last executing test programs: 13.627261329s ago: executing program 0 (id=360): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f00000000c0), 0x1, 0x765, &(0x7f0000000800)="$eJzs3c1rHOUfAPDvbJKmv7Q/E0HQegoIGijdmBpbBQ8VDyJYKOjZdtlsQ80mW7Kb0oSAFhG8CCoeBL307Eu9efXlqv+FB2mpmhYrHiQyu7PpNtltN22SRffzgWmf55nZPPPdZ2aeZ/cZdgLoW+PpP7mIQxHxQRIxmpUnETFUTw1GnGhsd2tttZguSayvv/ZbUt/m5tpqMVpekzqQZR6LiO/fjTic21pvdXllrlAulxaz/GRt/vxkdXnlyLn5wmxptrRwbGp6+ujxZ48f27lY//hp5eC1D19+6qsTf73z6JX3f0jiRBzM1rXGsVPGYzx7T4bSt/AOL+10ZT2W9HoHuC/pqTnQOMvjUIzGQD0FAPyXvRUR6wBAn0n0/wDQZ5rfA9xcWy02l95+I7G3rr8YEfsb8TfnNxtrBrM5u/31edCRm0k2M9KYzEwiYmwH6h+PiM++eeOLdIldmocEaOftSxFxZmx86/U/2XLPwnY93cU245vyrn+wd75Nxz/PtRv/5TbGP3HH+KdhuM25ez/uff7nru5ANR2l478XWu5tu9USf2ZsIMv9vz7mG0rOniuX0mvbQxExEUPDaX7qLnVM3Pj7Rqd1reO/3z968/O0/vT/21vkrg4O3/mamUKt8CAxt7p+KeLxwXbxJxvtn7Rp/7TsVJd1vPL8e592WpfGn8bbXLbGv7vWL0c82bb9b9/Rltz1/sTJ+uEw2Two2vj6509G2pUf2dT+6ZLW3/wssBfS9h+5e/xjSev9mtXt1/Hj5dHvOq27d/ztj/99yev19L6s7GKhVlucitiXvLq1/Ojt1zbzze3T+CeeaH/+bz7+11v2If1MeKbL+Aev/frl/ce/u9L4Z7bV/ttPXLk1N9Cp/u7af7qemshKurn+dbuDD/LeAQAAAAAAAAAAAAAAAAAAAAAAAEC3chFxMJJcfiOdy+XzjWd4PxIjuXKlWjt8trK0MBP1Z2WPxVCu+VOXoy2/hzqV/R5+M390U/6ZiHg4Ij4e/l89ny9WyjO9Dh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgc6PP8/9ctwr/cOANg1+3u9AwDAntP/A0D/0f8DQP/R/wNA/9H/A0D/0f8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwy06dPJku63+urRbT/MyF5aW5yoUjM6XqXH5+qZgvVhbP52crldlyKV+szN/r75UrlfPTsbB0cbJWqtYmq8srp+crSwu10+fmC7Ol06WhPYkKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALanurwyVyiXS4sSEhISG4leX5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/h3+CQAA///Q6StZ") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) times(&(0x7f00000000c0)) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x66, 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280), 0x8) 12.42233611s ago: executing program 4 (id=361): r0 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x28, 0x0, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1b", 0x1}], 0x1}}], 0x1, 0x0) accept4$unix(r4, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}]}}]}, 0x3c}}, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11.579938278s ago: executing program 0 (id=362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) syz_emit_vhci(0x0, 0x5a) bind$netlink(r3, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = dup(r2) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0xf5, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x3, 0x1, 0xd, 0xa0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x4}, [@mixer_unit={0x9, 0x24, 0x4, 0x2, 0xdc, "7118ce1a"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x203, 0x5, 0x8d, 0x6, 0x80, 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0xfe, 0x4, 0x49, 0x95, 0x5, 0x3}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x3, 0x4, [0x3, 0x6, 0x6, 0x2], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x3, 0x9, 0x5, "3511c396221085c831"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xb924, 0x9, 0x1, "9f4c3277"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xf691, 0xd50, 0x6}, @as_header={0x7, 0x24, 0x1, 0x6, 0x14}]}, {{0x9, 0x5, 0x1, 0x9, 0x800, 0x4, 0x2, 0x3, {0x7, 0x25, 0x1, 0x2, 0x5, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x7}, @as_header={0x7, 0x24, 0x1, 0x5, 0xf2, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x1, 0x10, 0x7, "80", "8b"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x33, 0x2}, @as_header={0x7, 0x24, 0x1, 0xe4, 0xc7, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x49, 0x7, 0x4, {0x7, 0x25, 0x1, 0x0, 0x5, 0x4}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x2, 0x0, 0x7, 0x40, 0x4}, 0x50, &(0x7f0000000240)={0x5, 0xf, 0x50, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x20, 0x4, 0xa, 0x0, 0xa9, [0x3fcf, 0xffc017, 0xff3fcf, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "8819c7ac774913570bcd00cdfa173cae"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xf7, 0x58, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x2, 0x3, 0xbc2d}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x2, 0x2}, @ptm_cap={0x3}]}, 0x3, [{0x68, &(0x7f0000000440)=ANY=[@ANYBLOB="680343f171bb752d4410e936e13cde6ddf5679bd404328ea815224326565a3cdfee2dec3d497f5620e6d64cfc442cbb2ee4101c07c6c9056a7201ce4b01f43b69938c984cc664eb87afb74881a207c8cdf1bd5ea373e5210a97f51eb786616ff8b37f1078dbfdcfa"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x444}}, {0xa, &(0x7f0000000500)=@string={0xa, 0x3, "7fc448d21d0a7bc4"}}]}) 10.426051204s ago: executing program 1 (id=364): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xc0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x2}, 0x0, [0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x80000001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x717a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xf, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x5, 0x0, 0x402], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x81f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x200, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf25, 0x0, 0x7], [0x0, 0x0, 0xe6c7, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000180)='./bus\x00', 0x0) mkdirat(r6, &(0x7f0000000200)='./bus/file0\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x100) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0x40049366, 0x0) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) 9.408378355s ago: executing program 1 (id=367): r0 = socket$inet(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_team\x00', 0x0}) bind$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) 9.234967019s ago: executing program 2 (id=368): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xee, 0x1af, &(0x7f0000000580)="$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") r0 = socket$unix(0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r1, r0, 0x0) r5 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x18) renameat2(r5, &(0x7f0000000000)='./file1\x00', r6, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000002240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000440)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 9.136525094s ago: executing program 1 (id=369): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000a00)) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f630664"], 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043c1103c8000052000000000200000000000000"], 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x111, 0x6}}, 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') lseek(r2, 0x4, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924], 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, 0x0, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffc, 0x0}) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) uname(&(0x7f0000000000)=""/182) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c800fd00f90001000fc304000700000002050400000006000300080003000c000000060003a90800ff00ec67000026070500140003000c00bc00040904000000240200007805010011030240577904024a000900ff0304090200050200faff02000702ff0706100702ffff02000000ff7f0000ff07ffdf01020e0007021b1b050100070208000102c686bd19ff0256f90000000000000000010000000b0059000400e9aaa6aba2538f93b03e6aef22892d9b98385e1df1b3891207ed9f22959c7423ade5b055495719ea413f488160e3c063ef6461cf331038d364cb0d6f9cec069df069488d19df8ebb3ce2079c2e30af76940121e9ec219f07a00400ffff0101"], 0x102) ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f00000000c0)=0x1) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) 8.176984591s ago: executing program 2 (id=370): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) shutdown(r0, 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_io_uring_setup(0x5b49, &(0x7f0000000140)={0x0, 0x0, 0x8}, &(0x7f00000001c0), &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x3, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x6fffffff}, {0x100c, 0x1, 0xfd, 0x7}, {0x8002, 0x1, 0x10}]}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) landlock_create_ruleset(0x0, 0x0, 0x0) pidfd_send_signal(r5, 0x0, 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) r6 = inotify_init1(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000001380), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0405626, &(0x7f0000000000)) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000002700)=ANY=[@ANYBLOB="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"], 0x174c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) inotify_add_watch(r6, &(0x7f0000000040)='.\x00', 0x5000000a) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x0, 0x1bd) preadv2(r9, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.176495745s ago: executing program 4 (id=371): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f00000011c0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES16, @ANYBLOB="9dbe489148f5b0e0c5e214038a36626e9f8f050f644e657b8323ec5e815bd46e72a7be382f1dac2b9cab191c72157f4964d577a371c97b5183d1565f935cd8afbe4247a43f9e09be676243a2678bd2ef1d79802a9846a9bfe63bb1a18fb6", @ANYRES16], 0x1, 0x1cb, &(0x7f0000000280)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBQuMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xy4uNgcHvzElPXa1lsswMrZ7a8hW3tNetOQURk0vtMXKTXMwjwcwQmnpkUbEQQ3ZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT8xrykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE8YP//83uIKcmNLAkKYQxpjECQ0IZn42twUKLcknmEKPciydKWFxQKjq5E9LzbcOiW4ztj11YDvDc/g4z5qCPkGj4xIMTgsF/8uAjEloaCjTWMu01HbBlyKNvxJeq42dMhjc7ZmWwQKUpQFEroTyZMF6EpJXeOhoahqlJCc0bGKBOmDrHs7VAg0MSNGmwsDAsJ0RFrcQcA3GGAWjYBSMglEwCkbBKBgFo2AUjIJRMCIAIAAA///cmpKG") socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_open_procfs(0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x6}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a8", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.84304998s ago: executing program 4 (id=372): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f00000000c0), 0x1, 0x765, &(0x7f0000000800)="$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") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) times(&(0x7f00000000c0)) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x66, 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280), 0x8) 7.78631192s ago: executing program 0 (id=373): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="02c8200a00d3000504010502000600"], 0xf) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x2, 0x0, @local}, 0x1c) socket(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000100)={0x1, &(0x7f0000000440)=[{0x8, 0x0, 0x3}]}) r3 = socket$netlink(0x10, 0x3, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c100000000000224e0000", 0x58}], 0x1) fsopen(&(0x7f00000003c0)='ncpfs\x00', 0x1) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f00000017c0)=0x8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rxrpc(0x21, 0x2, 0xa) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0xa3, 0x0) 7.143428441s ago: executing program 2 (id=374): syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x22) syz_emit_vhci(&(0x7f0000000800)=ANY=[@ANYBLOB="043e1f0a5fc9000400ffffffffffffffffffffffff000000000000ff07858aff010555bf693fe7c03dc492694564785c7ab762c5ad7dec6aae2e3c1f7bd00ce23337269c31ba0815f002dea9845577aca70422f5c1fa808491b0304889f407c82476615f7d8bf01b802cb092af27cf23e8c4b68c62b63a9b791a9a118c0c8a19859a76d4ef888561b6767956f0e42b392288ae7e7b53d605cbb5de2d33cf66094d3015c495fb8073f0a5a1e855e8784f36e995dba0a3b1bfb4"], 0x22) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0604ea00000000000054679202"], 0xd) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042c1103c80000000200000058b3275f8bff030000074000000000008000000000"], 0x14) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="03c90058cd294fbcedc17ccfa4025a1e5777b4814b0663f4852deb97559d7624bd505e611ef8a55937ffffffffffffff7f293408287051702a79e7442da8de9e11bf6e9357e6edea2d50e82f055f6f923cd4e59e223193d487cfa619"], 0x5c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780), 0x208e24b) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/121, 0x79}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="030f0404000000000000001620"], 0x7) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x1608d87, 0x4, 0x10001, 0x4, 0x8000, 0x0, 0x5, 0x7, 0x7b7, 0x0, 0x414, 0x4, 0x10001, 0xfffffffffffff924, 0xffffffff7fffffff], 0x10000, 0x286381}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x80984120, &(0x7f0000000080)) mlock2(&(0x7f0000ab9000/0x1000)=nil, 0x1000, 0x1) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYRESDEC=r0], 0xb) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) msync(&(0x7f0000377000/0x4000)=nil, 0x4000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="044206000000000000"], 0x9) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) bind$llc(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040504a5c80068"], 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) 6.880111633s ago: executing program 1 (id=375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r4], 0x58}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5a}]}, 0x2c}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000240), 0x9, 0x20000) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000000)={0x1f, 0x0, 0x0}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000040)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000540)) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) socket$inet6(0xa, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRESHEX=r6], &(0x7f0000000100)={0x0, 0x0, 0x25, &(0x7f00000000c0)=ANY=[], 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x4c0a}}]}) socket$inet_udplite(0x2, 0x2, 0x88) 6.087465162s ago: executing program 3 (id=376): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000280)="e1fe062bdab9ac728d88ec2db1e86a6eee9ee91df6ae561f41cfa2eb9f78636980f0f6b4ca78ab59e9794c758b600df5db79876070328b0acc1863a3a48fff432f479181554fc969097f02ce90392b29cca5eb2ae86db5f2f5e986463a444dea1e6f44bf66c51bcc2a96934d300c2d8976e092675ac4726a3e9fee4441ace546049f8575e275adeceaedb574a1586d89366039f77fa59de83026737259eab884a29f41733a5be7af1e18c4d58e8972483b8267a7f1", 0xb5, 0x4001, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000001380)="2e2b0812635ff32dcfd350deceeb7133524ecd9e8dce2e592df1f0fa8d47671266665509974bf2585b626b7b7871367c72631c33a2846ed7c5a5cf0c69eda6dc95c3554e277a658f40b37983ddb52f96785c83c5f862476bc5c7e05eb504b80d99fb55b309485006a7f47a7bc833c9e5729943a877be6682b3948ae0e201e3a7e2af197e4b87503db3b605fd9daaffced10565cbbffce2441053fb6d2dd747d917c28352", 0xa4, 0x4000, &(0x7f0000001440)={0x2, 0x0, @private=0xa010100}, 0x10) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r5) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r7 = request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', r6) r8 = add_key$user(&(0x7f0000000240), &(0x7f00000006c0)={'syz', 0x1}, &(0x7f0000000500)="3fd8", 0x2, r6) r9 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r9, 0xee00, 0xffffffffffffffff) keyctl$setperm(0x5, r9, 0x0) keyctl$chown(0x4, r9, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000300)={r9, r7, r8}, &(0x7f0000000340)=""/197, 0xc5, &(0x7f0000000680)={&(0x7f0000000440)={'sha256-avx\x00'}, &(0x7f0000000580)="707adafc6dc1f5848de9d72dbe8157eb7c42c3aee040a104df25956930f29c2f190f11ad989240b0037578d6d8c49edddba7587e470cde580fae8d43d326e8a542dbb7a0d29c5d21ff8f440f3ec5f9ef0ea890563e1dadb0280e40e162405a813060f4a4b9240427a56491d4499c0e70c312eab3f0fe537169677a3849e48e47f10ec56ae9c52b9cdff38498e564a9f668fd4ae53a1a40f1f503bf542c4900383c00830ba4a1a27baaac9c90807764151738687bda8d3c2c8843a0063d48bd7c3b4b5391ac369d89c4675621cf354d0e11c2edcba3c18de1a654f4f056ba94dc", 0xe0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9}, 0x14}}, 0x0) 5.94274287s ago: executing program 2 (id=377): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xc0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x2}, 0x0, [0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x80000001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x717a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xf, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x5, 0x0, 0x402], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x81f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x200, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf25, 0x0, 0x7], [0x0, 0x0, 0xe6c7, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000180)='./bus\x00', 0x0) mkdirat(r6, &(0x7f0000000200)='./bus/file0\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x100) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0x40049366, 0x0) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) 4.866064984s ago: executing program 3 (id=378): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0xc0505405, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r1, 0x101, 0xa, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x4) listen(0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044051) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000010401040000000000000000000000000a000200000000001c0000000500010001000080c25e879aca591e3819"], 0x28}}, 0x0) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) poll(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) 4.591042713s ago: executing program 0 (id=379): syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="000037ab7d818c7880beaf956770407d7a05c1bb0aa6aebef6bd46f82853825b67c84a908adca22e7266dfd4f239a3abbb98f982f6e8d45852b4cc9d5fdab730a45584d799dfdd019bf9611c91a31edc45c2f064bf78d886991b3c7941edf04673356b94520592b962a1dab9fa4c3c9d49d87496c1ce44b6dec02025820fb3ed45c925fe051befbf13f0e7026dc95bd3fc0a8e63f7da4659261c70f15ede8a630c105f515b104972c655bab6adc2b7b2d07967b2d2250748d0c4ead793be8df6000000000000000000000000155c8ff98b9b99aec7ca377070cae0adee5c07ae8ceb858c2a9d2e6976b510e64a19254bf2686cde54aeca904df99159ba522010aba8c420a9a1acf0176b46b1802f5b28cfab8c9004777dde3fcb98de01819c0dc84e"], 