inode+0x145/0xff0 [ 1920.825559][T17256] ? do_raw_spin_unlock+0x122/0x240 [ 1920.825577][T17256] writeback_sb_inodes+0x6c7/0x1010 [ 1920.825620][T17256] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1920.825677][T17256] ? rcu_is_watching+0x15/0xb0 [ 1920.825704][T17256] wb_writeback+0x43b/0xaf0 [ 1920.825730][T17256] ? queue_io+0x321/0x590 [ 1920.825751][T17256] ? __pfx_wb_writeback+0x10/0x10 [ 1920.825777][T17256] ? _raw_spin_unlock_irq+0x23/0x50 [ 1920.825800][T17256] wb_workfn+0x409/0xef0 [ 1920.825830][T17256] ? __pfx_wb_workfn+0x10/0x10 [ 1920.825851][T17256] ? __lock_acquire+0xab9/0xd20 [ 1920.825877][T17256] ? process_scheduled_works+0x9ef/0x17b0 [ 1920.825901][T17256] ? _raw_spin_unlock_irq+0x23/0x50 [ 1920.825917][T17256] ? process_scheduled_works+0x9ef/0x17b0 [ 1920.825933][T17256] ? process_scheduled_works+0x9ef/0x17b0 [ 1920.825952][T17256] process_scheduled_works+0xade/0x17b0 [ 1920.825998][T17256] ? __pfx_process_scheduled_works+0x10/0x10 [ 1920.826032][T17256] worker_thread+0x8a0/0xda0 [ 1920.826053][T17256] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1920.826079][T17256] ? __kthread_parkme+0x7b/0x200 [ 1920.826107][T17256] kthread+0x711/0x8a0 [ 1920.826124][T17256] ? __pfx_worker_thread+0x10/0x10 [ 1920.826146][T17256] ? __pfx_kthread+0x10/0x10 [ 1920.826161][T17256] ? _raw_spin_unlock_irq+0x23/0x50 [ 1920.826179][T17256] ? lockdep_hardirqs_on+0x9c/0x150 [ 1920.826196][T17256] ? __pfx_kthread+0x10/0x10 [ 1920.826211][T17256] ret_from_fork+0x3fc/0x770 [ 1920.826231][T17256] ? __pfx_ret_from_fork+0x10/0x10 [ 1920.826254][T17256] ? __switch_to_asm+0x39/0x70 [ 1920.826267][T17256] ? __switch_to_asm+0x33/0x70 [ 1920.826278][T17256] ? __pfx_kthread+0x10/0x10 [ 1920.826293][T17256] ret_from_fork_asm+0x1a/0x30 [ 1920.826322][T17256] [ 1920.826565][T17256] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1921.152720][T17256] CPU: 0 UID: 0 PID: 17256 Comm: kworker/u8:2 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 1921.152748][T17256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1921.152760][T17256] Workqueue: writeback wb_workfn (flush-7:3) [ 1921.152789][T17256] Call Trace: [ 1921.152798][T17256] [ 1921.152808][T17256] dump_stack_lvl+0x189/0x250 [ 1921.152840][T17256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1921.152862][T17256] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1921.152886][T17256] ? __pfx_queue_work_on+0x10/0x10 [ 1921.152911][T17256] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1921.152934][T17256] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1921.152959][T17256] ? f2fs_hw_is_readonly+0x39b/0x470 [ 1921.152990][T17256] f2fs_handle_critical_error+0x37c/0x540 [ 1921.153021][T17256] f2fs_write_end_io+0x495/0x810 [ 1921.153037][T17256] ? blkg_put+0x22/0x240 [ 1921.153079][T17256] __submit_merged_bio+0x27a/0x6a0 [ 1921.153118][T17256] __submit_merged_write_cond+0x255/0x530 [ 1921.153181][T17256] f2fs_write_data_pages+0x261d/0x3000 [ 1921.153248][T17256] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1921.153369][T17256] ? f2fs_write_meta_pages+0x357/0x450 [ 1921.153405][T17256] ? __lock_acquire+0xab9/0xd20 [ 1921.153432][T17256] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1921.153459][T17256] do_writepages+0x32b/0x550 [ 1921.153489][T17256] ? reacquire_held_locks+0x127/0x1d0 [ 1921.153510][T17256] ? writeback_sb_inodes+0x384/0x1010 [ 1921.153544][T17256] __writeback_single_inode+0x145/0xff0 [ 1921.153568][T17256] ? do_raw_spin_unlock+0x122/0x240 [ 1921.153591][T17256] writeback_sb_inodes+0x6c7/0x1010 [ 1921.153644][T17256] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1921.153720][T17256] ? rcu_is_watching+0x15/0xb0 [ 1921.153755][T17256] wb_writeback+0x43b/0xaf0 [ 1921.153789][T17256] ? queue_io+0x321/0x590 [ 1921.153816][T17256] ? __pfx_wb_writeback+0x10/0x10 [ 1921.153848][T17256] ? _raw_spin_unlock_irq+0x23/0x50 [ 1921.153878][T17256] wb_workfn+0x409/0xef0 [ 1921.153919][T17256] ? __pfx_wb_workfn+0x10/0x10 [ 1921.153946][T17256] ? __lock_acquire+0xab9/0xd20 [ 1921.153980][T17256] ? process_scheduled_works+0x9ef/0x17b0 [ 1921.154011][T17256] ? _raw_spin_unlock_irq+0x23/0x50 [ 1921.154031][T17256] ? process_scheduled_works+0x9ef/0x17b0 [ 1921.154052][T17256] ? process_scheduled_works+0x9ef/0x17b0 [ 1921.154076][T17256] process_scheduled_works+0xade/0x17b0 [ 1921.154140][T17256] ? __pfx_process_scheduled_works+0x10/0x10 [ 1921.154185][T17256] worker_thread+0x8a0/0xda0 [ 1921.154212][T17256] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1921.154246][T17256] ? __kthread_parkme+0x7b/0x200 [ 1921.154283][T17256] kthread+0x711/0x8a0 [ 1921.154304][T17256] ? __pfx_worker_thread+0x10/0x10 [ 1921.154328][T17256] ? __pfx_kthread+0x10/0x10 [ 1921.154346][T17256] ? _raw_spin_unlock_irq+0x23/0x50 [ 1921.154365][T17256] ? lockdep_hardirqs_on+0x9c/0x150 [ 1921.154386][T17256] ? __pfx_kthread+0x10/0x10 [ 1921.154405][T17256] ret_from_fork+0x3fc/0x770 [ 1921.154431][T17256] ? __pfx_ret_from_fork+0x10/0x10 [ 1921.154461][T17256] ? __switch_to_asm+0x39/0x70 [ 1921.154477][T17256] ? __switch_to_asm+0x33/0x70 [ 1921.154492][T17256] ? __pfx_kthread+0x10/0x10 [ 1921.154509][T17256] ret_from_fork_asm+0x1a/0x30 [ 1921.154540][T17256] [ 1921.838579][T17256] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1922.117665][T24523] loop7: detected capacity change from 0 to 40427 [ 1922.234087][T24523] F2FS-fs (loop7): invalid crc value [ 1922.321400][T24530] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4890'. [ 1922.349172][T24523] F2FS-fs (loop7): Start checkpoint disabled! [ 1922.909923][T24523] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1923.226977][ T43] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1923.664476][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 1923.664750][ T9] usb 9-1: new full-speed USB device number 81 using dummy_hcd [ 1923.693431][ T43] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1923.720732][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.759103][ T43] usb 6-1: Product: syz [ 1923.763308][ T43] usb 6-1: Manufacturer: syz [ 1923.769857][T24536] F2FS-fs (loop7): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 1923.808637][ T43] usb 6-1: SerialNumber: syz [ 1923.832126][ T43] usb 6-1: config 0 descriptor?? [ 1923.842647][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1923.887595][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1923.912790][T17256] kworker/u8:2: attempt to access beyond end of device [ 1923.912790][T17256] loop7: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1923.924455][ T9] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1923.941376][T17256] kworker/u8:2: attempt to access beyond end of device [ 1923.941376][T17256] loop7: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 1923.952591][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.983918][T17256] CPU: 1 UID: 0 PID: 17256 Comm: kworker/u8:2 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 1923.983949][T17256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1923.983962][T17256] Workqueue: writeback wb_workfn (flush-7:7) [ 1923.983993][T17256] Call Trace: [ 1923.984001][T17256] [ 1923.984010][T17256] dump_stack_lvl+0x189/0x250 [ 1923.984041][T17256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1923.984064][T17256] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1923.984087][T17256] ? __pfx_queue_work_on+0x10/0x10 [ 1923.984112][T17256] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1923.984135][T17256] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1923.984165][T17256] ? f2fs_hw_is_readonly+0x39b/0x470 [ 1923.984195][T17256] f2fs_handle_critical_error+0x37c/0x540 [ 1923.984225][T17256] f2fs_write_end_io+0x495/0x810 [ 1923.984241][T17256] ? blkg_put+0x22/0x240 [ 1923.984280][T17256] __submit_merged_bio+0x27a/0x6a0 [ 1923.984310][T17256] __submit_merged_write_cond+0x255/0x530 [ 1923.984335][T17256] f2fs_write_data_pages+0x261d/0x3000 [ 1923.984385][T17256] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1923.984484][T17256] ? f2fs_write_meta_pages+0x357/0x450 [ 1923.984519][T17256] ? __lock_acquire+0xab9/0xd20 [ 1923.984544][T17256] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1923.984570][T17256] do_writepages+0x32b/0x550 [ 1923.984598][T17256] ? reacquire_held_locks+0x127/0x1d0 [ 1923.984620][T17256] ? writeback_sb_inodes+0x384/0x1010 [ 1923.984650][T17256] __writeback_single_inode+0x145/0xff0 [ 1923.984672][T17256] ? do_raw_spin_unlock+0x122/0x240 [ 1923.984694][T17256] writeback_sb_inodes+0x6c7/0x1010 [ 1923.984742][T17256] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1923.984807][T17256] ? rcu_is_watching+0x15/0xb0 [ 1923.984839][T17256] wb_writeback+0x43b/0xaf0 [ 1923.984870][T17256] ? queue_io+0x321/0x590 [ 1923.984897][T17256] ? __pfx_wb_writeback+0x10/0x10 [ 1923.984927][T17256] ? _raw_spin_unlock_irq+0x23/0x50 [ 1923.984954][T17256] wb_workfn+0x409/0xef0 [ 1923.984990][T17256] ? __pfx_wb_workfn+0x10/0x10 [ 1923.985016][T17256] ? __lock_acquire+0xab9/0xd20 [ 1923.985048][T17256] ? process_scheduled_works+0x9ef/0x17b0 [ 1923.985077][T17256] ? _raw_spin_unlock_irq+0x23/0x50 [ 1923.985098][T17256] ? process_scheduled_works+0x9ef/0x17b0 [ 1923.985119][T17256] ? process_scheduled_works+0x9ef/0x17b0 [ 1923.985142][T17256] process_scheduled_works+0xade/0x17b0 [ 1923.985298][T17256] ? __pfx_process_scheduled_works+0x10/0x10 [ 1923.985340][T17256] worker_thread+0x8a0/0xda0 [ 1923.985367][T17256] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1923.985400][T17256] ? __kthread_parkme+0x7b/0x200 [ 1923.985433][T17256] kthread+0x711/0x8a0 [ 1923.985455][T17256] ? __pfx_worker_thread+0x10/0x10 [ 1923.985476][T17256] ? __pfx_kthread+0x10/0x10 [ 1923.985496][T17256] ? _raw_spin_unlock_irq+0x23/0x50 [ 1923.985518][T17256] ? lockdep_hardirqs_on+0x9c/0x150 [ 1923.985539][T17256] ? __pfx_kthread+0x10/0x10 [ 1923.985556][T17256] ret_from_fork+0x3fc/0x770 [ 1923.985581][T17256] ? __pfx_ret_from_fork+0x10/0x10 [ 1923.985610][T17256] ? __switch_to_asm+0x39/0x70 [ 1923.985627][T17256] ? __switch_to_asm+0x33/0x70 [ 1923.985642][T17256] ? __pfx_kthread+0x10/0x10 [ 1923.985660][T17256] ret_from_fork_asm+0x1a/0x30 [ 1923.985695][T17256] [ 1924.210540][ T9] usb 9-1: config 0 descriptor?? [ 1924.309082][ T43] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1924.326779][T17256] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1924.344198][T17256] CPU: 1 UID: 0 PID: 17256 Comm: kworker/u8:2 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 1924.344224][T17256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1924.344236][T17256] Workqueue: writeback wb_workfn (flush-7:7) [ 1924.344264][T17256] Call Trace: [ 1924.344275][T17256] [ 1924.344283][T17256] dump_stack_lvl+0x189/0x250 [ 1924.344313][T17256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1924.344332][T17256] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1924.344354][T17256] ? __pfx_queue_work_on+0x10/0x10 [ 1924.344378][T17256] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1924.344399][T17256] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1924.344423][T17256] ? f2fs_hw_is_readonly+0x39b/0x470 [ 1924.344453][T17256] f2fs_handle_critical_error+0x37c/0x540 [ 1924.344484][T17256] f2fs_write_end_io+0x495/0x810 [ 1924.344500][T17256] ? blkg_put+0x22/0x240 [ 1924.344543][T17256] __submit_merged_bio+0x27a/0x6a0 [ 1924.344575][T17256] __submit_merged_write_cond+0x255/0x530 [ 1924.344608][T17256] f2fs_write_data_pages+0x261d/0x3000 [ 1924.344670][T17256] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1924.344790][T17256] ? f2fs_write_meta_pages+0x357/0x450 [ 1924.344828][T17256] ? __lock_acquire+0xab9/0xd20 [ 1924.344853][T17256] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1924.344879][T17256] do_writepages+0x32b/0x550 [ 1924.344910][T17256] ? reacquire_held_locks+0x127/0x1d0 [ 1924.344932][T17256] ? writeback_sb_inodes+0x384/0x1010 [ 1924.344966][T17256] __writeback_single_inode+0x145/0xff0 [ 1924.344988][T17256] ? do_raw_spin_unlock+0x122/0x240 [ 1924.345012][T17256] writeback_sb_inodes+0x6c7/0x1010 [ 1924.345066][T17256] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1924.345145][T17256] ? rcu_is_watching+0x15/0xb0 [ 1924.345178][T17256] wb_writeback+0x43b/0xaf0 [ 1924.345210][T17256] ? queue_io+0x321/0x590 [ 1924.345236][T17256] ? __pfx_wb_writeback+0x10/0x10 [ 1924.345269][T17256] ? _raw_spin_unlock_irq+0x23/0x50 [ 1924.345299][T17256] wb_workfn+0x409/0xef0 [ 1924.345337][T17256] ? __pfx_wb_workfn+0x10/0x10 [ 1924.345363][T17256] ? __lock_acquire+0xab9/0xd20 [ 1924.345395][T17256] ? process_scheduled_works+0x9ef/0x17b0 [ 1924.345423][T17256] ? _raw_spin_unlock_irq+0x23/0x50 [ 1924.345442][T17256] ? process_scheduled_works+0x9ef/0x17b0 [ 1924.345462][T17256] ? process_scheduled_works+0x9ef/0x17b0 [ 1924.345486][T17256] process_scheduled_works+0xade/0x17b0 [ 1924.345544][T17256] ? __pfx_process_scheduled_works+0x10/0x10 [ 1924.345588][T17256] worker_thread+0x8a0/0xda0 [ 1924.345614][T17256] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1924.345648][T17256] ? __kthread_parkme+0x7b/0x200 [ 1924.345681][T17256] kthread+0x711/0x8a0 [ 1924.345704][T17256] ? __pfx_worker_thread+0x10/0x10 [ 1924.345725][T17256] ? __pfx_kthread+0x10/0x10 [ 1924.345745][T17256] ? _raw_spin_unlock_irq+0x23/0x50 [ 1924.345767][T17256] ? lockdep_hardirqs_on+0x9c/0x150 [ 1924.345789][T17256] ? __pfx_kthread+0x10/0x10 [ 1924.345808][T17256] ret_from_fork+0x3fc/0x770 [ 1924.345835][T17256] ? __pfx_ret_from_fork+0x10/0x10 [ 1924.345865][T17256] ? __switch_to_asm+0x39/0x70 [ 1924.345881][T17256] ? __switch_to_asm+0x33/0x70 [ 1924.345897][T17256] ? __pfx_kthread+0x10/0x10 [ 1924.345916][T17256] ret_from_fork_asm+0x1a/0x30 [ 1924.345955][T17256] [ 1924.582457][T12964] usb 9-1: USB disconnect, device number 81 [ 1924.618977][T17256] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1924.834554][ T9] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1924.995288][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1925.004984][ T9] usb 7-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1925.034128][ T9] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1925.055231][ T5922] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1925.058551][ T9] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1925.098649][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.229576][ T5922] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1925.255975][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.277588][ T5922] usb 4-1: Product: syz [ 1925.281965][ T5922] usb 4-1: Manufacturer: syz [ 1925.293513][ T5922] usb 4-1: SerialNumber: syz [ 1925.319872][ T5922] usb 4-1: config 0 descriptor?? [ 1925.336092][ T5922] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1925.357180][T24551] binder: 24550:24551 ioctl c0306201 0 returned -14 [ 1925.374525][ T9] usb 7-1: string descriptor 0 read error: -71 [ 1925.381177][ T9] hub 7-1:32.0: bad descriptor, ignoring hub [ 1925.414437][ T9] hub 7-1:32.0: probe with driver hub failed with error -5 [ 1925.471066][T24562] netlink: 'syz.8.4899': attribute type 10 has an invalid length. [ 1925.520895][T24562] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1925.528974][T24562] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 1925.545655][T24562] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1925.610803][ T9] usb 7-1: USB disconnect, device number 81 [ 1925.841726][ T43] usb write operation failed. (-71) [ 1925.850384][ T43] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1925.867041][ T43] dvbdev: DVB: registering new adapter (Terratec H7) [ 1925.874110][ T43] usb 6-1: media controller created [ 1925.890000][ T43] usb read operation failed. (-71) [ 1925.898146][ T43] usb write operation failed. (-71) [ 1925.906277][ T43] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1925.960812][ T43] usb 6-1: USB disconnect, device number 101 [ 1926.251696][ T5922] usb 4-1: USB disconnect, device number 118 [ 1926.732792][T24575] random: crng reseeded on system resumption [ 1927.813359][T24584] loop6: detected capacity change from 0 to 40427 [ 1927.856343][T24584] F2FS-fs (loop6): invalid crc value [ 1927.913753][T24584] F2FS-fs (loop6): Start checkpoint disabled! [ 1927.934823][T24584] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1928.489096][T24592] F2FS-fs (loop6): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 1929.134142][T19878] kworker/u8:6: attempt to access beyond end of device [ 1929.134142][T19878] loop6: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1929.156044][T19878] kworker/u8:6: attempt to access beyond end of device [ 1929.156044][T19878] loop6: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 1929.170314][T19878] CPU: 1 UID: 0 PID: 19878 Comm: kworker/u8:6 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 1929.170340][T19878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1929.170352][T19878] Workqueue: writeback wb_workfn (flush-7:6) [ 1929.170381][T19878] Call Trace: [ 1929.170389][T19878] [ 1929.170398][T19878] dump_stack_lvl+0x189/0x250 [ 1929.170427][T19878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1929.170457][T19878] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1929.170481][T19878] ? __pfx_queue_work_on+0x10/0x10 [ 1929.170507][T19878] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1929.170529][T19878] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1929.170554][T19878] ? f2fs_hw_is_readonly+0x39b/0x470 [ 1929.170583][T19878] f2fs_handle_critical_error+0x37c/0x540 [ 1929.170613][T19878] f2fs_write_end_io+0x495/0x810 [ 1929.170629][T19878] ? blkg_put+0x22/0x240 [ 1929.170668][T19878] __submit_merged_bio+0x27a/0x6a0 [ 1929.170697][T19878] __submit_merged_write_cond+0x255/0x530 [ 1929.170727][T19878] f2fs_write_data_pages+0x261d/0x3000 [ 1929.170786][T19878] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1929.170884][T19878] ? f2fs_write_meta_pages+0x357/0x450 [ 1929.170919][T19878] ? __lock_acquire+0xab9/0xd20 [ 1929.170945][T19878] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1929.170968][T19878] do_writepages+0x32b/0x550 [ 1929.170996][T19878] ? reacquire_held_locks+0x127/0x1d0 [ 1929.171017][T19878] ? writeback_sb_inodes+0x384/0x1010 [ 1929.171045][T19878] __writeback_single_inode+0x145/0xff0 [ 1929.171067][T19878] ? do_raw_spin_unlock+0x122/0x240 [ 1929.171087][T19878] writeback_sb_inodes+0x6c7/0x1010 [ 1929.171132][T19878] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1929.171198][T19878] ? rcu_is_watching+0x15/0xb0 [ 1929.171231][T19878] wb_writeback+0x43b/0xaf0 [ 1929.171263][T19878] ? queue_io+0x321/0x590 [ 1929.171288][T19878] ? __pfx_wb_writeback+0x10/0x10 [ 1929.171316][T19878] ? _raw_spin_unlock_irq+0x23/0x50 [ 1929.171344][T19878] wb_workfn+0x409/0xef0 [ 1929.171378][T19878] ? __pfx_wb_workfn+0x10/0x10 [ 1929.171402][T19878] ? __lock_acquire+0xab9/0xd20 [ 1929.171433][T19878] ? process_scheduled_works+0x9ef/0x17b0 [ 1929.171469][T19878] ? _raw_spin_unlock_irq+0x23/0x50 [ 1929.171491][T19878] ? process_scheduled_works+0x9ef/0x17b0 [ 1929.171512][T19878] ? process_scheduled_works+0x9ef/0x17b0 [ 1929.171536][T19878] process_scheduled_works+0xade/0x17b0 [ 1929.171587][T19878] ? __pfx_process_scheduled_works+0x10/0x10 [ 1929.171626][T19878] worker_thread+0x8a0/0xda0 [ 1929.171652][T19878] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1929.171685][T19878] ? __kthread_parkme+0x7b/0x200 [ 1929.171719][T19878] kthread+0x711/0x8a0 [ 1929.171740][T19878] ? __pfx_worker_thread+0x10/0x10 [ 1929.171762][T19878] ? __pfx_kthread+0x10/0x10 [ 1929.171781][T19878] ? _raw_spin_unlock_irq+0x23/0x50 [ 1929.171802][T19878] ? lockdep_hardirqs_on+0x9c/0x150 [ 1929.171824][T19878] ? __pfx_kthread+0x10/0x10 [ 1929.171842][T19878] ret_from_fork+0x3fc/0x770 [ 1929.171868][T19878] ? __pfx_ret_from_fork+0x10/0x10 [ 1929.171897][T19878] ? __switch_to_asm+0x39/0x70 [ 1929.171914][T19878] ? __switch_to_asm+0x33/0x70 [ 1929.171929][T19878] ? __pfx_kthread+0x10/0x10 [ 1929.171949][T19878] ret_from_fork_asm+0x1a/0x30 [ 1929.171983][T19878] [ 1929.171991][T19878] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1929.570698][T19878] CPU: 0 UID: 0 PID: 19878 Comm: kworker/u8:6 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 1929.570722][T19878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1929.570730][T19878] Workqueue: writeback wb_workfn (flush-7:6) [ 1929.570750][T19878] Call Trace: [ 1929.570755][T19878] [ 1929.570761][T19878] dump_stack_lvl+0x189/0x250 [ 1929.570781][T19878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1929.570795][T19878] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1929.570816][T19878] ? __pfx_queue_work_on+0x10/0x10 [ 1929.570836][T19878] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1929.570850][T19878] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1929.570865][T19878] ? f2fs_hw_is_readonly+0x39b/0x470 [ 1929.570883][T19878] f2fs_handle_critical_error+0x37c/0x540 [ 1929.570901][T19878] f2fs_write_end_io+0x495/0x810 [ 1929.570911][T19878] ? blkg_put+0x22/0x240 [ 1929.570935][T19878] __submit_merged_bio+0x27a/0x6a0 [ 1929.570954][T19878] __submit_merged_write_cond+0x255/0x530 [ 1929.570973][T19878] f2fs_write_data_pages+0x261d/0x3000 [ 