last executing test programs: 6m1.569239856s ago: executing program 2 (id=112): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x2, "0060dcd61508c43445000000000008fa096304"}) r0 = syz_open_pts(0xffffffffffffffff, 0x82080) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) 6m0.545466403s ago: executing program 2 (id=113): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a00)='E', 0x1}, {&(0x7f0000000100)='y', 0x1}], 0x2}}], 0x1, 0x4008845) fcntl$setstatus(r0, 0x4, 0x40800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x7ffff004) 5m58.729541794s ago: executing program 2 (id=116): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x100, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x58, 0x0, @fd_index, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r0, 0x62f, 0x2b6a, 0x48, 0x0, 0x0) 5m57.400107257s ago: executing program 2 (id=121): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300), 0x1, 0x25f, &(0x7f0000000340)="$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") 5m56.077353715s ago: executing program 2 (id=125): r0 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) 5m54.274336559s ago: executing program 2 (id=129): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffe20, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 5m37.302484596s ago: executing program 32 (id=129): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffe20, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 5m19.473877323s ago: executing program 1 (id=192): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x88, &(0x7f0000000080)={[{@barrier}, {@autodefrag}, {@noacl}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x74]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x22) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x4) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 5m14.079756257s ago: executing program 1 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(0x0) lseek(0xffffffffffffffff, 0xffffffffffdffffe, 0x1) socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x44e, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x4000054) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 5m10.708855263s ago: executing program 1 (id=207): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000640)=0x2) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x29, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x11, 0x5f, 0x1, 0xa81a, 0x8000, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x10000009, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x44}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010880000000000000", @ANYRES32=0x0, @ANYBLOB="312000000000000008001d000700000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe80000000f0ffffffffffffff0000bbff02000000000000000000000000000100004e22004d9078020000000000000000000000eaf12af8010d4894322fd8f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b13efcfbfc9b1d0e5c58b4be6608c9608e393ff14c36c9c3390f375043be439a02b275fa5b79c00e7ae925b94dcc6a70a1afb34cb5cb991a40a2f23322648ac95f7"], 0x0) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b04, &(0x7f0000000200)={'wlan1\x00'}) bind$inet(r10, 0x0, 0x0) close(0x4) 5m9.287339808s ago: executing program 1 (id=214): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$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") getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 5m5.750440357s ago: executing program 1 (id=220): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) close_range(r0, 0xffffffffffffffff, 0x0) 5m4.973146568s ago: executing program 1 (id=224): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff000000000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) 5m2.550944094s ago: executing program 33 (id=224): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff000000000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) 5m1.796891125s ago: executing program 4 (id=228): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a00)='E', 0x1}, {&(0x7f0000000100)='y', 0x1}], 0x2}}], 0x1, 0x4008845) fcntl$setstatus(r0, 0x4, 0x40800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r0, r2, 0x0, 0x7ffff004) 4m59.276405899s ago: executing program 4 (id=232): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x100) sendto$inet(r3, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 4m55.735226672s ago: executing program 4 (id=234): syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='timerslack_ns\x00') read$msr(r0, &(0x7f0000002140)=""/207, 0xbd) 4m54.496873254s ago: executing program 4 (id=236): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) write$dsp(r0, &(0x7f0000000100)='n', 0x1) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201005) 4m52.892732332s ago: executing program 4 (id=240): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a00)='E', 0x1}, {&(0x7f0000000100)='y', 0x1}], 0x2}}], 0x1, 0x4008845) fcntl$setstatus(r0, 0x4, 0x40800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r0, r2, 0x0, 0x7ffff004) 4m52.158893789s ago: executing program 4 (id=242): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x2) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) r5 = socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) shmctl$IPC_RMID(0x0, 0x0) mremap(&(0x7f0000ef9000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x280000, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) 4m36.619584063s ago: executing program 34 (id=242): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x2) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) r5 = socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) shmctl$IPC_RMID(0x0, 0x0) mremap(&(0x7f0000ef9000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x280000, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) 17.874269366s ago: executing program 7 (id=1163): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17.171870198s ago: executing program 7 (id=1165): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x200400c1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, &(0x7f0000000140)) 16.158975557s ago: executing program 7 (id=1168): r0 = socket(0x2000000015, 0x80005, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000440)={0x2, @sliced={0xd, [0x6, 0xc, 0x6, 0x2, 0x7, 0x2, 0x7, 0x5, 0x2, 0x6, 0xcb8, 0x6, 0x12a, 0x5, 0x1, 0x81, 0x4, 0x3ff, 0x4000, 0x4995, 0x3, 0x7, 0x7, 0x20, 0xa3, 0x21, 0x1, 0x8, 0xf, 0x600, 0x9, 0x40b0, 0x1, 0xfffa, 0x1, 0x1, 0x6, 0x1000, 0x8416, 0x6, 0x3, 0x6, 0xffff, 0x68, 0x75cb, 0x5, 0x7, 0x1e0], 0x8000}}) socket$caif_stream(0x25, 0x1, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x40010000, 0x0, 0x0) 14.579167667s ago: executing program 7 (id=1171): creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b0c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000007080)="f5201a6b6542be6cbad26e239346ffe3dbc7125e4eb0daba2e9ba73337e45b1a2c2828afbe1d99c856f2d7c9b91364a83e3c477d5e9569cf8787de2fd830003be5c3bbb4a246c4e13764c6e255ef511c263c70adb80380cc2b3247fb61ebddd2b945820fc646375953f1322be813b875bf64256ac7a8debe881f8352dc9fd70b9473bf07932110a5d1a94144b2ab0b4cd92458041eef085b29b5c115df0d7db2bea67006c66b64015fc980343e5ff451373afc63f2ae21d63cddeb3b0c53bbb4e0e31663f5b1b53de22517869df6114ac9047ee98a692b4f0e3e7cfc4e42368f217cc705f2bc5d10454ab30eda651c6ee29f0cc5a6ca7b384949955785844742121b5734a8cf3f3fe1d3e5c2085da26a028ba6c84d5cbce6afbe13cbb179d4c251e1d2d68e8c7d9c34eee698ceeb6e40aed55c62c45d8c7fcb2cfe95ce261238ca5c4458647ed7a001788e991e3d2ecfc77bedec164efda9e4a5d5f03043628fd8b5f906371c52e7de2e760b820dce5c3629610a48a036cd54f23ec3ef274f8da724f45c482505864c87359d4411cad79d7434c9a9d79323410b671880a344b933a47d735abd0e63308cf7f6e15790a50ccbcce072526952c763775066125af0fcde57ba3c514301aef17391c76adfc2419829a88e0d91b947d278cd03d94ce98ec639a6163eaa9755b1813685080ce588251fbd4240a7f65cdc1074503b0fe49b24996e52c6899ac90014d9a58566e841bcac357ed59f7e7274b6e94f7a526a5b420c5d6ababab7e7f8ba6ef6f3455a5aed80f4aaadb58fb38f725d524b4fd63238dc7936d62e81ef46bb7346d7f55c4fdbe7606b1053f6faf6d80612311823efe1e6522fd5bbb77c52c868362f263e56ea1447b612d681828561adefdd28fb855fd81f27e2698cc02bbcf7d653cf8dc9eea252f2b1f48c0d2ab70ece454daf9b5829d7106eb8ca8807eebd07d1bf6af6a4523577db893995778759e1be294aea8edb9226a9acbd44f98f60641f87195521491e621b10cc2032434f319e76743601a0bcc99fb3636389172a790e25260de7cb58961f9ad44d16c7604402bbca8cf82be528a64107c0dd114fd3458c0f1e97888c1c739dc678b43b202c603946cb5720a1e7331282a48afb12b461c41b6fd92b97c6960ac9f664f509b02c8267d722f372b007befada669d4cc36fb931763ffd8744b10e78cb849d40f88d190778a70f902faa4f34cae0b9e163b59b1bae96a933afecbc6a768f1d7ae20bf2771f28c1a3d333ae0b6f691d2f985e1ed6d0e1c29d7db36234b9bec18a1ee98b9ae90e4706d1c952f6059cc4d64bfc14152a88443f260d179c705df71e006a60981fefaa8a51c9c368680b830967b01b60734b9924335d7700b083bd7e87b3ad2f3d497e914368a15c5456d08861fb7513e96acb49935dc3f46fcaa297cdbdc759cb8a5a2515a482ca60440da8b7d5a8c79659d99e3892f9086b372d78622d3689267652c4dd60754cb8eb45028b0c237adff5ffaeaf78ed5a541c57feeb014a53e2a98042d5712d5f7a779b7a12bc120b8cf6df35b258fe1ad7ebdbee88d25355560fad504dce4bd878df5e43c55e765ac324dd8d65ce29c2a93f9e085bb51ff75dbbf314ed6aa3a36330fd146d28654c659f1c6c5089c3619be1c7707be835500fb15bf873ab35517b743207621346db75d16fb21624c04ceddda2d607642004f611db7414e1c593ef38c62e4d27a8b7833436609c284a46edc9b973e790aba0bf4c6bc0069ce9372c6c7b93d15740771ddf9c704338f4af870c649ecdaeab106b1242dbb74c284bfb5d87aa688d27befe1dc0d1019fde1842e89eee67e11f925672ebff47e4503e02fa989297e9461d540000b5e0ed2d957efc3b77a10181597c7fb2c94e62db50e46c46d10c1127573bae01166170467b7641d7e07dcd879f04b8dc08dcf460bef8e83aae33151a72eddf9ccac4eb95c48cb4008ba3fea542b2e3c6c4c07850cd4ca551536a20d18ed18852baaaf7339908583aae41f08f3c6f5811cd730e849dc8382e8bdf3519ab900d38a0a9822400d619b52a957b1bbe8384619e5d65588a2ca6bf068ca27fce9aa0448a60d04b3b230db3a939409ec7df45d70a944b34baaf0bf951d205667c8281e9e87468d1a2f6edf79a7d5df12a8564e56d3a952efa4c4be2b09be2c3d699b05268e8cfe998a9f37b8714c92647ada8a8129bc4084624c6f1059f834193deef961f5dbfe500c1bf781f45441984d52800d81d814a82ec4f859c7217146ac447c8462612574a1a8603148ed46bf3e195d417bbe43aa6bf83ea8fb525941ef8dd56149bd6fdcbf626609ddb699e40e83fa4792b39384eb0d1b78c97c6798537b192753caed3a5eaa4a33d54b473b43851cb282cd857ae11a4d34c6b53fc1c334f8ec42672295b88a326b65d338a70bb3d5d866ff55a9ce0345c7a890cd6dee36012c76d862802c9cbaf1abbab99dc898eb432f50474ae6c202121d19f8d0467fcb1279457accf9b777c75390756762dde795d94aaba4c1729f559adc33966fbf517fc91fae21bd8ef22e914bbe6bae774246749ad63d8d16f21c9aebc80a97be408443ae60af610dd3ad9964b2401e049b09dbb46f6126d3d534a7786bb3663719943111231d18e51ed534b1e28807c062280924e5d53a8a1316ca2b5936911a267d5b799fd7d8e5e725271d5b8eb90e3dd9ef9eb1400c68eb8f88622f548af7df4846758cfb74aeb48588d1820f504e97ae1d818feb7113175b04e7c0bae6239672c987253cdf0e9845119f3f200d40f586ab986312144c3525acb78a5784f5707217105bae651e0c000792f4e88c1a924d33fbe5474a71b1e193a8d3a6a65dc485f2a299e7d07a6cf621260dcfc5d79c9243618f57507ca025baa53b3e684667f33dfb8ab9065cc548ad5c881bceb5d937462ea850fc197f5ae8c9489815b2cff853895e987e684195a094d8460ee52ef9d8f6fa0ba01092f0cdffcc7a682ca3125058ce9ed0064d7d0a868b0419b49ded3d93f0c7e1d700288350ff4c130cf6e0b507ce6064623294536c8fc4011b9b40299bfe02144806411d5b36997db26033a5ddeecd6bf3faefd3ca0a6cb70b0561106b2dabb06cf88bb6fa283e43dcd2fa1f33063183e15450385ba6fed4436502211d3181351db793a76ae11ebde2b23f340b7522748a4602ec469b88eb7f3d1325baa536ab8096c58c6f2b4863a541f618112643e194a5873cdae4172bb3005743782d8af22dbf23ab60e7d0f4ceb3ef0c46e23e1ecee1839558bc5c146dd97aba7651dfd2401fb8aec4eda71b1b15a2570130f0f5ff489ad4355a708a6eafa9752eb5c9f7a83f43c3e3b317e7e68133573f585fc27c5cfc0d90016f5be8594e1cfac36b24570cebb5be46d3f5917441ccadc355536b8b9b455b87667edd802b77178251afdefe9a4b5f0ff7e59fa5cf9b449e18bc4bf8154f15913128a2584f7d60a3c09f467233783690df422d3d9982200eb604ec2ef50830bba6f82e8b91823808fac0b07bc0e51a671c32dea0f2f9aa2cfbbc91cdf54b719b6009ce750bab1680cac77398b2a619d550161fa70e7e8b86fb535f8797fca75708efba7f0d95da4ac235d9de68a50c998a72c0c2da90f511ea456f776c881b8416b894cd835ad13c62b035ef4d220a66c86c1c00de534690e42d064bf4fff946af98aec3f9490d6f0586e891d272a4bfb776ab84bd693af6526c4b09beab2460634d929bcc61cf75b041f067e7b503ecd6a80934e169ebb0ac926a85b53cb1d7b63eee6abcd9e250834da6e4da23b3b3d90c2f726861760ca14b78d5e895eb7fa2e8b39f724a0371412b1c94c6a42f1beeae2328e353971531bddcda730b6a0d90f7c58e3ce5953cf5a6c9e3fd657c92fe4b5b8b0b659353944afa5c69c309527d6d4039e78c675c8d2f527fbcb2b765864fed987f785221862bd7deb66e6676ddebdd19cf4cb26869f562928dc98088bb69281615fc6a2dafc466e70ff9ea1a411e1a3ba3f94ed7d429796afc9f0c95da19a4db691c36407985e5f08473dd8afd9de88b2c26b6ebd2ea35177238e18dfc36d579a80074c06f5cca60cf6d64d27eeb121c6c8e5e09aa3165c101068cb748694695e803540d947f33740d30616001448173ef57bbcb82fcb213348a2a58e2d14480b1ce1ad346729631b91f7e343e37abd8e787274ff4598acc99cc58f3578979e6e6a1926333bd8818a256b58e67c6f77145ee26f24998cab89021423e03326c175adaa8ea905122553948ece311cbcb770222e7f4f373398497c8c301480d031fc53c2a7018d91777cec253e89e28a82d15e01c12c0ccae1b56ecff35b90b19769bff4b786d4624679abe852780e9e4b9985e0564ee604027dc2a60f65d2fcf1d354e163a8465f77eb67e2a6c9fa89ea0768f9cf117fd1ea8969e592da11d34f6f9b7adb24f3261dd14199fea6da6b5d31f825b3706492b3305cbf6ef553fadfcad51a0484f09a8d2491c8a937fdd36d9e0b94fb6bdca6e80a6079739cc1d455fd735e89fe89938a7132dc0c9f181953dd9cf2d106a3f1478b46ddf35aae9bc6932227d79ac4f534967be2cbc30fa254658b61752b534257fc10bd8db219ec394b41e7fe541f9086ce19d28e13d2b3c384745fc88ed0cb5ef414e23e8782f99307c49121a733875e9fb9c8559d8ad6bab256dde2bfdee4286c1419b80acf55dd09da71116c0fa902d8e89465c313c311f272a11cd17417372dc74e01f3ba1a9afd8bcb9fad57cde63ad59a6999caaa359e6e5b4216dd3b0bc8d310e28c8a1232cefcbd5070d0537097e370433bc1017b7b1c4efa694a25b4385bccbdf79affb0b6d203b3cefe637fd6f7b51f5ec297471c874a57145b254bd14b89fe62709c94ca3cae304739294c7b4a871768e11cb7a2db0aaeff4abbd00c70b4d4e5e8f8c6d34afe3d619404e20ccf628f7902c17ab1200644fe465751587800d59acb3abd1f8ad9cbd8bfa64c94c44fb3086fd21c046d7430a1faadbd9b1625ee70c1071bede890f1c07113aed9b1a35ab0fb823e2cb38d2ee6376800f63d28326ec3be129333e1024d17c46198e329779a79f4ee69b56374268fefdd29995e411052bcc92318c636aa9fa634f3e537712f720a52cd95d5472cdd6b4eb66bd1ed2c41cb37c615eb486855671d964ba46ee44eb61ffcb0b22b20632ce3222e4c3037f348d5dec196f9e2bcc2335284f5529e4de9e6b4b84fc559de63357bc8ca0a00c16bdea79372b13abb251fd4bc52f1f732811b65b4c51715da133b20caba229244060fdec0ad4c47fdf1963b6aa1acf998585c59867b5afcd08958dceb9937a97e87b2153f45970ca77e5524c5160c69963717630795e3a4768e2521617bc211926e5cb08edea70cae99c6d7eff4c1e041c7ab0d3473d6ceb3cbc24a9f45c5818896463360490911b1fb77a24aa3b394e3ee1155ea2fbc6686db2c715670dc9187b33f3051b4b894b616bdf7fb287113c315413d83e0540676fe9a48d523bef3280611165fb77c7bb33c0a087fc06e7702fc7d8ea4f7aa264c7ed332af03ae3e392bc0f96ec11e3bca6604ccb7941043fb043b4880de676efaf3f0fba185e90db8e8e6718058fd1d26c49d0a163264d4aaf7094d02d6898f75c6edf2e49edf7b0a645018220535e8694baa1e910df6e493c0812c2cbb16966cb22af208279947f9490f2f5d3a49596050604f920af8fa41c5a339609659f331f24fa0aec3787d052a02541137dd1ccdc30970a879e4a42e491137bb3cddf2c87ea6368bc4d9aad9089af50b71d56bd296d891ac2fbec84303486739a44850680353efa2203d7fcfa00d9cd81433adcad3e6aac009784b63a3b7aca58155b24274b2d41de998321bdf0229ce74a0c61a24d74ceb30d4ba766632c4a48d9db4e3b3334830b12f3136158fb16fa745c2ebad16b65b279d28332894755de3e7ae2aa88f9e2af8a46200c427540eb68907152ee7d53212b55c170ab67c47c884db89757b09dc035ea59fe2be1f384b3edef6925c399753832d32296100ca4e2699154d6ed86bc145e92d699e43c2269ed359a004aee75ac5e730dffec87f239328bc95cc281a9c0bba661f6d36ac11d1151851c70cf39fbbabff2190b619294db73008e3d32acb0b29aa3d28d1e50784dbe35eb911d838bd710336612170666ea5f42b72c32be4d83c4ff61987acd1b1f0cebe281806af8ad4b6e7041c31bcb8a93cf0f44826821b0bb9c053468b4d8d034c084ba1c8dfcad9fac6ec379da5425492dc6f770000000050bd9a930ead9e4faf5b557eebe4461320476a7ae12b0dcc9d171f6d2737b824db7259e62915779dc5e8a08bc69c0c68784202aa3462bdff06af76bdf9f106dd6228211534c4433717947dfaca4b7b61a21d706217e3718b5ccac40c3c4692bd59f222d0c2e98af1ff1919256d7b0540ed69b11f212a9598c7499ba634d1677ecf17517e207d40baed5aa0e25b7e70b6b16f6d6f0c36a146db0644ababd31bc50f5039b3bc4f12b603da2675e121b09fe92c69548dfb9df18d0e50c1387280b7bb1366bf5bbabfcef5557a05ce24df1a02f22f791e06c5e3e21e5fd6db7f2c90ffb83b154b0fd9866c46609dc10b274954caf80e83693f5581f23fd765a18aa4e294bbf7a8721015ea6a6e1ba64f79f6609924d43757fd0752024af79e296415b42de3428f14d9d89f84c2e076a0821cc8921fff677ec7b91178bcbd755ece28477a6bd01fd429d824ddfb62edcdab7c4495edc5a3d27826ea4bddaeacfa7cb17632cee0095ca55d3973812033d96ec5e5ed6880b3a998b4998fb7441e11dd060515bdbfd5aa32aac6ae1fceb8e92d7e8985949946a458ca2f69637de6b92410986f8fa5ba4b1598d8383fdbff2e004dee71500302e3e9270371b39237260bde0888702c7b2bcff69192bd381cfe59b197b9dbe5e2eee27b64c17e95a1dade453a6f29dc8bef1bdd34a92a5275972a2cb18f6f553f99c6098f50198b68cd35d2877d9cdd15074422b43b03170f23138dda44b62b5e161705405d2e9a007f8cc9ec7920d1a6e947ccc57b1a51a728fe1afcb84115fe48be15c894cce96391ab3cdc1bd9aa4cf58213c15d1a849c3f38c8ee34b208766129bbb493558c139f2bfc39df29fc73422127823fc9c993f20d9df9e0acaf0b1729437458e0a857ebfe4a373fd491952a475e9c391b7ee02b79554807c0f12293aa385a3c6b18bfbfc690a7aa9bc85d8adb705eac642ec8611ac62d09d2a6892cd671629d457c2191eb5940114113ed8cd4e8411d96200d3d66f947baa7915610c396402d38f109837d29c8e937fb6223a9d0d605a3d91312908fb5a7df36122c35f7e47855d526915c3a7cea432ca4524fcae3b5c6fbad196c1efef0d129d9b3f9d23104fc3c8a90dbcea0400311e51de50c5abb62fcbedf998ebc1cf23fd76bcc2aea2451f6d0d3b8fdd337ce8d24d7ce2a5b29318df58adb0006d4295c138b4b03060134802626e31a5da92b5a7a8677132523affbdc8d958b955eb4615370497429cd3767f2f708c2cadc233bc3e5efc8c837385749da08c6dd573e3b105ce459d659f790dcaf53c1d0b4d8e0c64b6bce15559e59e66b3b0b2695703e9bd5b1c5bb3c5b1028441391f8fbeadc032e890fe5e3be78569056d147a891f4