0x22) syz_emit_vhci(&(0x7f0000000800)=ANY=[@ANYBLOB="043e1f0a5fc9000400ffffffffffffffffffffffff000000000000ff07858aff010555bf693fe7c03dc492694564785c7ab762c5ad7dec6aae2e3c1f7bd00ce23337269c31ba0815f002dea9845577aca70422f5c1fa808491b0304889f407c82476615f7d8bf01b802cb092af27cf23e8c4b68c62b63a9b791a9a118c0c8a19859a76d4ef888561b67679"], 0x22) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0604ea00000000000054679202"], 0xd) syz_emit_vhci(0x0, 0x14) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="03c90058cd294fbcedc17ccfa4025a1e5777b4814b0663f4852deb97559d7624bd505e611ef8a55937ffffffffffffff7f293408287051702a79e7442da8de9e11bf6e9357e6edea2d50e82f055f6f923cd4e59e223193d487cfa619"], 0x5c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780), 0x208e24b) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/121, 0x79}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="030f0404000000000000001620"], 0x7) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x1608d87, 0x4, 0x10001, 0x4, 0x8000, 0x0, 0x5, 0x7, 0x7b7, 0x0, 0x414, 0x4, 0x10001, 0xfffffffffffff924, 0xffffffff7fffffff], 0x10000, 0x286381}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x80984120, &(0x7f0000000080)) mlock(&(0x7f0000001000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ab9000/0x1000)=nil, 0x1000, 0x1) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYRESDEC=r0], 0xb) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) msync(&(0x7f0000377000/0x4000)=nil, 0x4000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="044206000000000000"], 0x9) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) bind$llc(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040504a5c80068"], 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) 4.582162255s ago: executing program 4 (id=380): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x4010, r0, 0x132ca000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20000050) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14552, &(0x7f0000000240)=ANY=[], 0xfe, 0x11f3, &(0x7f0000000980)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000280)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x200000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.937261528s ago: executing program 3 (id=381): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004f80)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1}}], 0x1, 0x0, 0x0) 3.607206396s ago: executing program 1 (id=382): r0 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x28, 0x0, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) connect$vsock_stream(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1b", 0x1}], 0x1}}], 0x1, 0x0) accept4$unix(r4, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}]}}]}, 0x3c}}, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.592570857s ago: executing program 2 (id=383): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f00000011c0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES16, @ANYBLOB="9dbe489148f5b0e0c5e214038a36626e9f8f050f644e657b8323ec5e815bd46e72a7be382f1dac2b9cab191c72157f4964d577a371c97b5183d1565f935cd8afbe4247a43f9e09be676243a2678bd2ef1d79802a9846a9bfe63bb1a18fb6", @ANYRES16], 0x1, 0x1cb, &(0x7f0000000280)="$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") socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_open_procfs(0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x6}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a8", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.59178641s ago: executing program 4 (id=384): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) shutdown(r0, 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_io_uring_setup(0x5b49, &(0x7f0000000140)={0x0, 0x0, 0x8}, &(0x7f00000001c0), &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x3, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x6fffffff}, {0x100c, 0x1, 0xfd, 0x7}, {0x8002, 0x1, 0x10}]}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) landlock_create_ruleset(0x0, 0x0, 0x0) pidfd_send_signal(r5, 0x0, 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) r6 = inotify_init1(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000001380), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0405626, &(0x7f0000000000)) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000002700)=ANY=[@ANYBLOB="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"], 0x174c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) inotify_add_watch(r6, &(0x7f0000000040)='.\x00', 0x5000000a) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x0, 0x1bd) preadv2(r9, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.935319618s ago: executing program 0 (id=385): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000a00)) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f630664"], 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043c1103c8000052000000000200000000000000"], 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x111, 0x6}}, 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') lseek(r2, 0x4, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924], 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, 0x0, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffc, 0x0}) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) uname(&(0x7f0000000000)=""/182) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x102) ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f00000000c0)=0x1) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) 2.38705536s ago: executing program 2 (id=386): pipe2(&(0x7f0000000300), 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002bc0)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x7, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x2ca, 0x0, &(0x7f0000000140)="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"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x91, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x2f}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x0, 0x1ff}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x0, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6d, 0x0, 0xfe}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x59d}]}}}}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x8, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}]}, 0x38}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0xa5, 0xaf, 0x5f, 0x20, 0xe8d, 0x23, 0x3aab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x56, 0x0, 0x0, 0xa}}]}}]}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="00000000000080000000148a3045e2d59b2f835be5ea0e158eca154cbab5354fbf743f5fc122403262404ab03d579ff00ae8803b1d4b880ed1f02b5aa5b0c2883f9126da4a26a5f382ff54dd48e667192affe59dc40ee4fc3ec1030a0850e9281e119ab2de5ada1393ab9069", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001100028005000100030000000500150000000000"], 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0x1fbf, &(0x7f0000000040)={0x0, 0x0, 0x140}, &(0x7f00000000c0), &(0x7f0000000100)) 2.386558504s ago: executing program 4 (id=387): syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x22) syz_emit_vhci(&(0x7f0000000800)=ANY=[@ANYBLOB="043e1f0a5fc9000400ffffffffffffffffffffffff000000000000ff07858aff010555bf693fe7c03dc492694564785c7ab762c5ad7dec6aae2e3c1f7bd00ce23337269c31ba0815f002dea9845577aca70422f5c1fa808491b0304889f407c82476615f7d8bf01b802cb092af27cf23e8c4b68c62b63a9b791a9a118c0c8a19859a76d4ef888561b6767956f0e42b392288ae7e7b53d605cbb5de2d33cf66094d3015c495fb8073f0a5a1e855e8784f36e995dba0a3b1bfb4"], 0x22) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0604ea00000000000054679202"], 0xd) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042c1103c80000000200000058b3275f8bff03000007400000000000800000000000"], 0x14) syz_emit_vhci(0x0, 0x5c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780), 0x208e24b) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/121, 0x79}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="030f0404000000000000001620"], 0x7) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x1608d87, 0x4, 0x10001, 0x4, 0x8000, 0x0, 0x5, 0x7, 0x7b7, 0x0, 0x414, 0x4, 0x10001, 0xfffffffffffff924, 0xffffffff7fffffff], 0x10000, 0x286381}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x80984120, &(0x7f0000000080)) mlock2(&(0x7f0000ab9000/0x1000)=nil, 0x1000, 0x1) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYRESDEC=r0], 0xb) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) msync(&(0x7f0000377000/0x4000)=nil, 0x4000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="044206000000000000"], 0x9) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) bind$llc(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040504a5c80068"], 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) 2.261786187s ago: executing program 3 (id=388): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000280)="e1fe062bdab9ac728d88ec2db1e86a6eee9ee91df6ae561f41cfa2eb9f78636980f0f6b4ca78ab59e9794c758b600df5db79876070328b0acc1863a3a48fff432f479181554fc969097f02ce90392b29cca5eb2ae86db5f2f5e986463a444dea1e6f44bf66c51bcc2a96934d300c2d8976e092675ac4726a3e9fee4441ace546049f8575e275adeceaedb574a1586d89366039f77fa59de83026737259eab884a29f41733a5be7af1e18c4d58e8972483b8267a7f1", 0xb5, 0x4001, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000001380)="2e2b0812635ff32dcfd350deceeb7133524ecd9e8dce2e592df1f0fa8d47671266665509974bf2585b626b7b7871367c72631c33a2846ed7c5a5cf0c69eda6dc95c3554e277a658f40b37983ddb52f96785c83c5f862476bc5c7e05eb504b80d99fb55b309485006a7f47a7bc833c9e5729943a877be6682b3948ae0e201e3a7e2af197e4b87503db3b605fd9daaffced10565cbbffce2441053fb6d2dd747d917c28352", 0xa4, 0x4000, &(0x7f0000001440)={0x2, 0x0, @private=0xa010100}, 0x10) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r5) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r7 = request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', r6) r8 = add_key$user(&(0x7f0000000240), &(0x7f00000006c0)={'syz', 0x1}, &(0x7f0000000500)="3fd8", 0x2, r6) r9 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r9, 0xee00, 0xffffffffffffffff) keyctl$setperm(0x5, r9, 0x0) keyctl$chown(0x4, r9, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000300)={r9, r7, r8}, &(0x7f0000000340)=""/197, 0xc5, &(0x7f0000000680)={&(0x7f0000000440)={'sha256-avx\x00'}, &(0x7f0000000580)="707adafc6dc1f5848de9d72dbe8157eb7c42c3aee040a104df25956930f29c2f190f11ad989240b0037578d6d8c49edddba7587e470cde580fae8d43d326e8a542dbb7a0d29c5d21ff8f440f3ec5f9ef0ea890563e1dadb0280e40e162405a813060f4a4b9240427a56491d4499c0e70c312eab3f0fe537169677a3849e48e47f10ec56ae9c52b9cdff38498e564a9f668fd4ae53a1a40f1f503bf542c4900383c00830ba4a1a27baaac9c90807764151738687bda8d3c2c8843a0063d48bd7c3b4b5391ac369d89c4675621cf354d0e11c2edcba3c18de1a654f4f056ba94dc", 0xe0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9}, 0x14}}, 0x0) 1.135710463s ago: executing program 3 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000240)={0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0xfffffffc, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)=@isdn={0x22, 0x5, 0x7f, 0xfe, 0xfb}, 0x80) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r2, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000a80)='./file0\x00', 0x0, 0x0) syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x94, &(0x7f0000000540)=ANY=[], 0x0, 0x9eb8, &(0x7f0000001600)="$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") statfs(&(0x7f0000000140)='./file0\x00', 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, 0x0) 547.262644ms ago: executing program 3 (id=390): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f00000000c0), 0x1, 0x765, &(0x7f0000000800)="$eJzs3c1rHOUfAPDvbJKmv7Q/E0HQegoIGijdmBpbBQ8VDyJYKOjZdtlsQ80mW7Kb0oSAFhG8CCoeBL307Eu9efXlqv+FB2mpmhYrHiQyu7PpNtltN22SRffzgWmf55nZPPPdZ2aeZ/cZdgLoW+PpP7mIQxHxQRIxmpUnETFUTw1GnGhsd2tttZguSayvv/ZbUt/m5tpqMVpekzqQZR6LiO/fjTic21pvdXllrlAulxaz/GRt/vxkdXnlyLn5wmxptrRwbGp6+ujxZ48f27lY//hp5eC1D19+6qsTf73z6JX3f0jiRBzM1rXGsVPGYzx7T4bSt/AOL+10ZT2W9HoHuC/pqTnQOMvjUIzGQD0FAPyXvRUR6wBAn0n0/wDQZ5rfA9xcWy02l95+I7G3rr8YEfsb8TfnNxtrBrM5u/31edCRm0k2M9KYzEwiYmwH6h+PiM++eeOLdIldmocEaOftSxFxZmx86/U/2XLPwnY93cU245vyrn+wd75Nxz/PtRv/5TbGP3HH+KdhuM25ez/uff7nru5ANR2l478XWu5tu9USf2ZsIMv9vz7mG0rOniuX0mvbQxExEUPDaX7qLnVM3Pj7Rqd1reO/3z968/O0/vT/21vkrg4O3/mamUKt8CAxt7p+KeLxwXbxJxvtn7Rp/7TsVJd1vPL8e592WpfGn8bbXLbGv7vWL0c82bb9b9/Rltz1/sTJ+uEw2Two2vj6509G2pUf2dT+6ZLW3/wssBfS9h+5e/xjSev9mtXt1/Hj5dHvOq27d/ztj/99yev19L6s7GKhVlucitiXvLq1/Ojt1zbzze3T+CeeaH/+bz7+11v2If1MeKbL+Aev/frl/ce/u9L4Z7bV/ttPXLk1N9Cp/u7af7qemshKurn+dbuDD/LeAQAAAAAAAAAAAAAAAAAAAAAAAEC3chFxMJJcfiOdy+XzjWd4PxIjuXKlWjt8trK0MBP1Z2WPxVCu+VOXoy2/hzqV/R5+M390U/6ZiHg4Ij4e/l89ny9WyjO9Dh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgc6PP8/9ctwr/cOANg1+3u9AwDAntP/A0D/0f8DQP/R/wNA/9H/A0D/0f8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwy06dPJku63+urRbT/MyF5aW5yoUjM6XqXH5+qZgvVhbP52crldlyKV+szN/r75UrlfPTsbB0cbJWqtYmq8srp+crSwu10+fmC7Ol06WhPYkKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALanurwyVyiXS4sSEhISG4leX5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/h3+CQAA///Q6StZ") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) times(&(0x7f00000000c0)) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x66, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={r4}, 0x8) 395.778215ms ago: executing program 0 (id=391): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0xc0505405, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r1, 0x101, 0xa, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x4) listen(0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044051) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000010401040000000000000000000000000a000200000000001c0000000500010001000080c25e879aca591e3819"], 0x28}}, 0x0) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) poll(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) 0s ago: executing program 1 (id=392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r4], 0x58}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5a}]}, 0x2c}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000240), 0x9, 0x20000) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000000)={0x1f, 0x0, 0x0}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000040)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000540)) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) socket$inet6(0xa, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRESHEX=r6], &(0x7f0000000100)={0x0, 0x0, 0x25, &(0x7f00000000c0)=ANY=[], 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x4c0a}}]}) socket$inet_udplite(0x2, 0x2, 0x88) kernel console output (not intermixed with test programs): terface: batadv_slave_1 [ 58.144930][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.171392][ T5089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.208357][ T5086] team0: Port device team_slave_1 added [ 58.255214][ T5092] hsr_slave_0: entered promiscuous mode [ 58.261760][ T5092] hsr_slave_1: entered promiscuous mode [ 58.267918][ T5092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.275596][ T5092] Cannot create hsr debugfs directory [ 58.302130][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.309148][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.335102][ T5086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.362629][ T5089] hsr_slave_0: entered promiscuous mode [ 58.370178][ T5089] hsr_slave_1: entered promiscuous mode [ 58.376285][ T5089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.384041][ T5089] Cannot create hsr debugfs directory [ 58.405243][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.412466][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.439249][ T5086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.626820][ T5086] hsr_slave_0: entered promiscuous mode [ 58.634851][ T5086] hsr_slave_1: entered promiscuous mode [ 58.642282][ T5086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.649922][ T5086] Cannot create hsr debugfs directory [ 58.775563][ T5087] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.817465][ T5087] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.856878][ T5087] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.866345][ T5087] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.975624][ T5088] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.985765][ T5088] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.995996][ T5088] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.007491][ T5088] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.085195][ T5086] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.103949][ T5086] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.116444][ T5086] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.128420][ T5086] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.247429][ T5092] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.261559][ T5092] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.273067][ T5092] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.283602][ T5092] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.391750][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.401417][ T5089] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.418050][ T5089] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.428278][ T5089] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.439469][ T5089] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.457783][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.486262][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.556183][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.563497][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.583251][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.590383][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.625210][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.662789][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.670062][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.693572][ T5086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.727747][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.734924][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.828571][ T5086] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.867595][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.874833][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.882579][ T4490] Bluetooth: hci1: command tx timeout [ 59.894408][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.901616][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.927836][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.954215][ T5088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.964958][ T4490] Bluetooth: hci3: command tx timeout [ 59.965006][ T4490] Bluetooth: hci4: command tx timeout [ 59.970418][ T4490] Bluetooth: hci0: command tx timeout [ 59.970546][ T5097] Bluetooth: hci2: command tx timeout [ 60.065783][ T5092] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.094092][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.101373][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.114143][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.121277][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.163691][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.193284][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.262327][ T5089] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.323645][ T5092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.345701][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.352920][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.368560][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.375765][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.458045][ T5087] veth0_vlan: entered promiscuous mode [ 60.496338][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.535960][ T5087] veth1_vlan: entered promiscuous mode [ 60.565229][ T5089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.727601][ T5087] veth0_macvtap: entered promiscuous mode [ 60.755272][ T5086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.782688][ T5087] veth1_macvtap: entered promiscuous mode [ 60.802989][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.828541][ T5088] veth0_vlan: entered promiscuous mode [ 60.877896][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.901242][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.914177][ T5088] veth1_vlan: entered promiscuous mode [ 60.945009][ T5087] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.955314][ T5087] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.964093][ T5087] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.972855][ T5087] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.991646][ T5092] veth0_vlan: entered promiscuous mode [ 61.024241][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.062570][ T5092] veth1_vlan: entered promiscuous mode [ 61.118644][ T5088] veth0_macvtap: entered promiscuous mode [ 61.197240][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.211055][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.212785][ T5088] veth1_macvtap: entered promiscuous mode [ 61.306728][ T5092] veth0_macvtap: entered promiscuous mode [ 61.316227][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.317040][ T5089] veth0_vlan: entered promiscuous mode [ 61.329026][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.348598][ T5092] veth1_macvtap: entered promiscuous mode [ 61.358239][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.373207][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.386942][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.416353][ T5089] veth1_vlan: entered promiscuous mode [ 61.427879][ T5086] veth0_vlan: entered promiscuous mode [ 61.444025][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.456148][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.476600][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.491062][ T5088] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.501120][ T5088] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.509934][ T5088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.518635][ T5088] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.536517][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.547307][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.557780][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.571898][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.584106][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.607429][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.619464][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.640308][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.668146][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.684279][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.690547][ T5172] loop2: detected capacity change from 0 to 2048 [ 61.699337][ T5172] ======================================================= [ 61.699337][ T5172] WARNING: The mand mount option has been deprecated and [ 61.699337][ T5172] and is ignored by this kernel. Remove the mand [ 61.699337][ T5172] option from the mount to silence this warning. [ 61.699337][ T5172] ======================================================= [ 61.752460][ T5089] veth0_macvtap: entered promiscuous mode [ 61.763131][ T5172] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 61.774042][ T5086] veth1_vlan: entered promiscuous mode [ 61.792421][ T5172] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.801770][ T5092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.804321][ T5092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.822673][ T5092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.831893][ T5092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.855505][ T5089] veth1_macvtap: entered promiscuous mode [ 61.892856][ T5172] Process accounting resumed [ 61.916152][ T5086] veth0_macvtap: entered promiscuous mode [ 61.960517][ T5097] Bluetooth: hci1: command tx timeout [ 62.008113][ T5086] veth1_macvtap: entered promiscuous mode [ 62.039305][ T4490] Bluetooth: hci0: command tx timeout [ 62.040864][ T5104] Bluetooth: hci3: command tx timeout [ 62.044741][ T5097] Bluetooth: hci2: command tx timeout [ 62.050259][ T5093] Bluetooth: hci4: command tx timeout [ 62.066579][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.078027][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.091359][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.102270][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.113135][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.125004][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.154744][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.167282][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.223241][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.243039][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.254790][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.272199][ T5175] loop2: detected capacity change from 0 to 4096 [ 62.301167][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.316498][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.327196][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.340889][ T5175] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 62.348454][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.362372][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.382245][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.398987][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.409232][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.426752][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.438092][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.450118][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.470623][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.502131][ T5175] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 62.511129][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.525071][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.527607][ T5175] ntfs3: loop2: mft corrupted [ 62.542668][ T5175] ntfs3: loop2: Failed to load $Extend (-22). [ 62.549392][ T5175] ntfs3: loop2: Failed to initialize $Extend. [ 62.555877][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.578743][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.591940][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.605326][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.617365][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.628894][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.643220][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.697535][ T5086] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.707963][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.716255][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.738724][ T5086] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.748713][ T5086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.760517][ T5086] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.787592][ T5089] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.797356][ T5089] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.808819][ T5089] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.818332][ T5089] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.846419][ T1053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.868847][ T1053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.913378][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.928269][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.033255][ T2477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.058028][ T2477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.205245][ T1053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.240192][ T1053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.273639][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.297112][ T5180] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 63.305971][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.364617][ T5180] team0: Failed to send options change via netlink (err -105) [ 63.373127][ T5180] team0: Port device netdevsim0 added [ 63.412609][ T5184] loop0: detected capacity change from 0 to 512 [ 63.433579][ T5141] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.433792][ T5139] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 63.513656][ T5184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.528218][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.531895][ T5184] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.560003][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.586628][ T5183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 63.641899][ T5141] usb 3-1: Using ep0 maxpacket: 16 [ 63.667762][ T5141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 63.694592][ T5141] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 63.746322][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.746929][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.761455][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.789575][ T5139] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.806473][ T5141] usb 3-1: config 0 descriptor?? [ 63.880678][ T5191] loop4: detected capacity change from 0 to 1024 [ 63.942860][ T5191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.009032][ T5139] usb 4-1: Using ep0 maxpacket: 8 [ 64.032448][ T5139] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.049195][ T5093] Bluetooth: hci1: command tx timeout [ 64.068719][ T5139] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 64.077748][ T5139] usb 4-1: config 1 has no interface number 1 [ 64.087232][ T5139] usb 4-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 64.098622][ T5139] usb 4-1: config 1 interface 2 altsetting 220 has an invalid endpoint descriptor of length 3, skipping [ 64.111086][ T5139] usb 4-1: config 1 interface 2 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 64.130816][ T5093] Bluetooth: hci4: command tx timeout [ 64.130941][ T5104] Bluetooth: hci3: command tx timeout [ 64.136232][ T5093] Bluetooth: hci2: command tx timeout [ 64.136266][ T5093] Bluetooth: hci0: command tx timeout [ 64.165082][ T5139] usb 4-1: config 1 interface 2 has no altsetting 0 [ 64.218521][ T5139] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.245078][ T5086] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.453800][ T5178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.490943][ T5178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.508860][ T5139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.516901][ T5139] usb 4-1: Product: 쑿퉈ਝ쑻 [ 64.531236][ T5139] usb 4-1: Manufacturer: ф [ 64.537350][ T5139] usb 4-1: SerialNumber: syz [ 64.595897][ T5141] hid (null): unknown global tag 0x83 [ 64.768175][ T5141] hid (null): global environment stack underflow [ 65.171447][ T5141] hid-generic 0003:0158:0100.0001: unexpected long global item [ 65.230765][ T5141] hid-generic 0003:0158:0100.0001: probe with driver hid-generic failed with error -22 [ 65.384704][ T5139] usb 4-1: USB disconnect, device number 2 [ 65.495764][ T5141] usb 3-1: USB disconnect, device number 2 [ 65.552631][ T5204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 65.733448][ T5204] team0: entered promiscuous mode [ 65.738630][ T5204] team_slave_0: entered promiscuous mode [ 65.740309][ T5090] udevd[5090]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 65.745099][ T5204] team_slave_1: entered promiscuous mode [ 65.907473][ T5204] team_slave_0: entered allmulticast mode [ 65.953193][ T5203] loop4: detected capacity change from 0 to 4096 [ 66.041347][ T5204] team0: Port device team_slave_0 removed [ 66.067424][ T5092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.162414][ T5203] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 66.859647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.889587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 66.900237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.982229][ T5202] team0: left promiscuous mode [ 67.015256][ T5202] team_slave_1: left promiscuous mode [ 67.077518][ T5203] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 67.082026][ T5215] veth0_to_team: entered promiscuous mode [ 67.236241][ T5215] team0: Port device macvlan2 added [ 67.263330][ T5203] ntfs3: loop4: mft corrupted [ 67.273459][ T5203] ntfs3: loop4: Failed to load $Extend (-22). [ 67.280360][ T5203] ntfs3: loop4: Failed to initialize $Extend. [ 67.352277][ T5219] binder_alloc: 5210: binder_alloc_buf, no vma [ 67.934008][ T5217] loop0: detected capacity change from 0 to 64 [ 68.004168][ T5220] netlink: 'syz.1.14': attribute type 29 has an invalid length. [ 68.021408][ T5220] netlink: 'syz.1.14': attribute type 29 has an invalid length. [ 68.043457][ T5220] netlink: 'syz.1.14': attribute type 29 has an invalid length. [ 68.082603][ T5220] netlink: 'syz.1.14': attribute type 29 has an invalid length. [ 68.217768][ T5220] netlink: 'syz.1.14': attribute type 29 has an invalid length. [ 68.380909][ T29] audit: type=1326 audit(1720143808.873:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.3.15" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4283775bd9 code=0x0 [ 68.869222][ T5203] ntfs3: Unknown parameter '01777777777777777777777Xcv:Q' [ 69.127391][ T5232] capability: warning: `syz.3.17' uses deprecated v2 capabilities in a way that may be insecure [ 69.204704][ T5225] loop2: detected capacity change from 0 to 4096 [ 69.238243][ T5225] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 69.320029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.339081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.378870][ T5138] libceph: connect (1)[c::]:6789 error -101 [ 69.393099][ T5138] libceph: mon0 (1)[c::]:6789 connect error [ 69.422450][ T5138] libceph: connect (1)[c::]:6789 error -101 [ 69.429341][ T5138] libceph: mon0 (1)[c::]:6789 connect error [ 69.459886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.483409][ T5233] loop1: detected capacity change from 0 to 4096 [ 69.503446][ T5233] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 69.526114][ T5225] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 69.542682][ T5237] ceph: No mds server is up or the cluster is laggy [ 69.567630][ T5225] ntfs3: loop2: mft corrupted [ 69.577705][ T5225] ntfs3: loop2: Failed to load $Extend (-22). [ 69.600440][ T5225] ntfs3: loop2: Failed to initialize $Extend. [ 69.729088][ T5233] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 69.754678][ T5233] ntfs3: loop1: mft corrupted [ 69.762976][ T5233] ntfs3: loop1: Failed to load $Extend (-22). [ 69.770231][ T5233] ntfs3: loop1: Failed to initialize $Extend. [ 69.874343][ T5233] ntfs3: Unknown parameter '01777777777777777777777Xcv:Q' [ 71.220072][ T5261] netlink: 'syz.4.29': attribute type 29 has an invalid length. [ 71.254470][ T5261] netlink: 'syz.4.29': attribute type 29 has an invalid length. [ 71.316247][ T5261] netlink: 'syz.4.29': attribute type 29 has an invalid length. [ 71.387176][ T5265] netlink: 'syz.4.29': attribute type 29 has an invalid length. [ 71.432469][ T5261] netlink: 'syz.4.29': attribute type 29 has an invalid length. [ 71.559364][ T29] audit: type=1326 audit(1720143812.003:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5260 comm="syz.1.27" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feff2175bd9 code=0x0 [ 71.645426][ T5139] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 71.855150][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.884958][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.049049][ T5139] usb 4-1: Using ep0 maxpacket: 16 [ 72.109049][ T5139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 72.183836][ T5139] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 72.413636][ T5139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.426362][ T5139] usb 4-1: config 0 descriptor?? [ 73.196907][ T5280] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.474899][ T5264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.498140][ T5264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.579708][ T5139] hid (null): unknown global tag 0x83 [ 73.603229][ T5139] hid (null): global environment stack underflow [ 73.653354][ T5139] hid-generic 0003:0158:0100.0002: unexpected long global item [ 73.687558][ T5139] hid-generic 0003:0158:0100.0002: probe with driver hid-generic failed with error -22 [ 73.858889][ T58] usb 4-1: USB disconnect, device number 3 [ 74.101076][ T5286] loop4: detected capacity change from 0 to 4096 [ 74.115101][ T5273] loop2: detected capacity change from 0 to 40427 [ 74.123315][ T5286] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 74.181138][ T5273] F2FS-fs (loop2): invalid crc value [ 75.135098][ T5273] F2FS-fs (loop2): Found nat_bits in checkpoint [ 75.288036][ T5286] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 75.452726][ T5286] ntfs3: loop4: mft corrupted [ 75.462589][ T5286] ntfs3: loop4: Failed to load $Extend (-22). [ 75.473269][ T5286] ntfs3: loop4: Failed to initialize $Extend. [ 76.363338][ T5310] netlink: 'syz.3.41': attribute type 29 has an invalid length. [ 76.384940][ T5310] netlink: 'syz.3.41': attribute type 29 has an invalid length. [ 76.431484][ T5310] netlink: 'syz.3.41': attribute type 29 has an invalid length. [ 76.485529][ T5315] netlink: 'syz.3.41': attribute type 29 has an invalid length. [ 76.529245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.550495][ T5310] netlink: 'syz.3.41': attribute type 29 has an invalid length. [ 77.001087][ T8] cfg80211: failed to load regulatory.db [ 77.496630][ T29] audit: type=1326 audit(1720143817.973:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.2.43" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcd8775bd9 code=0x0 [ 77.816148][ T5329] loop3: detected capacity change from 0 to 512 [ 77.995140][ T5329] EXT4-fs: Ignoring removed bh option [ 78.045859][ T5329] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 78.924618][ T5333] loop2: detected capacity change from 0 to 4096 [ 78.980817][ T5333] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 79.020200][ T5329] EXT4-fs (loop3): 1 truncate cleaned up [ 79.081936][ T5329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.882148][ T5329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.829165][ T5333] ntfs3: loop2: Failed to read $UpCase (-4). [ 81.167573][ T5357] loop0: detected capacity change from 0 to 512 [ 81.209089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 81.257942][ T5357] EXT4-fs (loop0): 1 truncate cleaned up [ 81.390298][ T5357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.490116][ T5361] binder_alloc: 5354: binder_alloc_buf, no vma [ 82.202452][ T5093] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 82.249498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 82.257827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 82.453258][ T5358] loop3: detected capacity change from 0 to 4096 [ 82.457290][ T5363] Cannot find add_set index 0 as target [ 82.466935][ T5358] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 83.546616][ T5092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.923225][ T29] audit: type=1326 audit(1720143824.103:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.2.60" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcd8775bd9 code=0x0 [ 84.253768][ T5358] ntfs3: loop3: Failed to read $UpCase (-4). [ 84.279241][ T5093] Bluetooth: hci2: command tx timeout [ 84.694768][ T5383] Cannot find add_set index 0 as target [ 85.477737][ T5383] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 85.490983][ T5383] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 85.543252][ T5396] loop2: detected capacity change from 0 to 512 [ 85.572738][ T5396] EXT4-fs: Ignoring removed bh option [ 85.608156][ T5396] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 85.689445][ T5396] EXT4-fs (loop2): 1 truncate cleaned up [ 85.714918][ T5396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.752836][ T5396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.150971][ T5393] overlayfs: missing 'lowerdir' [ 86.171419][ T5398] loop4: detected capacity change from 0 to 4096 [ 86.244797][ T5398] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 86.358062][ T5413] netlink: 'syz.0.69': attribute type 29 has an invalid length. [ 86.399290][ T5413] netlink: 'syz.0.69': attribute type 29 has an invalid length. [ 86.433704][ T5385] loop3: detected capacity change from 0 to 32768 [ 86.464382][ T5415] netlink: 'syz.0.69': attribute type 29 has an invalid length. [ 86.480912][ T5398] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 86.499780][ T5385] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.64 (5385) [ 86.511085][ T5398] ntfs3: loop4: mft corrupted [ 86.537089][ T5398] ntfs3: loop4: Failed to load $Extend (-22). [ 86.544422][ T5398] ntfs3: loop4: Failed to initialize $Extend. [ 86.558268][ T5413] netlink: 'syz.0.69': attribute type 29 has an invalid length. [ 86.583823][ T5413] netlink: 'syz.0.69': attribute type 29 has an invalid length. [ 86.611178][ T5093] Bluetooth: hci4: command tx timeout [ 86.615839][ T5385] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.694536][ T5385] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 86.768847][ T5385] BTRFS info (device loop3): using free-space-tree [ 87.697666][ T5385] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 87.708325][ T5385] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 87.732380][ T5385] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 87.750666][ T5385] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 87.893102][ T5385] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 87.908996][ T5385] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 87.919352][ T5385] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 87.930996][ T5385] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 87.941394][ T5385] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 88.652180][ T5385] BTRFS error (device loop3): open_ctree failed [ 88.715438][ T5449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.72'. [ 88.875791][ T5452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.304161][ T29] audit: type=1326 audit(1720143829.553:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.0.73" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc9a575bd9 code=0x0 [ 89.793181][ T5437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.719606][ T5456] loop4: detected capacity change from 0 to 4096 [ 90.810107][ T5456] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 90.935714][ T5469] loop0: detected capacity change from 0 to 2048 [ 90.976858][ T5456] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 91.005552][ T5469] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 91.037941][ T5469] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.056636][ T5456] ntfs3: loop4: mft corrupted [ 91.066379][ T5456] ntfs3: loop4: Failed to load $Extend (-22). [ 91.072686][ T5456] ntfs3: loop4: Failed to initialize $Extend. [ 91.290004][ T5475] ntfs3: Unknown parameter '01777777777777777777777Xcv:Q' [ 91.418968][ T5481] netlink: 'syz.2.81': attribute type 29 has an invalid length. [ 91.452723][ T5481] netlink: 'syz.2.81': attribute type 29 has an invalid length. [ 91.502766][ T5483] netlink: 'syz.2.81': attribute type 29 has an invalid length. [ 91.551260][ T5481] netlink: 'syz.2.81': attribute type 29 has an invalid length. [ 91.564959][ T5481] netlink: 'syz.2.81': attribute type 29 has an invalid length. [ 91.712012][ T5486] netlink: 'syz.2.84': attribute type 10 has an invalid length. [ 91.774323][ T5489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.84'. [ 91.927979][ T5486] team0: Failed to send options change via netlink (err -105) [ 91.952957][ T5482] loop0: detected capacity change from 0 to 4096 [ 92.688873][ T5482] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 92.743998][ T5486] team0: Port device netdevsim0 added [ 92.771425][ T5141] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 92.799763][ T5138] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.823400][ T5482] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 92.885059][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.674370][ T5482] ntfs3: loop0: mft corrupted [ 93.684318][ T5482] ntfs3: loop0: Failed to load $Extend (-22). [ 93.690559][ T5482] ntfs3: loop0: Failed to initialize $Extend. [ 93.697116][ T5138] usb 2-1: Using ep0 maxpacket: 32 [ 93.724441][ T5138] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.737179][ T5138] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.748712][ T5138] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 93.762044][ T5138] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 93.781327][ T5138] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 93.878753][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 93.913430][ T5138] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 93.929283][ T5138] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.939141][ T5138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.948335][ T5138] usb 2-1: Product: syz [ 93.961526][ T5138] usb 2-1: Manufacturer: syz [ 93.966157][ T5138] usb 2-1: SerialNumber: syz [ 94.160844][ T29] audit: type=1326 audit(1720143834.573:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5499 comm="syz.4.86" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80a5f75bd9 code=0x0 [ 94.592211][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.710868][ T8] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 94.775448][ T5138] usb 2-1: can't set config #1, error -71 [ 94.778830][ T8] usb 3-1: config 1 has no interface number 1 [ 94.800780][ T8] usb 3-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 94.821826][ T5138] usb 2-1: USB disconnect, device number 2 [ 94.852955][ T8] usb 3-1: config 1 interface 2 altsetting 220 has an invalid endpoint descriptor of length 3, skipping [ 94.892522][ T8] usb 3-1: config 1 interface 2 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 94.909016][ T8] usb 3-1: config 1 interface 2 has no altsetting 0 [ 94.916263][ T8] usb 3-1: string descriptor 0 read error: -71 [ 94.928863][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.937937][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.976035][ T51] libceph: connect (1)[c::]:6789 error -101 [ 95.025449][ T51] libceph: mon0 (1)[c::]:6789 connect error [ 95.064494][ T5507] ceph: No mds server is up or the cluster is laggy [ 95.146167][ T8] usb 3-1: can't set config #1, error -71 [ 95.156123][ T8] usb 3-1: USB disconnect, device number 3 [ 95.890283][ T5138] libceph: connect (1)[c::]:6789 error -101 [ 95.915086][ T5138] libceph: mon0 (1)[c::]:6789 connect error [ 96.084691][ T5529] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.270713][ T5140] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.293908][ T5536] loop4: detected capacity change from 0 to 512 [ 96.300715][ T5512] loop1: detected capacity change from 0 to 4096 [ 96.330954][ T5512] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 96.349497][ T5536] EXT4-fs: Ignoring removed bh option [ 96.378127][ T5536] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 96.476324][ T5536] EXT4-fs (loop4): 1 truncate cleaned up [ 96.499754][ T5140] usb 1-1: Using ep0 maxpacket: 32 [ 96.510733][ T5536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.527630][ T5512] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 96.539093][ T5140] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.574958][ T5140] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.575053][ T5512] ntfs3: loop1: mft corrupted [ 96.588121][ T5536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.612080][ T5512] ntfs3: loop1: Failed to load $Extend (-22). [ 96.624642][ T5512] ntfs3: loop1: Failed to initialize $Extend. [ 96.628740][ T5140] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 96.650788][ T5140] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 96.662239][ T5140] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 96.690540][ T5140] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 96.840783][ T5140] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.851037][ T5140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.861198][ T5535] loop2: detected capacity change from 0 to 8192 [ 96.869123][ T5140] usb 1-1: Product: syz [ 96.873322][ T5140] usb 1-1: Manufacturer: syz [ 96.877929][ T5140] usb 1-1: SerialNumber: syz [ 96.902936][ T5535] FAT-fs (loop2): Unrecognized mount option ": " or missing value [ 97.000595][ T5512] ntfs3: Unknown parameter '01777777777777777777777Xcv:Q' [ 97.172348][ T5526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.240202][ T5526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.402767][ T5140] cdc_ncm 1-1:1.0: bind() failure [ 98.451790][ T5140] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 98.642001][ T5140] cdc_ncm 1-1:1.1: bind() failure [ 98.665071][ T5140] usb 1-1: USB disconnect, device number 2 [ 99.691037][ T5564] netlink: 'syz.1.98': attribute type 10 has an invalid length. [ 100.412321][ T5567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.98'. [ 100.432367][ T5564] team0: Failed to send options change via netlink (err -105) [ 100.455757][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.472338][ T5564] team0: Port device netdevsim0 added [ 100.494631][ T5093] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 100.513552][ T5138] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 100.618310][ T5563] loop2: detected capacity change from 0 to 4096 [ 100.655041][ T5563] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 100.670020][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 100.702539][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.715721][ T5571] Cannot find add_set index 0 as target [ 100.729334][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.748441][ T8] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.781433][ T8] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 100.784603][ T5141] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.816334][ T8] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 100.818978][ T29] audit: type=1326 audit(1720143841.293:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.3.97" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4283775bd9 code=0x0 [ 100.868600][ T5563] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 100.875909][ T8] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 100.890987][ T5563] ntfs3: loop2: mft corrupted [ 100.895863][ T5563] ntfs3: loop2: Failed to load $Extend (-22). [ 100.903341][ T5563] ntfs3: loop2: Failed to initialize $Extend. [ 100.950986][ T5571] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 100.968237][ T5571] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 100.979231][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.990752][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.000645][ T8] usb 1-1: Product: syz [ 101.006809][ T8] usb 1-1: Manufacturer: syz [ 101.019904][ T8] usb 1-1: SerialNumber: syz [ 101.045902][ T5141] usb 2-1: Using ep0 maxpacket: 8 [ 101.059231][ T5574] ntfs3: Unknown parameter '01777777777777777777777Xcv:Q' [ 101.079559][ T5141] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.099519][ T5141] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 101.121292][ T5141] usb 2-1: config 1 has no interface number 1 [ 101.128234][ T5141] usb 2-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 101.143697][ T5141] usb 2-1: config 1 interface 2 altsetting 220 has an invalid endpoint descriptor of length 3, skipping [ 101.163381][ T5141] usb 2-1: config 1 interface 2 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 101.177672][ T5141] usb 2-1: config 1 interface 2 has no altsetting 0 [ 101.191848][ T5141] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.207239][ T5141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.216403][ T5141] usb 2-1: Product: 쑿퉈ਝ쑻 [ 101.233091][ T5141] usb 2-1: Manufacturer: ф [ 101.248055][ T5141] usb 2-1: SerialNumber: syz [ 101.342850][ T5553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.381919][ T5553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.637976][ T8] cdc_ncm 1-1:1.0: bind() failure [ 101.662569][ T8] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 101.676149][ T5577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 101.685387][ T8] cdc_ncm 1-1:1.1: bind() failure [ 101.707608][ T8] usb 1-1: USB disconnect, device number 3 [ 101.774243][ T5141] usb 2-1: USB disconnect, device number 3 [ 102.032411][ T5585] loop2: detected capacity change from 0 to 512 [ 102.047949][ T5585] EXT4-fs: Ignoring removed bh option [ 102.069369][ T5199] udevd[5199]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.092221][ T5585] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 102.129790][ T5585] EXT4-fs (loop2): 1 truncate cleaned up [ 102.141630][ T5585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.170496][ T5585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.518970][ T5093] Bluetooth: hci0: command tx timeout [ 104.840165][ T5608] syz.0.112 (5608) used greatest stack depth: 18704 bytes left [ 107.278782][ T58] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.286471][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 107.463246][ T5093] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 