1929.571010][T19878] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1929.571075][T19878] ? f2fs_write_meta_pages+0x357/0x450 [ 1929.571097][T19878] ? __lock_acquire+0xab9/0xd20 [ 1929.571113][T19878] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1929.571129][T19878] do_writepages+0x32b/0x550 [ 1929.571148][T19878] ? reacquire_held_locks+0x127/0x1d0 [ 1929.571161][T19878] ? writeback_sb_inodes+0x384/0x1010 [ 1929.571181][T19878] __writeback_single_inode+0x145/0xff0 [ 1929.571196][T19878] ? do_raw_spin_unlock+0x122/0x240 [ 1929.571209][T19878] writeback_sb_inodes+0x6c7/0x1010 [ 1929.571239][T19878] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1929.571280][T19878] ? rcu_is_watching+0x15/0xb0 [ 1929.571300][T19878] wb_writeback+0x43b/0xaf0 [ 1929.571320][T19878] ? queue_io+0x321/0x590 [ 1929.571336][T19878] ? __pfx_wb_writeback+0x10/0x10 [ 1929.571355][T19878] ? _raw_spin_unlock_irq+0x23/0x50 [ 1929.571373][T19878] wb_workfn+0x409/0xef0 [ 1929.571394][T19878] ? __pfx_wb_workfn+0x10/0x10 [ 1929.571409][T19878] ? __lock_acquire+0xab9/0xd20 [ 1929.571430][T19878] ? process_scheduled_works+0x9ef/0x17b0 [ 1929.571449][T19878] ? _raw_spin_unlock_irq+0x23/0x50 [ 1929.571462][T19878] ? process_scheduled_works+0x9ef/0x17b0 [ 1929.571474][T19878] ? process_scheduled_works+0x9ef/0x17b0 [ 1929.571489][T19878] process_scheduled_works+0xade/0x17b0 [ 1929.571521][T19878] ? __pfx_process_scheduled_works+0x10/0x10 [ 1929.571545][T19878] worker_thread+0x8a0/0xda0 [ 1929.571561][T19878] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1929.571580][T19878] ? __kthread_parkme+0x7b/0x200 [ 1929.571601][T19878] kthread+0x711/0x8a0 [ 1929.571614][T19878] ? __pfx_worker_thread+0x10/0x10 [ 1929.571627][T19878] ? __pfx_kthread+0x10/0x10 [ 1929.571639][T19878] ? _raw_spin_unlock_irq+0x23/0x50 [ 1929.571652][T19878] ? lockdep_hardirqs_on+0x9c/0x150 [ 1929.571666][T19878] ? __pfx_kthread+0x10/0x10 [ 1929.571682][T19878] ret_from_fork+0x3fc/0x770 [ 1929.571697][T19878] ? __pfx_ret_from_fork+0x10/0x10 [ 1929.571715][T19878] ? __switch_to_asm+0x39/0x70 [ 1929.571724][T19878] ? __switch_to_asm+0x33/0x70 [ 1929.571733][T19878] ? __pfx_kthread+0x10/0x10 [ 1929.571744][T19878] ret_from_fork_asm+0x1a/0x30 [ 1929.571765][T19878] [ 1929.571770][T19878] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1929.644416][ T5922] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 1930.280754][T24611] netlink: 'syz.8.4915': attribute type 10 has an invalid length. [ 1930.668637][ T5922] usb 8-1: Using ep0 maxpacket: 32 [ 1930.692433][ T5922] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 1930.712987][ T5922] usb 8-1: config 0 has no interface number 0 [ 1930.743312][ T5922] usb 8-1: config 0 interface 12 has no altsetting 0 [ 1931.000222][ T5922] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1931.014360][ T5922] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.067274][ T5922] usb 8-1: Product: syz [ 1931.071481][ T5922] usb 8-1: Manufacturer: syz [ 1931.182473][ T5922] usb 8-1: SerialNumber: syz [ 1931.207547][ T5922] usb 8-1: config 0 descriptor?? [ 1931.494376][ T5915] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1931.928103][ T5915] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1931.944471][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.956980][ T5915] usb 6-1: Product: syz [ 1931.961153][ T5915] usb 6-1: Manufacturer: syz [ 1931.965771][ T5915] usb 6-1: SerialNumber: syz [ 1931.972836][ T5915] usb 6-1: config 0 descriptor?? [ 1931.986569][ T5915] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1932.584666][T12964] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1932.634592][T22567] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1932.734548][T12964] usb 4-1: Using ep0 maxpacket: 8 [ 1932.743442][T12964] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1932.752444][T12964] usb 4-1: config 0 has no interface number 0 [ 1932.761053][T12964] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1932.778708][T12964] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1932.796900][ T9] usb 6-1: USB disconnect, device number 102 [ 1932.809412][T12964] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1932.828357][T22567] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1932.848609][T12964] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1932.862613][T22567] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1932.876886][T12964] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1932.887606][T22567] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1932.900575][T22567] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1932.906077][ T5922] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1932.917003][ T5922] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 1932.920081][T12964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.925526][ T5922] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1932.943175][T22567] usb 7-1: SerialNumber: syz [ 1933.017520][ T5922] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 1933.031777][T12964] usb 4-1: config 0 descriptor?? [ 1933.053312][T12964] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1933.073975][ T5922] usb 8-1: USB disconnect, device number 96 [ 1933.222517][T22567] usb 7-1: 0:2 : does not exist [ 1933.263397][T22567] usb 7-1: USB disconnect, device number 82 [ 1933.334981][T20465] udevd[20465]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1933.358878][T12964] usb 4-1: USB disconnect, device number 119 [ 1933.422138][T12964] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1933.834634][ T5922] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 1933.994672][ T5922] usb 8-1: Using ep0 maxpacket: 32 [ 1934.009586][ T5922] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1934.034534][T11621] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1934.044706][ T5922] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8347, setting to 1024 [ 1934.064524][ T5922] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1934.104211][ T5922] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1934.129439][ T5922] usb 8-1: config 0 descriptor?? [ 1934.319379][T11621] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1934.339988][T11621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1934.766947][T24657] random: crng reseeded on system resumption [ 1935.302229][T11621] usb 6-1: Product: syz [ 1935.307160][T11621] usb 6-1: Manufacturer: syz [ 1935.311775][T11621] usb 6-1: SerialNumber: syz [ 1935.325092][T11621] usb 6-1: config 0 descriptor?? [ 1935.334684][ T5922] usbhid 8-1:0.0: can't add hid device: -71 [ 1935.340693][ T5922] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1935.492052][ T5922] usb 8-1: USB disconnect, device number 97 [ 1935.779663][ T5915] usb 6-1: USB disconnect, device number 103 [ 1936.661144][ T5915] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 1936.682010][T24674] netlink: 6048 bytes leftover after parsing attributes in process `syz.8.4934'. [ 1936.845050][ T5915] usb 8-1: Using ep0 maxpacket: 32 [ 1936.863304][ T5915] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1936.873654][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.955052][ T5915] usb 8-1: config 0 descriptor?? [ 1936.974565][T21123] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1936.983769][ T5915] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1937.166455][T21123] usb 6-1: Using ep0 maxpacket: 16 [ 1937.187027][T21123] usb 6-1: config 2 has an invalid interface number: 4 but max is 0 [ 1937.219086][T21123] usb 6-1: config 2 has an invalid descriptor of length 64, skipping remainder of the config [ 1937.260672][T21123] usb 6-1: config 2 has no interface number 0 [ 1937.300464][T21123] usb 6-1: config 2 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1937.319509][T21123] usb 6-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=b2.da [ 1937.330302][T21123] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.352543][T21123] usb 6-1: Product: syz [ 1937.367981][T21123] usb 6-1: Manufacturer: syz [ 1937.392754][T21123] usb 6-1: SerialNumber: syz [ 1937.649249][T24690] loop3: detected capacity change from 0 to 40427 [ 1937.676472][T24690] F2FS-fs (loop3): invalid crc value [ 1937.748864][T24690] F2FS-fs (loop3): Start checkpoint disabled! [ 1937.759167][T24690] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1938.166297][T24694] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 1938.746530][ T5915] gspca_vc032x: reg_w err -110 [ 1938.751381][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1938.774188][T17256] kworker/u8:2: attempt to access beyond end of device [ 1938.774188][T17256] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1938.810726][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1938.828398][T17256] kworker/u8:2: attempt to access beyond end of device [ 1938.828398][T17256] loop3: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 1938.837409][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1938.867258][T21123] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1938.867463][T17256] CPU: 0 UID: 0 PID: 17256 Comm: kworker/u8:2 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 1938.867486][T17256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1938.867498][T17256] Workqueue: writeback wb_workfn (flush-7:3) [ 1938.867527][T17256] Call Trace: [ 1938.867534][T17256] [ 1938.867542][T17256] dump_stack_lvl+0x189/0x250 [ 1938.867573][T17256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1938.867594][T17256] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1938.867619][T17256] ? __pfx_queue_work_on+0x10/0x10 [ 1938.867644][T17256] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1938.867665][T17256] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1938.867690][T17256] ? f2fs_hw_is_readonly+0x39b/0x470 [ 1938.867720][T17256] f2fs_handle_critical_error+0x37c/0x540 [ 1938.867751][T17256] f2fs_write_end_io+0x495/0x810 [ 1938.867765][T17256] ? blkg_put+0x22/0x240 [ 1938.867806][T17256] __submit_merged_bio+0x27a/0x6a0 [ 1938.867837][T17256] __submit_merged_write_cond+0x255/0x530 [ 1938.867876][T17256] f2fs_write_data_pages+0x261d/0x3000 [ 1938.867946][T17256] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1938.868065][T17256] ? f2fs_write_meta_pages+0x357/0x450 [ 1938.868101][T17256] ? __lock_acquire+0xab9/0xd20 [ 1938.868127][T17256] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1938.868153][T17256] do_writepages+0x32b/0x550 [ 1938.868182][T17256] ? reacquire_held_locks+0x127/0x1d0 [ 1938.868204][T17256] ? writeback_sb_inodes+0x384/0x1010 [ 1938.868237][T17256] __writeback_single_inode+0x145/0xff0 [ 1938.868259][T17256] ? do_raw_spin_unlock+0x122/0x240 [ 1938.868282][T17256] writeback_sb_inodes+0x6c7/0x1010 [ 1938.868336][T17256] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1938.868409][T17256] ? rcu_is_watching+0x15/0xb0 [ 1938.868443][T17256] wb_writeback+0x43b/0xaf0 [ 1938.868475][T17256] ? queue_io+0x321/0x590 [ 1938.868502][T17256] ? __pfx_wb_writeback+0x10/0x10 [ 1938.868551][T17256] ? _raw_spin_unlock_irq+0x23/0x50 [ 1938.868580][T17256] wb_workfn+0x409/0xef0 [ 1938.868618][T17256] ? __pfx_wb_workfn+0x10/0x10 [ 1938.868644][T17256] ? __lock_acquire+0xab9/0xd20 [ 1938.868677][T17256] ? process_scheduled_works+0x9ef/0x17b0 [ 1938.868707][T17256] ? _raw_spin_unlock_irq+0x23/0x50 [ 1938.868727][T17256] ? process_scheduled_works+0x9ef/0x17b0 [ 1938.868747][T17256] ? process_scheduled_works+0x9ef/0x17b0 [ 1938.868771][T17256] process_scheduled_works+0xade/0x17b0 [ 1938.868828][T17256] ? __pfx_process_scheduled_works+0x10/0x10 [ 1938.868871][T17256] worker_thread+0x8a0/0xda0 [ 1938.868897][T17256] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1938.868935][T17256] ? __kthread_parkme+0x7b/0x200 [ 1938.868970][T17256] kthread+0x711/0x8a0 [ 1938.868992][T17256] ? __pfx_worker_thread+0x10/0x10 [ 1938.869013][T17256] ? __pfx_kthread+0x10/0x10 [ 1938.869033][T17256] ? _raw_spin_unlock_irq+0x23/0x50 [ 1938.869054][T17256] ? lockdep_hardirqs_on+0x9c/0x150 [ 1938.869076][T17256] ? __pfx_kthread+0x10/0x10 [ 1938.869095][T17256] ret_from_fork+0x3fc/0x770 [ 1938.869121][T17256] ? __pfx_ret_from_fork+0x10/0x10 [ 1938.869150][T17256] ? __switch_to_asm+0x39/0x70 [ 1938.869165][T17256] ? __switch_to_asm+0x33/0x70 [ 1938.869180][T17256] ? __pfx_kthread+0x10/0x10 [ 1938.869199][T17256] ret_from_fork_asm+0x1a/0x30 [ 1938.869235][T17256] [ 1938.869243][T17256] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1939.215828][T17256] CPU: 0 UID: 0 PID: 17256 Comm: kworker/u8:2 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 1939.215853][T17256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1939.215864][T17256] Workqueue: writeback wb_workfn (flush-7:3) [ 1939.215891][T17256] Call Trace: [ 1939.215899][T17256] [ 1939.215908][T17256] dump_stack_lvl+0x189/0x250 [ 1939.215937][T17256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1939.215956][T17256] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1939.215976][T17256] ? __pfx_queue_work_on+0x10/0x10 [ 1939.216000][T17256] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1939.216021][T17256] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1939.216044][T17256] ? f2fs_hw_is_readonly+0x39b/0x470 [ 1939.216072][T17256] f2fs_handle_critical_error+0x37c/0x540 [ 1939.216101][T17256] f2fs_write_end_io+0x495/0x810 [ 1939.216117][T17256] ? blkg_put+0x22/0x240 [ 1939.216155][T17256] __submit_merged_bio+0x27a/0x6a0 [ 1939.216181][T17256] __submit_merged_write_cond+0x255/0x530 [ 1939.216211][T17256] f2fs_write_data_pages+0x261d/0x3000 [ 1939.216274][T17256] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1939.216390][T17256] ? f2fs_write_meta_pages+0x357/0x450 [ 1939.216424][T17256] ? __lock_acquire+0xab9/0xd20 [ 1939.216450][T17256] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1939.216473][T17256] do_writepages+0x32b/0x550 [ 1939.216502][T17256] ? reacquire_held_locks+0x127/0x1d0 [ 1939.216524][T17256] ? writeback_sb_inodes+0x384/0x1010 [ 1939.216557][T17256] __writeback_single_inode+0x145/0xff0 [ 1939.216581][T17256] ? do_raw_spin_unlock+0x122/0x240 [ 1939.216603][T17256] writeback_sb_inodes+0x6c7/0x1010 [ 1939.216668][T17256] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1939.216745][T17256] ? rcu_is_watching+0x15/0xb0 [ 1939.216779][T17256] wb_writeback+0x43b/0xaf0 [ 1939.216812][T17256] ? queue_io+0x321/0x590 [ 1939.216838][T17256] ? __pfx_wb_writeback+0x10/0x10 [ 1939.216872][T17256] ? _raw_spin_unlock_irq+0x23/0x50 [ 1939.216902][T17256] wb_workfn+0x409/0xef0 [ 1939.216942][T17256] ? __pfx_wb_workfn+0x10/0x10 [ 1939.216968][T17256] ? __lock_acquire+0xab9/0xd20 [ 1939.217002][T17256] ? process_scheduled_works+0x9ef/0x17b0 [ 1939.217034][T17256] ? _raw_spin_unlock_irq+0x23/0x50 [ 1939.217056][T17256] ? process_scheduled_works+0x9ef/0x17b0 [ 1939.217076][T17256] ? process_scheduled_works+0x9ef/0x17b0 [ 1939.217101][T17256] process_scheduled_works+0xade/0x17b0 [ 1939.217159][T17256] ? __pfx_process_scheduled_works+0x10/0x10 [ 1939.217202][T17256] worker_thread+0x8a0/0xda0 [ 1939.217230][T17256] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1939.217263][T17256] ? __kthread_parkme+0x7b/0x200 [ 1939.217299][T17256] kthread+0x711/0x8a0 [ 1939.217319][T17256] ? __pfx_worker_thread+0x10/0x10 [ 1939.217341][T17256] ? __pfx_kthread+0x10/0x10 [ 1939.217361][T17256] ? _raw_spin_unlock_irq+0x23/0x50 [ 1939.217384][T17256] ? lockdep_hardirqs_on+0x9c/0x150 [ 1939.217407][T17256] ? __pfx_kthread+0x10/0x10 [ 1939.217427][T17256] ret_from_fork+0x3fc/0x770 [ 1939.217454][T17256] ? __pfx_ret_from_fork+0x10/0x10 [ 1939.217483][T17256] ? __switch_to_asm+0x39/0x70 [ 1939.217499][T17256] ? __switch_to_asm+0x33/0x70 [ 1939.217514][T17256] ? __pfx_kthread+0x10/0x10 [ 1939.217532][T17256] ret_from_fork_asm+0x1a/0x30 [ 1939.217570][T17256] [ 1939.217579][T17256] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1939.359253][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1939.656518][T21123] snd-usb-audio 6-1:2.4: probe with driver snd-usb-audio failed with error -2 [ 1939.679237][T21123] usb 6-1: USB disconnect, device number 104 [ 1939.797379][T20465] udevd[20465]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1939.907510][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1939.924378][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1939.935414][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1939.968675][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1939.983833][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1939.999763][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1940.009900][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1940.020012][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1940.068469][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1940.074244][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1940.274748][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1940.281211][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1940.286921][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1940.292309][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 1940.298483][ T5915] gspca_vc032x: Unknown sensor... [ 1940.303602][ T5915] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 1940.318325][ T5915] usb 8-1: USB disconnect, device number 98 [ 1940.334513][T21123] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1940.406942][T24713] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4945'. [ 1940.504651][T21123] usb 6-1: Using ep0 maxpacket: 8 [ 1940.867170][T21123] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1940.962088][T21123] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.984441][T22567] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1940.994210][T21123] usb 6-1: Product: syz [ 1941.007801][T21123] usb 6-1: Manufacturer: syz [ 1941.012424][T21123] usb 6-1: SerialNumber: syz [ 1941.314528][T22567] usb 4-1: Using ep0 maxpacket: 32 [ 1941.332179][T21123] usb 6-1: config 0 descriptor?? [ 1941.347723][T22567] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1941.367005][T22567] usb 4-1: config 1 has no interface number 1 [ 1941.385047][T22567] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1941.428256][T22567] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1941.474432][T12964] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 1941.502016][T22567] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.516900][T22567] usb 4-1: Product: syz [ 1941.521255][T22567] usb 4-1: Manufacturer: syz [ 1941.529136][T22567] usb 4-1: SerialNumber: syz [ 1941.643819][T21123] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1941.697829][T12964] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1941.712824][T12964] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1941.725951][T12964] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1941.903963][T12964] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1941.913204][T12964] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.921627][T12964] usb 9-1: Product: syz [ 1941.925896][T12964] usb 9-1: Manufacturer: syz [ 1941.930637][T12964] usb 9-1: SerialNumber: syz [ 1941.980603][T12964] hub 9-1:1.0: bad descriptor, ignoring hub [ 1942.001630][T12964] hub 9-1:1.0: probe with driver hub failed with error -5 [ 1942.661394][T12964] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 82 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1942.954575][ T5915] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1943.114685][ T5915] usb 7-1: Using ep0 maxpacket: 8 [ 1943.129054][ T5915] usb 7-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1943.148194][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1943.159301][ T5915] usb 7-1: Product: syz [ 1943.163995][ T5915] usb 7-1: Manufacturer: syz [ 1943.168670][ T5915] usb 7-1: SerialNumber: syz [ 1943.184598][ T5915] usb 7-1: config 0 descriptor?? [ 1943.195523][ T5915] usbtest 7-1:0.0: FX2 device [ 1943.200319][ T5915] usbtest 7-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1943.410697][ T5915] usb 7-1: USB disconnect, device number 83 [ 1943.554910][T24715] usb 9-1: reset high-speed USB device number 82 using dummy_hcd [ 1943.684111][T22567] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1943.720396][T21123] usb write operation failed. (-71) [ 1943.742036][T21123] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1943.761852][T24715] usb 9-1: device firmware changed [ 1943.768925][T21123] dvbdev: DVB: registering new adapter (Terratec H7) [ 1943.777806][ T43] usb 9-1: USB disconnect, device number 82 [ 1943.788264][ T43] usblp0: removed [ 1943.792995][T21123] usb 6-1: media controller created [ 1943.803895][T21123] usb read operation failed. (-71) [ 1943.809727][T21123] usb write operation failed. (-71) [ 1943.831694][T22567] usb 4-1: USB disconnect, device number 120 [ 1943.833410][T21123] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1943.892055][T21123] usb 6-1: USB disconnect, device number 105 [ 1943.955674][ T43] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1944.265855][T22567] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 1944.502795][ T43] usb 9-1: device descriptor read/all, error -71 [ 