bc85406e78f962b532eb436b0e047a7d3c88bb89455ffbf1da360207af5d827e9fbbedd8393a828a92382329ff444d9a8128c40e302453550426de4babcdee45108e79533b9747fd21b8f775a76e1d4d54a8a98a65ee3c183be34172877c26e600c89949ced85004d69c24d4fee6f87d2ff24900d41577c78dfbff698d438c0e26ebe15d7b75b49a5b2a5c627da3b13f6458aeff3f0a1944a339b4be5e13d58a71928bb77053beaf7b68568205b62f5a4a9b3c0fef441ede90f012047b0cf2228481fab85d94219ce9f417e4e2b6018b319270a6b6f0de93d0147842f582bd4e41f00720626be2b2f9116875ea4f92e380bcfc33058505ee0336e10c71a5abf6f32c72fe68c68c166454db8e101b3a271f04e4dda8947743e0ac408c73cff69c10e7c015c6b078bab0a1c7aab14a26df087b2b4c859e684aebadff5033d1ebd6c6589a27ac75a075e6ef801f5dece0dbd1e477bb70d2b8553a88b13e304e00735e183feab89edf469cb90c0a5bbf778809a9996f4e72b16417672cd97bdd1c0baa64ea2d782aea9d58ea357b54d06f316076b5c413417061b3c7485b534fcc8bf25d2adf043b47a3d47f0755fe6225bba7569fe672d3507c8e15f7139ef7f606c616c52733413befb248eee53c4a9a16f952ac56e18e221626c4f51eb90c1314167c9677a7eb7004b9b42fd6ec21dd38d5b9032c441166be3f8e9dfed39fb0e654ca3126003decf8e50bf8ace994e16fdbe3f53a36a11ed6f06d1bb8e54f574a83035eba379f2453f2346d11414cafbde87cb5d66b650a5e25ebaced402188c1b4b941e788e1af908fff3ef84c1dadef0550687f0b6aeef6063dc1c8c8efe09d611253efb4d288ea407ef3c043aacc3dfc19a18449b38fb97d9fc0bb67de3e1744f782d3a9d1fc449c3a902b1ec8789e336f731a51cc7fefc43736e04942167fbfdac9f15c5b3f921aaa3df0c9709c21339ce890cd4054828615f18fd12548258440a06dbec3d72719b3e9f5f9967525f90f16993cab09c9eab2b27b29c959c002dbb028cc96297d40822772c16b4b786cc57cd581c02f143d6e728eeac1ab4eca6170748002c0e2269611a2b402f9fa8190d9216b1e1b7de8f81074b8dbb665f0d69c52cf573d07ca0752fd6fe7da88dcf4a915ab1533f5686b766393fe9bf1aeef9d17414d1803708e61973dd205097eb1ed466c8dcfb2c7710caf9df713a11c774fd0469880534ae2ccd1e40216ffa145f0fc832b166896810a678f3a47dd24bc2e6835c16e405a444971068dbd47926f430871121be8f19c8ac4fd0a9e3ff7cd961f90f24265de455694cc291de76437953ac314b1791acbe96d3fcae4fa397287a02eac86f13c931f4d4f49ad52cf1db0efdf7027ee8e468d64d316a2208ae33d8fc3274861b41f2e064c99fbba37b7a0c46a3df8dc4589de7ac28df63ed697a48011c863049345c371f10f7d53a56947e348d07e4ff71eaaaf9aaa09bf1147b80d62a60dcec6d7dd4cbf52f2b0b89d2c7de1f16d63ccc0260b0982fcf105736b50001c19eda998426284713670aab21ce128a80b57920d8c3436edb859d4afd7ed835985b5bec01df5447e66ee8511b28671646e71c0669ab2203c4c9a020000279ba87f089d04924cb33ff82f59da9399ce3f20932c073289938e4e7101d357cce920a2aae72f94d6e1aaf9a3905f4da18a7ee849a39f0d1e83adc67ffab826490d4bfff1f80e8c2c180b08e013daf6d054be660390fc4f872b8d60f14951f05ac0dcb4c4281f71ac2d4cb4d68ffdfe8f5c43160d99ea0077486219bb9400a8fc1faacf12878379a7ea5eae2adbbe2871c1664bea1985d594963935019446d605a61ff79802e114a34610d002cf27e0f4b96c6ff880785307161813f48b68c6f9130a6faee6f332e77755fb68b68248ec113030575b1c262c2430c000d11b269ce4e98a32eea3af403630e83aeaaed1420c9fd66eadcf34d6d1fbe457c5216481ddaf6b397912630999fbc5298eab15ab3cce9de7741367264a4e30a61ff7f1d5e7e64290218d9f6f5c9898cd23ee1ac35ab8d3691bf3df31cef54c161bdf3093390ad2322b6f71f22199ac68c5eab4aa7523b4957202751b675fe82c9d42432c92c2fec148da6e5514e9d5f2618d5a616cdbc4a560b3e36eb6cb8baca3251d8e819ea8f552f07ecca0664e7ef22a3a6c11d023eade70f1b872cf58e89c625f561e4858877e39d324dd448b041e4435b676ce0e86de9045e8b9e8305ae60cb7a41c01ce2318af7f9fa011d24aac2b2d31360ce7b437c46df5756d94d1005a0359b57534c49d1e8e173ba183666a19ff6e6c63388250985249eb40f0f981a2bc34e8196e9c468b1bf329c4ac9cf5f19e46734b1238f99f1e6d8c95ecca9cfafc15c756bb4780b675ec9781bfdb583bd91a7df33ed49daec1d65d14f26d7cfadb9e1de06e922939e924b034e4d128cd66a2f7a87c9399c622922e6e33af68c5115053f42c519a054e295b5f8e420630dc116bb2562ac87a6402e4635bd6c6b95943820f86acd5f48ac519b06f1b0bf1c7a70d69e84c95600e017a67e64536197447b810c21cf86a9d09c37aaf6cc39333b414844ce883cec0ffb23e36d5560e9ff6922a9237a6503c72346ebebf57e59c13e7320f670e1826c802b9cc674b55284ddb061e6e38b16c58532497709028ccc4c000604d4a72b3255170a217ac411ea68e64fb3b63653b985abc42bf21629775a05812ef159992320c3cb93805bbebb250e2f9f92b2c8795c388fea24de5e70d45f8ad1764a6e39a1d588191f77fd7bd0408252c784deef806464edc1b4d3de83df34f1b615e10ba20948ca9f28c4f435163e1f5a6fdd0bc8ef397c25b7d704e1ff1dca065022b99778c05ad39f806c3f7ae4278b768eac09b7d317ec5e07db3fc5579a29fb42658ba66c68afb3b8401b2e09c13bc0652309b26cfab2febc3e96a6da6341e6e860468aca74caf06bfc576124594c3f123d5e987319862b0700bd257cff3ea8abff23ebf1a62e575741db2902761578de5c72f4d37bf9186c2391dfff0fcdf2969df27ac0c34d3f07feb0d1887de871e96916add75c15ce2f795749ceadacca94df5808a1629ccd906b3776e7c2a9e94393243de87656432ec21be389731be9821fc035859fffd503f9c8279bd4a36f3be1e3ba0beecaaf6ee44203d8b76c4ca97da38f63fd07ed7812601ab9095a77d52397ecc31819b91d3c28f639bda94c46a5d527abe34bc579338a4db395c57dbeec31a37685ee8121284b63583e026783e47d58deaad78a17e9a946ae7a3db89d8d78d9f37ee5861de7ca92e7335dade99819ecfd63770413b17de97bf403a6d97e163f7eead7d8c182b77cc3d0e0f28f30839445ef751bcf4f21b5803a4e8754fd9a3addb2553ad1d81879addbdc2668e5f2e15926ed805ce7b4ae01be9677c322d59d619cfc806a4946f59010aac481e49d0a0b2ccd0fbd88abf07d4912a081c81633f4a6e0e68eceee686d58a43c45d3bec1046d3bb8d7fc727dda7cfe22af174219bc8e928ca15ff9ce2c707bcea190f8fdeb86a2dc99d7ca81b78efdb0062f1967bb66132164d227e149aa52f39af5e763705373c864323a5885dc6061b5a2ee5501d0b1aa465d93052f29d033a750b1b9cc85fddc0cf168ddc62fb2d1570458d246906fbb689bc8ee3864901eb43f96c19482a7ba7a52fe08b241a32aa9a2774359132b5e1905a08ba37244265070f6d69a428a5834f10d9ba45f476f9e88e856ac223d8cf6ff04894faa2590ecd0a3f6938d661d8aecf6223ae99c414962a86fdc1c2599cee39e9f0153a57ed809bd90023c8d688cc1aa7b5eec5fcd01d07d00100", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x1, {0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000009080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) 12.414336741s ago: executing program 7 (id=1172): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) flock(r2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x10) r6 = getpid() syz_pidfd_open(r6, 0x0) fsopen(&(0x7f0000000240)='ubifs\x00', 0x1) close(r5) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) 9.55939719s ago: executing program 6 (id=1179): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x4c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580), 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) 9.464817258s ago: executing program 3 (id=1180): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x1, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.904778137s ago: executing program 6 (id=1181): r0 = socket(0x2000000015, 0x80005, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000440)={0x2, @sliced={0xd, [0x6, 0xc, 0x6, 0x2, 0x7, 0x2, 0x7, 0x5, 0x2, 0x6, 0xcb8, 0x6, 0x12a, 0x5, 0x1, 0x81, 0x4, 0x3ff, 0x4000, 0x4995, 0x3, 0x7, 0x7, 0x20, 0xa3, 0x21, 0x1, 0x8, 0xf, 0x600, 0x9, 0x40b0, 0x1, 0xfffa, 0x1, 0x1, 0x6, 0x1000, 0x8416, 0x6, 0x3, 0x6, 0xffff, 0x68, 0x75cb, 0x5, 0x7, 0x1e0], 0x8000}}) socket$caif_stream(0x25, 0x1, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x40010000, 0x0, 0x0) 7.910813455s ago: executing program 3 (id=1183): syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000280)="1a000000020000", 0x7) shutdown(r0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0xffff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, 'hsr0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000001cc0), 0x400000000000026, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000300), 0x8080) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff80) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x36, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000b60000/0x3000)=nil, 0x800000}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 7.494446334s ago: executing program 6 (id=1185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) 6.801741432s ago: executing program 6 (id=1187): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x70bd2b, 0xfffffffd, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 5.972492493s ago: executing program 5 (id=1189): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a4", 0x35}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 4.955185096s ago: executing program 5 (id=1191): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x4c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580), 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) 4.8105663s ago: executing program 6 (id=1192): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x4, 0x0, 0x3, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bf8f05c607f304e7fe0700221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xbe) 4.504256924s ago: executing program 0 (id=1193): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x1, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.226294002s ago: executing program 5 (id=1194): creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b0c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000007080)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x1, {0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000009080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) 4.040073776s ago: executing program 3 (id=1195): r0 = socket(0x2000000015, 0x80005, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000440)={0x2, @sliced={0xd, [0x6, 0xc, 0x6, 0x2, 0x7, 0x2, 0x7, 0x5, 0x2, 0x6, 0xcb8, 0x6, 0x12a, 0x5, 0x1, 0x81, 0x4, 0x3ff, 0x4000, 0x4995, 0x3, 0x7, 0x7, 0x20, 0xa3, 0x21, 0x1, 0x8, 0xf, 0x600, 0x9, 0x40b0, 0x1, 0xfffa, 0x1, 0x1, 0x6, 0x1000, 0x8416, 0x6, 0x3, 0x6, 0xffff, 0x68, 0x75cb, 0x5, 0x7, 0x1e0], 0x8000}}) socket$caif_stream(0x25, 0x1, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x40010000, 0x0, 0x0) 3.780077956s ago: executing program 0 (id=1196): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50}, 0xffd3) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020}, 0x2020) 3.632829311s ago: executing program 5 (id=1197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) 3.426147128s ago: executing program 6 (id=1198): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x3, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(r8, 0x407, 0x0) connect$unix(r6, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 2.791715411s ago: executing program 0 (id=1199): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.109403019s ago: executing program 5 (id=1200): socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', r2, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x3}}) gettid() socket$inet_sctp(0x2, 0x1, 0x84) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000008c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRESHEX=0x0, @ANYRES32=r2], 0x164}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) 2.062223351s ago: executing program 3 (id=1201): r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r0, 0x5452, 0x0) poll(&(0x7f0000000a40)=[{r0, 0x2}, {r0, 0x201}], 0x2, 0x7f) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200), 0x4) 1.48245955s ago: executing program 0 (id=1202): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x70bd2b, 0xfffffffd, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 1.435219937s ago: executing program 5 (id=1203): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000000)=0x1, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) socket(0x11, 0xa, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io$hid(r1, &(0x7f0000000900)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x16, @string={0x16, 0x3, "2aaba001538f68390681a658a75b74a81ed9e86a"}}, 0x0, 0x0}, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x4f0c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x90, 0x15, 0x100, 0x70bd29, 0x25dfdbfc, {0x27, 0x18}, [@INET_DIAG_REQ_BYTECODE={0xb, 0x1, "9a8618ebdb1fa3"}, @INET_DIAG_REQ_BYTECODE={0x6e, 0x1, "b6b5b5d492599b80bd191d2f51e98f5316ff6f0df28b82dfa352cf5b080ede008a24639f082fb100b3496050132f2fdf10c18079771ff11c731092927bf8a50d235405f79491474a821b06274bfcb939bd0593e42fdcaf74d19888101ce5607576ac2b6084b47f93560b"}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0x6}], 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) sendmmsg(r3, 0x0, 0x0, 0x0) 1.31373667s ago: executing program 3 (id=1204): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x4c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580), 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) 1.05967578s ago: executing program 7 (id=1205): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) r0 = syz_io_uring_setup(0x35c0, &(0x7f0000000140)={0x0, 0x334e, 0x8, 0x3, 0x312}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 816.483681ms ago: executing program 3 (id=1206): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc61, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20040d4}, 0x4000881) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r7, 0x0, &(0x7f0000000140)) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmmsg$inet(r3, 0x0, 0x0, 0x8080) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0100001a00130700000000fcdbde252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000003b000100", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 668.768927ms ago: executing program 0 (id=1207): creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b0c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000007080)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x1, {0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000009080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) 0s ago: executing program 0 (id=1208): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x4, 0x0, 0x3, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bf8f05c607f304e7fe0700221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xbe) kernel console output (not intermixed with test programs): syscall=202 compat=0 ip=0x7f6cfdb8f749 code=0x7ffc0000 [ 228.358099][ T30] audit: type=1326 audit(1764894519.661:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.0.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f6cfdb8f749 code=0x7ffc0000 [ 228.380456][ T30] audit: type=1326 audit(1764894519.671:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.0.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfdb8f749 code=0x7ffc0000 [ 228.405770][ T30] audit: type=1326 audit(1764894519.681:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.0.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfdb8f749 code=0x7ffc0000 [ 230.604544][ T6302] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.613285][ T6302] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.621948][ T6302] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.630477][ T6302] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.639117][ T6302] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.647737][ T6302] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.656528][ T6302] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.665195][ T6302] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.673849][ T6302] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.682509][ T6302] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 231.098461][ T5513] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 231.185793][ T6321] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 231.302159][ T5513] usb 4-1: Using ep0 maxpacket: 16 [ 231.346374][ T5513] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.355963][ T5513] usb 4-1: config 0 has no interface number 0 [ 231.381015][ T6314] loop4: detected capacity change from 0 to 65536 [ 231.459142][ T6314] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 231.504187][ T5513] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 231.516422][ T5513] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.539904][ T5513] usb 4-1: Product: syz [ 231.544533][ T5513] usb 4-1: Manufacturer: syz [ 231.549286][ T5513] usb 4-1: SerialNumber: syz [ 231.755093][ T5513] usb 4-1: config 0 descriptor?? [ 231.782177][ T6314] XFS (loop4): Ending clean mount [ 231.812580][ T6314] XFS (loop4): Quotacheck needed: Please wait. [ 231.841992][ T5513] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 231.957156][ T6314] XFS (loop4): Quotacheck: Done. [ 232.379082][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 232.467100][ T5820] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 233.996876][ T5513] gspca_spca1528: reg_r err -71 [ 234.002289][ T5513] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 234.015871][ T5513] usb 4-1: USB disconnect, device number 4 [ 238.265058][ T6397] loop2: detected capacity change from 0 to 512 [ 245.793730][ T5513] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 246.561669][ T5513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.572959][ T5513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.583121][ T5513] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 246.592567][ T5513] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.825896][ T5513] usb 2-1: config 0 descriptor?? [ 249.622558][ T5513] usbhid 2-1:0.0: can't add hid device: -71 [ 249.629177][ T5513] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 249.751162][ T5513] usb 2-1: USB disconnect, device number 3 [ 250.526667][ T6479] netlink: 'syz.0.144': attribute type 1 has an invalid length. [ 250.632063][ T6479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.722450][ T6483] bond1: entered promiscuous mode [ 250.727805][ T6483] bond1: entered allmulticast mode [ 250.755489][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.145'. [ 251.989610][ T6498] loop3: detected capacity change from 0 to 512 [ 252.020642][ T6498] EXT4-fs: Ignoring removed bh option [ 252.373202][ T6498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.446838][ T6498] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.908540][ T5813] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.044428][ T6512] syzkaller0: entered promiscuous mode [ 253.050080][ T6512] syzkaller0: entered allmulticast mode [ 253.671789][ T5869] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 255.124454][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 255.145354][ T5869] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 255.154254][ T5869] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 255.164396][ T5869] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 255.174463][ T5869] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 255.184734][ T5869] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.198152][ T5869] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 255.207715][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.738888][ T6531] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 258.292622][ T5869] usb 4-1: can't set config #16, error -71 [ 258.302054][ T5869] usb 4-1: USB disconnect, device number 5 [ 259.487883][ T6550] ======================================================= [ 259.487883][ T6550] WARNING: The mand mount option has been deprecated and [ 259.487883][ T6550] and is ignored by this kernel. Remove the mand [ 259.487883][ T6550] option from the mount to silence this warning. [ 259.487883][ T6550] ======================================================= [ 259.528829][ T6550] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 260.508026][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 260.517203][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 260.527576][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 260.540531][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 260.552884][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.046450][ T6566] netlink: 'syz.0.170': attribute type 2 has an invalid length. [ 262.054539][ T6566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.170'. [ 262.601907][ T5828] Bluetooth: hci5: command tx timeout [ 264.719627][ T5828] Bluetooth: hci5: command tx timeout [ 266.771633][ T5828] Bluetooth: hci5: command tx timeout [ 266.900850][ T6549] chnl_net:caif_netlink_parms(): no params data found [ 267.716489][ T3566] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.859568][ T3566] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.054353][ T3566] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.316496][ T3566] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.536741][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.181'. [ 268.792429][ T6615] loop0: detected capacity change from 0 to 128 [ 268.842050][ T5828] Bluetooth: hci5: command tx timeout [ 268.872289][ T30] audit: type=1800 audit(1764894560.251:8): pid=6615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.182" name="file1" dev="loop0" ino=1048605 res=0 errno=0 [ 269.013418][ T3566] bridge_slave_1: left allmulticast mode [ 269.019264][ T3566] bridge_slave_1: left promiscuous mode [ 269.025927][ T3566] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.072496][ T3566] bridge_slave_0: left allmulticast mode [ 269.078325][ T3566] bridge_slave_0: left promiscuous mode [ 269.085002][ T3566] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.714136][ T3566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.771791][ T3566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.806300][ T3566] bond0 (unregistering): Released all slaves [ 269.930049][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.937982][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.946893][ T6549] bridge_slave_0: entered allmulticast mode [ 269.957165][ T6549] bridge_slave_0: entered promiscuous mode [ 270.048400][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.057923][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.066551][ T6549] bridge_slave_1: entered allmulticast mode [ 270.077782][ T6549] bridge_slave_1: entered promiscuous mode [ 270.341917][ T3566] hsr_slave_0: left promiscuous mode [ 270.396628][ T3566] hsr_slave_1: left promiscuous mode [ 270.404540][ T3566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.412273][ T3566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.514889][ T3566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.522756][ T3566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.628944][ T3566] veth1_macvtap: left promiscuous mode [ 270.635139][ T3566] veth0_macvtap: left promiscuous mode [ 270.641055][ T3566] veth1_vlan: left promiscuous mode [ 270.646874][ T3566] veth0_vlan: left promiscuous mode [ 271.397213][ T3566] team0 (unregistering): Port device team_slave_1 removed [ 271.423127][ T3566] team0 (unregistering): Port device team_slave_0 removed [ 271.954943][ T6549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.019847][ T6549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.360382][ T6549] team0: Port device team_slave_0 added [ 272.443452][ T6549] team0: Port device team_slave_1 added [ 272.720361][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.730936][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.757069][ T6549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.903131][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.910343][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.936689][ T6549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.157223][ T6549] hsr_slave_0: entered promiscuous mode [ 275.168117][ T6549] hsr_slave_1: entered promiscuous mode [ 275.175851][ T6549] debugfs: 'hsr0' already exists in 'hsr' [ 275.181766][ T6549] Cannot create hsr debugfs directory [ 275.961837][ T5513] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 276.179809][ T6549] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 276.221594][ T5513] usb 1-1: Using ep0 maxpacket: 8 [ 276.244800][ T5513] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 276.252701][ T6549] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 276.321964][ T5513] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 276.331516][ T5513] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 276.339850][ T5513] usb 1-1: Product: syz [ 276.344573][ T5513] usb 1-1: Manufacturer: syz [ 276.345546][ T6549] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 276.349301][ T5513] usb 1-1: SerialNumber: syz [ 276.495166][ T6549] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 276.832584][ T5513] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 276.841732][ T5513] visor 1-1:1.0: probe with driver visor failed with error -110 [ 277.546973][ T6549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.699802][ T6549] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.778927][ T3419] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.786535][ T3419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.887325][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.894842][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.486160][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 278.518820][ T6670] veth0_macvtap: left promiscuous mode [ 278.901786][ T5869] usb 1-1: USB disconnect, device number 2 [ 280.675186][ T6549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.451352][ T6708] overlayfs: missing 'lowerdir' [ 282.577133][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 283.548314][ T6705] loop3: detected capacity change from 0 to 32768 [ 283.659537][ T6705] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 283.968562][ T6705] XFS (loop3): Ending clean mount [ 285.100551][ T6736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.207'. [ 285.182753][ T5813] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 285.209530][ T6738] tipc: Started in network mode [ 285.217256][ T6738] tipc: Node identity 4, cluster identity 4711 [ 285.224537][ T6738] tipc: Node number set to 4 [ 285.248265][ T6739] warning: `syz.1.207' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 286.065751][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.074630][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.117084][ T6549] veth0_vlan: entered promiscuous mode [ 286.224398][ T6549] veth1_vlan: entered promiscuous mode [ 286.465026][ T6549] veth0_macvtap: entered promiscuous mode [ 286.523219][ T6549] veth1_macvtap: entered promiscuous mode [ 286.678595][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.753502][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.850398][ T4050] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.910561][ T4050] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.955580][ T4050] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.998817][ T4050] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.166853][ T6755] loop1: detected capacity change from 0 to 8192 [ 288.403452][ T6755] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 288.920180][ T5869] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 288.939443][ T6774] loop1: detected capacity change from 8192 to 0 [ 288.949100][ C0] I/O error, dev loop1, sector 120 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 288.990937][ C1] I/O error, dev loop1, sector 1 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 288.993595][ T5869] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 289.000541][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 289.022754][ T6755] FAT-fs (loop1): FAT read failed (blocknr 1) [ 289.072017][ T9] IPVS: starting estimator thread 0... [ 289.096423][ T6755] FAT-fs (loop1): unable to read inode block for updating (i_pos 1050) [ 289.201991][ T6778] IPVS: using max 240 ests per chain, 12000 per kthread [ 289.549278][ T5810] FAT-fs (loop1): Directory bread(block 65) failed [ 289.556341][ T5810] FAT-fs (loop1): Directory bread(block 66) failed [ 289.563385][ T5810] FAT-fs (loop1): Directory bread(block 67) failed [ 289.570127][ T5810] FAT-fs (loop1): Directory bread(block 68) failed [ 289.577012][ T5810] FAT-fs (loop1): Directory bread(block 69) failed [ 289.583946][ T5810] FAT-fs (loop1): Directory bread(block 70) failed [ 289.590769][ T5810] FAT-fs (loop1): Directory bread(block 71) failed [ 289.879155][ T5020] FAT-fs (loop1): unable to read inode block for updating (i_pos 1050) [ 289.926811][ T5810] FAT-fs (loop1): unable to read inode block for updating (i_pos 1050) [ 289.936060][ T5810] FAT-fs (loop1): unable to read inode block for updating (i_pos 1050) [ 289.944643][ T5810] FAT-fs (loop1): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 290.022165][ T5810] bond0: (slave syz_tun): Releasing backup interface [ 290.195427][ T3419] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.367795][ T3419] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.557225][ T3419] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.706799][ T3419] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.811879][ T5872] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 291.037612][ T5872] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 291.046829][ T5872] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 291.057521][ T5872] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 291.067031][ T5872] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 291.078424][ T5872] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 291.132019][ T3419] bridge_slave_1: left allmulticast mode [ 291.137861][ T3419] bridge_slave_1: left promiscuous mode [ 291.144538][ T3419] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.195363][ T5872] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 291.205341][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 291.213837][ T5872] usb 4-1: Product: syz [ 291.218168][ T5872] usb 4-1: Manufacturer: syz [ 291.242370][ T3419] bridge_slave_0: left allmulticast mode [ 291.248209][ T3419] bridge_slave_0: left promiscuous mode [ 291.255035][ T3419] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.256352][ T5872] cdc_wdm 4-1:1.0: skipping garbage [ 291.267808][ T5872] cdc_wdm 4-1:1.0: skipping garbage [ 291.298887][ T5872] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 291.305348][ T5872] cdc_wdm 4-1:1.0: Unknown control protocol [ 291.810174][ T3419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.860496][ T3419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.895876][ T3419] bond0 (unregistering): Released all slaves [ 292.397939][ T3419] hsr_slave_0: left promiscuous mode [ 292.412103][ T3419] hsr_slave_1: left promiscuous mode [ 292.419889][ T3419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.427676][ T3419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.479371][ T3419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.487093][ T3419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.561004][ T3419] veth1_macvtap: left promiscuous mode [ 292.566870][ T3419] veth0_macvtap: left promiscuous mode [ 292.574389][ T3419] veth1_vlan: left promiscuous mode [ 292.579908][ T3419] veth0_vlan: left promiscuous mode [ 293.197801][ T3419] team0 (unregistering): Port device team_slave_1 removed [ 293.257068][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 293.258103][ T3419] team0 (unregistering): Port device team_slave_0 removed [ 293.263739][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 293.602038][ T5869] usb 4-1: USB disconnect, device number 6 [ 294.306029][ T5112] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.315088][ T5112] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.792247][ T5112] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.955043][ T5112] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 296.044665][ T5112] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.765457][ T6832] loop0: detected capacity change from 0 to 256 [ 298.487946][ T5112] Bluetooth: hci0: command tx timeout [ 300.571794][ T5112] Bluetooth: hci0: command tx timeout [ 300.823902][ T6824] chnl_net:caif_netlink_parms(): no params data found [ 301.347337][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.356164][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.636451][ T4431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.644772][ T4431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.832741][ T6870] loop3: detected capacity change from 0 to 64 [ 302.606913][ T5112] Bluetooth: hci0: command tx timeout [ 302.860571][ T6824] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.868194][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.875926][ T6824] bridge_slave_0: entered allmulticast mode [ 302.884133][ T6824] bridge_slave_0: entered promiscuous mode [ 303.024057][ T6824] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.032557][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.040023][ T6824] bridge_slave_1: entered allmulticast mode [ 303.049589][ T6824] bridge_slave_1: entered promiscuous mode [ 303.123976][ T6883] syz.5.159 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 303.501788][ T6893] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 303.696749][ T6824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.839276][ T6824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.326172][ T6824] team0: Port device team_slave_0 added [ 304.420818][ T6824] team0: Port device team_slave_1 added [ 304.722473][ T5112] Bluetooth: hci0: command tx timeout [ 306.356834][ T6824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.365109][ T6824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.391653][ T6824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.552638][ T6824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.559927][ T6824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.588604][ T6824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.218606][ T6824] hsr_slave_0: entered promiscuous mode [ 307.228270][ T6824] hsr_slave_1: entered promiscuous mode [ 308.681773][ T5872] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 308.802475][ T6928] UHID_CREATE from different security context by process 8 (syz.5.253), this is not allowed. [ 308.862394][ T6931] io-wq is not configured for unbound workers [ 308.917389][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.935143][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.945138][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.958426][ T5872] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.967697][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.009011][ T6824] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 309.057864][ T6824] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 309.118348][ T6824] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 309.172383][ T5872] usb 1-1: config 0 descriptor?? [ 309.241054][ T6824] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 309.893103][ T5872] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 310.140303][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.256'. [ 312.749056][ T6947] loop3: detected capacity change from 0 to 32768 [ 312.783949][ T6947] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.257 (6947) [ 312.834533][ T6947] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 312.845220][ T6947] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 313.113308][ T6947] BTRFS error (device loop3): open_ctree failed: -4 [ 313.128992][ T6824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.449675][ T6824] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.555909][ T5872] usb 1-1: USB disconnect, device number 3 [ 313.587117][ T5020] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.594684][ T5020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.712574][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.719972][ T4188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.949930][ T6964] nbd0: detected