107.530688][ T5630] netlink: 28 bytes leftover after parsing attributes in process `syz.4.117'. [ 107.621399][ T5636] Cannot find add_set index 0 as target [ 107.683845][ T5636] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 107.694520][ T5636] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 107.721260][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 107.839414][ T5189] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.909139][ T5641] netlink: 'syz.4.120': attribute type 10 has an invalid length. [ 107.943793][ T5641] team0: Failed to send options change via netlink (err -105) [ 107.963443][ T5641] team0: Port device netdevsim0 added [ 107.967425][ T5642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.120'. [ 108.089061][ T5189] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 108.116653][ T5189] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.136028][ T5189] usb 1-1: config 0 has no interface number 0 [ 108.143202][ T5189] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 108.159126][ T5189] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 108.180069][ T5189] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 108.193610][ T5189] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 108.231389][ T5189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.255397][ T5189] usb 1-1: config 0 descriptor?? [ 108.268923][ T5623] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 108.316570][ T5189] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 108.419992][ T58] usb 5-1: device descriptor read/64, error -32 [ 108.690580][ T5650] loop3: detected capacity change from 0 to 512 [ 108.772208][ T5138] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 108.793013][ T11] usb 1-1: Failed to submit usb control message: -71 [ 108.794245][ T5189] usb 1-1: USB disconnect, device number 4 [ 108.806195][ T11] usb 1-1: unable to send the bmi data to the device: -71 [ 108.806301][ T11] usb 1-1: unable to get target info from device [ 108.806367][ T11] usb 1-1: could not get target info (-71) [ 108.806706][ T11] usb 1-1: could not probe fw (-71) [ 109.483256][ T5093] Bluetooth: hci3: command tx timeout [ 109.498907][ T58] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.585885][ T5650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.639152][ T5650] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.179062][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 111.317594][ T58] usb 5-1: device descriptor read/all, error -71 [ 111.348811][ T5141] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.364340][ T58] usb usb5-port1: attempt power cycle [ 111.591256][ T5141] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.630015][ T5141] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.689775][ T5141] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 111.738766][ T5141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.785149][ T5141] usb 2-1: string descriptor 0 read error: -71 [ 111.882690][ T5141] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 111.924636][ T5141] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.599260][ T5141] usb 2-1: can't set config #1, error -71 [ 112.608430][ T5141] usb 2-1: USB disconnect, device number 4 [ 113.005711][ T5093] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 113.098802][ T58] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 113.170161][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 113.195504][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.225111][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.293331][ T58] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 113.303248][ T5696] Cannot find add_set index 0 as target [ 113.340971][ T58] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 113.385419][ T58] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 113.403245][ T5692] loop1: detected capacity change from 0 to 8192 [ 113.417736][ T58] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 113.430858][ T5692] FAT-fs (loop1): Unrecognized mount option ": " or missing value [ 113.440711][ T5696] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 113.459373][ T5696] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 113.477928][ T58] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.500699][ T5088] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.520856][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.539086][ T58] usb 5-1: Product: syz [ 113.557141][ T58] usb 5-1: Manufacturer: syz [ 113.595998][ T58] usb 5-1: SerialNumber: syz [ 113.691636][ T5093] Bluetooth: hci4: link tx timeout [ 113.697226][ T5093] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.707247][ T5097] Bluetooth: hci4: link tx timeout [ 113.712960][ T5097] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.859533][ T5684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.893385][ T5684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.125845][ T5097] Bluetooth: hci4: command tx timeout [ 116.685167][ T5715] netlink: 'syz.0.135': attribute type 10 has an invalid length. [ 116.964271][ T58] cdc_ncm 5-1:1.0: bind() failure [ 116.994275][ T58] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 117.036708][ T58] cdc_ncm 5-1:1.1: bind() failure [ 117.098154][ T58] usb 5-1: USB disconnect, device number 4 [ 117.103398][ T5715] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 117.160643][ T5093] Bluetooth: hci4: command 0x0406 tx timeout [ 117.419856][ T5729] loop2: detected capacity change from 0 to 2048 [ 117.656135][ T5729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.728875][ T5729] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.748586][ T5729] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 24 with max blocks 1 with error 28 [ 117.761978][ T5729] EXT4-fs (loop2): This should not happen!! Data will be lost [ 117.761978][ T5729] [ 117.774518][ T5729] EXT4-fs (loop2): Total free blocks count 0 [ 117.792822][ T5729] EXT4-fs (loop2): Free/Dirty block details [ 117.853316][ T29] audit: type=1804 audit(1720143858.343:9): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.141" name="/newroot/31/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 117.863712][ T5729] EXT4-fs (loop2): free_blocks=2415919104 [ 117.976403][ T5141] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.003409][ T5729] EXT4-fs (loop2): dirty_blocks=32 [ 118.012868][ T58] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.018465][ T5729] EXT4-fs (loop2): Block reservation details [ 118.060396][ T5729] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 118.430726][ T62] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 118.660548][ T5751] loop2: detected capacity change from 0 to 256 [ 118.689210][ T5141] usb 4-1: Using ep0 maxpacket: 16 [ 118.696507][ T58] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 118.718892][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.735021][ T5141] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 118.756643][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 118.766633][ T5141] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 118.787702][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.798980][ T5141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.821655][ T58] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 118.832165][ T5141] usb 4-1: config 0 descriptor?? [ 118.844371][ T58] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 118.853592][ T58] usb 5-1: Product: syz [ 118.857926][ T58] usb 5-1: Manufacturer: syz [ 118.880142][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 118.885424][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 118.916870][ T58] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 118.923395][ T5140] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.938797][ T58] cdc_wdm 5-1:1.0: Unknown control protocol [ 119.106397][ T5747] loop1: detected capacity change from 0 to 32768 [ 119.122078][ T5140] usb 1-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 119.124922][ T5113] usb 5-1: USB disconnect, device number 5 [ 119.139754][ T5747] XFS: ikeep mount option is deprecated. [ 119.145729][ T5140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.161506][ T5752] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 119.172377][ T5752] FAT-fs (loop2): Filesystem has been set read-only [ 119.179376][ T5752] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 119.189715][ T5752] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 119.191853][ T5747] XFS: ikeep mount option is deprecated. [ 119.203519][ T5140] usb 1-1: Product: syz [ 119.208431][ T29] audit: type=1800 audit(1720143859.693:10): pid=5752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.144" name="file1" dev="loop2" ino=1048597 res=0 errno=0 [ 119.210604][ T5140] usb 1-1: Manufacturer: syz [ 119.257213][ T5140] usb 1-1: SerialNumber: syz [ 119.289728][ T5732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.297908][ T5747] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.299446][ T5140] usb 1-1: config 0 descriptor?? [ 119.312495][ T5732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.327448][ T5140] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 119.337090][ T5141] hid (null): unknown global tag 0x83 [ 119.344446][ T5141] hid (null): global environment stack underflow [ 119.356865][ T5141] hid-generic 0003:0158:0100.0003: unexpected long global item [ 119.366179][ T5141] hid-generic 0003:0158:0100.0003: probe with driver hid-generic failed with error -22 [ 119.426233][ T5747] XFS (loop1): Ending clean mount [ 119.464283][ T29] audit: type=1800 audit(1720143859.953:11): pid=5747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.143" name="bus" dev="loop1" ino=9289 res=0 errno=0 [ 119.558377][ T5089] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.574286][ T8] usb 4-1: USB disconnect, device number 4 [ 122.270124][ T5140] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 122.494888][ T5140] usb 5-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 122.509210][ T5791] netlink: 'syz.3.153': attribute type 10 has an invalid length. [ 122.519062][ T5140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.548129][ T5140] usb 5-1: Product: syz [ 122.566120][ T5140] usb 5-1: Manufacturer: syz [ 122.569267][ T5791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.153'. [ 122.578759][ T5140] usb 5-1: SerialNumber: syz [ 122.614400][ T5140] usb 5-1: config 0 descriptor?? [ 122.644190][ T5140] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 123.659003][ T5189] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.830825][ T5140] usb 1-1: USB disconnect, device number 5 [ 124.701043][ T5189] usb 4-1: Using ep0 maxpacket: 8 [ 124.751851][ T5189] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.787661][ T5189] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 124.829352][ T5189] usb 4-1: config 1 has no interface number 1 [ 124.835519][ T5189] usb 4-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 124.894666][ T5189] usb 4-1: config 1 interface 2 altsetting 220 has an invalid endpoint descriptor of length 3, skipping [ 124.959036][ T5189] usb 4-1: config 1 interface 2 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 125.005016][ T5786] loop1: detected capacity change from 0 to 32768 [ 125.008863][ T5189] usb 4-1: config 1 interface 2 has no altsetting 0 [ 125.054229][ T5786] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.151 (5786) [ 125.056119][ T5189] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.110075][ T5786] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.137061][ T5189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.146330][ T5786] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 125.158595][ T5189] usb 4-1: Product: 쑿퉈ਝ쑻 [ 125.173493][ T5786] BTRFS info (device loop1): using free-space-tree [ 125.178797][ T5189] usb 4-1: Manufacturer: ф [ 125.180374][ T58] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.187162][ T5189] usb 4-1: SerialNumber: syz [ 125.283967][ T5786] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 125.284699][ T5786] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 125.390815][ T58] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 125.435630][ T58] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.464610][ T5786] BTRFS error (device loop1): open_ctree failed [ 125.469837][ T58] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.501694][ T58] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.578274][ T58] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 125.616626][ T5189] usb 4-1: USB disconnect, device number 5 [ 125.653762][ T58] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 125.697530][ T58] usb 3-1: Product: syz [ 125.727154][ T58] usb 3-1: Manufacturer: syz [ 125.749626][ T5831] loop3: detected capacity change from 0 to 256 [ 125.760895][ T58] cdc_wdm 3-1:1.0: skipping garbage [ 125.785087][ T58] cdc_wdm 3-1:1.0: skipping garbage [ 125.834300][ T58] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 125.869922][ T58] cdc_wdm 3-1:1.0: Unknown control protocol [ 125.931162][ T5199] udevd[5199]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.015979][ T5802] loop0: detected capacity change from 0 to 32768 [ 126.016209][ T5189] usb 3-1: USB disconnect, device number 4 [ 126.145741][ T5802] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 127.168814][ T5802] XFS (loop0): Ending clean mount [ 127.293321][ T5802] XFS (loop0): Quotacheck needed: Please wait. [ 127.301547][ T8] usb 5-1: USB disconnect, device number 6 [ 127.326418][ T5802] XFS (loop0): Quotacheck: Unsuccessful (Error -12): Disabling quotas. [ 127.369475][ T5848] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 127.379803][ T5848] FAT-fs (loop3): Filesystem has been set read-only [ 127.386514][ T5848] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 127.396834][ T5848] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 127.410398][ T29] audit: type=1800 audit(1720143867.903:12): pid=5848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.158" name="file1" dev="loop3" ino=1048600 res=0 errno=0 [ 127.451657][ T5802] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 127.466382][ T5802] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 127.578785][ T5140] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.808854][ T5140] usb 2-1: Using ep0 maxpacket: 8 [ 127.838244][ T5140] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.051771][ T5140] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.237442][ T5140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.402571][ T5140] usb 2-1: Product: syz [ 128.420465][ T5140] usb 2-1: Manufacturer: syz [ 128.447474][ T5140] usb 2-1: SerialNumber: syz [ 128.574800][ T5140] usb 2-1: bad CDC descriptors [ 128.714929][ T5093] Bluetooth: Unexpected start frame (len 10) [ 129.288893][ T5140] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 129.532855][ T5140] usb 5-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 129.568048][ T5140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.608017][ T5140] usb 5-1: Product: syz [ 129.628802][ T5140] usb 5-1: Manufacturer: syz [ 129.655164][ T5140] usb 5-1: SerialNumber: syz [ 129.697366][ T5140] usb 5-1: config 0 descriptor?? [ 129.733745][ T5140] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 130.158024][ T5882] Zero length message leads to an empty skb [ 130.194592][ T5882] loop3: detected capacity change from 0 to 64 [ 130.261289][ T5140] usb 2-1: USB disconnect, device number 5 [ 131.856972][ T5906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 132.029066][ T5140] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 132.132528][ T5896] loop1: detected capacity change from 0 to 32768 [ 132.155951][ T5896] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 132.198990][ T58] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.223468][ T5896] XFS (loop1): Ending clean mount [ 132.232651][ T5896] XFS (loop1): Quotacheck needed: Please wait. [ 132.241381][ T5140] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 132.264042][ T5140] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 132.274912][ T5140] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 132.284646][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.324890][ T5896] XFS (loop1): Quotacheck: Done. [ 132.388811][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 132.402328][ T58] usb 3-1: config 1 has an invalid interface descriptor of length 3, skipping [ 132.403247][ T5089] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 132.427320][ T58] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.446665][ T58] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 132.456811][ T58] usb 3-1: config 1 has no interface number 1 [ 132.469065][ T58] usb 3-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 132.487775][ T58] usb 3-1: config 1 interface 2 altsetting 220 has 0 endpoint descriptors, different from the interface descriptor's value: 113 [ 132.508815][ T58] usb 3-1: config 1 interface 2 has no altsetting 0 [ 132.532960][ T58] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.550953][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.559696][ T58] usb 3-1: Product: 쑿퉈ਝ쑻 [ 132.566918][ T58] usb 3-1: Manufacturer: ф [ 132.605123][ T58] usb 3-1: SerialNumber: syz [ 132.719379][ T5140] usb 1-1: USB disconnect, device number 6 [ 132.918815][ T58] usb 3-1: USB disconnect, device number 5 [ 133.122477][ T5188] usb 5-1: USB disconnect, device number 7 [ 133.147974][ T5921] loop1: detected capacity change from 0 to 8192 [ 133.161929][ T5921] FAT-fs (loop1): Unrecognized mount option ": " or missing value [ 133.223377][ T5199] udevd[5199]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.252143][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.258481][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.386466][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'. [ 