1944.580191][T22567] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1944.741348][T22567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1944.826859][T24758] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4958'. [ 1945.331983][T22567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1945.344488][T22567] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1945.369712][T22567] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1945.398635][T22567] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1945.421360][T22567] usb 4-1: Manufacturer: syz [ 1945.442773][T22567] usb 4-1: config 0 descriptor?? [ 1945.823741][T24767] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.4961'. [ 1945.916453][T22567] rc_core: IR keymap rc-hauppauge not found [ 1945.945571][T24774] netlink: 'syz.7.4964': attribute type 6 has an invalid length. [ 1945.952981][T22567] Registered IR keymap rc-empty [ 1945.953315][T24774] netlink: 'syz.7.4964': attribute type 7 has an invalid length. [ 1945.966284][T22567] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.014765][T22567] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.033852][T24774] netlink: 13182 bytes leftover after parsing attributes in process `syz.7.4964'. [ 1946.039477][T22567] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1946.066326][T22567] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input33 [ 1946.114714][T22567] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.153309][T22567] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.204452][T22567] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.242124][T22567] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.274703][T22567] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.304874][T22567] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.315546][ T43] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1946.324468][T22567] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.374676][T22567] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.414019][T22567] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.464596][T22567] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.506618][T22567] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1946.539147][T22567] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1946.608073][T22567] usb 4-1: USB disconnect, device number 121 [ 1946.634499][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 1946.646077][ T43] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1946.658472][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1946.672220][ T43] usb 7-1: config 0 descriptor?? [ 1946.701210][ T43] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1946.741764][T24793] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4971'. [ 1947.617344][T24801] netlink: 1688 bytes leftover after parsing attributes in process `syz.8.4975'. [ 1948.202696][ T43] gspca_vc032x: reg_w err -71 [ 1948.210954][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1949.233150][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1950.234822][T24828] random: crng reseeded on system resumption [ 1950.296573][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1950.684598][T24829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4986'. [ 1951.043759][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1951.235268][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1951.249568][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1951.290099][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1951.330804][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1951.368961][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1951.438351][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1951.443680][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1951.491031][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1951.492197][T24820] ieee80211 : Failed to add default virtual iface [ 1951.504087][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1951.504103][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1951.504113][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1951.504123][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1951.504133][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1951.504143][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 1951.504153][ T43] gspca_vc032x: Unknown sensor... [ 1951.504230][ T43] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 1951.663530][ T43] usb 7-1: USB disconnect, device number 84 [ 1951.841186][T24841] netlink: 1688 bytes leftover after parsing attributes in process `syz.7.4990'. [ 1951.984431][T22567] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1952.164400][T22567] usb 4-1: Using ep0 maxpacket: 8 [ 1952.191289][T22567] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1952.222441][T22567] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.269363][T22567] usb 4-1: Product: syz [ 1952.279284][T22567] usb 4-1: Manufacturer: syz [ 1952.284065][T22567] usb 4-1: SerialNumber: syz [ 1952.353618][T24863] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4999'. [ 1952.534503][T21123] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1952.724580][T21123] usb 6-1: Using ep0 maxpacket: 32 [ 1952.783269][T21123] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1952.827998][T22567] usb 4-1: config 0 descriptor?? [ 1952.864548][T12964] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1952.881242][T21123] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.009219][T21123] usb 6-1: config 0 descriptor?? [ 1953.019053][T21123] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1953.048267][T22567] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1953.069574][T24865] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5000'. [ 1953.094164][T12964] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1953.119940][T12964] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1953.137059][T12964] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1953.152810][T12964] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1953.170857][T12964] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.206174][T12964] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1953.251928][T12964] usb 7-1: invalid MIDI out EP 0 [ 1953.503629][T12964] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1953.677757][T24875] netlink: 'syz.8.5003': attribute type 6 has an invalid length. [ 1953.704779][T24875] netlink: 'syz.8.5003': attribute type 7 has an invalid length. [ 1953.721796][T24875] netlink: 13182 bytes leftover after parsing attributes in process `syz.8.5003'. [ 1953.743931][T12964] usb 7-1: USB disconnect, device number 85 [ 1953.937791][T24880] netlink: 'syz.7.5007': attribute type 72 has an invalid length. [ 1954.274410][T12964] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 1954.293868][T21123] gspca_vc032x: reg_w err -71 [ 1954.298873][T21123] gspca_vc032x: I2c Bus Busy Wait 00 [ 1954.305085][T22567] usb write operation failed. (-71) [ 1954.305258][T21123] gspca_vc032x: I2c Bus Busy Wait 00 [ 1954.312888][T22567] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1954.316564][T21123] gspca_vc032x: I2c Bus Busy Wait 00 [ 1954.332047][T21123] gspca_vc032x: I2c Bus Busy Wait 00 [ 1954.337920][T21123] gspca_vc032x: I2c Bus Busy Wait 00 [ 1954.343458][T21123] gspca_vc032x: I2c Bus Busy Wait 00 [ 1954.344227][T22567] dvbdev: DVB: registering new adapter (Terratec H7) [ 1954.349780][T21123] gspca_vc032x: I2c Bus Busy Wait 00 [ 1954.362008][T22567] usb 4-1: media controller created [ 1954.362016][T21123] gspca_vc032x: I2c Bus Busy Wait 00 [ 1954.362028][T21123] gspca_vc032x: I2c Bus Busy Wait 00 [ 1954.367934][T22567] usb read operation failed. (-71) [ 1954.372972][T21123] gspca_vc032x: I2c Bus Busy Wait 00 [ 1954.382656][T22567] usb write operation failed. (-71) [ 1954.383324][T21123] gspca_vc032x: I2c Bus Busy Wait 00 [ 1954.392437][T22567] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1954.393830][T21123] gspca_vc032x: I2c Bus Busy Wait 00 [ 1954.411145][T22567] usb 4-1: USB disconnect, device number 122 [ 1954.420854][T21123] gspca_vc032x: I2c Bus Busy Wait 00 [ 1954.426608][T21123] gspca_vc032x: I2c Bus Busy Wait 00 [ 1954.431991][T21123] gspca_vc032x: I2c Bus Busy Wait 00 [ 1954.434918][T12964] usb 9-1: Using ep0 maxpacket: 32 [ 1954.438640][T21123] gspca_vc032x: I2c Bus Busy Wait 00 [ 1954.448813][T21123] gspca_vc032x: I2c Bus Busy Wait 00 [ 1954.455477][T12964] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1954.455731][T21123] gspca_vc032x: I2c Bus Busy Wait 00 [ 1954.484569][T12964] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1954.485624][T21123] gspca_vc032x: Unknown sensor... [ 1954.493545][T12964] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1954.493570][T12964] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.505899][T12964] usb 9-1: config 0 descriptor?? [ 1954.520462][T21123] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 1954.541692][T21123] usb 6-1: USB disconnect, device number 106 [ 1954.772016][T24891] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5012'. [ 1954.904545][T24895] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5011'. [ 1955.712877][T24911] netlink: 'syz.5.5019': attribute type 72 has an invalid length. [ 1955.854475][T12964] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1956.084554][T12964] usb 7-1: Using ep0 maxpacket: 16 [ 1956.094004][T12964] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1956.104824][T12964] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1956.135228][T12964] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1956.147853][T12964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.162470][T12964] usb 7-1: Product: syz [ 1956.168247][T12964] usb 7-1: Manufacturer: syz [ 1956.173014][T12964] usb 7-1: SerialNumber: syz [ 1956.174416][T18582] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1956.186877][T12964] usb 7-1: config 0 descriptor?? [ 1956.345051][T18582] usb 6-1: Using ep0 maxpacket: 16 [ 1956.360759][T18582] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1956.379447][T18582] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1956.394104][T18582] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1956.407727][T18582] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1956.426902][T18582] usb 6-1: config 0 descriptor?? [ 1956.584710][T12964] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1956.759367][T12964] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1956.768684][T12964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.778323][T12964] usb 4-1: Product: syz [ 1956.782929][T12964] usb 4-1: Manufacturer: syz [ 1956.787958][T12964] usb 4-1: SerialNumber: syz [ 1956.795556][T12964] usb 4-1: config 0 descriptor?? [ 1956.809899][T12964] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1956.848786][T18582] hid_parser_main: 20 callbacks suppressed [ 1956.848808][T18582] corsair 0003:1B1C:1B02.001B: unknown main item tag 0x0 [ 1956.862576][T18582] corsair 0003:1B1C:1B02.001B: unknown main item tag 0x0 [ 1956.870229][T18582] corsair 0003:1B1C:1B02.001B: unknown main item tag 0x0 [ 1956.877958][T18582] corsair 0003:1B1C:1B02.001B: unknown main item tag 0x0 [ 1956.890762][T18582] corsair 0003:1B1C:1B02.001B: unknown main item tag 0x0 [ 1956.900373][T18582] corsair 0003:1B1C:1B02.001B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 1957.010562][T12964] gspca_sunplus: reg_r err -32 [ 1957.015850][T12964] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 1957.048087][T18582] corsair 0003:1B1C:1B02.001B: Failed to get K90 initial state (error -71). [ 1957.063399][T18582] usb 6-1: USB disconnect, device number 107 [ 1957.226837][ T43] usb 9-1: USB disconnect, device number 85 [ 1957.280726][T24927] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5024'. [ 1958.147830][ T43] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1958.334435][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 1958.364745][ T43] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1958.377524][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1958.391199][ T43] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1958.400669][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.408794][ T43] usb 6-1: Product: syz [ 1958.413231][ T43] usb 6-1: Manufacturer: syz [ 1958.417888][ T43] usb 6-1: SerialNumber: syz [ 1958.434955][ T43] usb 6-1: config 0 descriptor?? [ 1958.458696][ T43] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1958.475296][ T43] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1958.670590][T18582] usb 7-1: USB disconnect, device number 86 [ 1958.801127][T24947] netlink: 'syz.6.5030': attribute type 72 has an invalid length. [ 1959.062936][ T43] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1959.078491][ T43] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1959.364959][T18582] usb 4-1: USB disconnect, device number 123 [ 1960.112542][ T43] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1960.536327][ T43] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1960.543839][ T43] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1960.557286][ T43] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1960.574936][ T43] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1960.587972][ T43] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1960.648095][ T43] usb 6-1: USB disconnect, device number 108 [ 1960.931386][T24968] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5034'. [ 1961.037286][T22567] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1961.295436][T22567] usb 4-1: Using ep0 maxpacket: 32 [ 1961.308891][T22567] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1961.334028][T22567] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1961.516952][T22567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.547192][T22567] usb 4-1: config 0 descriptor?? [ 1961.735953][T24978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1962.044956][T12964] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 1962.351380][T12964] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1962.370789][T12964] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1962.390385][T12964] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1962.472814][T12964] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1962.521172][T12964] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.573213][T12964] usb 9-1: Product: syz [ 1962.603658][T12964] usb 9-1: Manufacturer: syz [ 1962.625510][T12964] usb 9-1: SerialNumber: syz [ 1962.659855][T12964] hub 9-1:1.0: bad descriptor, ignoring hub [ 1962.673707][T24988] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.5043'. [ 1962.705891][T12964] hub 9-1:1.0: probe with driver hub failed with error -5 [ 1962.895777][T12964] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 86 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1963.181430][T12964] usb 9-1: USB disconnect, device number 86 [ 1963.374609][T18582] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1963.544445][T18582] usb 7-1: Using ep0 maxpacket: 8 [ 1963.558729][T18582] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1963.574118][T18582] usb 7-1: config 0 has no interface number 0 [ 1963.593198][T18582] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1963.619141][T18582] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1963.644349][T18582] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1963.654835][T12964] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 1963.677388][T18582] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1963.707598][T18582] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1963.723750][T18582] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1963.744261][T18582] usb 7-1: config 0 descriptor?? [ 1963.768174][T18582] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1963.817234][T12964] usb 9-1: config 0 has no interfaces? [ 1963.842605][T12964] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1963.885848][T12964] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1963.930172][T12964] usb 9-1: config 0 descriptor?? [ 1964.157430][T12964] usb 9-1: USB disconnect, device number 87 [ 1964.166547][T24973] usblp0: removed [ 1964.510589][T18582] usb 4-1: USB disconnect, device number 124 [ 1964.944950][T12964] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 1964.974647][T18582] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1964.987153][ T43] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1965.105320][T12964] usb 8-1: Using ep0 maxpacket: 32 [ 1965.115920][T12964] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1965.128115][T12964] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8347, setting to 1024 [ 1965.141125][T12964] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1965.151091][T12964] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1965.164535][T18582] usb 4-1: Using ep0 maxpacket: 16 [ 1965.169754][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 1965.170397][T12964] usb 8-1: config 0 descriptor?? [ 1965.186214][T18582] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1965.206794][T18582] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1965.218117][ T43] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1965.229347][ T43] usb 6-1: config 0 has no interface number 0 [ 1965.237829][ T43] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1965.254875][T18582] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1965.270344][ T43] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1965.282118][T18582] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.290321][T18582] usb 4-1: Product: syz [ 1965.298577][ T43] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1965.309716][T18582] usb 4-1: Manufacturer: syz [ 1965.315271][T18582] usb 4-1: SerialNumber: syz [ 1965.321592][ T43] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1965.334684][T21123] usb 9-1: new full-speed USB device number 88 using dummy_hcd [ 1965.343763][T18582] usb 4-1: config 0 descriptor?? [ 1965.362451][T18582] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1965.372278][ T43] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1965.381634][T18582] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1965.389043][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1965.404009][ T43] usb 6-1: config 0 descriptor?? [ 1965.427533][ T43] ldusb 6-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1965.507017][T21123] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1965.517516][T21123] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1965.529623][T21123] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1965.541308][T21123] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1965.551450][T21123] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1965.568030][T21123] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1965.580072][T21123] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1965.592778][T21123] usb 9-1: Product: syz [ 1965.600170][T21123] usb 9-1: Manufacturer: syz [ 1965.605883][T21123] usb 9-1: SerialNumber: syz [ 1965.612038][T12964] savu 0003:1E7D:2D5A.001C: unknown main item tag 0x0 [ 1965.626954][T21123] usb 9-1: config 0 descriptor?? [ 1965.635360][T12964] savu 0003:1E7D:2D5A.001C: item fetching failed at offset 4/8 [ 1965.646955][T12964] savu 0003:1E7D:2D5A.001C: parse failed [ 1965.652747][T12964] savu 0003:1E7D:2D5A.001C: probe with driver savu failed with error -22 [ 1965.695703][ T43] usb 6-1: USB disconnect, device number 109 [ 1965.712141][ T43] ldusb 6-1:0.55: LD USB Device #1 now disconnected [ 1965.833899][ T5915] usb 8-1: USB disconnect, device number 99 [ 1965.857116][T21123] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1965.897495][T21123] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1965.980066][T18582] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1965.988280][T18582] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1966.063262][T21123] radio-si470x 9-1:0.0: software version 0, hardware version 0 [ 1966.071047][T21123] radio-si470x 9-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1966.088852][T21123] radio-si470x 9-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1966.122534][T12964] usb 7-1: USB disconnect, device number 87 [ 1966.138255][T12964] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1966.241568][T25017] syzkaller0: entered promiscuous mode [ 1966.247913][T25017] syzkaller0: entered allmulticast mode [ 1966.265362][T21123] radio-si470x 9-1:0.0: submitting int urb failed (-90) [ 1967.069521][T18582] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1967.345163][T18582] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1967.433512][T18582] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1967.454141][T21123] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1967.462708][T18582] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1967.471776][T21123] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -22 [ 1967.481405][T18582] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1967.488736][T18582] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1967.498360][ C1] raw-gadget.4 gadget.8: ignoring, device is not running [ 1967.505852][ C1] raw-gadget.4 gadget.8: ignoring, device is not running [ 1967.513315][ C1] raw-gadget.4 gadget.8: ignoring, device is not running [ 1967.520821][ C1] raw-gadget.4 gadget.8: ignoring, device is not running [ 1967.553125][T21123] usb 9-1: USB disconnect, device number 88 [ 1967.562842][T18582] usb 4-1: USB disconnect, device number 125 [ 1967.994898][ T5915] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 1968.168424][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1968.201568][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1968.221399][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1968.240176][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1968.273149][ T5915] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1968.283001][ T5915] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1968.293515][ T5915] usb 6-1: Manufacturer: syz [ 1968.303232][ T5915] usb 6-1: config 0 descriptor?? [ 1968.394398][ T2153] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 1968.574945][ T2153] usb 9-1: Using ep0 maxpacket: 32 [ 1968.600496][ T2153] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1968.639603][ T2153] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1968.668757][ T2153] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.827960][ T2153] usb 9-1: config 0 descriptor?? [ 1968.839125][ T5915] rc_core: IR keymap rc-hauppauge not found [ 1968.851916][ T5915] Registered IR keymap rc-empty [ 1969.316086][T25046] random: crng reseeded on system resumption [ 1969.344445][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1969.423132][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1969.736400][ T5915] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1969.781401][ T5915] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input34 [ 1969.894709][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1969.985630][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1970.044503][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1970.098897][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1970.153802][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1970.211225][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1970.254879][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1970.319234][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1970.365997][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1970.404461][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1970.426053][ T5915] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1970.441513][ T5915] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1970.519837][ T5915] usb 6-1: USB disconnect, device number 110 [ 1970.864533][ T9] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 1971.044671][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1971.057210][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1971.072622][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8347, setting to 1024 [ 1971.084719][ T9] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1971.093774][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.123424][ T9] usb 8-1: config 0 descriptor?? [ 1971.144678][ T5915] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1971.316299][ T5915] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1971.333321][ T5915] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1971.342391][ T5915] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1971.353907][ T5915] usb 6-1: config 220 has no interface number 2 [ 1971.360955][ T5915] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1971.393490][ T5915] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1971.401118][ T5915] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1971.423828][ T5915] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1971.437321][ T5915] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1971.446665][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.463492][ T5915] usb 6-1: Product: syz [ 1971.468523][ T5915] usb 6-1: Manufacturer: syz [ 1971.473133][ T5915] usb 6-1: SerialNumber: syz [ 1971.560937][ T9] savu 0003:1E7D:2D5A.001D: item fetching failed at offset 4/8 [ 1971.580220][ T9] savu 0003:1E7D:2D5A.001D: parse failed [ 1971.586489][ T9] savu 0003:1E7D:2D5A.001D: probe with driver savu failed with error -22 [ 1971.716645][ T5915] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1971.723042][ T5915] usb 6-1: No valid video chain found. [ 1971.747268][ T5915] usb 6-1: USB disconnect, device number 111 [ 1971.780988][ T9] usb 8-1: USB disconnect, device number 100 [ 1972.468250][T22567] usb 9-1: USB disconnect, device number 89 [ 1972.634601][ T5915] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1972.864582][T22567] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 1972.865934][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 1972.906162][ T5915] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1972.914279][ T5915] usb 6-1: config 0 has no interface number 0 [ 1972.926279][ T5915] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1972.939131][ T5915] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1973.014974][T22567] usb 9-1: Using ep0 maxpacket: 16 [ 1973.037531][T22567] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1973.064435][T22567] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1973.094237][T22567] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1973.112843][T22567] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.122758][ T5915] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1973.132853][T22567] usb 9-1: Product: syz [ 1973.134396][ T5915] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1973.151383][ T5915] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1973.159470][T22567] usb 9-1: Manufacturer: syz [ 1973.161043][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.177621][T22567] usb 9-1: SerialNumber: syz [ 1973.793326][T22567] usb 9-1: config 0 descriptor?? [ 1973.803269][ T5915] usb 6-1: config 0 descriptor?? [ 1973.808032][T22567] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1973.848319][T22567] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1973.935084][ T5915] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1974.218859][T21123] usb 6-1: USB disconnect, device number 112 [ 1974.229429][T21123] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1974.244554][T12964] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1974.284719][ T5915] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1974.384915][T12964] usb 7-1: device descriptor read/64, error -71 [ 1974.412174][T22567] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1974.420709][T22567] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1974.458242][ T5915] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1974.472422][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.493657][ T5915] usb 4-1: Product: syz [ 1974.506770][ T5915] usb 4-1: Manufacturer: syz [ 1974.511402][ T5915] usb 4-1: SerialNumber: syz [ 1974.529780][ T5915] usb 4-1: config 0 descriptor?? [ 1974.644493][T12964] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1974.797885][T12964] usb 7-1: device descriptor read/64, error -71 [ 1974.938644][T12964] usb usb7-port1: attempt power cycle [ 1975.661138][T25089] random: crng reseeded on system resumption [ 1975.897947][T12964] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1976.055065][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.061402][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.187635][T22567] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 1976.204794][T22567] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 1976.215037][T22567] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1976.232237][T22567] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1976.239911][T12964] usb 7-1: device descriptor read/8, error -71 [ 1976.255444][T22567] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1976.277930][T22567] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 1976.301235][T22567] usb 9-1: USB disconnect, device number 90 [ 1976.365679][ T9] usb 4-1: USB disconnect, device number 126 [ 1976.495982][T12964] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1976.527165][T12964] usb 7-1: device descriptor read/8, error -71 [ 1976.750119][T12964] usb usb7-port1: unable to enumerate USB device [ 1976.759814][T25103] bond1: entered promiscuous mode [ 1976.768810][T25103] bond1: entered allmulticast mode [ 1976.780647][T25103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1976.804761][ T5894] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1976.895204][T25110] loop7: detected capacity change from 0 to 512 [ 1976.907228][T25110] EXT4-fs: Ignoring removed orlov option [ 1976.913009][T25110] ext4: Unknown parameter 'smackfshat' [ 1977.490443][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 1977.512313][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1977.562450][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8347, setting to 1024 [ 1977.721817][ T5894] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1978.301261][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1978.313443][ T5894] usb 6-1: config 0 descriptor?? [ 1978.337654][T25101] bridge2: entered promiscuous mode [ 1978.364679][T25101] bridge2: entered allmulticast mode [ 1978.372496][T25101] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1978.782909][ T5894] savu 0003:1E7D:2D5A.001E: item fetching failed at offset 4/8 [ 1978.826264][ T5894] savu 0003:1E7D:2D5A.001E: parse failed [ 1978.831998][ T5894] savu 0003:1E7D:2D5A.001E: probe with driver savu failed with error -22 [ 1978.934621][T21123] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1978.982822][ T5894] usb 6-1: USB disconnect, device number 113 [ 1979.054431][ T2153] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 1979.104538][T21123] usb 4-1: device descriptor read/64, error -71 [ 1979.235548][ T2153] usb 8-1: Using ep0 maxpacket: 16 [ 1979.243904][ T2153] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1979.268302][ T2153] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1979.296982][ T2153] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1979.322393][ T2153] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.341470][ T2153] usb 8-1: Product: syz [ 1979.351503][ T2153] usb 8-1: Manufacturer: syz [ 1979.357920][ T2153] usb 8-1: SerialNumber: syz [ 1979.394413][T21123] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1979.527727][ T2153] usb 8-1: config 0 descriptor?? [ 1979.538579][ T2153] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1979.549666][T21123] usb 4-1: device descriptor read/64, error -71 [ 1979.666457][T25145] loop6: detected capacity change from 0 to 512 [ 1979.678640][T25145] EXT4-fs: Ignoring removed orlov option [ 1979.684482][T25145] ext4: Unknown parameter 'smackfshat' [ 1979.745348][ T9] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 1980.098091][ T2153] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 1980.144744][ T9] usb 9-1: device descriptor read/64, error -71 [ 1980.209660][T21123] usb usb4-port1: attempt power cycle [ 1980.504388][ T9] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 1980.588247][ T2153] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1980.598610][ T2153] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 1980.644679][T21123] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1980.721947][T21123] usb 4-1: device descriptor read/8, error -71 [ 1981.004779][T21123] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1981.075560][T21123] usb 4-1: device descriptor read/8, error -71 [ 1981.126479][ T9] usb 9-1: device descriptor read/64, error -71 [ 1981.132833][T12964] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1981.251199][T21123] usb usb4-port1: unable to enumerate USB device [ 1981.297329][ T9] usb usb9-port1: attempt power cycle [ 1981.395491][T12964] usb 6-1: Using ep0 maxpacket: 32 [ 1981.402532][T12964] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1981.413579][T12964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.430373][T12964] usb 6-1: config 0 descriptor?? [ 1981.439019][T12964] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1981.647832][T12964] gspca_vc032x: reg_r err -32 [ 1981.652652][T12964] gspca_vc032x: I2c Bus Busy Wait 00 [ 1981.668080][ T9] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 1981.679858][ T2153] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 1981.690729][ T2153] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 1981.691785][T12964] gspca_vc032x: I2c Bus Busy Wait 00 [ 1981.698529][ T2153] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 1981.712476][ T2153] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 1981.718906][T12964] gspca_vc032x: I2c Bus Busy Wait 00 [ 1981.718923][T12964] gspca_vc032x: I2c Bus Busy Wait 00 [ 1981.718932][T12964] gspca_vc032x: I2c Bus Busy Wait 00 [ 1981.718942][T12964] gspca_vc032x: I2c Bus Busy Wait 00 [ 1981.718952][T12964] gspca_vc032x: I2c Bus Busy Wait 00 [ 1981.718961][T12964] gspca_vc032x: I2c Bus Busy Wait 00 [ 1981.718971][T12964] gspca_vc032x: I2c Bus Busy Wait 00 [ 1981.718981][T12964] gspca_vc032x: I2c Bus Busy Wait 00 [ 1981.718991][T12964] gspca_vc032x: I2c Bus Busy Wait 00 [ 1981.719001][T12964] gspca_vc032x: I2c Bus Busy Wait 00 [ 1981.719011][T12964] gspca_vc032x: I2c Bus Busy Wait 00 [ 1981.719021][T12964] gspca_vc032x: I2c Bus Busy Wait 00 [ 1981.719031][T12964] gspca_vc032x: I2c Bus Busy Wait 00 [ 1981.719041][T12964] gspca_vc032x: I2c Bus Busy Wait 00 [ 1981.719051][T12964] gspca_vc032x: I2c Bus Busy Wait 00 [ 1981.719060][T12964] gspca_vc032x: I2c Bus Busy Wait 00 [ 1981.719070][T12964] gspca_vc032x: Unknown sensor... [ 1981.719146][T12964] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 1981.736755][ T9] usb 9-1: device descriptor read/8, error -71 [ 1981.749052][ T2153] em28xx 8-1:0.0: couldn't setup AC97 register 54 [ 1981.848259][ T2153] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 1981.858268][T25170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5101'. [ 1981.956528][ T2153] usb 8-1: USB disconnect, device number 101 [ 1982.044685][ T9] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 1982.075203][ T9] usb 9-1: device descriptor read/8, error -71 [ 1982.184668][ T9] usb usb9-port1: unable to enumerate USB device [ 1983.275373][T25185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1984.296097][ T2153] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 1984.477409][ T2153] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1984.515845][ T2153] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1984.620452][ T2153] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1984.695036][ T2153] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1984.705352][ T2153] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1984.713509][ T2153] usb 9-1: Product: syz [ 1984.732767][ T2153] usb 9-1: Manufacturer: syz [ 1984.784925][T21123] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1984.793077][ T2153] usb 9-1: SerialNumber: syz [ 1984.813187][ T2153] hub 9-1:1.0: bad descriptor, ignoring hub [ 1984.820386][ T2153] hub 9-1:1.0: probe with driver hub failed with error -5 [ 1984.865072][ T5915] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 1984.927465][T21123] usb 7-1: device descriptor read/64, error -71 [ 1984.957071][ T5894] usb 6-1: USB disconnect, device number 114 [ 1985.024629][ T5915] usb 8-1: Using ep0 maxpacket: 8 [ 1985.051343][ T2153] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 95 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1985.073684][ T5915] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1985.086214][ T5915] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.103485][ T5915] usb 8-1: Product: syz [ 1985.113479][ T5915] usb 8-1: Manufacturer: syz [ 1985.128721][ T5915] usb 8-1: SerialNumber: syz [ 1985.146914][ T5915] usb 8-1: config 0 descriptor?? [ 1985.176588][T21123] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1985.234667][T18582] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1985.361602][ T5915] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1985.369649][T21123] usb 7-1: device descriptor read/64, error -71 [ 1985.476716][T18582] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1985.487678][T21123] usb usb7-port1: attempt power cycle [ 1985.503098][T18582] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1985.514465][T18582] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1985.523607][T18582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1985.532674][T18582] usb 4-1: SerialNumber: syz [ 1985.768678][T18582] usb 4-1: cannot find UAC_HEADER [ 1985.816361][T25227] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.5118'. [ 1985.827978][T18582] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1985.837729][T21123] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1985.852397][T18582] usb 4-1: USB disconnect, device number 5 [ 1985.869673][T21123] usb 7-1: device descriptor read/8, error -71 [ 1985.901537][T20465] udevd[20465]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1985.997025][T25184] usb 9-1: reset high-speed USB device number 95 using dummy_hcd [ 1986.039252][T25233] netlink: 'syz.5.5119': attribute type 72 has an invalid length. [ 1986.128049][T21123] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1986.270849][T21123] usb 7-1: device descriptor read/8, error -71 [ 1986.279490][T25184] usb 9-1: device firmware changed [ 1986.315942][ T43] usb 9-1: USB disconnect, device number 95 [ 1986.400456][T21123] usb usb7-port1: unable to enumerate USB device [ 1986.891495][ T43] usblp0: removed [ 1986.924727][ T5915] usb write operation failed. (-71) [ 1986.944997][ T5915] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1986.967667][ T5915] dvbdev: DVB: registering new adapter (Terratec H7) [ 1986.981307][ T5915] usb 8-1: media controller created [ 1987.094457][ T5915] usb read operation failed. (-71) [ 1987.112984][ T5915] usb write operation failed. (-71) [ 1987.128977][ T5915] dvb_usb_az6007 8-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1987.153334][ T5915] usb 8-1: USB disconnect, device number 102 [ 1987.163354][ T43] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 1987.840927][ T2153] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1988.015153][ T2153] usb 6-1: Using ep0 maxpacket: 32 [ 1988.045311][ T2153] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1988.069432][ T2153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.296717][ T2153] usb 6-1: config 0 descriptor?? [ 1988.307090][ T2153] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1988.569636][ T2153] gspca_vc032x: reg_r err -32 [ 1988.651642][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 1988.766430][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 1988.870555][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 1988.898240][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 1988.911173][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 1988.916820][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 1989.018780][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 1989.024087][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 1989.029583][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 1989.034910][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 1989.040194][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 1989.045532][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 1989.050818][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 1989.073491][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 1989.095868][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 1989.101191][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 1989.133937][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 1989.164400][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 1989.169737][ T2153] gspca_vc032x: Unknown sensor... [ 1989.182762][ T2153] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 1989.204896][ T5894] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1989.395762][ T5894] usb 7-1: Using ep0 maxpacket: 32 [ 1989.431439][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1989.464149][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8347, setting to 1024 [ 1989.500602][ T5894] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1989.528303][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1989.552435][ T5894] usb 7-1: config 0 descriptor?? [ 1989.992122][ T5894] savu 0003:1E7D:2D5A.001F: item fetching failed at offset 4/8 [ 1990.032946][ T5894] savu 0003:1E7D:2D5A.001F: parse failed [ 1990.050505][ T5894] savu 0003:1E7D:2D5A.001F: probe with driver savu failed with error -22 [ 1990.114741][ T2153] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 1990.185452][ T5894] usb 7-1: USB disconnect, device number 96 [ 1990.254381][ T2153] usb 9-1: device descriptor read/64, error -71 [ 1990.504734][ T2153] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 1990.658770][ T2153] usb 9-1: device descriptor read/64, error -71 [ 1990.848722][ T2153] usb usb9-port1: attempt power cycle [ 