capacity change from 0 to 63 [ 314.882860][ T6970] block nbd0: NBD_DISCONNECT [ 314.887955][ T6970] block nbd0: Disconnected due to user request. [ 314.898281][ T6970] block nbd0: shutting down sockets [ 315.086813][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.096168][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 315.104110][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.113338][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 315.121325][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.130540][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 315.138526][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.147939][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 315.202966][ T6206] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.212566][ T6206] Buffer I/O error on dev nbd0, logical block 0, async page read [ 315.220737][ T6206] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.231111][ T6206] Buffer I/O error on dev nbd0, logical block 1, async page read [ 315.240744][ T6206] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.250576][ T6206] Buffer I/O error on dev nbd0, logical block 2, async page read [ 315.258808][ T6206] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.268207][ T6206] Buffer I/O error on dev nbd0, logical block 3, async page read [ 315.276556][ T6206] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.285987][ T6206] Buffer I/O error on dev nbd0, logical block 0, async page read [ 315.294371][ T6206] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.303830][ T6206] Buffer I/O error on dev nbd0, logical block 1, async page read [ 315.314916][ T6206] ldm_validate_partition_table(): Disk read failed. [ 315.324007][ T6206] Dev nbd0: unable to read RDB block 0 [ 315.332152][ T6206] nbd0: unable to read partition table [ 315.603472][ T6206] ldm_validate_partition_table(): Disk read failed. [ 315.612934][ T6206] Dev nbd0: unable to read RDB block 0 [ 315.620953][ T6206] nbd0: unable to read partition table [ 317.403815][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 317.601583][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 317.646559][ T24] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 317.655077][ T24] usb 1-1: config 0 has no interface number 0 [ 317.661506][ T24] usb 1-1: config 0 interface 29 has no altsetting 0 [ 317.781050][ T24] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 317.790600][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.799642][ T24] usb 1-1: Product: syz [ 317.804278][ T24] usb 1-1: Manufacturer: syz [ 317.808963][ T24] usb 1-1: SerialNumber: syz [ 317.886474][ T6824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.943735][ T24] usb 1-1: config 0 descriptor?? [ 318.215622][ T24] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 318.422349][ T24] peak_usb 1-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 318.430924][ T24] peak_usb 1-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 318.551680][ T5869] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 318.587700][ T24] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 318.692395][ T24] usb 1-1: USB disconnect, device number 4 [ 318.815870][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.830071][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.840485][ T5869] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.853870][ T5869] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.863256][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.988164][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.268'. [ 319.373866][ T5869] usb 6-1: config 0 descriptor?? [ 321.449849][ T5869] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 322.598537][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.609556][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.633082][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.646373][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.663014][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.882733][ T5869] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 323.181728][ T5869] usb 6-1: device descriptor read/64, error -32 [ 323.450434][ T5869] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 323.572253][ T7023] chnl_net:caif_netlink_parms(): no params data found [ 323.694154][ T6824] veth0_vlan: entered promiscuous mode [ 323.887867][ T6824] veth1_vlan: entered promiscuous mode [ 324.355659][ T9] usb 6-1: USB disconnect, device number 2 [ 324.558172][ T6824] veth0_macvtap: entered promiscuous mode [ 324.644444][ T6824] veth1_macvtap: entered promiscuous mode [ 324.694874][ T7048] loop6: detected capacity change from 0 to 524288000 [ 324.761504][ T5112] Bluetooth: hci1: command tx timeout [ 324.915114][ T6824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.933939][ T7051] support for the xor transformation has been removed. [ 325.039267][ T6824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.143277][ T76] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.217667][ T76] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.306339][ T4431] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.426148][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 325.482024][ T4431] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.564655][ T5112] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 325.583312][ T5817] Bluetooth: hci3: hardware error 0x06 [ 326.189347][ T7023] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.198243][ T7023] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.209352][ T7023] bridge_slave_0: entered allmulticast mode [ 326.217802][ T7023] bridge_slave_0: entered promiscuous mode [ 326.301590][ T798] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 326.416984][ T7023] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.424818][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.433321][ T7023] bridge_slave_1: entered allmulticast mode [ 326.441915][ T7023] bridge_slave_1: entered promiscuous mode [ 326.579258][ T798] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.589718][ T798] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 326.599027][ T798] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 326.609230][ T798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.701881][ T5869] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 326.807241][ T798] usb 6-1: config 0 descriptor?? [ 326.841604][ T5112] Bluetooth: hci1: command tx timeout [ 326.859699][ T798] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 326.866871][ T798] dvb-usb: bulk message failed: -22 (3/0) [ 326.882269][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 326.889510][ T7023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.897015][ T798] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 326.938161][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 326.966583][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.977815][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.988171][ T5869] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 326.997446][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.043229][ T7064] dvb-usb: bulk message failed: -22 (4/0) [ 327.065721][ T798] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 327.073197][ T798] usb 6-1: media controller created [ 327.107342][ T798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 327.116268][ T7023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.175632][ T5869] usb 4-1: config 0 descriptor?? [ 327.219323][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.230539][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.240663][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 327.253945][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 327.263556][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.287142][ T798] dvb-usb: bulk message failed: -22 (6/0) [ 327.293279][ T798] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 327.347413][ T798] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 327.429292][ T798] dvb-usb: schedule remote query interval to 150 msecs. [ 327.437046][ T798] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 327.513515][ T9] usb 1-1: config 0 descriptor?? [ 327.596085][ T11] dvb-usb: bulk message failed: -22 (1/0) [ 327.602623][ T11] dvb-usb: error while querying for an remote control event. [ 327.662002][ T5817] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 327.675046][ T5869] usbhid 4-1:0.0: can't add hid device: -71 [ 327.682106][ T5869] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 327.715424][ T5869] usb 4-1: USB disconnect, device number 7 [ 327.763663][ T11] dvb-usb: bulk message failed: -22 (1/0) [ 327.769612][ T11] dvb-usb: error while querying for an remote control event. [ 327.822889][ T7023] team0: Port device team_slave_0 added [ 327.848878][ T7023] team0: Port device team_slave_1 added [ 327.866808][ T798] usb 6-1: USB disconnect, device number 3 [ 328.024636][ T9] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 328.210812][ T798] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 328.450369][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.457635][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.485083][ T7023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.597522][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.605137][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.631903][ T7023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.923545][ T5112] Bluetooth: hci1: command tx timeout [ 329.520489][ T7023] hsr_slave_0: entered promiscuous mode [ 329.530270][ T7023] hsr_slave_1: entered promiscuous mode [ 329.595469][ T7023] debugfs: 'hsr0' already exists in 'hsr' [ 329.605650][ T7023] Cannot create hsr debugfs directory [ 329.946205][ T24] usb 1-1: USB disconnect, device number 5 [ 329.971891][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 330.224002][ T3459] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.505392][ T3459] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.660494][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.290'. [ 330.993802][ T3459] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.022151][ T5817] Bluetooth: hci1: command tx timeout [ 331.382910][ T3459] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.477212][ T3459] bridge_slave_1: left allmulticast mode [ 332.484379][ T3459] bridge_slave_1: left promiscuous mode [ 332.492631][ T3459] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.582827][ T3459] bridge_slave_0: left allmulticast mode [ 332.588671][ T3459] bridge_slave_0: left promiscuous mode [ 332.595622][ T3459] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.390001][ T3459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.409774][ T3459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.449891][ T3459] bond0 (unregistering): Released all slaves [ 333.683584][ T3459] tipc: Left network mode [ 334.177751][ T7023] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 334.449163][ T7023] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 334.753802][ T3459] hsr_slave_0: left promiscuous mode [ 334.780097][ T3459] hsr_slave_1: left promiscuous mode [ 334.791026][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.800758][ T3459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.873242][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.881416][ T3459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.976325][ T3459] veth1_macvtap: left promiscuous mode [ 334.983620][ T3459] veth0_macvtap: left promiscuous mode [ 334.990133][ T3459] veth1_vlan: left promiscuous mode [ 334.996744][ T3459] veth0_vlan: left promiscuous mode [ 335.757901][ T798] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 336.036968][ T3459] team0 (unregistering): Port device team_slave_1 removed [ 336.091639][ T798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.103785][ T798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.114597][ T798] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 336.129213][ T798] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 336.139530][ T798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.151748][ T3459] team0 (unregistering): Port device team_slave_0 removed [ 336.225012][ T798] usb 1-1: config 0 descriptor?? [ 336.424378][ T7023] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 336.619581][ T7023] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 336.783883][ T798] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 337.192087][ T5817] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 337.680659][ T4431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.689491][ T4431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.712289][ T5817] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 337.784357][ T5872] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 337.794807][ T5817] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 337.794847][ T5112] Bluetooth: hci2: hardware error 0x06 [ 337.809032][ T5817] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 337.835123][ T7023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.938712][ T4431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.947494][ T4431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.964319][ T5872] usb 6-1: Using ep0 maxpacket: 32 [ 338.034291][ T7023] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.063523][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.076695][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.087451][ T5872] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 338.096858][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.143018][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.150602][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.216115][ T5872] usb 6-1: config 0 descriptor?? [ 338.220422][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.228620][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.282012][ T5872] hub 6-1:0.0: USB hub found [ 338.480095][ T5872] hub 6-1:0.0: 1 port detected [ 338.564186][ T7023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.712782][ T5872] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 338.719331][ T5872] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 338.824179][ T5872] usbhid 6-1:0.0: can't add hid device: -71 [ 338.830719][ T5872] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 338.841977][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 338.876814][ T5513] usb 1-1: USB disconnect, device number 6 [ 338.986054][ T5872] usb 6-1: USB disconnect, device number 4 [ 339.021607][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 339.074804][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 339.083446][ T9] usb 4-1: config 0 has no interface number 0 [ 339.173964][ T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 339.184502][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.193258][ T9] usb 4-1: Product: syz [ 339.199006][ T9] usb 4-1: Manufacturer: syz [ 339.204401][ T9] usb 4-1: SerialNumber: syz [ 339.278652][ T9] usb 4-1: config 0 descriptor?? [ 339.357006][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 339.882192][ T5112] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 340.241838][ T7023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.589630][ T7184] capability: warning: `syz.5.307' uses 32-bit capabilities (legacy support in use) [ 341.026402][ T9] gspca_spca1528: reg_r err -71 [ 341.031797][ T9] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 341.122849][ T9] usb 4-1: USB disconnect, device number 8 [ 341.395661][ T5112] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 341.402664][ T5112] Bluetooth: Wrong link type (-22) [ 341.408246][ T5112] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 341.415166][ T5112] Bluetooth: Wrong link type (-22) [ 341.420655][ T5112] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 341.427505][ T5112] Bluetooth: Wrong link type (-22) [ 341.433022][ T5112] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 341.439657][ T5112] Bluetooth: Wrong link type (-22) [ 341.445170][ T5112] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 341.453454][ T5112] Bluetooth: Wrong link type (-22) [ 341.460402][ T5112] Bluetooth: hci5: link tx timeout [ 341.465883][ T5112] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 341.601623][ T5869] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 341.623649][ T5817] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 341.678074][ T5817] Bluetooth: hci5: hcon ffff88802088a000 sent 3 < count 65514 [ 341.795330][ T5817] Bluetooth: hci5: hcon ffff888020889000 sent 1 < count 8 [ 341.804096][ T5817] Bluetooth: hci5: hcon ffff888020889000 sent 0 < count 2 [ 341.812890][ T5817] Bluetooth: hci5: link tx timeout [ 341.847213][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.857913][ T5869] usb 1-1: config 0 interface 0 has no altsetting 0 [ 342.025695][ T5869] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 342.035199][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.044990][ T5869] usb 1-1: Product: syz [ 342.049595][ T5869] usb 1-1: Manufacturer: syz [ 342.054613][ T5869] usb 1-1: SerialNumber: syz [ 342.152164][ T7204] loop6: detected capacity change from 0 to 64 [ 342.202800][ T5869] usb 1-1: config 0 descriptor?? [ 342.289322][ T5869] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 342.364139][ T5869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 342.424677][ T7023] veth0_vlan: entered promiscuous mode [ 342.464694][ T5869] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 342.475795][ T5869] usb 1-1: media controller created [ 342.529787][ T7023] veth1_vlan: entered promiscuous mode [ 342.592583][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.622731][ T5872] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 342.740260][ T7023] veth0_macvtap: entered promiscuous mode [ 342.804401][ T7023] veth1_macvtap: entered promiscuous mode [ 342.826654][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.839212][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.850045][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 342.863373][ T5872] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 342.872874][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.946157][ T7023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.063090][ T7023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.103430][ T5869] DVB: Unable to find symbol tda10046_attach() [ 343.109867][ T5869] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 343.118900][ T5869] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 343.134256][ T5872] usb 4-1: config 0 descriptor?? [ 343.192120][ T4431] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.219781][ T3459] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.300350][ T7217] loop5: detected capacity change from 0 to 128 [ 343.302312][ T3459] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.326477][ T5869] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 343.410422][ T5020] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.450628][ T5869] usb 1-1: USB disconnect, device number 7 [ 343.483325][ T5817] Bluetooth: hci5: command 0x0406 tx timeout [ 343.495732][ T5112] Bluetooth: hci5: hardware error 0x06 [ 343.675216][ T30] audit: type=1800 audit(1764894635.061:9): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.314" name="file1" dev="loop5" ino=1048617 res=0 errno=0 [ 343.747628][ T5872] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 345.552646][ T5869] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 345.571783][ T5112] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 345.732933][ T9] usb 4-1: USB disconnect, device number 9 [ 345.742290][ T5869] usb 7-1: Using ep0 maxpacket: 16 [ 345.798046][ T5869] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 345.806664][ T5869] usb 7-1: config 0 has no interface number 0 [ 345.896001][ T5869] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 345.906355][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.915569][ T5869] usb 7-1: Product: syz [ 345.919912][ T5869] usb 7-1: Manufacturer: syz [ 345.925659][ T5869] usb 7-1: SerialNumber: syz [ 346.068260][ T5869] usb 7-1: config 0 descriptor?? [ 346.104432][ T7255] loop3: detected capacity change from 0 to 64 [ 346.122262][ T5869] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 346.716317][ T7264] loop5: detected capacity change from 0 to 128 [ 346.860847][ T30] audit: type=1800 audit(1764894638.251:10): pid=7264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.326" name="file1" dev="loop5" ino=1048618 res=0 errno=0 [ 347.507773][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.514671][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.816028][ T5869] gspca_spca1528: reg_r err -71 [ 347.821566][ T5869] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 347.895653][ T5869] usb 7-1: USB disconnect, device number 2 [ 348.794768][ T7288] bridge_slave_0: left allmulticast mode [ 348.800703][ T7288] bridge_slave_0: left promiscuous mode [ 348.807524][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.906507][ T7288] bridge_slave_1: left allmulticast mode [ 348.912611][ T7288] bridge_slave_1: left promiscuous mode [ 348.919250][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.029704][ T7288] bond0: (slave bond_slave_0): Releasing backup interface [ 349.120244][ T7288] bond0: (slave bond_slave_1): Releasing backup interface [ 349.212584][ T7288] team0: Port device team_slave_0 removed [ 349.313285][ T7288] team0: Port device team_slave_1 removed [ 349.322566][ T7288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.330049][ T7288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.423971][ T7288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.432778][ T7288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.457794][ T7288] net_ratelimit: 44 callbacks suppressed [ 349.457868][ T7288] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 349.501617][ T7290] ip6gre0: entered promiscuous mode [ 349.522564][ T7290] team0: Port device ip6gre0 added [ 349.662425][ T5872] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 349.912634][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.923998][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.934435][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 349.949057][ T5872] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 349.962434][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.116230][ T5872] usb 4-1: config 0 descriptor?? [ 351.345379][ T5872] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 351.741059][ T7319] loop6: detected capacity change from 0 to 128 [ 352.061384][ T30] audit: type=1800 audit(1764894643.451:11): pid=7319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.337" name="file1" dev="loop6" ino=1048619 res=0 errno=0 [ 352.478089][ T3566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.486690][ T3566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.708006][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.717777][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.007227][ T5872] usb 4-1: USB disconnect, device number 10 [ 353.391613][ T5869] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 353.602001][ T5869] usb 7-1: Using ep0 maxpacket: 16 [ 353.652514][ T5869] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 353.660796][ T5869] usb 7-1: config 0 has no interface number 0 [ 353.762598][ T5869] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 353.772054][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.774338][ T5872] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 353.780207][ T5869] usb 7-1: Product: syz [ 353.780300][ T5869] usb 7-1: Manufacturer: syz [ 353.800390][ T5869] usb 7-1: SerialNumber: syz [ 354.002481][ T5869] usb 7-1: config 0 descriptor?? [ 354.034574][ T5869] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 354.175706][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.189240][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.260556][ T5872] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 354.269996][ T5872] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 354.278465][ T5872] usb 6-1: Manufacturer: syz [ 354.293077][ T5872] usb 6-1: config 0 descriptor?? [ 354.992116][ T5872] uclogic 0003:256C:006D.0008: failed retrieving Huion firmware version: -71 [ 355.002240][ T5872] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 355.010212][ T5872] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 355.124243][ T5872] usb 6-1: USB disconnect, device number 5 [ 355.528465][ T7357] loop7: detected capacity change from 0 to 128 [ 355.662259][ T30] audit: type=1800 audit(1764894647.041:12): pid=7357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.350" name="file1" dev="loop7" ino=1048625 res=0 errno=0 [ 355.718060][ T5869] gspca_spca1528: reg_r err -71 [ 355.724020][ T5869] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 355.811180][ T5869] usb 7-1: USB disconnect, device number 3 [ 356.045897][ T5872] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 356.237714][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.249029][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.259369][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.272772][ T5872] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.282497][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.495081][ T5872] usb 1-1: config 0 descriptor?? [ 356.793881][ T5513] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz1 [ 357.033267][ T5872] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 357.203811][ T5869] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 357.431064][ T5869] usb 6-1: config 2 has an invalid interface number: 174 but max is 0 [ 357.441167][ T5869] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 357.451785][ T5869] usb 6-1: config 2 has no interface number 0 [ 357.457969][ T5869] usb 6-1: config 2 interface 174 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 357.570918][ T5869] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 357.580576][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.589025][ T5869] usb 6-1: Product: syz [ 357.593464][ T5869] usb 6-1: Manufacturer: syz [ 357.598230][ T5869] usb 6-1: SerialNumber: syz [ 357.792734][ T7381] fido_id[7381]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 357.971785][ T5869] usb 6-1: probing VID:PID(0424:012C) [ 357.980694][ T5869] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 357.989160][ T5869] vub300 6-1:2.174: probe with driver vub300 failed with error -22 [ 358.096941][ T5869] usb 6-1: USB disconnect, device number 6 [ 359.096143][ T5872] usb 1-1: USB disconnect, device number 8 [ 359.440185][ T7402] loop5: detected capacity change from 0 to 128 [ 359.581666][ T30] audit: type=1800 audit(1764894650.951:13): pid=7402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.363" name="file1" dev="loop5" ino=1048626 res=0 errno=0 [ 359.922315][ T5872] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 360.125310][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 360.169901][ T5872] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 360.178437][ T5872] usb 4-1: config 0 has no interface number 0 [ 360.305387][ T5872] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 360.315136][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.323511][ T5872] usb 4-1: Product: syz [ 360.327852][ T5872] usb 4-1: Manufacturer: syz [ 360.332797][ T5872] usb 4-1: SerialNumber: syz [ 360.536593][ T5872] usb 4-1: config 0 descriptor?? [ 360.571046][ T5872] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 361.404751][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.6.373'. [ 361.607223][ T7431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.805820][ T5869] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 362.056745][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.068252][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.078316][ T5869] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 362.091523][ T5869] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 362.100850][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.433987][ T5872] gspca_spca1528: reg_r err -71 [ 362.435224][ T5869] usb 6-1: config 0 descriptor?? [ 362.439389][ T5872] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 362.632443][ T5872] usb 4-1: USB disconnect, device number 11 [ 362.987245][ T5869] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 364.682496][ T5513] usb 6-1: USB disconnect, device number 7 [ 366.203820][ T5869] IPVS: starting estimator thread 0... [ 366.311673][ T7462] IPVS: using max 336 ests per chain, 16800 per kthread [ 366.949049][ T7468] loop5: detected capacity change from 0 to 128 [ 367.221421][ T30] audit: type=1800 audit(1764894658.601:14): pid=7468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.381" name="file1" dev="loop5" ino=1048627 res=0 errno=0 [ 370.441516][ T5513] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 370.548183][ T7486] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 370.557240][ T7486] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 370.566093][ T7486] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 370.818215][ T5513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.829445][ T5513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.841365][ T5513] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 370.855231][ T5513] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 370.864468][ T5513] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.075022][ T5513] usb 4-1: config 0 descriptor?? [ 371.735443][ T5513] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 373.534287][ T7507] loop0: detected capacity change from 0 to 65536 [ 373.636857][ T7507] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 373.969356][ T5513] usb 4-1: USB disconnect, device number 12 [ 373.997191][ T7507] XFS (loop0): Ending clean mount [ 374.015908][ T7507] XFS (loop0): Quotacheck needed: Please wait. [ 374.103956][ T7507] XFS (loop0): Quotacheck: Done. [ 374.297078][ T5819] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 374.917535][ T7525] loop7: detected capacity change from 0 to 128 [ 375.095609][ T30] audit: type=1800 audit(1764894666.491:15): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.394" name="file1" dev="loop7" ino=1048628 res=0 errno=0 [ 375.860415][ T7535] netlink: 12 bytes leftover after parsing attributes in process `syz.7.398'. [ 375.983047][ T7535] netlink: 128 bytes leftover after parsing attributes in process `syz.7.398'. [ 376.824709][ T5112] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 376.831562][ T5112] Bluetooth: Wrong link type (-22) [ 376.836916][ T5112] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 376.844743][ T5112] Bluetooth: Wrong link type (-22) [ 376.850205][ T5112] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 376.857117][ T5112] Bluetooth: Wrong link type (-22) [ 376.862646][ T5112] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 376.869283][ T5112] Bluetooth: Wrong link type (-22) [ 376.874830][ T5112] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 376.884350][ T5112] Bluetooth: Wrong link type (-22) [ 376.891481][ T5112] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 376.899268][ T5112] Bluetooth: hci0: hardware error 0x06 [ 376.904633][ T5817] Bluetooth: hci0: link tx timeout [ 376.910043][ T5817] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 378.382619][ T7551] loop7: detected capacity change from 0 to 65536 [ 378.394530][ T5513] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 378.511479][ T7551] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 378.637011][ T5513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.648619][ T5513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.658781][ T5513] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 378.672079][ T5513] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 378.681473][ T5513] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.695485][ T5513] usb 4-1: config 0 descriptor?? [ 378.863580][ T7551] XFS (loop7): Ending clean mount [ 378.894313][ T7551] XFS (loop7): Quotacheck needed: Please wait. [ 378.961517][ T7551] XFS (loop7): Quotacheck: Done. [ 379.003016][ T5112] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 379.209671][ T5513] usbhid 4-1:0.0: can't add hid device: -71 [ 379.216391][ T5513] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 379.244599][ T7023] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 379.294706][ T5513] usb 4-1: USB disconnect, device number 13 [ 379.805159][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.7.405'. [ 380.358318][ T7576] loop3: detected capacity change from 0 to 128 [ 382.971770][ T5513] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 383.223283][ T7618] loop7: detected capacity change from 0 to 128 [ 383.270366][ T5513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.281950][ T5513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.292108][ T5513] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 383.305410][ T5513] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 383.307298][ T798] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 383.314837][ T5513] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.558291][ T5513] usb 4-1: config 0 descriptor?? [ 383.576867][ T798] usb 7-1: Using ep0 maxpacket: 8 [ 383.607108][ T798] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 383.692982][ T798] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 383.702514][ T798] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.710810][ T798] usb 7-1: Product: syz [ 383.715727][ T798] usb 7-1: Manufacturer: syz [ 383.720514][ T798] usb 7-1: SerialNumber: syz [ 383.929597][ T798] usb 7-1: config 0 descriptor?? [ 383.977468][ T798] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 383.987308][ T798] usb 7-1: setting power ON [ 383.992300][ T798] dvb-usb: bulk message failed: -22 (2/0) [ 384.165505][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 384.185925][ T5513] usbhid 4-1:0.0: can't add hid device: -71 [ 384.193508][ T5513] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 384.223966][ T798] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 384.263093][ T5513] usb 4-1: USB disconnect, device number 14 [ 384.303556][ T798] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 384.312377][ T798] usb 7-1: media controller created [ 384.317902][ T7626] fuse: Bad value for 'fd' [ 384.474593][ T798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.893256][ T798] usb 7-1: selecting invalid altsetting 6 [ 384.899196][ T798] usb 7-1: digital interface selection failed (-22) [ 384.906594][ T798] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 385.036802][ T798] usb 7-1: setting power OFF [ 385.041823][ T798] dvb-usb: bulk message failed: -22 (2/0) [ 385.047821][ T798] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 385.057947][ T798] (NULL device *): no alternate interface [ 385.448100][ T7636] netlink: 2660 bytes leftover after parsing attributes in process `syz.0.427'. [ 385.727958][ T798] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 385.756210][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 385.824518][ T798] usb 7-1: USB disconnect, device number 4 [ 385.971381][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 385.981609][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 385.991812][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 386.003257][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 386.092235][ T7648] loop7: detected capacity change from 0 to 64 [ 386.134446][ T9] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 386.144484][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.153028][ T9] usb 4-1: Product: syz [ 386.157364][ T9] usb 4-1: Manufacturer: syz [ 386.162199][ T9] usb 4-1: SerialNumber: syz [ 386.304533][ T9] usb 4-1: config 0 descriptor?? [ 386.319731][ T9] kvaser_usb 4-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 386.327546][ T9] kvaser_usb 4-1:0.0: error -EMSGSIZE: Failed to initialize card [ 386.335748][ T9] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 386.603847][ T9] usb 4-1: USB disconnect, device number 15 [ 386.792740][ T7657] loop0: detected capacity change from 0 to 128 [ 387.432936][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 387.657678][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.669091][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.679281][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 387.692633][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 387.702002][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.944039][ T9] usb 6-1: config 0 descriptor?? [ 388.400745][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 388.407293][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 388.623634][ T9] usb 6-1: USB disconnect, device number 8 [ 389.219881][ T7698] loop7: detected capacity change from 0 to 64 [ 390.952294][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.7.451'. [ 392.093368][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 392.317931][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.329329][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.339653][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 392.356560][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.366622][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.598979][ T9] usb 8-1: config 0 descriptor?? [ 392.685944][ T7747] loop5: detected capacity change from 0 to 64 [ 393.055599][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 393.064414][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 393.144580][ T9] usb 8-1: USB disconnect, device number 2 [ 394.085754][ T7761] loop6: detected capacity change from 0 to 524288000 [ 394.323417][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.7.467'. [ 396.586258][ T7799] loop6: detected capacity change from 0 to 64 [ 397.224447][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 397.472910][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.485061][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.495306][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 397.508570][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.518092][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.698590][ T9] usb 4-1: config 0 descriptor?? [ 398.170078][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 398.177171][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 398.270726][ T9] usb 4-1: USB disconnect, device number 16 [ 399.103523][ T7835] loop6: detected capacity change from 0 to 128 [ 399.870849][ T7848] loop6: detected capacity change from 0 to 64 [ 399.941875][ T5513] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 400.161613][ T5513] usb 1-1: Using ep0 maxpacket: 16 [ 400.202823][ T5513] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 400.273779][ T5513] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.315035][ T5513] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.367180][ T5513] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.458172][ T5513] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.523685][ T5513] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.593727][ T5513] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.667807][ T5513] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.704472][ T5513] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.779923][ T5513] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 400.789626][ T5513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 400.798079][ T5513] usb 1-1: SerialNumber: syz [ 400.926361][ T5513] usb 1-1: config 0 descriptor?? [ 400.987204][ T5513] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input23 [ 401.181532][ T5151] bcm5974 1-1:0.0: could not read from device [ 401.218258][ T5151] bcm5974 1-1:0.0: could not read from device [ 401.238763][ T5513] usb 1-1: USB disconnect, device number 9 [ 401.866607][ T7876] loop5: detected capacity change from 0 to 128 [ 402.388494][ T7888] loop3: detected capacity change from 0 to 64 [ 404.072287][ T5513] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 404.183829][ T5513] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 404.194444][ T42] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 404.451879][ T42] usb 8-1: Using ep0 maxpacket: 16 [ 404.460183][ T7918] loop0: detected capacity change from 0 to 128 [ 404.540775][ T42] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 404.549689][ T42] usb 8-1: config 0 has no interface number 0 [ 404.661425][ T42] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 404.670951][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.679446][ T42] usb 8-1: Product: syz [ 404.683910][ T42] usb 8-1: Manufacturer: syz [ 404.688657][ T42] usb 8-1: SerialNumber: syz [ 404.886284][ T42] usb 8-1: config 0 descriptor?? [ 404.953691][ T42] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 405.540647][ T7925] fido_id[7925]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 405.582486][ T7933] loop0: detected capacity change from 0 to 64 [ 406.383593][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.524'. [ 406.651435][ T42] gspca_spca1528: reg_r err -71 [ 406.656794][ T42] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71 [ 406.754983][ T42] usb 8-1: USB disconnect, device number 3 [ 407.928361][ T7964] fuse: Bad value for 'fd' [ 409.362590][ T7971] loop5: detected capacity change from 0 to 65536 [ 409.394664][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 409.401492][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.528321][ T7971] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 409.825392][ T7971] XFS (loop5): Ending clean mount [ 409.834968][ T7971] XFS (loop5): Quotacheck needed: Please wait. [ 409.859136][ T7971] XFS (loop5): Quotacheck: Done. [ 409.995180][ T6549] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 410.987596][ T42] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 411.236361][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 411.273532][ T42] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 411.282525][ T42] usb 4-1: config 0 has no interface number 0 [ 411.384538][ T42] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 411.396746][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.406026][ T42] usb 4-1: Product: syz [ 411.410377][ T42] usb 4-1: Manufacturer: syz [ 411.415421][ T42] usb 4-1: SerialNumber: syz [ 411.537988][ T42] usb 4-1: config 0 descriptor?? [ 411.607745][ T42] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 413.245198][ T42] gspca_spca1528: reg_r err -71 [ 413.250609][ T42] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 413.372074][ T42] usb 4-1: USB disconnect, device number 17 [ 416.309124][ T42] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 416.531645][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 416.574787][ T42] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 416.583261][ T42] usb 4-1: config 0 has no interface number 0 [ 416.626801][ T42] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 416.636448][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.647707][ T42] usb 4-1: Product: syz [ 416.652436][ T42] usb 4-1: Manufacturer: syz [ 416.657189][ T42] usb 4-1: SerialNumber: syz [ 416.680722][ T42] usb 4-1: config 0 descriptor?? [ 416.707215][ T42] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 417.831806][ T30] audit: type=1326 audit(1764894709.221:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8104 comm="syz.6.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8dd8f749 code=0x7fc00000 [ 418.331956][ T30] audit: type=1326 audit(1764894709.711:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8104 comm="syz.6.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb8dd8f749 code=0x7fc00000 [ 418.389964][ T42] gspca_spca1528: reg_r err -71 [ 418.395884][ T42] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 418.471675][ T42] usb 4-1: USB disconnect, device number 18 [ 420.344880][ T8149] syzkaller1: entered promiscuous mode [ 420.350669][ T8149] syzkaller1: entered allmulticast mode [ 422.976464][ T42] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 423.209495][ T42] usb 8-1: Using ep0 maxpacket: 16 [ 423.244708][ T42] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 423.253113][ T42] usb 8-1: config 0 has no interface number 0 [ 423.329184][ T42] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 423.339137][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.347569][ T42] usb 8-1: Product: syz [ 423.352057][ T42] usb 8-1: Manufacturer: syz [ 423.356827][ T42] usb 8-1: SerialNumber: syz [ 423.506654][ T42] usb 8-1: config 0 descriptor?? [ 423.607523][ T42] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 425.371927][ T42] gspca_spca1528: reg_w err -110 [ 425.377261][ T42] spca1528 8-1:0.1: probe with driver spca1528 failed with error -110 [ 425.938659][ T8206] sd 0:0:1:0: PR command failed: 1026 [ 425.944559][ T8206] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 425.951760][ T8206] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 427.126449][ T24] usb 8-1: USB disconnect, device number 4 [ 427.907259][ T8226] loop3: detected capacity change from 0 to 128 [ 430.111807][ T30] audit: type=1800 audit(1764894721.461:18): pid=8226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.611" name="file1" dev="loop3" ino=1048629 res=0 errno=0 [ 432.550658][ T8252] sd 0:0:1:0: PR command failed: 1026 [ 432.557227][ T8252] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 432.564532][ T8252] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 434.087359][ T798] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 434.281514][ T798] usb 4-1: Using ep0 maxpacket: 16 [ 434.322463][ T798] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 434.332382][ T798] usb 4-1: config 0 has no interface number 0 [ 434.387781][ T798] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 434.397543][ T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.406065][ T798] usb 4-1: Product: syz [ 434.410463][ T798] usb 4-1: Manufacturer: syz [ 434.415431][ T798] usb 4-1: SerialNumber: syz [ 434.596686][ T798] usb 4-1: config 0 descriptor?? [ 434.638627][ T798] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 434.727262][ T8279] loop5: detected capacity change from 0 to 128 [ 434.820974][ T30] audit: type=1800 audit(1764894726.211:19): pid=8279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.625" name="file1" dev="loop5" ino=1048630 res=0 errno=0 [ 436.434819][ T8294] sd 0:0:1:0: PR command failed: 1026 [ 436.440593][ T8294] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 436.448103][ T8294] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 436.562351][ T798] gspca_spca1528: reg_r err -71 [ 436.567622][ T798] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 436.585142][ T798] usb 4-1: USB disconnect, device number 19 [ 439.016320][ T8327] loop5: detected capacity change from 0 to 128 [ 439.167587][ T30] audit: type=1800 audit(1764894730.551:20): pid=8327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.639" name="file1" dev="loop5" ino=1048631 res=0 errno=0 [ 441.472761][ T8346] tipc: Started in network mode [ 441.478004][ T8346] tipc: Node identity 4, cluster identity 4711 [ 441.484702][ T8346] tipc: Node number set to 4 [ 441.633214][ T42] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 441.831580][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 441.923921][ T42] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 441.932939][ T42] usb 6-1: config 0 has no interface number 0 [ 442.079875][ T42] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 442.089437][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.097901][ T42] usb 6-1: Product: syz [ 442.102376][ T42] usb 6-1: Manufacturer: syz [ 442.107127][ T42] usb 6-1: SerialNumber: syz [ 442.526287][ T42] usb 6-1: config 0 descriptor?? [ 442.578834][ T42] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 442.703780][ T8354] loop6: detected capacity change from 0 to 524288000 [ 443.984959][ T8364] loop3: detected capacity change from 0 to 128 [ 444.096747][ T30] audit: type=1800 audit(1764894735.481:21): pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.652" name="file1" dev="loop3" ino=1048632 res=0 errno=0 [ 444.276892][ T42] gspca_spca1528: reg_r err -71 [ 444.282836][ T42] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 444.399338][ T42] usb 6-1: USB disconnect, device number 9 [ 446.224928][ T8377] tipc: Started in network mode [ 446.229976][ T8377] tipc: Node identity 4, cluster identity 4711 [ 446.236688][ T8377] tipc: Node number set to 4 [ 446.843162][ T5112] Bluetooth: hci1: command 0x0406 tx timeout [ 447.352636][ T8387] loop6: detected capacity change from 0 to 524288000 [ 448.002426][ T8394] loop0: detected capacity change from 0 to 128 [ 448.124243][ T30] audit: type=1800 audit(1764894739.521:22): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.664" name="file1" dev="loop0" ino=1048633 res=0 errno=0 [ 451.994688][ T8426] loop6: detected capacity change from 0 to 524288000 [ 452.231698][ T8433] loop0: detected capacity change from 0 to 128 [ 452.341415][ T30] audit: type=1800 audit(1764894743.731:23): pid=8433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.679" name="file1" dev="loop0" ino=1048634 res=0 errno=0 [ 452.341788][ T42] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 452.474527][ T8435] tipc: Started in network mode [ 452.479570][ T8435] tipc: Node identity 4, cluster identity 4711 [ 452.486765][ T8435] tipc: Node number set to 4 [ 452.621953][ T42] usb 6-1: device descriptor read/64, error -71 [ 452.881482][ T42] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 453.049503][ T42] usb 6-1: device descriptor read/64, error -71 [ 453.163759][ T42] usb usb6-port1: attempt power cycle [ 454.261653][ T42] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 456.112732][ T42] usb 6-1: device descriptor read/8, error -71 [ 456.512731][ T8466] loop6: detected capacity change from 0 to 524288000 [ 456.615340][ T8470] loop7: detected capacity change from 0 to 128 [ 456.740045][ T30] audit: type=1800 audit(1764894748.131:24): pid=8470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.693" name="file1" dev="loop7" ino=1048635 res=0 errno=0 [ 457.849647][ T42] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 458.043359][ T42] usb 4-1: device descriptor read/64, error -71 [ 458.115987][ T8493] binder: BINDER_SET_CONTEXT_MGR already set [ 458.122764][ T8493] binder: 8490:8493 ioctl 4018620d 200000000040 returned -16 [ 458.139685][ T8493] binder: 8490:8493 ioctl c0306201 200000000240 returned -11 [ 458.316141][ T42] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 458.569397][ T42] usb 4-1: device descriptor read/64, error -71 [ 458.695200][ T42] usb usb4-port1: attempt power cycle [ 459.154013][ T42] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 459.179666][ T8503] loop6: detected capacity change from 0 to 128 [ 459.224939][ T42] usb 4-1: device descriptor read/8, error -71 [ 459.309325][ T30] audit: type=1800 audit(1764894750.691:25): pid=8503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.707" name="file1" dev="loop6" ino=1048636 res=0 errno=0 [ 459.505515][ T42] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 459.563022][ T42] usb 4-1: device descriptor read/8, error -71 [ 459.679117][ T8509] tipc: Started in network mode [ 459.684443][ T8509] tipc: Node identity 4, cluster identity 4711 [ 459.690838][ T8509] tipc: Node number set to 4 [ 459.692917][ T42] usb usb4-port1: unable to enumerate USB device [ 461.080506][ T8524] binder: 8521:8524 ioctl c0306201 200000000240 returned -11 [ 462.160769][ T8536] loop5: detected capacity change from 0 to 128 [ 462.363185][ T30] audit: type=1800 audit(1764894753.741:26): pid=8536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.720" name="file1" dev="loop5" ino=1048637 res=0 errno=0 [ 463.281949][ T798] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 463.461732][ T5817] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 463.521681][ T798] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.532312][ T798] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 463.541727][ T798] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 463.543312][ T5817] Bluetooth: hci1: hardware error 0x06 [ 463.550928][ T798] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.594105][ T798] usb 7-1: config 0 descriptor?? [ 463.763267][ T8559] binder: 8558:8559 ioctl c0306201 200000000240 returned -11 [ 465.648333][ T5817] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 466.145611][ T9] usb 7-1: USB