133.765560][ T5937] veth0_to_team: entered promiscuous mode [ 133.802324][ T5937] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 134.349315][ T5949] netlink: 'syz.4.189': attribute type 10 has an invalid length. [ 134.384011][ T5949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.189'. [ 134.568775][ T58] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.728787][ T5113] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 134.902162][ T58] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 134.921470][ T5113] usb 5-1: Using ep0 maxpacket: 8 [ 134.935192][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.945857][ T58] usb 2-1: config 0 has no interface number 0 [ 134.949463][ T5113] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.957181][ T58] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 134.993618][ T58] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 135.028224][ T58] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 135.073461][ T5113] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 135.108678][ T5113] usb 5-1: config 1 has no interface number 1 [ 135.114839][ T5113] usb 5-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 135.147474][ T58] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 135.188406][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.200332][ T5113] usb 5-1: config 1 interface 2 altsetting 220 has an invalid endpoint descriptor of length 3, skipping [ 135.229989][ T58] usb 2-1: config 0 descriptor?? [ 135.236234][ T5948] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 135.264049][ T5113] usb 5-1: config 1 interface 2 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 135.308702][ T5113] usb 5-1: config 1 interface 2 has no altsetting 0 [ 135.319122][ T5113] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.340676][ T5113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.350194][ T58] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 135.378725][ T5113] usb 5-1: Product: 쑿퉈ਝ쑻 [ 135.384530][ T5113] usb 5-1: Manufacturer: ф [ 135.433994][ T5113] usb 5-1: SerialNumber: syz [ 135.554551][ T5958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.191'. [ 135.659138][ T5939] loop3: detected capacity change from 0 to 32768 [ 135.678080][ T5939] XFS: ikeep mount option is deprecated. [ 135.689921][ T5939] XFS: ikeep mount option is deprecated. [ 135.760187][ T5939] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.870614][ T5113] usb 5-1: USB disconnect, device number 8 [ 135.899787][ T58] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 136.096212][ T5939] XFS (loop3): Ending clean mount [ 136.140533][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 136.140935][ T5199] udevd[5199]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.178026][ T58] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.219038][ T29] audit: type=1800 audit(1720143876.703:13): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.185" name="bus" dev="loop3" ino=9289 res=0 errno=0 [ 136.224373][ T58] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 136.249328][ T29] audit: type=1800 audit(1720143876.733:14): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.185" name="bus" dev="loop3" ino=9289 res=0 errno=0 [ 136.333257][ T58] usb 3-1: config 1 has no interface number 1 [ 136.352661][ T58] usb 3-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 136.375086][ T58] usb 3-1: config 1 interface 2 altsetting 220 has an invalid endpoint descriptor of length 3, skipping [ 136.375562][ T5088] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.387082][ T58] usb 3-1: config 1 interface 2 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 136.414554][ T58] usb 3-1: config 1 interface 2 has no altsetting 0 [ 136.439178][ T5801] usb 2-1: Failed to submit usb control message: -110 [ 136.453705][ T58] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.470927][ T5801] usb 2-1: unable to send the bmi data to the device: -110 [ 136.478075][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.487639][ T58] usb 3-1: Product: 쑿퉈ਝ쑻 [ 136.497648][ T58] usb 3-1: Manufacturer: ф [ 136.513380][ T58] usb 3-1: SerialNumber: syz [ 136.523529][ T5801] usb 2-1: unable to get target info from device [ 136.533822][ T5801] usb 2-1: could not get target info (-110) [ 136.541312][ T5801] usb 2-1: could not probe fw (-110) [ 136.848611][ T58] usb 3-1: USB disconnect, device number 6 [ 136.933394][ T5973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.194'. [ 136.979624][ T5969] loop0: detected capacity change from 0 to 8192 [ 137.005400][ T5969] FAT-fs (loop0): Unrecognized mount option ": " or missing value [ 137.095265][ T5140] usb 2-1: USB disconnect, device number 6 [ 137.176514][ T5199] udevd[5199]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.278760][ T5113] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 137.328822][ T5188] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 137.401617][ T5984] netlink: 'syz.0.196': attribute type 10 has an invalid length. [ 137.420136][ T5984] bond0: (slave netdevsim0): Releasing backup interface [ 137.434951][ T5984] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 137.445898][ T5984] team0: Failed to send options change via netlink (err -105) [ 137.454133][ T5984] team0: Port device netdevsim0 added [ 137.471245][ T5985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.196'. [ 137.530638][ T5188] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 137.562410][ T5188] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 137.601839][ T5188] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 137.616214][ T5188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.628890][ T5113] usb 5-1: Using ep0 maxpacket: 8 [ 137.641159][ T5113] usb 5-1: config 1 has an invalid interface descriptor of length 3, skipping [ 137.703090][ T5987] binder: BINDER_SET_CONTEXT_MGR already set [ 137.709916][ T5987] binder: 5980:5987 ioctl 4018620d 20000040 returned -16 [ 138.226070][ T5188] usb 4-1: USB disconnect, device number 6 [ 138.296363][ T5113] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.312092][ T5113] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 138.321340][ T5113] usb 5-1: config 1 has no interface number 1 [ 138.327493][ T5113] usb 5-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 138.338593][ T5113] usb 5-1: config 1 interface 2 altsetting 220 has 0 endpoint descriptors, different from the interface descriptor's value: 113 [ 138.352528][ T5113] usb 5-1: config 1 interface 2 has no altsetting 0 [ 138.397039][ T5113] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.418827][ T5113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.437393][ T5113] usb 5-1: Product: 쑿퉈ਝ쑻 [ 138.447623][ T5113] usb 5-1: Manufacturer: ф [ 138.457675][ T5113] usb 5-1: SerialNumber: syz [ 138.464756][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 138.557295][ T5993] loop2: detected capacity change from 0 to 1024 [ 138.635220][ T5993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.689012][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 138.702393][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.759169][ T8] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 138.795554][ T5087] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.811726][ T8] usb 1-1: config 1 has no interface number 1 [ 138.840312][ T8] usb 1-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 138.859227][ T5113] usb 5-1: USB disconnect, device number 9 [ 138.860606][ T6001] loop3: detected capacity change from 0 to 1024 [ 138.882671][ T8] usb 1-1: config 1 interface 2 altsetting 220 has an invalid endpoint descriptor of length 3, skipping [ 138.929887][ T8] usb 1-1: config 1 interface 2 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 138.959193][ T8] usb 1-1: config 1 interface 2 has no altsetting 0 [ 138.960214][ T6001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.970513][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.991126][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.006695][ T8] usb 1-1: Product: 쑿퉈ਝ쑻 [ 139.018671][ T8] usb 1-1: Manufacturer: ф [ 139.023238][ T8] usb 1-1: SerialNumber: syz [ 139.140683][ T5199] udevd[5199]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.223936][ T5088] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.341395][ T5188] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 139.354297][ T8] usb 1-1: USB disconnect, device number 7 [ 139.518995][ T5140] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 139.562378][ T5188] usb 3-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 139.574735][ T6013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.207'. [ 139.587972][ T5188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.617504][ T5188] usb 3-1: Product: syz [ 139.650685][ T5188] usb 3-1: Manufacturer: syz [ 139.665784][ T5199] udevd[5199]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.678558][ T5188] usb 3-1: SerialNumber: syz [ 139.701382][ T6009] loop3: detected capacity change from 0 to 8192 [ 139.711172][ T5188] usb 3-1: config 0 descriptor?? [ 139.724937][ T6009] FAT-fs (loop3): Unrecognized mount option ": " or missing value [ 139.754804][ T5140] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 139.778041][ T5188] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 139.806558][ T5140] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.857407][ T5140] usb 2-1: config 0 has no interface number 0 [ 139.866840][ T5140] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 139.909211][ T5140] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 139.924934][ T5140] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 139.946616][ T5140] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 139.958285][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.969313][ T5141] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 140.018906][ T5140] usb 2-1: config 0 descriptor?? [ 140.048041][ T6007] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 140.136506][ T5140] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 140.198861][ T5141] usb 5-1: Using ep0 maxpacket: 8 [ 140.214744][ T5141] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.238090][ T5141] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 140.265489][ T5141] usb 5-1: config 1 has no interface number 1 [ 140.444182][ T6020] binder: BINDER_SET_CONTEXT_MGR already set [ 140.450234][ T6020] binder: 6018:6020 ioctl 4018620d 20000040 returned -16 [ 140.591190][ T5141] usb 5-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 140.653305][ T5141] usb 5-1: config 1 interface 2 altsetting 220 has an invalid endpoint descriptor of length 3, skipping [ 140.684991][ T6030] netlink: 76 bytes leftover after parsing attributes in process `syz.0.210'. [ 140.736269][ T5141] usb 5-1: config 1 interface 2 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 140.801118][ T5141] usb 5-1: config 1 interface 2 has no altsetting 0 [ 140.824246][ T5141] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.833892][ T5141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.842305][ T5141] usb 5-1: Product: 쑿퉈ਝ쑻 [ 140.851910][ T5141] usb 5-1: Manufacturer: ф [ 140.861739][ T5141] usb 5-1: SerialNumber: syz [ 141.155189][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 141.162357][ T5801] usb 2-1: Failed to submit usb control message: -110 [ 141.195479][ T5141] usb 5-1: USB disconnect, device number 10 [ 141.216197][ T5801] usb 2-1: unable to send the bmi data to the device: -110 [ 141.238206][ T6036] team_slave_0: entered promiscuous mode [ 141.240701][ T5801] usb 2-1: unable to get target info from device [ 141.265845][ T5801] usb 2-1: could not get target info (-110) [ 141.275557][ T5801] usb 2-1: could not probe fw (-110) [ 141.288837][ T6036] team_slave_0: entered allmulticast mode [ 141.336120][ T6036] team0: Port device team_slave_0 removed [ 141.373639][ T6040] loop0: detected capacity change from 0 to 512 [ 141.484581][ T5199] udevd[5199]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.487631][ T6040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.516249][ T6040] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.767041][ T5093] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 141.905097][ T6048] Cannot find add_set index 0 as target [ 142.015238][ T6048] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 142.023941][ T6048] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 142.048879][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 142.059186][ T5188] usb 2-1: USB disconnect, device number 7 [ 142.292970][ T8] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 142.336577][ T8] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 142.381029][ T8] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 142.405810][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.464723][ T6053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.217'. [ 142.799714][ T5113] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 142.835270][ T5139] usb 3-1: USB disconnect, device number 7 [ 142.867123][ T8] usb 5-1: USB disconnect, device number 11 [ 142.934406][ T5092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.010719][ T5113] usb 2-1: Using ep0 maxpacket: 8 [ 143.026180][ T5113] usb 2-1: config 1 has an invalid interface descriptor of length 3, skipping [ 143.068735][ T5113] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.242932][ T5113] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 143.308487][ T6063] binder: BINDER_SET_CONTEXT_MGR already set [ 143.314690][ T6063] binder: 6060:6063 ioctl 4018620d 20000040 returned -16 [ 143.406954][ T5113] usb 2-1: config 1 has no interface number 1 [ 143.635208][ T5113] usb 2-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 143.858824][ T5093] Bluetooth: hci3: command tx timeout [ 143.897804][ T5113] usb 2-1: config 1 interface 2 altsetting 220 has 0 endpoint descriptors, different from the interface descriptor's value: 113 [ 143.912494][ T5113] usb 2-1: config 1 interface 2 has no altsetting 0 [ 143.924410][ T5113] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.934017][ T5113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.942388][ T5113] usb 2-1: Product: 쑿퉈ਝ쑻 [ 143.947554][ T5113] usb 2-1: Manufacturer: ф [ 143.988822][ T5113] usb 2-1: SerialNumber: syz [ 144.024899][ T6065] netlink: 76 bytes leftover after parsing attributes in process `syz.3.221'. [ 144.073415][ T6058] loop2: detected capacity change from 0 to 8192 [ 144.078282][ T6067] loop0: detected capacity change from 0 to 1024 [ 144.133944][ T6058] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.173252][ T6067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.267088][ T5113] usb 2-1: USB disconnect, device number 8 [ 144.494348][ T5092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.542025][ T5199] udevd[5199]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.267331][ T6096] loop4: detected capacity change from 0 to 64 [ 145.399318][ T5141] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 145.580777][ T5141] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 145.597690][ T5141] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.615551][ T5141] usb 1-1: config 0 has no interface number 0 [ 145.629474][ T5188] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 145.642760][ T5141] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 145.671891][ T5141] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 145.683629][ T5141] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 145.697496][ T5141] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 145.706789][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.723435][ T5141] usb 1-1: config 0 descriptor?? [ 145.741632][ T6091] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 145.763400][ T5141] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 145.843085][ T5188] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 145.865011][ T5188] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 145.889448][ T5188] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 145.899017][ T5188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.938027][ T6097] loop1: detected capacity change from 0 to 32768 [ 145.965161][ T6097] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.232 (6097) [ 146.040167][ T6097] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.078883][ T6097] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 146.092208][ T6097] BTRFS info (device loop1): using free-space-tree [ 146.266272][ T6122] loop4: detected capacity change from 0 to 64 [ 146.308664][ C1] hrtimer: interrupt took 65022 ns [ 146.373395][ T5188] usb 3-1: USB disconnect, device number 8 [ 146.839285][ T52] usb 1-1: Failed to submit usb control message: -110 [ 147.047839][ T52] usb 1-1: unable to send the bmi data to the device: -110 [ 147.232589][ T52] usb 1-1: unable to get target info from device [ 147.279982][ T52] usb 1-1: could not get target info (-110) [ 147.303299][ T52] usb 1-1: could not probe fw (-110) [ 147.553564][ T6135] loop3: detected capacity change from 0 to 64 [ 147.575757][ T5089] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.669091][ T6139] netlink: 'syz.2.239': attribute type 10 has an invalid length. [ 147.950059][ T6142] veth0_to_team: entered promiscuous mode [ 147.972459][ T6142] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 148.021139][ T5141] usb 1-1: USB disconnect, device number 8 [ 148.029535][ T5188] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 148.279273][ T5188] usb 3-1: Using ep0 maxpacket: 8 [ 148.294757][ T5188] usb 3-1: config 1 has an invalid interface descriptor of length 3, skipping [ 148.329511][ T5188] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.376692][ T5188] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 148.414109][ T5188] usb 3-1: config 1 has no interface number 1 [ 148.558606][ T5188] usb 3-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 148.577924][ T5188] usb 3-1: config 1 interface 2 altsetting 220 has 0 endpoint descriptors, different from the interface descriptor's value: 113 [ 149.348527][ T5188] usb 3-1: config 1 interface 2 has no altsetting 0 [ 149.372900][ T5188] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.416677][ T5188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.436194][ T5188] usb 3-1: Product: 쑿퉈ਝ쑻 [ 149.456084][ T5188] usb 3-1: Manufacturer: ф [ 149.462704][ T5188] usb 3-1: SerialNumber: syz [ 149.946032][ T5188] usb 3-1: USB disconnect, device number 9 [ 149.978981][ T5141] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 150.030636][ T6170] binder: BINDER_SET_CONTEXT_MGR already set [ 150.036659][ T6170] binder: 6164:6170 ioctl 4018620d 20000040 returned -16 [ 150.278193][ T5141] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 150.375105][ T5199] udevd[5199]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.498904][ T5141] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 150.538134][ T5141] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 150.584177][ T5141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.642606][ T5139] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 150.767236][ T5093] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 150.838773][ T5139] usb 5-1: Using ep0 maxpacket: 32 [ 150.876954][ T5139] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.912892][ T5139] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.920485][ T6176] Cannot find add_set index 0 as target [ 150.942759][ T5139] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 150.971475][ T5139] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 151.002196][ T5139] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 151.016323][ T5139] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 151.033111][ T6176] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 151.034303][ T5139] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.063105][ T6176] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 151.084888][ T5141] usb 4-1: USB disconnect, device number 7 [ 151.085682][ T5139] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.142712][ T5139] usb 5-1: Product: syz [ 151.181481][ T5139] usb 5-1: Manufacturer: syz [ 151.198666][ T5139] usb 5-1: SerialNumber: syz [ 151.310946][ T6173] loop0: detected capacity change from 0 to 32768 [ 151.320971][ T6173] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.251 (6173) [ 151.344054][ T6173] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.345967][ T6181] bond2: (slave macvlan3): Enslaving as an active interface with an up link [ 151.379164][ T6173] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 151.407716][ T6173] BTRFS info (device loop0): using free-space-tree [ 151.501991][ T6160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.534819][ T6160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.689454][ T6203] loop1: detected capacity change from 0 to 1024 [ 151.710282][ T5139] cdc_ncm 5-1:1.0: bind() failure [ 151.761371][ T5139] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 151.768220][ T5139] cdc_ncm 5-1:1.1: bind() failure [ 151.825081][ T6203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.875982][ T2462] BTRFS info (device loop0): space_info DATA+METADATA has 1544192 free, is not full [ 151.887138][ T2462] BTRFS info (device loop0): space_info total=3276800, used=53248, pinned=0, reserved=86016, may_use=1593344, readonly=0 zone_unusable=0 [ 151.902598][ T2462] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1441792 [ 151.912116][ T2462] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 151.919844][ T2462] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 151.927512][ T2462] BTRFS info (device loop0): delayed_block_rsv: size 32768 reserved 32768 [ 151.936158][ T2462] BTRFS info (device loop0): delayed_refs_rsv: size 917504 reserved 118784 [ 151.948755][ T5139] usb 5-1: USB disconnect, device number 12 [ 152.838790][ T5093] Bluetooth: hci1: command tx timeout [ 152.876480][ T5089] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.896979][ T5092] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.155921][ T6222] binder: BINDER_SET_CONTEXT_MGR already set [ 153.162215][ T6222] binder: 6217:6222 ioctl 4018620d 20000040 returned -16 [ 153.946002][ T6224] loop1: detected capacity change from 0 to 2048 [ 154.042763][ T6224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.181668][ T6224] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 154.306733][ T29] audit: type=1804 audit(1720143894.793:15): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.262" name="/newroot/52/file0/file1" dev="loop1" ino=15 res=1 errno=0 [ 154.349696][ T6224] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 24 with max blocks 1 with error 28 [ 154.387260][ T6224] EXT4-fs (loop1): This should not happen!! Data will be lost [ 154.387260][ T6224] [ 154.403676][ T6224] EXT4-fs (loop1): Total free blocks count 0 [ 154.415272][ T6224] EXT4-fs (loop1): Free/Dirty block details [ 154.425439][ T6224] EXT4-fs (loop1): free_blocks=2415919104 [ 154.452423][ T6224] EXT4-fs (loop1): dirty_blocks=32 [ 154.457609][ T6224] EXT4-fs (loop1): Block reservation details [ 154.485514][ T5188] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 154.499056][ T6224] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 154.658972][ T62] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 154.711667][ T5188] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 154.733519][ T5188] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.755355][ T5188] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 154.794799][ T5188] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.817870][ T5188] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 154.835061][ T5188] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.865113][ T5188] usb 3-1: Product: syz [ 154.871448][ T5188] usb 3-1: Manufacturer: syz [ 154.892397][ T5188] cdc_wdm 3-1:1.0: skipping garbage [ 154.899146][ T5188] cdc_wdm 3-1:1.0: skipping garbage [ 154.915929][ T5188] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 154.932522][ T5188] cdc_wdm 3-1:1.0: Unknown control protocol [ 155.129594][ T8] usb 3-1: USB disconnect, device number 10 [ 155.308260][ T6257] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 524288, id = 0 [ 156.254421][ T5097] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 156.271657][ T5097] Bluetooth: hci2: SCO packet for unknown connection handle 1039 [ 157.499325][ T5144] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 158.187010][ T5144] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 158.207184][ T5144] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 158.238858][ T5144] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 158.258672][ T5144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.624885][ T5093] Bluetooth: hci1: SCO packet for unknown connection handle 1039 [ 158.886342][ T5144] usb 4-1: USB disconnect, device number 8 [ 158.997053][ T6301] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 524288, id = 0 [ 160.841424][ T6303] loop0: detected capacity change from 0 to 32768 [ 161.056142][ T6303] btrfs: Deprecated parameter 'usebackuproot' [ 161.161958][ T6303] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 161.179698][ T6303] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.281 (6303) [ 161.358665][ T6303] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.428803][ T6303] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 161.469129][ T6303] BTRFS info (device loop0): disk space caching is enabled [ 162.535145][ T6303] BTRFS info (device loop0): rebuilding free space tree [ 162.644919][ T5093] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 162.653600][ T5093] Bluetooth: hci1: SCO packet for unknown connection handle 1039 [ 162.867593][ T6303] BTRFS info (device loop0): disabling free space tree [ 162.901027][ T6303] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 162.916422][ T6303] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 163.027457][ T5092] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.219064][ T5139] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 163.420360][ T6360] netlink: 2756 bytes leftover after parsing attributes in process `syz.2.295'. [ 163.477216][ T5139] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 163.577948][ T6360] netlink: 1740 bytes leftover after parsing attributes in process `syz.2.295'. [ 163.594113][ T5139] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.635324][ T5139] usb 4-1: config 0 has no interface number 0 [ 163.645418][ T5139] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 163.666133][ T5139] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 163.685704][ T6360] netlink: 1740 bytes leftover after parsing attributes in process `syz.2.295'. [ 163.696219][ T5139] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 163.753527][ T5139] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 163.778085][ T5139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.801574][ T5097] Bluetooth: hci2: SCO packet for unknown connection handle 1039 [ 163.839864][ T5139] usb 4-1: config 0 descriptor?? [ 163.908178][ T6354] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 163.968950][ T5139] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 164.157995][ T6373] netlink: 'syz.0.298': attribute type 1 has an invalid length. [ 164.475128][ T6375] veth0_to_team: entered promiscuous mode [ 164.605949][ T6375] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 164.999360][ T12] usb 4-1: Failed to submit usb control message: -110 [ 165.190404][ T12] usb 4-1: unable to send the bmi data to the device: -110 [ 165.228490][ T12] usb 4-1: unable to get target info from device [ 165.259253][ T12] usb 4-1: could not get target info (-110) [ 165.416287][ T12] usb 4-1: could not probe fw (-110) [ 166.457607][ T51] usb 4-1: USB disconnect, device number 9 [ 167.458958][ T5093] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 167.511113][ T5093] Bluetooth: hci3: SCO packet for unknown connection handle 1039 [ 168.389337][ T5139] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 168.479071][ T6429] netlink: 'syz.1.312': attribute type 1 has an invalid length. [ 168.646828][ T5139] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 168.678175][ T5139] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.717804][ T5139] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 168.736583][ T5139] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.748416][ T6431] bond3: (slave macvlan4): Enslaving as an active interface with an up link [ 168.750095][ T5139] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.466069][ T5139] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.474769][ T5139] usb 1-1: Product: syz [ 169.479176][ T5139] usb 1-1: Manufacturer: syz [ 169.491199][ T5139] cdc_wdm 1-1:1.0: skipping garbage [ 169.500329][ T5139] cdc_wdm 1-1:1.0: skipping garbage [ 169.507300][ T5139] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 169.648560][ T5139] cdc_wdm 1-1:1.0: Unknown control protocol [ 169.911324][ T5139] usb 1-1: USB disconnect, device number 9 [ 170.424432][ T5097] Bluetooth: hci1: SCO packet for unknown connection handle 1039 [ 171.808756][ T5188] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 172.210274][ T5188] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 172.228928][ T5188] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.356683][ T5188] usb 5-1: config 0 has no interface number 0 [ 172.363891][ T5188] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 172.375529][ T5188] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 172.388336][ T5188] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 172.410158][ T5188] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 172.427967][ T5188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.452579][ T5188] usb 5-1: config 0 descriptor?? [ 172.472434][ T6449] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 172.512680][ T5188] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 172.622675][ T6471] netlink: 'syz.3.324': attribute type 10 has an invalid length. [ 172.738300][ T6471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.324'. [ 172.779053][ T8] usb 5-1: USB disconnect, device number 13 [ 172.797068][ T11] usb 5-1: Failed to submit usb control message: -71 [ 172.853872][ T6477] netlink: 'syz.1.325': attribute type 1 has an invalid length. [ 172.930730][ T11] usb 5-1: unable to send the bmi data to the device: -71 [ 172.972817][ T11] usb 5-1: unable to get target info from device [ 173.014038][ T11] usb 5-1: could not get target info (-71) [ 173.270262][ T5144] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 173.278805][ T11] usb 5-1: could not probe fw (-71) [ 173.529647][ T5144] usb 4-1: Using ep0 maxpacket: 8 [ 173.737422][ T5144] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.929364][ T5144] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 174.164924][ T5144] usb 4-1: config 1 has no interface number 1 [ 174.172756][ T5144] usb 4-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 174.184140][ T5144] usb 4-1: config 1 interface 2 altsetting 220 has an invalid endpoint descriptor of length 3, skipping [ 174.195631][ T5144] usb 4-1: config 1 interface 2 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 174.211962][ T5144] usb 4-1: config 1 interface 2 has no altsetting 0 [ 174.221541][ T5144] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.233075][ T6482] bond4: (slave macvlan5): Enslaving as an active interface with an up link [ 174.234163][ T5144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.395651][ T5144] usb 4-1: Product: 쑿퉈ਝ쑻 [ 174.488166][ T5144] usb 4-1: Manufacturer: ф [ 174.589723][ T5144] usb 4-1: SerialNumber: syz [ 175.569576][ T5144] usb 4-1: USB disconnect, device number 10 [ 175.968686][ T6504] netlink: 'syz.1.331': attribute type 10 has an invalid length. [ 176.123960][ T5199] udevd[5199]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.338807][ T51] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 176.512601][ T29] audit: type=1326 audit(1720143917.003:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.2.330" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcd8775bd9 code=0x0 [ 176.548770][ T5188] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 176.571314][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 176.619635][ T51] usb 2-1: config 1 has an invalid interface descriptor of length 3, skipping [ 176.643582][ T51] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.669378][ T51] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 176.690296][ T51] usb 2-1: config 1 has no interface number 1 [ 176.702929][ T51] usb 2-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 176.717996][ T51] usb 2-1: config 1 interface 2 altsetting 220 has 0 endpoint descriptors, different from the interface descriptor's value: 113 [ 176.746507][ T51] usb 2-1: config 1 interface 2 has no altsetting 0 [ 176.896752][ T5188] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 176.906507][ T51] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.915898][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.925083][ T5188] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.935703][ T51] usb 2-1: Product: 쑿퉈ਝ쑻 [ 176.940903][ T5188] usb 5-1: config 0 has no interface number 0 [ 176.947560][ T51] usb 2-1: Manufacturer: ф [ 176.961731][ T5188] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 176.975165][ T51] usb 2-1: SerialNumber: syz [ 176.981096][ T5188] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 176.992560][ T5188] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 177.052739][ T5188] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 177.066064][ T6513] loop3: detected capacity change from 0 to 8192 [ 177.091018][ T5188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.118068][ T5188] usb 5-1: config 0 descriptor?? [ 177.129624][ T6513] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 177.144605][ T6508] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 177.188025][ T5188] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 177.260972][ T51] usb 2-1: USB disconnect, device number 9 [ 177.559340][ T5199] udevd[5199]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.931911][ T5097] Bluetooth: hci2: unexpected event 0x3c length: 17 > 7 [ 178.202546][ T62] usb 5-1: Failed to submit usb control message: -110 [ 178.247283][ T62] usb 5-1: unable to send the bmi data to the device: -110 [ 178.263120][ T62] usb 5-1: unable to get target info from device [ 178.279887][ T62] usb 5-1: could not get target info (-110) [ 178.291755][ T62] usb 5-1: could not probe fw (-110) [ 178.459326][ T5139] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 178.690816][ T5139] usb 4-1: Using ep0 maxpacket: 32 [ 178.720689][ T5139] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.754328][ T5139] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.759112][ T6532] netlink: 60 bytes leftover after parsing attributes in process `syz.2.338'. [ 178.785214][ T5139] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 178.803913][ T6532] netlink: 60 bytes leftover after parsing attributes in process `syz.2.338'. [ 178.808708][ T5139] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 178.847249][ T5097] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 178.853884][ T5097] Bluetooth: Wrong link type (-22) [ 178.860023][ T5097] Bluetooth: hci2: link tx timeout [ 178.865539][ T5097] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.897250][ T5139] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 178.907511][ T5139] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 178.925258][ T5139] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.934684][ T5139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.943574][ T5139] usb 4-1: Product: syz [ 178.953676][ T5139] usb 4-1: Manufacturer: syz [ 178.960487][ T5139] usb 4-1: SerialNumber: syz [ 179.177432][ T51] usb 5-1: USB disconnect, device number 14 [ 179.190880][ T6530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.298333][ T6541] netlink: 'syz.0.339': attribute type 1 has an invalid length. [ 180.278845][ T4490] Bluetooth: hci2: command tx timeout [ 180.295966][ T6530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.370661][ T5139] cdc_ncm 4-1:1.0: bind() failure [ 180.511102][ T5139] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 180.517925][ T5139] cdc_ncm 4-1:1.1: bind() failure [ 180.535983][ T5139] usb 4-1: USB disconnect, device number 11 [ 180.567191][ T6552] binder_alloc: 6549: binder_alloc_buf, no vma [ 181.468952][ T29] audit: type=1326 audit(1720143921.873:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.3.344" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4283775bd9 code=0x0 [ 181.512835][ T4490] Bluetooth: hci1: command 0x0406 tx timeout [ 181.521009][ T5098] Bluetooth: hci3: command 0x0406 tx timeout [ 181.528096][ T5101] Bluetooth: hci0: command 0x0406 tx timeout [ 182.086579][ T6567] loop1: detected capacity change from 0 to 512 [ 182.095737][ T6573] netlink: 2756 bytes leftover after parsing attributes in process `syz.0.348'. [ 182.125338][ T6567] EXT4-fs: Ignoring removed bh option [ 182.150159][ T54] Bluetooth: hci0: unexpected event 0x3c length: 17 > 7 [ 182.171898][ T6567] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 182.174028][ T6573] netlink: 1740 bytes leftover after parsing attributes in process `syz.0.348'. [ 182.236959][ T6567] EXT4-fs (loop1): 1 truncate cleaned up [ 182.273872][ T6573] netlink: 1740 bytes leftover after parsing attributes in process `syz.0.348'. [ 182.459171][ T6567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.560006][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 183.868953][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 183.897888][ T6567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.025955][ T6595] loop2: detected capacity change from 0 to 64 [ 184.181667][ T5097] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 184.198918][ T5097] Bluetooth: hci0: command 0x0406 tx timeout [ 184.581248][ T6602] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 184.590523][ T6602] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 185.109630][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 185.178369][ T6608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.358'. [ 185.193803][ T6608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.358'. [ 185.253167][ T6611] loop0: detected capacity change from 0 to 2048 [ 185.555732][ T6611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.974817][ T5097] Bluetooth: hci2: command 0x0406 tx timeout [ 186.000747][ T5144] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 186.012562][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 186.360653][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.388031][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.410967][ T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 186.438698][ T8] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 186.448483][ T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 186.478657][ T8] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 186.504422][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.518736][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.526779][ T8] usb 4-1: Product: syz [ 186.543845][ T8] usb 4-1: Manufacturer: syz [ 186.548495][ T8] usb 4-1: SerialNumber: syz [ 186.570501][ T5144] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 186.580788][ T5144] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 186.599175][ T5144] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 186.608305][ T5144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.796441][ T6594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.826994][ T6594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.884780][ T8] cdc_ncm 4-1:1.0: bind() failure [ 186.915671][ T8] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 186.949089][ T8] cdc_ncm 4-1:1.1: bind() failure [ 186.988751][ T8] usb 4-1: USB disconnect, device number 12 [ 187.179163][ T5144] usb 2-1: USB disconnect, device number 10 [ 187.278787][ T5092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.382198][ T6629] netlink: 'syz.0.362': attribute type 10 has an invalid length. [ 187.859519][ T51] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 188.169933][ T51] usb 1-1: Using ep0 maxpacket: 8 [ 188.389747][ T51] usb 1-1: config 1 has an invalid interface descriptor of length 3, skipping [ 188.431245][ T51] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.497796][ T51] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 188.557514][ T51] usb 1-1: config 1 has no interface number 1 [ 188.596138][ T51] usb 1-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 188.700429][ T51] usb 1-1: config 1 interface 2 altsetting 220 has 0 endpoint descriptors, different from the interface descriptor's value: 113 [ 189.426395][ T51] usb 1-1: config 1 interface 2 has no altsetting 0 [ 189.472062][ T51] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.489811][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.498527][ T51] usb 1-1: Product: 쑿퉈ਝ쑻 [ 189.518918][ T51] usb 1-1: Manufacturer: ф [ 189.525978][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'. [ 189.545317][ T51] usb 1-1: SerialNumber: syz [ 189.689407][ T6648] loop2: detected capacity change from 0 to 64 [ 189.860736][ T5141] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 189.906786][ T51] usb 1-1: USB disconnect, device number 10 [ 190.096420][ T6652] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 190.105419][ T6652] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 190.575467][ T5097] Bluetooth: hci2: unexpected event 0x3c length: 17 > 7 [ 190.638793][ T5141] usb 4-1: Using ep0 maxpacket: 32 [ 190.671325][ T5141] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.705985][ T5141] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.725322][ T5141] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 190.735576][ T6657] loop4: detected capacity change from 0 to 8 [ 190.795880][ T5141] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 190.845314][ T5141] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 190.862669][ T5199] udevd[5199]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.875464][ T5141] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 190.919612][ T5141] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.934590][ T5141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.968695][ T5141] usb 4-1: Product: syz [ 190.972902][ T5141] usb 4-1: Manufacturer: syz [ 191.014127][ T5141] usb 4-1: SerialNumber: syz [ 191.197833][ T5097] Bluetooth: Unexpected start frame (len 10) [ 191.222591][ T6664] loop4: detected capacity change from 0 to 2048 [ 191.259828][ T6644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.269345][ T6644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.295845][ T6664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.328767][ T5097] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 191.358450][ T6673] capability: warning: `syz.0.373' uses 32-bit capabilities (legacy support in use) [ 192.157586][ T6681] netlink: 60 bytes leftover after parsing attributes in process `syz.1.375'. [ 192.183274][ T6681] netlink: 60 bytes leftover after parsing attributes in process `syz.1.375'. [ 192.334730][ T5097] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 192.348972][ T5097] Bluetooth: hci1: SCO packet for unknown connection handle 1039 [ 192.599235][ T5097] Bluetooth: hci2: command 0x0406 tx timeout [ 192.736453][ T5141] cdc_ncm 4-1:1.0: bind() failure [ 192.813041][ T5141] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 192.843003][ T5141] cdc_ncm 4-1:1.1: bind() failure [ 192.876939][ T5141] usb 4-1: USB disconnect, device number 13 [ 194.286025][ T5086] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.691824][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.698161][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.792503][ T6705] loop4: detected capacity change from 0 to 8192 [ 194.827406][ T6705] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 195.181481][ T5097] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 195.190019][ T5097] Bluetooth: hci4: SCO packet for unknown connection handle 1039 [ 195.550297][ T6717] loop2: detected capacity change from 0 to 8 [ 195.776349][ T6718] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.384'. [ 196.117127][ T5097] Bluetooth: hci4: unexpected event 0x3c length: 17 > 7 [ 197.638828][ T5141] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 197.939800][ T6740] loop3: detected capacity change from 0 to 128 [ 197.958803][ T5141] usb 3-1: Using ep0 maxpacket: 32 [ 197.966798][ T5141] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.982672][ T6740] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 197.995113][ T6740] sysv_count_free_blocks: cannot read free-list block [ 198.018828][ T5141] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.036830][ T5141] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 198.054836][ T5141] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 198.070546][ T54] Bluetooth: Unexpected start frame (len 253) [ 198.076744][ T54] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 198.083331][ T54] Bluetooth: Wrong link type (-22) [ 198.088820][ T54] Bluetooth: hci4: link tx timeout [ 198.093964][ T54] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 198.102687][ T5141] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 198.127686][ T5097] Bluetooth: hci4: command 0x0406 tx timeout [ 198.142765][ T6740] sysv_count_free_inodes: unable to read inode table [ 198.149672][ T6742] sysv_count_free_blocks: cannot read free-list block [ 198.157446][ T6742] sysv_count_free_inodes: unable to read inode table [ 198.204053][ T5141] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 198.289649][ T5141] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.300843][ T5088] sysv_free_block: trying to free block not in datazone [ 198.310515][ T5141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.326225][ T5141] usb 3-1: Product: syz [ 198.330709][ T5141] usb 3-1: Manufacturer: syz [ 198.335498][ T5088] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 198.347396][ T5141] usb 3-1: SerialNumber: syz [ 198.515725][ T6745] loop3: detected capacity change from 0 to 2048 [ 198.596069][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.605808][ T6745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.634210][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.805901][ T54] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 198.856180][ T54] Bluetooth: hci0: SCO packet for unknown connection handle 1039 [ 198.956837][ T6755] netlink: 60 bytes leftover after parsing attributes in process `syz.1.392'. [ 198.976817][ T6755] netlink: 60 bytes leftover after parsing attributes in process `syz.1.392'. [ 199.081826][ T62] ------------[ cut here ]------------ [ 199.088557][ T62] WARNING: CPU: 0 PID: 62 at net/wireless/nl80211.c:19513 cfg80211_bss_color_notify+0x5f8/0x8b0 [ 199.089628][ T62] Modules linked in: [ 199.089658][ T62] CPU: 0 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 199.089681][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 199.089692][ T62] Workqueue: phy3 ieee80211_color_collision_detection_work [ 199.089727][ T62] RIP: 0010:cfg80211_bss_color_notify+0x5f8/0x8b0 [ 199.089755][ T62] Code: 00 e8 fc b9 b6 fe 48 83 c4 08 89 c1 c1 f8 1f 21 c8 e9 08 fd ff ff e8 67 b3 ab f6 90 0f 0b 90 e9 6f fb ff ff e8 59 b3 ab f6 90 <0f> 0b 90 e9 36 fb ff ff e8 4b b3 ab f6 c6 05 8b 02 b2 04 01 90 48 [ 199.089769][ T62] RSP: 0018:ffffc900015d7aa0 EFLAGS: 00010293 [ 199.089784][ T62] RAX: ffffffff8ae7d087 RBX: 0000000000000000 RCX: ffff88801837da00 [ 199.089797][ T62] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 199.089808][ T62] RBP: ffffc900015d7bb0 R08: ffffffff8ae7cbb2 R09: 1ffffffff1f5ef4d [ 199.089821][ T62] R10: dffffc0000000000 R11: ffffffff8b037720 R12: 1ffff920002baf5c [ 199.089834][ T62] R13: ffff88807f530000 R14: ffff88807f530cd0 R15: dffffc0000000000 [ 199.089847][ T62] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 199.089863][ T62] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.089875][ T62] CR2: 000000002007f000 CR3: 000000007cb8a000 CR4: 00000000003506f0 [ 199.089891][ T62] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.089901][ T62] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.089913][ T62] Call Trace: [ 199.089919][ T62] [ 199.089928][ T62] ? __warn+0x168/0x4e0 [ 199.089946][ T62] ? cfg80211_bss_color_notify+0x5f8/0x8b0 [ 199.089974][ T62] ? report_bug+0x2b3/0x500 [ 199.089996][ T62] ? cfg80211_bss_color_notify+0x5f8/0x8b0 [ 199.090025][ T62] ? handle_bug+0x3e/0x70 [ 199.090043][ T62] ? exc_invalid_op+0x1a/0x50 [ 199.090060][ T62] ? asm_exc_invalid_op+0x1a/0x20 [ 199.090083][ T62] ? __pfx_ieee80211_color_collision_detection_work+0x10/0x10 [ 199.090107][ T62] ? cfg80211_bss_color_notify+0x122/0x8b0 [ 199.090129][ T62] ? cfg80211_bss_color_notify+0x5f7/0x8b0 [ 199.090156][ T62] ? cfg80211_bss_color_notify+0x5f8/0x8b0 [ 199.090182][ T62] ? __pfx_lock_acquire+0x10/0x10 [ 199.090205][ T62] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 199.090227][ T62] ? __pfx_cfg80211_bss_color_notify+0x10/0x10 [ 199.090252][ T62] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 199.090287][ T62] ? process_scheduled_works+0x945/0x1830 [ 199.090308][ T62] process_scheduled_works+0xa2c/0x1830 [ 199.090355][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 199.090385][ T62] ? assign_work+0x364/0x3d0 [ 199.090412][ T62] worker_thread+0x86d/0xd40 [ 199.090442][ T62] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 199.090467][ T62] ? __kthread_parkme+0x169/0x1d0 [ 199.090492][ T62] ? __pfx_worker_thread+0x10/0x10 [ 199.090512][ T62] kthread+0x2f0/0x390 [ 199.090534][ T62] ? __pfx_worker_thread+0x10/0x10 [ 199.090553][ T62] ? __pfx_kthread+0x10/0x10 [ 199.090576][ T62] ret_from_fork+0x4b/0x80 [ 199.090598][ T62] ? __pfx_kthread+0x10/0x10 [ 199.090620][ T62] ret_from_fork_asm+0x1a/0x30 [ 199.090658][ T62] [ 199.090667][ T62] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 199.413169][ T62] CPU: 0 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 199.423360][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 199.433437][ T62] Workqueue: phy3 ieee80211_color_collision_detection_work [ 199.440667][ T62] Call Trace: [ 199.443961][ T62] [ 199.446903][ T62] dump_stack_lvl+0x241/0x360 [ 199.451606][ T62] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.456823][ T62] ? __pfx__printk+0x10/0x10 [ 199.461547][ T62] ? vscnprintf+0x5d/0x90 [ 199.465899][ T62] panic+0x349/0x870 [ 199.469824][ T62] ? __warn+0x177/0x4e0 [ 199.474000][ T62] ? __pfx_panic+0x10/0x10 [ 199.478444][ T62] ? ret_from_fork_asm+0x1a/0x30 [ 199.483404][ T62] __warn+0x34b/0x4e0 [ 199.487401][ T62] ? cfg80211_bss_color_notify+0x5f8/0x8b0 [ 199.493238][ T62] report_bug+0x2b3/0x500 [ 199.497592][ T62] ? cfg80211_bss_color_notify+0x5f8/0x8b0 [ 199.503432][ T62] handle_bug+0x3e/0x70 [ 199.507608][ T62] exc_invalid_op+0x1a/0x50 [ 199.512127][ T62] asm_exc_invalid_op+0x1a/0x20 [ 199.517080][ T62] RIP: 0010:cfg80211_bss_color_notify+0x5f8/0x8b0 [ 199.523608][ T62] Code: 00 e8 fc b9 b6 fe 48 83 c4 08 89 c1 c1 f8 1f 21 c8 e9 08 fd ff ff e8 67 b3 ab f6 90 0f 0b 90 e9 6f fb ff ff e8 59 b3 ab f6 90 <0f> 0b 90 e9 36 fb ff ff e8 4b b3 ab f6 c6 05 8b 02 b2 04 01 90 48 [ 199.543244][ T62] RSP: 0018:ffffc900015d7aa0 EFLAGS: 00010293 [ 199.549340][ T62] RAX: ffffffff8ae7d087 RBX: 0000000000000000 RCX: ffff88801837da00 [ 199.557332][ T62] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 199.565322][ T62] RBP: ffffc900015d7bb0 R08: ffffffff8ae7cbb2 R09: 1ffffffff1f5ef4d [ 199.573315][ T62] R10: dffffc0000000000 R11: ffffffff8b037720 R12: 1ffff920002baf5c [ 199.581305][ T62] R13: ffff88807f530000 R14: ffff88807f530cd0 R15: dffffc0000000000 [ 199.589309][ T62] ? __pfx_ieee80211_color_collision_detection_work+0x10/0x10 [ 199.596805][ T62] ? cfg80211_bss_color_notify+0x122/0x8b0 [ 199.602656][ T62] ? cfg80211_bss_color_notify+0x5f7/0x8b0 [ 199.608522][ T62] ? __pfx_lock_acquire+0x10/0x10 [ 199.613584][ T62] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 199.619586][ T62] ? __pfx_cfg80211_bss_color_notify+0x10/0x10 [ 199.625766][ T62] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 199.632125][ T62] ? process_scheduled_works+0x945/0x1830 [ 199.637859][ T62] process_scheduled_works+0xa2c/0x1830 [ 199.643456][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 199.649483][ T62] ? assign_work+0x364/0x3d0 [ 199.654123][ T62] worker_thread+0x86d/0xd40 [ 199.658756][ T62] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 199.664673][ T62] ? __kthread_parkme+0x169/0x1d0 [ 199.669727][ T62] ? __pfx_worker_thread+0x10/0x10 [ 199.674857][ T62] kthread+0x2f0/0x390 [ 199.679031][ T62] ? __pfx_worker_thread+0x10/0x10 [ 199.684155][ T62] ? __pfx_kthread+0x10/0x10 [ 199.688764][ T62] ret_from_fork+0x4b/0x80 [ 199.693201][ T62] ? __pfx_kthread+0x10/0x10 [ 199.697811][ T62] ret_from_fork_asm+0x1a/0x30 [ 199.702610][ T62] [ 199.705873][ T62] Kernel Offset: disabled [ 199.710263][ T62] Rebooting in 86400 seconds..