1990.976738][T25344] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5146'. [ 1991.194682][ T2153] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 1991.327744][ T2153] usb 9-1: device descriptor read/8, error -71 [ 1991.558994][ T5894] usb 6-1: USB disconnect, device number 115 [ 1991.724474][ T2153] usb 9-1: new high-speed USB device number 100 using dummy_hcd [ 1991.732667][ T5915] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1991.785606][ T2153] usb 9-1: device descriptor read/8, error -71 [ 1991.902485][ T2153] usb usb9-port1: unable to enumerate USB device [ 1991.923714][ T5915] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1991.953335][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.972895][ T5915] usb 4-1: Product: syz [ 1991.977233][ T5915] usb 4-1: Manufacturer: syz [ 1991.982006][ T5915] usb 4-1: SerialNumber: syz [ 1991.998645][ T5915] usb 4-1: config 0 descriptor?? [ 1992.019546][ T5915] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1992.244839][ T5894] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1992.424950][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 1992.451338][ T5894] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1992.459735][ T5894] usb 6-1: config 0 has no interface number 0 [ 1992.475169][ T5894] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1992.493080][ T5894] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1992.511206][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.527533][ T5894] usb 6-1: Product: syz [ 1992.531734][ T5894] usb 6-1: Manufacturer: syz [ 1992.540156][ T5894] usb 6-1: SerialNumber: syz [ 1992.552273][ T5894] usb 6-1: config 0 descriptor?? [ 1992.865872][T25379] netlink: 'syz.6.5158': attribute type 10 has an invalid length. [ 1994.291607][T12964] usb 4-1: USB disconnect, device number 6 [ 1994.492684][T25393] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5161'. [ 1995.057237][T25392] loop6: detected capacity change from 0 to 256 [ 1995.073429][ T5894] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1995.125460][ T5894] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1995.133480][ T5894] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1995.283680][ T5894] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1995.747937][ T5894] usb 6-1: USB disconnect, device number 116 [ 1996.454383][ T5915] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 1996.462290][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 1996.824418][ T5915] usb 9-1: device descriptor read/64, error -32 [ 1996.994533][ T43] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1997.114873][ T5915] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 1997.548937][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1997.559189][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1997.578879][ T43] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1997.603939][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1997.624353][ T43] usb 4-1: SerialNumber: syz [ 1997.638284][ T5915] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1997.647575][ T5915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.681442][ T5915] usb 9-1: Product: syz [ 1997.694074][ T5915] usb 9-1: Manufacturer: syz [ 1997.699459][ T5915] usb 9-1: SerialNumber: syz [ 1997.715577][ T5915] usb 9-1: config 0 descriptor?? [ 1997.893414][ T43] usb 4-1: cannot find UAC_HEADER [ 1997.998683][ T43] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1998.178626][ T43] usb 4-1: USB disconnect, device number 7 [ 1998.298862][T25436] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5174'. [ 1998.823108][T20465] udevd[20465]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1998.842619][T25440] loop7: detected capacity change from 0 to 256 [ 1999.074534][T22567] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1999.189012][T12964] usb 9-1: USB disconnect, device number 102 [ 1999.814787][T22567] usb 6-1: Using ep0 maxpacket: 32 [ 1999.827612][T22567] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1999.878065][T22567] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8347, setting to 1024 [ 2000.039716][T22567] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2000.049007][T22567] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.061070][T22567] usb 6-1: config 0 descriptor?? [ 2000.264552][T25457] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5182'. [ 2000.474658][ T5894] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2000.561764][T22567] usbhid 6-1:0.0: can't add hid device: -71 [ 2000.570326][T22567] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2000.601918][T22567] usb 6-1: USB disconnect, device number 117 [ 2000.644575][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 2000.663986][ T5894] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 2000.682121][ T5894] usb 4-1: config 0 has no interface number 0 [ 2000.692280][ T5894] usb 4-1: config 0 interface 12 has no altsetting 0 [ 2000.714672][ T5894] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2000.723749][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.737093][ T5894] usb 4-1: Product: syz [ 2000.743270][ T5894] usb 4-1: Manufacturer: syz [ 2000.753391][ T5894] usb 4-1: SerialNumber: syz [ 2000.768590][ T5894] usb 4-1: config 0 descriptor?? [ 2000.934562][ T43] usb 8-1: new full-speed USB device number 103 using dummy_hcd [ 2001.116952][ T43] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2001.180373][ T43] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2001.237463][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2001.268194][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2001.300902][ T43] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2001.357192][ T43] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2001.396599][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2001.510200][ T43] usb 8-1: Product: syz [ 2001.524254][ T43] usb 8-1: Manufacturer: syz [ 2001.539984][ T43] usb 8-1: SerialNumber: syz [ 2001.573641][ T43] usb 8-1: config 0 descriptor?? [ 2001.807208][ T43] radio-si470x 8-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2001.838069][ T43] radio-si470x 8-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2002.009852][ T43] radio-si470x 8-1:0.0: software version 0, hardware version 0 [ 2002.087001][ T43] radio-si470x 8-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2002.130319][ T43] radio-si470x 8-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2002.153637][T25478] netlink: 1624 bytes leftover after parsing attributes in process `syz.8.5190'. [ 2002.241774][ T43] radio-si470x 8-1:0.0: submitting int urb failed (-90) [ 2002.574644][T22567] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 2002.744953][T22567] usb 7-1: Using ep0 maxpacket: 8 [ 2003.248464][ T43] radio-si470x 8-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 2003.260666][ T43] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -22 [ 2003.262077][T22567] usb 7-1: no configurations [ 2003.276848][T22567] usb 7-1: can't read configurations, error -22 [ 2003.285481][ T5894] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 2003.312397][ T43] usb 8-1: USB disconnect, device number 103 [ 2003.354618][ T5894] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 2003.374497][ T5894] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2003.426994][ T5894] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 2003.454658][ T5894] usb 4-1: USB disconnect, device number 8 [ 2003.494546][T22567] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 2003.699585][T16457] Bluetooth: hci2: command 0x0406 tx timeout [ 2003.748040][T25490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5194'. [ 2003.774755][T22567] usb 7-1: Using ep0 maxpacket: 8 [ 2003.783514][T22567] usb 7-1: no configurations [ 2003.788562][T22567] usb 7-1: can't read configurations, error -22 [ 2003.801404][T22567] usb usb7-port1: attempt power cycle [ 2004.013485][T25499] vlan3: entered promiscuous mode [ 2004.034368][T25499] vlan0: entered promiscuous mode [ 2004.284424][T22567] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 2004.318232][T22567] usb 7-1: Using ep0 maxpacket: 8 [ 2004.324213][T22567] usb 7-1: no configurations [ 2004.330154][T22567] usb 7-1: can't read configurations, error -22 [ 2004.644396][ T5894] usb 8-1: new high-speed USB device number 104 using dummy_hcd [ 2004.774400][T22567] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 2004.808806][T22567] usb 7-1: Using ep0 maxpacket: 8 [ 2004.816332][T22567] usb 7-1: no configurations [ 2004.821194][T22567] usb 7-1: can't read configurations, error -22 [ 2004.835621][T22567] usb usb7-port1: unable to enumerate USB device [ 2004.874384][ T5894] usb 8-1: Using ep0 maxpacket: 32 [ 2004.889124][ T5894] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2004.914629][ T5894] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8347, setting to 1024 [ 2004.945100][ T5894] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2004.983570][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2005.005760][ T5894] usb 8-1: config 0 descriptor?? [ 2005.424914][ T5894] usbhid 8-1:0.0: can't add hid device: -71 [ 2005.433520][ T5894] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2005.478902][ T5894] usb 8-1: USB disconnect, device number 104 [ 2005.587997][T25513] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.5202'. [ 2005.737917][T25522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5205'. [ 2006.250228][T25527] random: crng reseeded on system resumption [ 2007.234884][ T43] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 2007.334639][ T5915] usb 9-1: new high-speed USB device number 103 using dummy_hcd [ 2007.415127][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 2007.438500][ T43] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 2007.463665][ T43] usb 6-1: config 0 has no interface number 0 [ 2007.484147][ T43] usb 6-1: config 0 interface 12 has no altsetting 0 [ 2007.520731][ T43] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2007.539393][ T5915] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2007.571440][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.591170][ T5915] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2007.620508][ T43] usb 6-1: Product: syz [ 2007.632964][ T5915] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2007.652288][ T43] usb 6-1: Manufacturer: syz [ 2007.657109][ T9] usb 8-1: new high-speed USB device number 105 using dummy_hcd [ 2007.673946][ T43] usb 6-1: SerialNumber: syz [ 2007.682657][ T5915] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2007.705685][ T43] usb 6-1: config 0 descriptor?? [ 2007.716079][ T5915] usb 9-1: SerialNumber: syz [ 2007.814423][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 2007.835175][ T9] usb 8-1: no configurations [ 2007.839856][ T9] usb 8-1: can't read configurations, error -22 [ 2007.951735][ T5915] usb 9-1: cannot find UAC_HEADER [ 2007.986322][ T9] usb 8-1: new high-speed USB device number 106 using dummy_hcd [ 2008.035248][ T5915] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2008.084737][ T5915] usb 9-1: USB disconnect, device number 103 [ 2008.119329][T13160] udevd[13160]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2008.174615][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 2008.187478][ T9] usb 8-1: no configurations [ 2008.204625][ T9] usb 8-1: can't read configurations, error -22 [ 2008.243310][ T9] usb usb8-port1: attempt power cycle [ 2008.594681][ T9] usb 8-1: new high-speed USB device number 107 using dummy_hcd [ 2008.625846][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 2008.635276][ T9] usb 8-1: no configurations [ 2008.639890][ T9] usb 8-1: can't read configurations, error -22 [ 2008.652981][T25560] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5218'. [ 2008.755097][T25564] netlink: 'syz.6.5220': attribute type 6 has an invalid length. [ 2008.763320][T25564] netlink: 'syz.6.5220': attribute type 7 has an invalid length. [ 2008.764877][ T5894] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2008.776993][T25564] netlink: 13182 bytes leftover after parsing attributes in process `syz.6.5220'. [ 2008.790087][ T9] usb 8-1: new high-speed USB device number 108 using dummy_hcd [ 2008.817942][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 2008.824820][ T9] usb 8-1: no configurations [ 2008.830059][ T9] usb 8-1: can't read configurations, error -22 [ 2008.849132][ T9] usb usb8-port1: unable to enumerate USB device [ 2008.960141][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 2008.980010][ T5894] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 2009.009222][ T5894] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2009.033757][ T5894] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2009.053450][ T5894] usb 4-1: config 1 has no interface number 0 [ 2009.060328][ T5894] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2009.563884][ T5894] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2009.581470][ T5894] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2009.590608][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.615141][ T5894] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 2009.814794][ T5894] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 2010.005078][T25580] netlink: 'syz.8.5225': attribute type 10 has an invalid length. [ 2010.043305][ T43] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 2010.053917][ T43] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 2010.067883][ T43] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2010.075924][ T43] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 2010.107054][ T43] usb 6-1: USB disconnect, device number 118 [ 2010.318144][ T2153] usb 4-1: USB disconnect, device number 9 [ 2010.332540][ T2153] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 2011.044375][ T43] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 2011.276146][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 2011.287617][ T43] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 2011.299844][ T43] usb 6-1: config 0 has no interface number 0 [ 2011.317597][ T43] usb 6-1: config 0 interface 12 has no altsetting 0 [ 2011.362591][ T43] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2011.372308][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2011.395939][T25593] netlink: 'syz.7.5232': attribute type 1 has an invalid length. [ 2011.404921][ T43] usb 6-1: Product: syz [ 2011.409100][ T43] usb 6-1: Manufacturer: syz [ 2011.413695][ T43] usb 6-1: SerialNumber: syz [ 2011.448763][ T43] usb 6-1: config 0 descriptor?? [ 2011.449199][T25599] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5232'. [ 2011.457775][T25593] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2011.524645][ T5915] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2011.536872][T25599] dummy0: entered allmulticast mode [ 2011.882568][ T5915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2011.988806][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2012.126938][ T5915] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2012.247267][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2012.274327][ T5915] usb 4-1: SerialNumber: syz [ 2012.304632][ T5894] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 2012.392550][T25613] Bluetooth: MGMT ver 1.23 [ 2012.464919][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 2012.503898][ T5915] usb 4-1: 0:2 : does not exist [ 2012.509129][ T5894] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2012.509155][ T5894] usb 7-1: config 0 has no interfaces? [ 2012.520350][ T5894] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2012.520380][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.520399][ T5894] usb 7-1: Product: syz [ 2012.520414][ T5894] usb 7-1: Manufacturer: syz [ 2012.520428][ T5894] usb 7-1: SerialNumber: syz [ 2012.523383][ T5894] usb 7-1: config 0 descriptor?? [ 2012.624864][ T5915] usb 4-1: USB disconnect, device number 10 [ 2012.697691][T13160] udevd[13160]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2013.277844][T25620] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2013.554511][ T5894] usb 9-1: new high-speed USB device number 104 using dummy_hcd [ 2013.733400][ T5894] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2013.755730][ T5894] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2013.801121][T22567] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2013.841794][ T5894] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2013.876355][ T5894] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2013.889960][ T5894] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.898527][ T5894] usb 9-1: Product: syz [ 2013.905316][ T5894] usb 9-1: Manufacturer: syz [ 2013.910128][ T5894] usb 9-1: SerialNumber: syz [ 2013.930707][ T5894] hub 9-1:1.0: bad descriptor, ignoring hub [ 2013.939041][ T5894] hub 9-1:1.0: probe with driver hub failed with error -5 [ 2013.994636][T22567] usb 4-1: Using ep0 maxpacket: 32 [ 2014.006100][T22567] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2014.020839][T22567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2014.091015][T22567] usb 4-1: config 0 descriptor?? [ 2014.108896][T22567] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2014.135851][ T5894] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 104 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2014.548999][ T43] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2014.556689][ T43] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 2014.580614][ T43] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2014.598862][ T43] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 2014.619797][ T43] usb 6-1: USB disconnect, device number 119 [ 2014.676532][ T9] usb 7-1: USB disconnect, device number 101 [ 2014.796972][T25618] usb 9-1: reset high-speed USB device number 104 using dummy_hcd [ 2014.884439][ T5894] usb 8-1: new high-speed USB device number 109 using dummy_hcd [ 2014.955215][T25618] usb 9-1: device firmware changed [ 2014.973585][T12964] usb 9-1: USB disconnect, device number 104 [ 2015.005551][T12964] usblp0: removed [ 2015.069777][ T5894] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2015.084632][ T5894] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2015.104527][ T5894] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2015.118918][T22567] gspca_vc032x: reg_w err -71 [ 2015.123679][T22567] gspca_vc032x: I2c Bus Busy Wait 00 [ 2015.147830][T22567] gspca_vc032x: I2c Bus Busy Wait 00 [ 2015.153294][ T5894] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2015.162749][T12964] usb 9-1: new high-speed USB device number 105 using dummy_hcd [ 2015.170816][T22567] gspca_vc032x: I2c Bus Busy Wait 00 [ 2015.176568][T22567] gspca_vc032x: I2c Bus Busy Wait 00 [ 2015.181984][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2015.216836][T22567] gspca_vc032x: I2c Bus Busy Wait 00 [ 2015.238837][T22567] gspca_vc032x: I2c Bus Busy Wait 00 [ 2015.263601][T22567] gspca_vc032x: I2c Bus Busy Wait 00 [ 2015.272841][ T5894] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 2015.284370][T22567] gspca_vc032x: I2c Bus Busy Wait 00 [ 2015.289823][T22567] gspca_vc032x: I2c Bus Busy Wait 00 [ 2015.306654][ T5894] usb 8-1: invalid MIDI out EP 0 [ 2015.311624][T22567] gspca_vc032x: I2c Bus Busy Wait 00 [ 2015.328993][T22567] gspca_vc032x: I2c Bus Busy Wait 00 [ 2015.343906][T22567] gspca_vc032x: I2c Bus Busy Wait 00 [ 2015.481030][T12964] usb 9-1: config 0 has no interfaces? [ 2015.501299][T22567] gspca_vc032x: I2c Bus Busy Wait 00 [ 2015.509683][T12964] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2016.114176][T22567] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.119586][T22567] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.125217][T12964] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.133212][T22567] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.138638][T22567] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.143930][T22567] gspca_vc032x: I2c Bus Busy Wait 00 [ 2016.188127][T22567] gspca_vc032x: Unknown sensor... [ 2016.193947][T12964] usb 9-1: config 0 descriptor?? [ 2016.303486][T22567] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 2016.383551][T22567] usb 4-1: USB disconnect, device number 11 [ 2016.392225][ T5894] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2016.592351][ T5894] usb 8-1: USB disconnect, device number 109 [ 2016.643206][T12964] usb 9-1: can't set config #0, error -71 [ 2016.682005][T12964] usb 9-1: USB disconnect, device number 105 [ 2017.124578][T12964] usb 9-1: new high-speed USB device number 106 using dummy_hcd [ 2017.381839][T12964] usb 9-1: Using ep0 maxpacket: 16 [ 2017.396055][T12964] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2017.414399][T12964] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2018.154424][ T5915] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2018.180179][T12964] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2018.198517][T12964] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.206749][T12964] usb 9-1: Product: syz [ 2018.212430][T12964] usb 9-1: Manufacturer: syz [ 2018.314582][T12964] usb 9-1: SerialNumber: syz [ 2018.351204][T12964] usb 9-1: config 0 descriptor?? [ 2018.378627][T12964] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2018.393935][T12964] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 2018.394396][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 2018.418683][ T5915] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2018.433834][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.495279][ T5915] usb 4-1: config 0 descriptor?? [ 2018.515148][ T5915] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2018.711944][ T5915] gspca_vc032x: reg_r err -32 [ 2018.735570][ T43] usb 8-1: new high-speed USB device number 110 using dummy_hcd [ 2018.743557][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 2018.760196][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 2018.778346][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 2018.796549][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 2018.811695][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 2018.823790][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 2018.840888][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 2018.853417][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 2018.865046][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 2018.871296][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 2018.882195][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 2018.887968][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 2018.893353][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 2018.899630][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 2018.912656][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 2018.955746][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 2018.965733][T25695] netlink: 'syz.6.5267': attribute type 13 has an invalid length. [ 2018.979767][T25695] netlink: 'syz.6.5267': attribute type 17 has an invalid length. [ 2018.987765][T12964] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 2018.988701][T12964] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 2018.994686][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2019.024592][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.034604][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.051641][ T5915] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.057814][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8347, setting to 1024 [ 2019.085286][ T5915] gspca_vc032x: Unknown sensor... [ 2019.104795][ T5915] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 2019.117437][ T43] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2019.206062][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2019.359493][ T43] usb 8-1: config 0 descriptor?? [ 2019.626308][T12964] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 2019.664003][T12964] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 2019.728601][T12964] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 2019.753735][T12964] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 2019.771618][T12964] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 2019.780756][ T43] usbhid 8-1:0.0: can't add hid device: -71 [ 2019.801308][ T43] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2019.827099][ T43] usb 8-1: USB disconnect, device number 110 [ 2019.864015][T12964] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 2019.902085][T25695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2019.924848][T12964] usb 9-1: USB disconnect, device number 106 [ 2021.704491][T12964] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 2021.731879][T25729] random: crng reseeded on system resumption [ 2021.743906][ T43] usb 6-1: new full-speed USB device number 120 using dummy_hcd [ 2022.593493][ T5915] usb 4-1: USB disconnect, device number 12 [ 2022.638950][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2022.672857][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2022.752588][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2022.788897][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2022.797923][T12964] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2022.811462][T12964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.820779][T12964] usb 7-1: Product: syz [ 2022.854549][ T43] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2022.898099][ T43] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2022.912387][T12964] usb 7-1: Manufacturer: syz [ 2022.919152][T12964] usb 7-1: SerialNumber: syz [ 2022.933082][T12964] usb 7-1: config 0 descriptor?? [ 2022.946087][ T43] usb 6-1: Manufacturer: syz [ 2022.969927][T12964] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2022.985783][ T43] usb 6-1: config 0 descriptor?? [ 2023.314328][ T43] rc_core: IR keymap rc-hauppauge not found [ 2023.320263][ T43] Registered IR keymap rc-empty [ 2023.334582][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2023.376342][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2023.406601][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2023.445158][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input35 [ 2023.463079][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2023.489451][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2023.527762][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2023.554645][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2023.584477][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2023.614557][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2023.657129][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2023.686732][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2023.714731][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2023.765038][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2023.798649][ T43] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2023.825055][ T43] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2023.848317][ T43] usb 6-1: USB disconnect, device number 120 [ 2024.394528][ T43] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 2024.446704][ T5915] usb 7-1: USB disconnect, device number 102 [ 2024.615297][T25769] netlink: 'syz.8.5288': attribute type 13 has an invalid length. [ 2024.616366][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 2024.627441][T25769] netlink: 'syz.8.5288': attribute type 17 has an invalid length. [ 2024.633788][ T43] usb 6-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 2024.645882][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 2024.653882][ T43] usb 6-1: Product: syz [ 2024.670767][ T43] usb 6-1: Manufacturer: syz [ 2024.679657][ T43] usb 6-1: SerialNumber: syz [ 2024.719105][ T43] usb 6-1: config 0 descriptor?? [ 2024.734604][ T43] usbtest 6-1:0.0: FX2 device [ 2024.739315][ T43] usbtest 6-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 2024.915922][T12964] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 2025.099816][T12964] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2025.110037][T12964] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2025.120575][T12964] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2025.139059][T12964] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2025.147503][T12964] usb 7-1: SerialNumber: syz [ 2025.390581][T12964] usb 7-1: cannot find UAC_HEADER [ 2025.414168][T12964] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2025.428339][T12964] usb 7-1: USB disconnect, device number 103 [ 2025.617892][T20465] udevd[20465]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2026.199600][T25753] syzkaller0: entered promiscuous mode [ 2026.206485][T25753] syzkaller0: entered allmulticast mode [ 2026.279327][T25769] bond0: left promiscuous mode [ 2026.284133][T25769] bond_slave_0: left promiscuous mode [ 2026.290002][T25769] bond_slave_1: left promiscuous mode [ 2026.295606][T25769] bridge1: left promiscuous mode [ 2026.300671][T25769] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 2026.308881][T25769] bond0: left allmulticast mode [ 2026.313774][T25769] bond_slave_0: left allmulticast mode [ 2026.319328][T25769] bond_slave_1: left allmulticast mode [ 2026.326113][T25769] bridge1: left allmulticast mode [ 2026.331157][T25769] netdevsim netdevsim8 netdevsim0: left allmulticast mode [ 2026.348660][T25769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2026.369993][T12964] usb 6-1: USB disconnect, device number 121 [ 2027.524667][T12964] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 2027.904366][T12964] usb 6-1: Using ep0 maxpacket: 8 [ 2027.916623][T12964] usb 6-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 2027.934884][T12964] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2027.945426][T12964] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 2027.954953][T12964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2028.220824][T25776] binder: 25775:25776 ioctl c0306201 0 returned -14 [ 2028.231207][T12964] usb 6-1: string descriptor 0 read error: -71 [ 2028.250974][T12964] hub 6-1:32.0: bad descriptor, ignoring hub [ 2028.270595][T12964] hub 6-1:32.0: probe with driver hub failed with error -5 [ 2028.355466][T12964] usb 6-1: USB disconnect, device number 122 [ 2029.047121][T25789] netlink: 'syz.5.5296': attribute type 13 has an invalid length. [ 2029.055200][T25789] netlink: 'syz.5.5296': attribute type 17 has an invalid length. [ 2029.809349][T25789] 8021q: adding VLAN 0 to HW filter on device team0 [ 2029.852419][T25789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2030.004628][ T2153] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2031.289322][T25809] random: crng reseeded on system resumption [ 2031.347469][ T43] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 2032.064527][ T5915] usb 9-1: new high-speed USB device number 107 using dummy_hcd [ 2032.106806][ T2153] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2032.134772][ T2153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.142796][ T2153] usb 4-1: Product: syz [ 2032.154397][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 2032.170026][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2032.211359][ T43] usb 7-1: config 0 has no interfaces? [ 2032.219110][ T2153] usb 4-1: Manufacturer: syz [ 2032.236020][ T2153] usb 4-1: SerialNumber: syz [ 2032.243122][ T43] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2032.252363][ T5915] usb 9-1: Using ep0 maxpacket: 16 [ 2032.261265][ T5915] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2032.282386][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.301551][ T5915] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2032.313796][ T2153] usb 4-1: config 0 descriptor?? [ 2032.322606][ T43] usb 7-1: Product: syz [ 2032.338652][ T43] usb 7-1: Manufacturer: syz [ 2032.346306][ T2153] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2032.358491][ T43] usb 7-1: SerialNumber: syz [ 2032.375455][ T5915] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2032.396405][ T43] usb 7-1: config 0 descriptor?? [ 2032.411448][ T5915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.465020][ T5915] usb 9-1: Product: syz [ 2032.481962][ T5915] usb 9-1: Manufacturer: syz [ 2032.495970][ T5915] usb 9-1: SerialNumber: syz [ 2032.517194][ T5915] usb 9-1: config 0 descriptor?? [ 2032.537029][ T5915] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2032.570356][ T5915] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 2032.927074][ T2153] usb 8-1: new high-speed USB device number 111 using dummy_hcd [ 2033.014470][T12964] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 2033.106374][ T2153] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2033.116878][ T2153] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2033.128020][ T2153] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2033.141093][ T2153] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2033.150225][ T2153] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2033.159979][ T5915] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 2033.172563][ T2153] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 2033.180083][T12964] usb 6-1: Using ep0 maxpacket: 32 [ 2033.180690][ T5915] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 2033.193010][ T2153] usb 8-1: invalid MIDI out EP 0 [ 2033.196204][T12964] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 2033.209737][T12964] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2033.219009][T12964] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2033.228717][T12964] usb 6-1: config 1 has no interface number 0 [ 2033.235345][T12964] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2033.251214][T12964] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2033.273909][T12964] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2033.285912][T12964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2033.317558][T12964] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 2033.350945][ T2153] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2033.458891][T11621] usb 8-1: USB disconnect, device number 111 [ 2033.525083][T12964] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 2033.637139][T11621] usb 7-1: USB disconnect, device number 104 [ 2033.798525][T12964] usb 6-1: USB disconnect, device number 123 [ 2033.806638][T12964] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 2033.809664][ T2153] usb 4-1: USB disconnect, device number 13 [ 2033.833785][ T5915] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 2033.876743][ T5915] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 2033.896777][ T5915] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 2033.908253][ T5915] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 2033.921373][ T5915] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 2033.929757][ T5915] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 2033.953945][ T5915] usb 9-1: USB disconnect, device number 107 [ 2034.034089][T25836] trusted_key: syz.6.5312 sent an empty control message without MSG_MORE. [ 2034.481259][ T2153] usb 8-1: new high-speed USB device number 112 using dummy_hcd [ 2034.755712][ T2153] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2034.922398][ T2153] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2034.937642][ T2153] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2034.947213][ T2153] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2034.955614][ T2153] usb 8-1: SerialNumber: syz [ 2035.189140][ T2153] usb 8-1: 0:2 : does not exist [ 2035.246090][ T2153] usb 8-1: USB disconnect, device number 112 [ 2035.299437][T20465] udevd[20465]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2037.074929][ T2153] usb 9-1: new high-speed USB device number 108 using dummy_hcd [ 2037.240056][ T2153] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2037.264421][ T2153] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2037.283137][ T2153] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2037.299603][ T2153] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2037.308079][ T2153] usb 9-1: SerialNumber: syz [ 2037.460749][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.475734][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.546131][ T2153] usb 9-1: cannot find UAC_HEADER [ 2037.591060][ T2153] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2037.602209][ T2153] usb 9-1: USB disconnect, device number 108 [ 2037.635701][T20465] udevd[20465]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2038.729730][T25884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5328'. [ 2040.014737][T12964] usb 9-1: new high-speed USB device number 109 using dummy_hcd [ 2040.174709][T12964] usb 9-1: Using ep0 maxpacket: 32 [ 2040.211600][T12964] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2040.224428][T18582] usb 8-1: new high-speed USB device number 113 using dummy_hcd [ 2040.234380][T12964] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2040.264472][T12964] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2040.283016][T12964] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.349874][T12964] usb 9-1: config 0 descriptor?? [ 2040.418725][T18582] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2040.479800][T18582] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2040.501338][T18582] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2040.514013][T18582] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2040.534189][T18582] usb 8-1: SerialNumber: syz [ 2040.639046][T25920] loop3: detected capacity change from 0 to 256 [ 2040.755933][ T5894] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 2040.801968][T12964] savu 0003:1E7D:2D5A.0020: unknown main item tag 0x0 [ 2040.863631][T18582] usb 8-1: 0:2 : does not exist [ 2040.882117][T18582] usb 8-1: USB disconnect, device number 113 [ 2040.882430][T12964] savu 0003:1E7D:2D5A.0020: unknown main item tag 0x0 [ 2040.920234][T12964] savu 0003:1E7D:2D5A.0020: unknown main item tag 0x0 [ 2041.457071][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 2041.462283][T12964] savu 0003:1E7D:2D5A.0020: unknown main item tag 0x0 [ 2041.472795][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2041.485889][T12964] savu 0003:1E7D:2D5A.0020: unknown main item tag 0x0 [ 2041.492700][T12964] savu 0003:1E7D:2D5A.0020: unbalanced collection at end of report description [ 2041.511145][T13160] udevd[13160]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2041.623883][ T5894] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2041.636032][ T5894] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2041.647867][T12964] savu 0003:1E7D:2D5A.0020: parse failed [ 2041.653634][T12964] savu 0003:1E7D:2D5A.0020: probe with driver savu failed with error -22 [ 2041.662386][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.670420][ T5894] usb 6-1: Product: syz [ 2041.675725][ T5894] usb 6-1: Manufacturer: syz [ 2041.682607][ T5894] usb 6-1: SerialNumber: syz [ 2041.687615][T12964] usb 9-1: USB disconnect, device number 109 [ 2041.698312][ T5894] usb 6-1: config 0 descriptor?? [ 2041.895369][T25927] netlink: 'syz.6.5343': attribute type 13 has an invalid length. [ 2041.940848][T25927] netlink: 'syz.6.5343': attribute type 17 has an invalid length. [ 2042.002425][T25927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2042.608722][T25947] loop7: detected capacity change from 0 to 256 [ 2043.624492][ T5894] usb 6-1: USB disconnect, device number 124 [ 2044.128942][T25968] syzkaller0: entered promiscuous mode [ 2044.137211][T25968] syzkaller0: entered allmulticast mode [ 2044.366447][T25976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2044.684443][ T5894] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 2044.882009][ T5894] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2044.912123][ T5894] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2044.972302][ T5894] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2045.045770][ T5894] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2045.084154][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.145375][ T5894] usb 7-1: Product: syz [ 2045.150262][ T5894] usb 7-1: Manufacturer: syz [ 2045.188836][ T5894] usb 7-1: SerialNumber: syz [ 2045.206742][ T5894] hub 7-1:1.0: bad descriptor, ignoring hub [ 2045.231244][ T5894] hub 7-1:1.0: probe with driver hub failed with error -5 [ 2045.458590][ T5894] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 105 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2045.684374][T11621] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 2045.859113][ T2153] usb 7-1: USB disconnect, device number 105 [ 2045.924770][T18582] usb 9-1: new high-speed USB device number 110 using dummy_hcd [ 2045.930994][T11621] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2045.972097][T11621] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2046.027576][T11621] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2046.081538][T11621] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2046.101002][T11621] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2046.126631][T18582] usb 9-1: Using ep0 maxpacket: 32 [ 2046.209533][T11621] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2046.218433][T11621] usb 6-1: invalid MIDI out EP 0 [ 2046.377817][T18582] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2046.531258][T18582] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2046.978254][ T2153] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 2046.991842][T18582] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2047.001465][T18582] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2047.006668][T11621] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2047.028202][T18582] usb 9-1: config 0 descriptor?? [ 2047.205754][T25976] usblp0: removed [ 2047.225977][ T2153] usb 7-1: device descriptor read/all, error -71 [ 2047.259806][T13137] udevd[13137]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2047.326214][T25996] loop3: detected capacity change from 0 to 256 [ 2047.444595][T11621] usb 6-1: USB disconnect, device number 125 [ 2047.542542][T18582] savu 0003:1E7D:2D5A.0021: unknown main item tag 0x0 [ 2047.562522][T18582] savu 0003:1E7D:2D5A.0021: unknown main item tag 0x0 [ 2047.573488][T18582] savu 0003:1E7D:2D5A.0021: unknown main item tag 0x0 [ 