disconnect, device number 5 [ 466.375259][ T8595] binder: 8593:8595 ioctl c0306201 200000000240 returned -11 [ 466.552231][ T8603] tipc: Started in network mode [ 466.557654][ T8603] tipc: Node identity 4, cluster identity 4711 [ 466.564271][ T8603] tipc: Node number set to 4 [ 467.783034][ T8609] Can't find ip_set type has [ 468.453062][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 468.672212][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.682673][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 468.692228][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 468.701530][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.713173][ T8631] fuse: Bad value for 'fd' [ 468.816592][ T9] usb 8-1: config 0 descriptor?? [ 469.334320][ T8639] binder: 8638:8639 ioctl c0306201 200000000240 returned -11 [ 469.411991][ T42] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 469.580614][ T42] usb 1-1: device descriptor read/64, error -71 [ 469.877699][ T42] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 470.127961][ T42] usb 1-1: device descriptor read/64, error -71 [ 470.254599][ T42] usb usb1-port1: attempt power cycle [ 470.414422][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.421019][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.721094][ T42] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 470.793289][ T42] usb 1-1: device descriptor read/8, error -71 [ 471.041547][ T42] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 471.107242][ T42] usb 1-1: device descriptor read/8, error -71 [ 471.222078][ T42] usb usb1-port1: unable to enumerate USB device [ 471.353747][ T9] usb 8-1: USB disconnect, device number 5 [ 471.861989][ T8674] binder: 8673:8674 ioctl c0306201 200000000240 returned -11 [ 473.846097][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 474.187426][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 474.351745][ T9] usb 1-1: device descriptor read/64, error -71 [ 474.631644][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 474.784316][ T9] usb 1-1: device descriptor read/64, error -71 [ 474.911405][ T9] usb usb1-port1: attempt power cycle [ 475.292307][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 475.392702][ T9] usb 1-1: device descriptor read/8, error -71 [ 475.641578][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 475.682908][ T9] usb 1-1: device descriptor read/8, error -71 [ 475.793966][ T9] usb usb1-port1: unable to enumerate USB device [ 477.198218][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.803'. [ 478.518508][ T8774] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 479.562756][ T42] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 479.733178][ T42] usb 7-1: device descriptor read/64, error -71 [ 479.981988][ T42] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 480.108183][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.821'. [ 480.165470][ T42] usb 7-1: device descriptor read/64, error -71 [ 480.290909][ T42] usb usb7-port1: attempt power cycle [ 480.709824][ T42] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 480.794424][ T42] usb 7-1: device descriptor read/8, error -71 [ 481.024777][ T8815] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 481.038947][ T42] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 481.114222][ T42] usb 7-1: device descriptor read/8, error -71 [ 481.239849][ T42] usb usb7-port1: unable to enumerate USB device [ 482.505758][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 485.443072][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 485.562188][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.7.849'. [ 488.624884][ T8926] overlayfs: failed to resolve './file0': -2 [ 489.657412][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 491.002570][ T8953] binder: 8951:8953 ioctl c0306201 200000000240 returned -11 [ 491.448448][ T30] audit: type=1326 audit(1764894782.821:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.3.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51a58f749 code=0x7fc00000 [ 491.643631][ T42] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 491.707068][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 491.829282][ T42] usb 1-1: device descriptor read/64, error -71 [ 492.084861][ T42] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 492.151796][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 492.274938][ T42] usb 1-1: device descriptor read/64, error -71 [ 492.335578][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 492.346530][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 492.362091][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 492.374395][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 492.395908][ T42] usb usb1-port1: attempt power cycle [ 492.479682][ T24] usb 6-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 492.492205][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.500399][ T24] usb 6-1: Product: syz [ 492.506299][ T24] usb 6-1: Manufacturer: syz [ 492.511078][ T24] usb 6-1: SerialNumber: syz [ 492.595147][ T24] usb 6-1: config 0 descriptor?? [ 492.629244][ T24] kvaser_usb 6-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 492.636878][ T24] kvaser_usb 6-1:0.0: error -EMSGSIZE: Failed to initialize card [ 492.645147][ T24] kvaser_usb 6-1:0.0: probe with driver kvaser_usb failed with error -90 [ 492.802221][ T42] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 492.865636][ T42] usb 1-1: device descriptor read/8, error -71 [ 493.003510][ T5513] usb 6-1: USB disconnect, device number 14 [ 493.172214][ T42] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 493.256442][ T42] usb 1-1: device descriptor read/8, error -71 [ 493.338427][ T8973] Can't find ip_set type hash:ip,mar [ 493.423034][ T8979] overlayfs: failed to resolve './file0': -2 [ 494.296286][ T42] usb usb1-port1: unable to enumerate USB device [ 495.313974][ T8989] binder: 8987:8989 ioctl c0306201 200000000240 returned -11 [ 495.784042][ T30] audit: type=1326 audit(1764894787.181:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8992 comm="syz.7.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f98f749 code=0x7fc00000 [ 495.806969][ T30] audit: type=1326 audit(1764894787.181:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8992 comm="syz.7.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f98f749 code=0x7fc00000 [ 501.912819][ T30] audit: type=1326 audit(1764894793.311:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.5.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87e58f749 code=0x7fc00000 [ 507.523725][ T30] audit: type=1326 audit(1764894798.911:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.0.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfdb8f749 code=0x7fc00000 [ 507.953312][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 508.065001][ T30] audit: type=1326 audit(1764894799.441:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.0.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6cfdb8f749 code=0x7fc00000 [ 508.088144][ T30] audit: type=1326 audit(1764894799.441:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.0.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfdb8f749 code=0x7fc00000 [ 508.211372][ T9] usb 6-1: config 2 has an invalid interface number: 174 but max is 0 [ 508.219846][ T9] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 508.257178][ T9] usb 6-1: config 2 has no interface number 0 [ 508.264762][ T9] usb 6-1: config 2 interface 174 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 508.411287][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 508.420730][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.429224][ T9] usb 6-1: Product: syz [ 508.433850][ T9] usb 6-1: Manufacturer: syz [ 508.438626][ T9] usb 6-1: SerialNumber: syz [ 508.688095][ T9093] netlink: 40 bytes leftover after parsing attributes in process `syz.0.920'. [ 509.839364][ T9] usb 6-1: probing VID:PID(0424:012C) [ 509.849465][ T9] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 509.857762][ T9] vub300 6-1:2.174: probe with driver vub300 failed with error -22 [ 509.948034][ T9] usb 6-1: USB disconnect, device number 15 [ 510.372214][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 510.552169][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 510.584589][ T9] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 510.608685][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.649189][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.673217][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.705996][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.755577][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.819700][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.869721][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.892161][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.926541][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 510.936275][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 510.944721][ T9] usb 4-1: SerialNumber: syz [ 511.024560][ T9] usb 4-1: config 0 descriptor?? [ 511.062336][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input35 [ 511.289010][ T5151] bcm5974 4-1:0.0: could not read from device [ 511.317499][ T5151] bcm5974 4-1:0.0: could not read from device [ 511.350066][ T5151] bcm5974 4-1:0.0: could not read from device [ 511.366916][ T5151] bcm5974 4-1:0.0: could not read from device [ 511.379413][ T9] usb 4-1: USB disconnect, device number 24 [ 512.328912][ T9127] netlink: 40 bytes leftover after parsing attributes in process `syz.0.933'. [ 513.272297][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 513.602582][ T9] usb 7-1: config 2 has an invalid interface number: 174 but max is 0 [ 513.611088][ T9] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 513.621763][ T9] usb 7-1: config 2 has no interface number 0 [ 513.628060][ T9] usb 7-1: config 2 interface 174 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 513.763641][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 513.773370][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.781773][ T9] usb 7-1: Product: syz [ 513.786129][ T9] usb 7-1: Manufacturer: syz [ 513.792413][ T9] usb 7-1: SerialNumber: syz [ 514.251001][ T9] usb 7-1: probing VID:PID(0424:012C) [ 514.260379][ T9] usb 7-1: Could not find two sets of bulk-in/out endpoint pairs [ 514.274280][ T9] vub300 7-1:2.174: probe with driver vub300 failed with error -22 [ 514.381556][ T9] usb 7-1: USB disconnect, device number 10 [ 515.398915][ T30] audit: type=1326 audit(1764894806.791:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfdb8f749 code=0x7fc00000 [ 515.491954][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 515.675230][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 515.692125][ T9] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 515.721958][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.762579][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.787504][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.825339][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.892219][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.951432][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.996561][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.039942][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.045491][ T30] audit: type=1326 audit(1764894807.441:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6cfdb8f749 code=0x7fc00000 [ 516.077050][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 516.087169][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 516.095539][ T9] usb 7-1: SerialNumber: syz [ 516.184384][ T9] usb 7-1: config 0 descriptor?? [ 516.234186][ T9] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input36 [ 516.400725][ T5151] bcm5974 7-1:0.0: could not read from device [ 516.458353][ T5151] bcm5974 7-1:0.0: could not read from device [ 516.479859][ T5151] bcm5974 7-1:0.0: could not read from device [ 516.485742][ T9] usb 7-1: USB disconnect, device number 11 [ 517.430324][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 517.663605][ T9] usb 6-1: config 2 has an invalid interface number: 174 but max is 0 [ 517.672705][ T9] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 517.684584][ T9] usb 6-1: config 2 has no interface number 0 [ 517.690864][ T9] usb 6-1: config 2 interface 174 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 517.778762][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 517.789795][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.798818][ T9] usb 6-1: Product: syz [ 517.803261][ T9] usb 6-1: Manufacturer: syz [ 517.808031][ T9] usb 6-1: SerialNumber: syz [ 518.541962][ T9] usb 6-1: probing VID:PID(0424:012C) [ 518.550855][ T9] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 518.559111][ T9] vub300 6-1:2.174: probe with driver vub300 failed with error -22 [ 518.742785][ T9] usb 6-1: USB disconnect, device number 16 [ 519.409173][ T30] audit: type=1326 audit(1764894810.801:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9205 comm="syz.6.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8dd8f749 code=0x7fc00000 [ 522.484351][ T5513] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 523.136106][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.979'. [ 523.551443][ T5513] usb 8-1: config 2 has an invalid interface number: 174 but max is 0 [ 523.559989][ T5513] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 523.570457][ T5513] usb 8-1: config 2 has no interface number 0 [ 523.576910][ T5513] usb 8-1: config 2 interface 174 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 523.601433][ T30] audit: type=1326 audit(1764894814.711:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.5.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87e58f749 code=0x7fc00000 [ 523.684285][ T5513] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 523.694241][ T5513] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.702653][ T5513] usb 8-1: Product: syz [ 523.706979][ T5513] usb 8-1: Manufacturer: syz [ 523.711816][ T5513] usb 8-1: SerialNumber: syz [ 524.246981][ T5513] usb 8-1: probing VID:PID(0424:012C) [ 524.255953][ T5513] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 524.264213][ T5513] vub300 8-1:2.174: probe with driver vub300 failed with error -22 [ 524.365443][ T5513] usb 8-1: USB disconnect, device number 6 [ 525.542091][ T5513] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 525.702820][ T5513] usb 6-1: Using ep0 maxpacket: 16 [ 525.744495][ T5513] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.755201][ T5513] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 525.796783][ T5513] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 525.806648][ T5513] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.815134][ T5513] usb 6-1: Product: syz [ 525.819459][ T5513] usb 6-1: Manufacturer: syz [ 525.824309][ T5513] usb 6-1: SerialNumber: syz [ 526.148492][ T5513] usb 6-1: 0:2 : does not exist [ 526.234641][ T5513] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 526.341649][ T30] audit: type=1326 audit(1764894817.731:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfdb8f749 code=0x7fc00000 [ 526.372690][ T5513] usb 6-1: USB disconnect, device number 17 [ 526.509317][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 526.776677][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.7.992'. [ 526.934183][ T30] audit: type=1326 audit(1764894818.321:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6cfdb8f749 code=0x7fc00000 [ 530.381487][ T5874] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 530.601654][ T5874] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 530.610043][ T5874] usb 7-1: config 0 has no interface number 0 [ 530.616747][ T5874] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 530.626106][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.709134][ T5874] usb 7-1: config 0 descriptor?? [ 530.877159][ T30] audit: type=1326 audit(1764894822.271:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9337 comm="syz.7.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f98f749 code=0x7fc00000 [ 531.645630][ T5874] hub 7-1:0.1: bad descriptor, ignoring hub [ 531.652036][ T5874] hub 7-1:0.1: probe with driver hub failed with error -5 [ 531.663745][ T5874] usb 7-1: selecting invalid altsetting 1 [ 531.669899][ T5874] dvb_ttusb_budget: ttusb_init_controller: error [ 531.676424][ T5874] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 531.854679][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.862048][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.290887][ T5874] DVB: Unable to find symbol cx22700_attach() [ 532.394035][ T5874] DVB: Unable to find symbol tda10046_attach() [ 532.400358][ T5874] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 535.953537][ T30] audit: type=1326 audit(1764894827.331:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfdb8f749 code=0x7fc00000 [ 536.581636][ T42] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 537.098572][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.109191][ T42] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 537.290857][ T42] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 537.300606][ T42] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 537.309092][ T42] usb 6-1: Manufacturer: syz [ 537.525686][ T42] usb 6-1: config 0 descriptor?? [ 539.060917][ T9] usb 7-1: USB disconnect, device number 12 [ 539.172967][ T5874] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 539.848050][ T9] usb 6-1: USB disconnect, device number 18 [ 539.877792][ T5874] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 539.887942][ T5874] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 539.899012][ T5874] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 539.910758][ T5874] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 540.018863][ T5874] usb 8-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 540.028282][ T5874] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.036663][ T5874] usb 8-1: Product: syz [ 540.041319][ T5874] usb 8-1: Manufacturer: syz [ 540.046156][ T5874] usb 8-1: SerialNumber: syz [ 540.088296][ T5874] usb 8-1: config 0 descriptor?? [ 540.103553][ T5874] kvaser_usb 8-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 540.113118][ T5874] kvaser_usb 8-1:0.0: error -EMSGSIZE: Failed to initialize card [ 540.121097][ T5874] kvaser_usb 8-1:0.0: probe with driver kvaser_usb failed with error -90 [ 540.322394][ T5874] usb 8-1: USB disconnect, device number 7 [ 541.622258][ T30] audit: type=1326 audit(1764894833.011:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.6.