2047.603987][T18582] savu 0003:1E7D:2D5A.0021: unknown main item tag 0x0 [ 2047.695837][T18582] savu 0003:1E7D:2D5A.0021: unknown main item tag 0x0 [ 2047.879172][T18582] savu 0003:1E7D:2D5A.0021: unbalanced collection at end of report description [ 2048.142922][T18582] savu 0003:1E7D:2D5A.0021: parse failed [ 2048.159965][T18582] savu 0003:1E7D:2D5A.0021: probe with driver savu failed with error -22 [ 2048.199274][T18582] usb 9-1: USB disconnect, device number 110 [ 2051.190398][T26020] random: crng reseeded on system resumption [ 2052.177174][T26031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2052.504420][T18582] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 2052.724708][T18582] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2052.742032][T18582] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2052.890477][T18582] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2053.370469][T18582] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2053.480584][T18582] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2053.511914][T18582] usb 6-1: Product: syz [ 2053.519420][T18582] usb 6-1: Manufacturer: syz [ 2053.526887][T18582] usb 6-1: SerialNumber: syz [ 2053.627991][T18582] hub 6-1:1.0: bad descriptor, ignoring hub [ 2053.664440][T18582] hub 6-1:1.0: probe with driver hub failed with error -5 [ 2053.899298][T18582] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 126 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2053.961232][T26049] loop3: detected capacity change from 0 to 256 [ 2054.777063][ T5894] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 2055.014547][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 2055.034378][ T5894] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2055.050748][ T5894] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2055.257152][T26060] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2055.345235][ T5894] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2055.356835][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.371974][ T5894] usb 7-1: Product: syz [ 2055.381524][ T5894] usb 7-1: Manufacturer: syz [ 2055.386604][T26063] bridge_slave_0: left allmulticast mode [ 2055.389380][ T5894] usb 7-1: SerialNumber: syz [ 2055.400846][T26063] bridge_slave_0: left promiscuous mode [ 2055.408147][ T5894] usb 7-1: config 0 descriptor?? [ 2055.416575][T26063] bridge0: port 1(bridge_slave_0) entered disabled state [ 2055.431157][T26063] bridge_slave_1: left allmulticast mode [ 2055.437787][T26063] bridge_slave_1: left promiscuous mode [ 2055.462592][T26063] bridge0: port 2(bridge_slave_1) entered disabled state [ 2055.482166][T26063] bond0: (slave bond_slave_0): Releasing backup interface [ 2055.489981][ T5915] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2055.511216][T26063] bond0: (slave bond_slave_1): Releasing backup interface [ 2055.531642][T26063] team0: Port device team_slave_0 removed [ 2055.543713][T26063] team0: Port device team_slave_1 removed [ 2055.552047][T26063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2055.567230][T26063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2055.582161][T26063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2055.590343][ T2153] usb 8-1: new high-speed USB device number 114 using dummy_hcd [ 2055.599868][T26063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2055.619412][T26063] bond0: (slave netdevsim0): Releasing backup interface [ 2055.629750][T26063] bond0: (slave bridge1): Releasing backup interface [ 2055.657948][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 2055.667033][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2055.680813][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2055.694563][T26029] usb 6-1: reset high-speed USB device number 126 using dummy_hcd [ 2055.712954][ T5915] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2055.722325][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.730917][ T5915] usb 4-1: Product: syz [ 2055.735765][ T5915] usb 4-1: Manufacturer: syz [ 2055.741013][T26063] bond1: (slave bridge2): Releasing backup interface [ 2055.750157][ T2153] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2055.759976][ T2153] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2055.770380][ T5915] usb 4-1: SerialNumber: syz [ 2055.777330][ T2153] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2055.791350][ T5915] usb 4-1: config 0 descriptor?? [ 2055.803798][T26063] bridge2: left promiscuous mode [ 2055.809604][T26063] bridge2: left allmulticast mode [ 2055.883927][ T5915] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2055.894878][T26029] usb 6-1: device firmware changed [ 2055.908500][T18582] usb 6-1: USB disconnect, device number 126 [ 2055.914762][ T5915] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 2055.927478][ T2153] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2055.940180][T18582] usblp0: removed [ 2055.944672][ T2153] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.955019][ T2153] usb 8-1: Product: syz [ 2055.961838][ T2153] usb 8-1: Manufacturer: syz [ 2055.967580][ T2153] usb 8-1: SerialNumber: syz [ 2056.000883][ T2153] hub 8-1:1.0: bad descriptor, ignoring hub [ 2056.011424][ T2153] hub 8-1:1.0: probe with driver hub failed with error -5 [ 2056.094988][T18582] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 2056.202726][ T2153] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 114 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2056.296721][T18582] usb 6-1: config 0 has no interfaces? [ 2056.302521][T18582] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2056.315082][T18582] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2056.327196][T18582] usb 6-1: config 0 descriptor?? [ 2056.455768][T18582] usb 6-1: USB disconnect, device number 127 [ 2056.471186][ T5915] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 2056.508491][ T5915] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 2056.635051][ T2153] usb 8-1: USB disconnect, device number 114 [ 2056.653623][ T2153] usblp0: removed [ 2057.285329][ T2153] usb 8-1: new high-speed USB device number 115 using dummy_hcd [ 2057.302432][ T5894] usb 7-1: USB disconnect, device number 108 [ 2057.544079][T26083] bond0: (slave bond_slave_0): Releasing backup interface [ 2057.583925][ T2153] usb 8-1: config 0 has no interfaces? [ 2057.594204][T26083] bond0: (slave bond_slave_1): Releasing backup interface [ 2057.601578][ T2153] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2057.601608][ T2153] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.620601][ T2153] usb 8-1: config 0 descriptor?? [ 2057.662012][ T5915] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 2057.675352][ T5915] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 2057.692585][ T5915] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 2057.699262][T26083] team0: Port device team_slave_0 removed [ 2057.702750][ T5915] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 2057.717974][ T5915] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 2057.732508][T26083] team0: Port device team_slave_1 removed [ 2057.736984][ T5915] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 2057.757549][T26083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2057.768916][ T5915] usb 4-1: USB disconnect, device number 14 [ 2057.783543][T26083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2057.824251][T26083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2057.840795][T26083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2057.845705][ T2153] usb 8-1: USB disconnect, device number 115 [ 2057.881671][T26083] bond0: (slave netdevsim0): Releasing backup interface [ 2057.895024][T26083] bond3: (slave bridge0): Removing an active aggregator [ 2057.903013][T26083] bond3: (slave bridge0): Releasing backup interface [ 2057.922120][T26083] bridge0: left promiscuous mode [ 2057.927775][T26083] bridge0: left allmulticast mode [ 2059.380978][T26109] netlink: 'syz.3.5399': attribute type 13 has an invalid length. [ 2059.394647][T26109] netlink: 'syz.3.5399': attribute type 17 has an invalid length. [ 2059.439394][T26119] syzkaller0: entered promiscuous mode [ 2059.445837][T26119] syzkaller0: entered allmulticast mode [ 2060.407470][T26109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2061.659638][T26146] random: crng reseeded on system resumption [ 2064.202697][T26151] netlink: 'syz.5.5410': attribute type 13 has an invalid length. [ 2064.394750][T26151] netlink: 'syz.5.5410': attribute type 17 has an invalid length. [ 2064.524537][T26151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2064.550733][T26162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2064.847086][ T5915] usb 9-1: new high-speed USB device number 111 using dummy_hcd [ 2064.861480][T26169] netlink: 'syz.6.5416': attribute type 13 has an invalid length. [ 2064.890694][T26169] netlink: 'syz.6.5416': attribute type 17 has an invalid length. [ 2064.950327][T26169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2065.082835][ T5915] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2065.104359][ T5915] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2065.115112][ T5915] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2065.179733][ T5915] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2065.194090][ T5915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2065.208753][ T5915] usb 9-1: Product: syz [ 2065.212907][ T5915] usb 9-1: Manufacturer: syz [ 2065.246321][ T5915] usb 9-1: SerialNumber: syz [ 2065.264601][ T5915] hub 9-1:1.0: bad descriptor, ignoring hub [ 2065.270499][ T5915] hub 9-1:1.0: probe with driver hub failed with error -5 [ 2065.479463][ T5915] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 111 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2065.794786][ T5915] usb 9-1: USB disconnect, device number 111 [ 2065.872040][ T5915] usblp0: removed [ 2066.305363][ T5915] usb 9-1: new high-speed USB device number 112 using dummy_hcd [ 2066.563048][ T5915] usb 9-1: config 0 has no interfaces? [ 2066.568894][ T5915] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2066.613803][T26205] netlink: 'syz.5.5431': attribute type 13 has an invalid length. [ 2066.617196][ T5915] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.621892][T26205] netlink: 'syz.5.5431': attribute type 17 has an invalid length. [ 2066.710586][ T5915] usb 9-1: config 0 descriptor?? [ 2066.715997][T26205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2067.266957][ T5915] usb 9-1: USB disconnect, device number 112 [ 2067.709696][T26227] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.5438'. [ 2068.474576][ T5915] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2068.669201][ T5915] usb 6-1: config 0 has no interfaces? [ 2068.682795][ T5915] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2068.684793][T11621] usb 9-1: new high-speed USB device number 113 using dummy_hcd [ 2068.695214][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.722322][ T5915] usb 6-1: Product: syz [ 2068.726997][ T5915] usb 6-1: Manufacturer: syz [ 2068.731698][ T5915] usb 6-1: SerialNumber: syz [ 2068.747458][ T5915] usb 6-1: config 0 descriptor?? [ 2068.838857][T18582] usb 8-1: new high-speed USB device number 116 using dummy_hcd [ 2068.857949][T11621] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2068.873492][T11621] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2068.889248][T11621] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2068.899668][T11621] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2068.908680][T11621] usb 9-1: SerialNumber: syz [ 2068.914397][T12964] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 2068.974508][T26251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5449'. [ 2068.983496][T26251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5449'. [ 2069.024451][T18582] usb 8-1: Using ep0 maxpacket: 8 [ 2069.042419][T18582] usb 8-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 2069.058493][T18582] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 2069.058969][T26251] netlink: 'syz.3.5449': attribute type 10 has an invalid length. [ 2069.066788][T18582] usb 8-1: Product: syz [ 2069.075675][T12964] usb 7-1: Using ep0 maxpacket: 16 [ 2069.083593][T18582] usb 8-1: Manufacturer: syz [ 2069.086452][T12964] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2069.088683][T18582] usb 8-1: SerialNumber: syz [ 2069.101215][T26251] bridge6: port 1(team0) entered blocking state [ 2069.113942][T12964] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2069.116779][T18582] usb 8-1: config 0 descriptor?? [ 2069.126467][T26251] bridge6: port 1(team0) entered disabled state [ 2069.138723][T18582] usbtest 8-1:0.0: FX2 device [ 2069.143420][T18582] usbtest 8-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 2069.148962][T11621] usb 9-1: cannot find UAC_HEADER [ 2069.162064][T26251] team0: entered allmulticast mode [ 2069.163421][T12964] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2069.177065][T12964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.178046][T26251] team_slave_0: entered allmulticast mode [ 2069.187976][T12964] usb 7-1: Product: syz [ 2069.199125][T26251] team_slave_1: entered allmulticast mode [ 2069.211097][T26251] team_slave_0: entered promiscuous mode [ 2069.217329][T26251] team_slave_1: entered promiscuous mode [ 2069.217715][T12964] usb 7-1: Manufacturer: syz [ 2069.236880][T12964] usb 7-1: SerialNumber: syz [ 2069.244063][T11621] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2069.247263][T26251] bridge6: port 1(team0) entered blocking state [ 2069.259586][T11621] usb 9-1: USB disconnect, device number 113 [ 2069.260136][T26251] bridge6: port 1(team0) entered forwarding state [ 2069.282384][T12964] usb 7-1: config 0 descriptor?? [ 2069.314673][T20465] udevd[20465]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2069.315793][T12964] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2069.371704][T12964] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 2069.421488][T18582] usb 8-1: USB disconnect, device number 116 [ 2069.479216][T26253] loop3: detected capacity change from 0 to 256 [ 2070.382629][T26258] netlink: 'syz.8.5451': attribute type 72 has an invalid length. [ 2070.407627][T12964] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 2070.416490][T12964] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 2070.657741][T12964] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 2070.668756][ T5894] usb 6-1: USB disconnect, device number 2 [ 2070.680515][T12964] em28xx 7-1:0.0: No AC97 audio processor [ 2071.120567][T26286] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5457'. [ 2071.761959][T26288] netlink: 'syz.8.5460': attribute type 10 has an invalid length. [ 2071.821370][T12964] usb 7-1: USB disconnect, device number 109 [ 2071.868223][T12964] em28xx 7-1:0.0: Disconnecting em28xx [ 2071.894497][T12964] em28xx 7-1:0.0: Freeing device [ 2072.013830][T26304] loop6: detected capacity change from 0 to 256 [ 2072.111512][T26288] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2073.188221][T26309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2073.234611][T26309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2073.325726][T26309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2073.333171][T26309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2073.505821][T26316] netlink: 'syz.5.5467': attribute type 10 has an invalid length. [ 2073.581260][T26316] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2073.923521][T26323] netlink: 'syz.3.5472': attribute type 13 has an invalid length. [ 2073.938636][T26323] netlink: 'syz.3.5472': attribute type 17 has an invalid length. [ 2073.958476][T26323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2073.988855][T26325] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.5470'. [ 2074.437183][T26338] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5473'. [ 2075.930349][T26362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5486'. [ 2075.941732][T26362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5486'. [ 2075.986295][T26359] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.5484'. [ 2076.006898][T26362] netlink: 'syz.3.5486': attribute type 10 has an invalid length. [ 2076.159581][T26364] netlink: 'syz.5.5485': attribute type 13 has an invalid length. [ 2076.209663][T26364] netlink: 'syz.5.5485': attribute type 17 has an invalid length. [ 2076.248327][T26364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2076.504407][ T5915] usb 8-1: new high-speed USB device number 117 using dummy_hcd [ 2076.573527][T26379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5489'. [ 2076.684414][ T5915] usb 8-1: Using ep0 maxpacket: 8 [ 2076.799594][ T5915] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 2076.936522][ T5915] usb 8-1: config 0 has no interface number 0 [ 2077.040116][ T5915] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2077.164708][ T5915] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2077.176714][ T5915] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2077.187699][ T5915] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2077.197559][ T5915] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2077.214895][ T5915] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2077.223946][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.254729][ T5915] usb 8-1: config 0 descriptor?? [ 2077.293355][ T5915] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2077.492711][T26366] ldusb 8-1:0.55: Couldn't submit interrupt_in_urb -90 [ 2077.566167][ T5894] usb 8-1: USB disconnect, device number 117 [ 2077.582187][ T5894] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 2077.668407][T26400] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.5498'. [ 2077.794371][ T5915] usb 9-1: new high-speed USB device number 114 using dummy_hcd [ 2077.844371][T12964] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 2077.969097][ T5915] usb 9-1: Using ep0 maxpacket: 8 [ 2077.974212][T18582] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2077.985456][ T5915] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2077.998100][ T5915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.000523][T12964] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2078.006226][ T5915] usb 9-1: Product: syz [ 2078.016157][T12964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.027835][T12964] usb 7-1: Product: syz [ 2078.032003][T12964] usb 7-1: Manufacturer: syz [ 2078.036691][ T5915] usb 9-1: Manufacturer: syz [ 2078.036710][ T5915] usb 9-1: SerialNumber: syz [ 2078.040628][ T5915] usb 9-1: config 0 descriptor?? [ 2078.043125][T12964] usb 7-1: SerialNumber: syz [ 2078.066871][T12964] usb 7-1: config 0 descriptor?? [ 2078.078706][T12964] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2078.104435][T18582] usb 4-1: device descriptor read/64, error -71 [ 2078.354344][T18582] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2078.504453][T18582] usb 4-1: device descriptor read/64, error -71 [ 2078.630966][T18582] usb usb4-port1: attempt power cycle [ 2078.683722][T12964] gspca_sunplus: reg_r err -32 [ 2078.688666][T12964] sunplus 7-1:0.0: probe with driver sunplus failed with error -32 [ 2078.871594][ T5915] usb 9-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 2078.896183][ T5915] usb 9-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 2078.905914][ T5915] usb 9-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 2078.974455][T18582] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2079.009985][T18582] usb 4-1: device descriptor read/8, error -71 [ 2079.254816][T18582] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2079.286661][T18582] usb 4-1: device descriptor read/8, error -71 [ 2079.520181][T18582] usb usb4-port1: unable to enumerate USB device [ 2079.647182][T26416] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5503'. [ 2080.530698][T26421] syzkaller0: entered promiscuous mode [ 2080.539498][T26421] syzkaller0: entered allmulticast mode [ 2080.622555][ T2153] usb 7-1: USB disconnect, device number 110 [ 2081.172357][T18582] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2081.344353][T18582] usb 4-1: Using ep0 maxpacket: 8 [ 2081.356637][T18582] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 2081.364929][T18582] usb 4-1: config 0 has no interface number 0 [ 2081.371036][T18582] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2081.387044][T18582] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2081.399712][T18582] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2081.433864][T18582] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2081.464338][T18582] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2081.481664][T18582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.504958][T18582] usb 4-1: config 0 descriptor?? [ 2081.544920][T18582] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2081.749425][T26443] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5513'. [ 2081.778024][T26443] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5513'. [ 2081.839464][T12964] usb 4-1: USB disconnect, device number 19 [ 2081.859955][T12964] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 2082.090197][T26449] netlink: 'syz.5.5514': attribute type 1 has an invalid length. [ 2082.158607][T26450] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5514'. [ 2083.951648][T26449] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2084.179697][T26466] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5519'. [ 2084.194395][T12964] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2084.224817][ T5894] usb 8-1: new high-speed USB device number 118 using dummy_hcd [ 2084.294615][T26466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2084.367110][T12964] usb 4-1: Using ep0 maxpacket: 8 [ 2084.379037][T12964] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2084.388915][T12964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2084.401437][ T5894] usb 8-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2084.410973][T12964] usb 4-1: Product: syz [ 2084.415841][ T5894] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2084.424061][T12964] usb 4-1: Manufacturer: syz [ 2084.428746][T12964] usb 4-1: SerialNumber: syz [ 2084.434203][ T5894] usb 8-1: Product: syz [ 2084.439719][ T5894] usb 8-1: Manufacturer: syz [ 2084.445155][T12964] usb 4-1: config 0 descriptor?? [ 2084.453989][ T5894] usb 8-1: SerialNumber: syz [ 2084.470286][ T5894] usb 8-1: config 0 descriptor?? [ 2084.481898][ T5894] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2085.088281][ T5894] gspca_sunplus: reg_r err -32 [ 2085.094436][ T5894] sunplus 8-1:0.0: probe with driver sunplus failed with error -32 [ 2085.281602][T12964] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 2085.337347][T26482] syzkaller0: entered promiscuous mode [ 2085.342908][T26482] syzkaller0: entered allmulticast mode [ 2086.915408][ T5894] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2086.992439][T18582] usb 8-1: USB disconnect, device number 118 [ 2087.085322][T26494] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5530'. [ 2087.099524][T26494] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5530'. [ 2087.139191][ T5894] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2087.141477][T26496] netlink: 'syz.7.5530': attribute type 10 has an invalid length. [ 2087.162641][ T5894] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2087.186136][ T5894] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2087.201178][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2087.209269][ T5894] usb 6-1: SerialNumber: syz [ 2087.439057][ T5894] usb 6-1: 0:2 : does not exist [ 2087.462310][ T5894] usb 6-1: USB disconnect, device number 3 [ 2087.497451][T19612] udevd[19612]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2088.661827][T26496] bridge0: port 3(team0) entered blocking state [ 2088.669293][T26496] bridge0: port 3(team0) entered disabled state [ 2088.676348][T26496] team0: entered allmulticast mode [ 2088.681491][T26496] team_slave_0: entered allmulticast mode [ 2088.687849][T26496] team_slave_1: entered allmulticast mode [ 2088.695710][T26496] team0: entered promiscuous mode [ 2088.700909][T26496] team_slave_0: entered promiscuous mode [ 2088.707447][T26496] team_slave_1: entered promiscuous mode [ 2088.713922][T26496] bridge0: port 3(team0) entered blocking state [ 2088.720307][T26496] bridge0: port 3(team0) entered forwarding state [ 2089.374810][T18582] usb 8-1: new high-speed USB device number 119 using dummy_hcd [ 2089.420366][T26530] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5545'. [ 2089.429571][T26530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5545'. [ 2089.476592][T26530] netlink: 'syz.5.5545': attribute type 10 has an invalid length. [ 2089.485244][T26532] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5546'. [ 2089.495385][T26530] bridge1: port 1(team0) entered blocking state [ 2089.501694][T26530] bridge1: port 1(team0) entered disabled state [ 2089.508374][T26530] team0: entered allmulticast mode [ 2089.534737][T18582] usb 8-1: Using ep0 maxpacket: 8 [ 2089.549378][T18582] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2089.561263][T18582] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.574752][T18582] usb 8-1: Product: syz [ 2089.578926][T18582] usb 8-1: Manufacturer: syz [ 2089.583519][T18582] usb 8-1: SerialNumber: syz [ 2089.606817][T18582] usb 8-1: config 0 descriptor?? [ 2090.638797][T18582] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 2090.849800][T26562] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5558'. [ 2090.862748][T26562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5558'. [ 2090.882972][T26564] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5559'. [ 2091.257025][T26574] syzkaller0: entered promiscuous mode [ 2091.262517][T26574] syzkaller0: entered allmulticast mode [ 2091.763975][T26577] random: crng reseeded on system resumption [ 2092.701751][T26593] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5570'. [ 2092.711903][T26593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5570'. [ 2095.676894][ T2153] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 2095.834752][ T2153] usb 7-1: device descriptor read/64, error -71 [ 2096.022701][T26622] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5580'. [ 2096.084472][ T2153] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 2096.144446][ T43] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2096.254535][ T2153] usb 7-1: device descriptor read/64, error -71 [ 2096.330213][ T43] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2096.357281][ T43] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2096.372977][ T2153] usb usb7-port1: attempt power cycle [ 2096.397966][ T43] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2096.409647][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2096.422364][T26628] syzkaller0: entered promiscuous mode [ 2096.430647][T26628] syzkaller0: entered allmulticast mode [ 2096.452394][ T43] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2096.522527][ T43] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2096.561378][T19612] udevd[19612]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2096.744398][ T2153] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 2096.775897][ T2153] usb 7-1: device descriptor read/8, error -71 [ 2096.791583][ T43] usb 6-1: USB disconnect, device number 4 [ 2097.034499][ T2153] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 2097.067419][ T2153] usb 7-1: device descriptor read/8, error -71 [ 2097.185024][ T2153] usb usb7-port1: unable to enumerate USB device [ 2098.565996][T26636] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5585'. [ 2098.585885][T26636] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5585'. [ 2098.742966][T26641] netlink: 'syz.8.5587': attribute type 13 has an invalid length. [ 2098.784516][T26641] netlink: 'syz.8.5587': attribute type 17 has an invalid length. [ 2098.827388][T26643] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.5588'. [ 2098.836901][T26641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2098.900504][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.909546][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.524333][ T43] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2099.782802][T16455] syz_tun (unregistering): left allmulticast mode [ 2099.782849][T16457] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2099.800341][T16457] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2099.808772][T16457] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2099.817028][T16457] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2099.824958][ T43] usb 6-1: device descriptor read/64, error -71 [ 2099.831963][T16457] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2100.007717][ T5894] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 2100.074412][ T43] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2100.094110][ T44] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2100.167096][T26672] syzkaller0: entered promiscuous mode [ 2100.172820][T26672] syzkaller0: entered allmulticast mode [ 2100.187160][ T5894] usb 7-1: config 0 has no interfaces? [ 2100.198342][ T5894] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2100.217730][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2100.224453][ T43] usb 6-1: device descriptor read/64, error -71 [ 2100.239122][ T5894] usb 7-1: Product: syz [ 2100.271497][ T5894] usb 7-1: Manufacturer: syz [ 2100.284461][ T5894] usb 7-1: SerialNumber: syz [ 2100.303256][ T5894] usb 7-1: config 0 descriptor?? [ 2100.350256][ T43] usb usb6-port1: attempt power cycle [ 2100.695567][ T43] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2100.730586][ T43] usb 6-1: device descriptor read/8, error -71 [ 2100.984457][ T43] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2101.023100][ T43] usb 6-1: device descriptor read/8, error -71 [ 2101.148305][ T43] usb usb6-port1: unable to enumerate USB device [ 2101.856225][T16457] Bluetooth: hci1: command tx timeout [ 2102.437413][T26679] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.5601'. [ 2102.489350][T26677] netlink: 'syz.5.5600': attribute type 10 has an invalid length. [ 2102.504899][ T5894] usb 7-1: USB disconnect, device number 115 [ 2102.623593][ T44] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.831990][ T44] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.985377][T26692] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5607'. [ 2103.010330][ T44] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2103.077166][T26686] syzkaller0: entered promiscuous mode [ 2103.082776][T26686] syzkaller0: entered allmulticast mode [ 2103.306241][T26701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2103.696198][ T5894] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2103.854623][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 2103.879121][ T5894] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2103.888478][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2103.896710][ T5894] usb 6-1: Product: syz [ 2103.914979][ T5894] usb 6-1: Manufacturer: syz [ 2103.919636][ T5894] usb 6-1: SerialNumber: syz [ 2103.932801][ T5894] usb 6-1: config 0 descriptor?? [ 2103.943652][T16457] Bluetooth: hci1: command tx timeout [ 2104.811406][ T5894] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 2105.977902][ T44] team0: left allmulticast mode [ 2105.982800][ T44] team_slave_0: left allmulticast mode [ 2105.988523][ T44] team_slave_1: left allmulticast mode [ 2105.997025][ T44] team_slave_0: left promiscuous mode [ 2106.002640][ T44] team_slave_1: left promiscuous mode [ 2106.011216][ T44] bridge6: port 1(team0) entered disabled state [ 2106.018606][T16457] Bluetooth: hci1: command tx timeout [ 2106.357078][ T44] bond1 (unregistering): (slave bridge0): Releasing backup interface [ 2106.450237][ T44] bond2 (unregistering): (slave bridge2): Removing an active aggregator [ 2106.459154][ T44] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 2106.484899][ T44] bridge2 (unregistering): left promiscuous mode [ 2106.498237][ T44] bridge2 (unregistering): left allmulticast mode [ 2106.571719][ T44] bond3 (unregistering): (slave bridge3): Removing an active aggregator [ 2106.580818][ T44] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 2106.589803][ T44] bridge3 (unregistering): left promiscuous mode [ 2106.597668][ T44] bridge3 (unregistering): left allmulticast mode [ 2107.160102][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2107.185255][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2107.225689][ T44] bond0 (unregistering): Released all slaves [ 2107.261849][ T44] bond1 (unregistering): Released all slaves [ 2107.551061][ T44] bond2 (unregistering): Released all slaves [ 2107.736881][ T44] bond3 (unregistering): Released all slaves [ 2107.867233][ T44] bond4 (unregistering): Released all slaves [ 2108.098618][T16457] Bluetooth: hci1: command tx timeout [ 2108.209203][T26729] syzkaller0: entered promiscuous mode [ 2108.227471][T26729] syzkaller0: entered allmulticast mode [ 2110.443841][T26670] chnl_net:caif_netlink_parms(): no params data found [ 2111.319154][T26770] random: crng reseeded on system resumption [ 2111.950173][ T2153] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 2112.150274][ T2153] usb 7-1: Using ep0 maxpacket: 8 [ 2112.168512][ T2153] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2112.203269][ T2153] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2112.231007][ T2153] usb 7-1: Product: syz [ 2112.240765][ T2153] usb 7-1: Manufacturer: syz [ 2112.251480][ T2153] usb 7-1: SerialNumber: syz [ 2112.276115][ T2153] usb 7-1: config 0 descriptor?? [ 2112.287012][T26670] bridge0: port 1(bridge_slave_0) entered blocking state [ 2112.306093][T26670] bridge0: port 1(bridge_slave_0) entered disabled state [ 2112.313473][T26670] bridge_slave_0: entered allmulticast mode [ 2112.322531][T26670] bridge_slave_0: entered promiscuous mode [ 2112.353514][T26670] bridge0: port 2(bridge_slave_1) entered blocking state [ 2112.373826][T26670] bridge0: port 2(bridge_slave_1) entered disabled state [ 2112.401286][T26670] bridge_slave_1: entered allmulticast mode [ 2112.424223][T26670] bridge_slave_1: entered promiscuous mode [ 2112.665599][T26670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2112.835874][ T44] hsr_slave_0: left promiscuous mode [ 2112.903553][ T44] hsr_slave_1: left promiscuous mode [ 2112.918009][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2112.927598][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2112.949951][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2112.973826][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2113.059854][ T44] veth1_macvtap: left promiscuous mode [ 2113.066388][ T44] veth0_macvtap: left promiscuous mode [ 2113.072070][ T44] veth1_vlan: left promiscuous mode [ 2113.125076][ T44] veth0_vlan: left promiscuous mode [ 2113.138479][ T2153] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 2114.248577][ T44] team0 (unregistering): Port device team_slave_1 removed [ 2114.295959][ T44] team0 (unregistering): Port device team_slave_0 removed [ 2114.918040][T26670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2115.020014][T26670] team0: Port device team_slave_0 added [ 2115.080345][T26670] team0: Port device team_slave_1 added [ 2115.257713][T26824] block nbd0: not configured, cannot reconfigure [ 2115.558856][T26822] bond0: (slave netdevsim0): Releasing backup interface [ 2115.605341][T26670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2115.644371][T26670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2115.788112][T26670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2115.857050][T26670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2115.864020][T26670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2116.183870][T26670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2117.317944][T26842] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5639'. [ 2117.441888][T26845] random: crng reseeded on system resumption [ 2118.538579][T26670] hsr_slave_0: entered promiscuous mode [ 2118.569840][T26670] hsr_slave_1: entered promiscuous mode [ 2118.586866][T26670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2118.603767][T26670] Cannot create hsr debugfs directory [ 2118.651863][T26861] team0: left allmulticast mode [ 2118.677351][T26861] bridge1: port 1(team0) entered disabled state [ 2118.839471][T26865] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5645'. [ 2118.849742][T26865] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5645'. [ 2118.904053][T26861] bond0: (slave netdevsim0): Releasing backup interface [ 2120.549722][T26670] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2120.620170][T26670] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2120.662309][T26670] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2120.703516][T26670] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2120.902220][T26670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2120.939476][T26670] 8021q: adding VLAN 0 to HW filter on device team0 [ 2120.973832][T17256] bridge0: port 1(bridge_slave_0) entered blocking state [ 2120.981457][T17256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2121.080751][ T7977] bridge0: port 2(bridge_slave_1) entered blocking state [ 2121.087903][ T7977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2121.829718][T26670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2121.974203][T26670] veth0_vlan: entered promiscuous mode [ 2122.023143][T26670] veth1_vlan: entered promiscuous mode [ 2122.100156][T26670] veth0_macvtap: entered promiscuous mode [ 2122.128647][T26670] veth1_macvtap: entered promiscuous mode [ 2122.198757][T26670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2122.231903][T26670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2122.271848][T12360] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2122.313971][T12360] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2122.354628][T12360] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2122.377927][ T7977] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2122.602131][T12358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2122.640982][T12358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2122.696783][T17256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2122.705480][T17256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2125.199046][T27062] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5695'. [ 2125.334452][T27069] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5696'. [ 2125.343509][T27069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5696'. [ 2125.408225][T27069] netlink: 'syz.5.5696': attribute type 10 has an invalid length. [ 2125.444866][T27069] bridge1: port 1(team0) entered blocking state [ 2125.465106][T27069] bridge1: port 1(team0) entered disabled state [ 2125.471555][T27069] team0: entered allmulticast mode [ 2126.523311][T27114] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5712'. [ 2126.552821][T27114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5712'. [ 2126.587815][T27117] netlink: 'syz.3.5712': attribute type 10 has an invalid length. [ 2126.625665][T27117] bridge0: port 3(team0) entered blocking state [ 2126.643104][T27117] bridge0: port 3(team0) entered disabled state [ 2126.662693][T27117] team0: entered allmulticast mode [ 2126.680164][T27117] team_slave_0: entered allmulticast mode [ 2126.691635][T27117] team_slave_1: entered allmulticast mode [ 2126.716923][T27117] team0: entered promiscuous mode [ 2126.734596][T27117] team_slave_0: entered promiscuous mode [ 2126.740464][T27117] team_slave_1: entered promiscuous mode [ 2126.775738][T27117] bridge0: port 3(team0) entered blocking state [ 2126.782173][T27117] bridge0: port 3(team0) entered forwarding state [ 2127.029144][T27129] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5716'. [ 2128.341983][T27159] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.5732'. [ 2129.088524][T27172] netlink: 'syz.5.5738': attribute type 13 has an invalid length. [ 2129.097674][T27172] netlink: 'syz.5.5738': attribute type 17 has an invalid length. [ 2129.133844][T27172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2129.405471][T27182] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.5743'. [ 2131.104725][T27214] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.5754'. [ 2131.563001][T27221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2139.862264][T12964] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 2139.862442][ T2153] usb 7-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 2139.879682][ T5894] usb 6-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 2139.896727][T18582] usb 8-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 2139.914406][T12964] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 2139.945393][ T5915] usb 9-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 2139.948740][ T5894] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 2139.963613][ T2153] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 2139.981673][ T5915] dvb_usb_az6007 9-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 2139.995071][T18582] dvb_usb_az6007 8-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 2140.010978][T18582] usb 8-1: USB disconnect, device number 119 [ 2140.021871][ T5915] usb 9-1: USB disconnect, device number 114 [ 2140.044062][ T2153] usb 7-1: USB disconnect, device number 116 [ 2140.083513][ T5894] usb 6-1: USB disconnect, device number 9 [ 2140.126653][T12964] usb 4-1: USB disconnect, device number 20 [ 2160.338742][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.345338][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.780058][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.786650][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2254.574395][T23439] Bluetooth: hci1: command 0x0406 tx timeout [ 2283.219794][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.226269][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.660967][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.667351][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.097882][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.105028][ T1299] ieee802154 phy1 wpan1: encryption failed: -22