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8dd8f749 code=0x7fc00000 [ 546.792558][ T9494] loop5: detected capacity change from 0 to 65536 [ 546.903569][ T9494] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 547.095061][ T9494] XFS (loop5): Ending clean mount [ 547.114182][ T9494] XFS (loop5): Quotacheck needed: Please wait. [ 547.209591][ T9494] XFS (loop5): Quotacheck: Done. [ 547.382938][ T6549] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 550.796348][ T9542] loop7: detected capacity change from 0 to 65536 [ 550.920728][ T9542] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 551.120560][ T9542] XFS (loop7): Ending clean mount [ 551.135159][ T9542] XFS (loop7): Quotacheck needed: Please wait. [ 551.181577][ T9542] XFS (loop7): Quotacheck: Done. [ 551.359455][ T7023] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 553.681643][ T42] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 553.882008][ T42] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 553.893263][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.904642][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.914736][ T42] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 554.036569][ T42] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 554.046069][ T42] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 554.054872][ T42] usb 4-1: Manufacturer: syz [ 554.158912][ T42] usb 4-1: config 0 descriptor?? [ 554.601441][ T42] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 554.677282][ T42] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 554.931727][ T42] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 555.212244][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 555.222428][ T42] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 555.233102][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 555.243225][ T42] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 555.356910][ T42] usb 7-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 555.368877][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.378001][ T42] usb 7-1: Product: syz [ 555.382790][ T42] usb 7-1: Manufacturer: syz [ 555.387561][ T42] usb 7-1: SerialNumber: syz [ 555.447183][ T42] usb 7-1: config 0 descriptor?? [ 555.471927][ T42] kvaser_usb 7-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 555.479441][ T42] kvaser_usb 7-1:0.0: error -EMSGSIZE: Failed to initialize card [ 555.487656][ T42] kvaser_usb 7-1:0.0: probe with driver kvaser_usb failed with error -90 [ 555.690208][ T42] usb 7-1: USB disconnect, device number 13 [ 556.121607][ T5874] usb 4-1: reset high-speed USB device number 25 using dummy_hcd [ 557.315723][ T9] usb 4-1: USB disconnect, device number 25 [ 558.052010][ T9619] netlink: 'syz.0.1098': attribute type 1 has an invalid length. [ 558.175265][ T9619] 8021q: adding VLAN 0 to HW filter on device bond2 [ 558.358644][ T9624] bond2 (unregistering): Released all slaves [ 558.951897][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 559.040670][ T9630] syzkaller0: entered promiscuous mode [ 559.046639][ T9630] syzkaller0: entered allmulticast mode [ 559.187410][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 559.199214][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.210500][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.220980][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 559.307082][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 559.318044][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 559.328137][ T9] usb 4-1: Manufacturer: syz [ 559.463300][ T9] usb 4-1: config 0 descriptor?? [ 559.887906][ T9] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 559.960627][ T9] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 561.875459][ T5874] usb 4-1: USB disconnect, device number 26 [ 563.981591][ T5874] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 564.030270][ T9690] geneve2: entered allmulticast mode [ 564.240375][ T3522] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 564.591025][ T3934] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 564.674503][ T3934] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 564.733217][ T3934] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 564.792696][ T5874] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 564.804256][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.816581][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.826957][ T5874] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 564.991976][ T5874] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 565.002248][ T5874] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 565.011408][ T5874] usb 6-1: Manufacturer: syz [ 565.061076][ T5874] usb 6-1: config 0 descriptor?? [ 565.494580][ T5874] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 565.555314][ T5874] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 566.951477][ T5874] usb 6-1: reset high-speed USB device number 19 using dummy_hcd [ 567.101503][ T5874] usb 6-1: device descriptor read/64, error -32 [ 568.034597][ T9] usb 6-1: USB disconnect, device number 19 [ 568.567868][ T9726] fuse: Bad value for 'group_id' [ 568.567938][ T9726] fuse: Bad value for 'group_id' [ 570.081410][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 570.282493][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.293856][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.303944][ T24] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 570.314711][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.510526][ T24] usb 7-1: config 0 descriptor?? [ 570.956905][ T24] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 570.964383][ T24] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 570.971737][ T24] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 570.978901][ T24] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 570.986214][ T24] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 570.993484][ T24] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 571.000598][ T24] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 571.179064][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 571.179837][ T24] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 571.272865][ T24] cp2112 0003:10C4:EA90.0011: error requesting version [ 571.296091][ T24] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -71 [ 571.362531][ T24] usb 7-1: USB disconnect, device number 14 [ 571.463814][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 571.475034][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.487305][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.497644][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 571.679864][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 571.689661][ T9] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 571.698285][ T9] usb 6-1: Manufacturer: syz [ 571.729623][ T9] usb 6-1: config 0 descriptor?? [ 571.868160][ T9750] syzkaller0: entered promiscuous mode [ 571.874057][ T9750] syzkaller0: entered allmulticast mode [ 571.896888][ T9747] fido_id[9747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 572.152946][ T9] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 572.250018][ T9] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 572.918003][ T9760] fuse: Bad value for 'group_id' [ 572.923417][ T9760] fuse: Bad value for 'group_id' [ 574.229334][ T9770] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1151'. [ 574.567752][ T9713] usb 6-1: USB disconnect, device number 20 [ 578.883572][ T9809] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 578.890323][ T9809] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 578.899310][ T9809] vhci_hcd vhci_hcd.0: Device attached [ 579.291930][ T42] usb 46-1: SetAddress Request (2) to port 0 [ 579.298233][ T42] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 579.397174][ T9810] vhci_hcd: connection reset by peer [ 579.408660][ T7515] vhci_hcd: stop threads [ 579.415500][ T7515] vhci_hcd: release socket [ 579.420086][ T7515] vhci_hcd: disconnect device [ 582.691632][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 582.985301][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.995810][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 583.108704][ T24] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 583.119620][ T24] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 583.128213][ T24] usb 6-1: Manufacturer: syz [ 583.274781][ T24] usb 6-1: config 0 descriptor?? [ 583.558088][ T24] usb 6-1: USB disconnect, device number 21 [ 583.927960][ T5513] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 584.211756][ T5513] usb 1-1: Using ep0 maxpacket: 32 [ 584.295649][ T5513] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 584.304416][ T5513] usb 1-1: config 0 has no interface number 0 [ 584.310689][ T5513] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 584.399826][ T5513] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 584.409211][ T5513] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.417559][ T5513] usb 1-1: Product: syz [ 584.425612][ T5513] usb 1-1: Manufacturer: syz [ 584.430380][ T5513] usb 1-1: SerialNumber: syz [ 584.499192][ T42] usb 46-1: device descriptor read/8, error -110 [ 585.017592][ T5513] usb 1-1: config 0 descriptor?? [ 585.025786][ T9838] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 585.155505][ T42] usb usb46-port1: attempt power cycle [ 585.443666][ T9838] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 585.881987][ T42] usb usb46-port1: unable to enumerate USB device [ 587.936431][ T9713] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 588.159572][ T9713] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.171261][ T9713] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 588.214714][ T9713] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 588.224701][ T9713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 588.233166][ T9713] usb 4-1: SerialNumber: syz [ 588.318739][ T9713] usb 4-1: 0:2 : does not exist [ 588.603422][ T9873] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 588.610296][ T9873] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 588.714989][ T9873] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 588.721814][ T9873] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 588.865541][ T9873] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 588.872373][ T9873] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 588.886596][ T5513] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 588.897328][ T5513] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 588.909493][ T5513] asix 1-1:0.188: probe with driver asix failed with error -71 [ 589.000158][ T9873] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 589.007120][ T9873] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 589.035476][ T5513] usb 1-1: USB disconnect, device number 22 [ 589.133895][ T9873] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 589.140566][ T9873] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 590.367340][ T9713] usb 4-1: USB disconnect, device number 27 [ 590.700553][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 593.299014][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.305799][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 594.370539][ T9713] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 594.584115][ T9713] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 594.595424][ T9713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.606704][ T9713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.616918][ T9713] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 594.964135][ T9713] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 594.973666][ T9713] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 594.982069][ T9713] usb 6-1: Manufacturer: syz [ 594.994967][ T9713] usb 6-1: config 0 descriptor?? [ 595.643004][ T9948] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1206'. [ 595.659366][ T9713] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 595.690878][ T3522] ===================================================== [ 595.698599][ T3522] BUG: KMSAN: uninit-value in n_tty_lookahead_flow_ctrl+0x240/0x2b0 [ 595.707118][ T3522] n_tty_lookahead_flow_ctrl+0x240/0x2b0 [ 595.716239][ T3522] tty_port_default_lookahead_buf+0x146/0x200 [ 595.722586][ T3522] flush_to_ldisc+0x806/0xe30 [ 595.727403][ T3522] process_scheduled_works+0xb91/0x1d80 [ 595.733189][ T3522] worker_thread+0xedf/0x1590 [ 595.737986][ T3522] kthread+0xd5c/0xf00 [ 595.742416][ T3522] ret_from_fork+0x208/0x710 [ 595.747107][ T3522] ret_from_fork_asm+0x1a/0x30 [ 595.754556][ T3522] [ 595.756935][ T3522] Uninit was stored to memory at: [ 595.762304][ T3522] n_tty_lookahead_flow_ctrl+0x239/0x2b0 [ 595.768116][ T3522] tty_port_default_lookahead_buf+0x146/0x200 [ 595.774489][ T3522] flush_to_ldisc+0x806/0xe30 [ 595.779263][ T3522] process_scheduled_works+0xb91/0x1d80 [ 595.785025][ T3522] worker_thread+0xedf/0x1590 [ 595.789771][ T3522] kthread+0xd5c/0xf00 [ 595.794050][ T3522] ret_from_fork+0x208/0x710 [ 595.798806][ T3522] ret_from_fork_asm+0x1a/0x30 [ 595.805537][ T3522] [ 595.807929][ T3522] Uninit was created at: [ 595.814416][ T3522] __kmalloc_noprof+0xa96/0x1b70 [ 595.819529][ T3522] __tty_buffer_request_room+0x3d4/0x7a0 [ 595.826141][ T3522] __tty_insert_flip_string_flags+0x157/0x6f0 [ 595.832677][ T3522] uart_insert_char+0x368/0x930 [ 595.837669][ T3522] serial8250_read_char+0x1ba/0x670 [ 595.843127][ T3522] serial8250_handle_irq+0x930/0x1110 [ 595.848644][ T3522] serial8250_default_handle_irq+0x116/0x370 [ 595.854963][ T3522] serial8250_interrupt+0xcb/0x430 [ 595.860258][ T3522] __handle_irq_event_percpu+0x122/0xf40 [ 595.866194][ T3522] handle_irq_event+0xe0/0x2a0 [ 595.871259][ T3522] handle_edge_irq+0x2a9/0xb50 [ 595.876187][ T3522] __common_interrupt+0x9d/0x180 [ 595.881445][ T3522] common_interrupt+0x94/0xb0 [ 595.886279][ T3522] asm_common_interrupt+0x2b/0x40 [ 595.891737][ T3522] [ 595.894167][ T3522] CPU: 1 UID: 0 PID: 3522 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(none) [ 595.903993][ T3522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 595.916110][ T3522] Workqueue: events_unbound flush_to_ldisc [ 595.922780][ T3522] ===================================================== [ 595.929800][ T3522] Disabling lock debugging due to kernel taint [ 595.936224][ T3522] Kernel panic - not syncing: kmsan.panic set ... [ 595.942760][ T3522] CPU: 1 UID: 0 PID: 3522 Comm: kworker/u8:17 Tainted: G B syzkaller #0 PREEMPT(none) [ 595.954044][ T3522] Tainted: [B]=BAD_PAGE [ 595.958279][ T3522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 595.968461][ T3522] Workqueue: events_unbound flush_to_ldisc [ 595.974477][ T3522] Call Trace: [ 595.977847][ T3522] [ 595.980849][ T3522] __dump_stack+0x26/0x30 [ 595.985327][ T3522] dump_stack_lvl+0x53/0x270 [ 595.990080][ T3522] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 595.996068][ T3522] dump_stack+0x1e/0x25 [ 596.000376][ T3522] vpanic+0x435/0xd30 [ 596.004538][ T3522] panic+0x15d/0x160 [ 596.008622][ T3522] kmsan_report+0x31c/0x320 [ 596.013286][ T3522] ? __msan_warning+0x1b/0x30 [ 596.018106][ T3522] ? n_tty_lookahead_flow_ctrl+0x240/0x2b0 [ 596.024094][ T3522] ? tty_port_default_lookahead_buf+0x146/0x200 [ 596.030521][ T3522] ? flush_to_ldisc+0x806/0xe30 [ 596.035534][ T3522] ? process_scheduled_works+0xb91/0x1d80 [ 596.041433][ T3522] ? worker_thread+0xedf/0x1590 [ 596.046412][ T3522] ? kthread+0xd5c/0xf00 [ 596.050760][ T3522] ? ret_from_fork+0x208/0x710 [ 596.055619][ T3522] ? ret_from_fork_asm+0x1a/0x30 [ 596.060758][ T3522] ? ret_from_fork_asm+0x1a/0x30 [ 596.065835][ T3522] ? kmsan_get_metadata+0xfb/0x160 [ 596.071050][ T3522] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 596.077004][ T3522] ? kmsan_get_metadata+0xfb/0x160 [ 596.082208][ T3522] __msan_warning+0x1b/0x30 [ 596.086800][ T3522] n_tty_lookahead_flow_ctrl+0x240/0x2b0 [ 596.092579][ T3522] ? __pfx_n_tty_lookahead_flow_ctrl+0x10/0x10 [ 596.098839][ T3522] tty_port_default_lookahead_buf+0x146/0x200 [ 596.105014][ T3522] flush_to_ldisc+0x806/0xe30 [ 596.109785][ T3522] ? __pfx_tty_port_default_lookahead_buf+0x10/0x10 [ 596.116481][ T3522] ? __pfx_flush_to_ldisc+0x10/0x10 [ 596.121792][ T3522] process_scheduled_works+0xb91/0x1d80 [ 596.127474][ T3522] worker_thread+0xedf/0x1590 [ 596.132248][ T3522] kthread+0xd5c/0xf00 [ 596.136425][ T3522] ? __pfx_worker_thread+0x10/0x10 [ 596.141630][ T3522] ? __pfx_kthread+0x10/0x10 [ 596.146302][ T3522] ret_from_fork+0x208/0x710 [ 596.150988][ T3522] ? __switch_to+0x53d/0x790 [ 596.155670][ T3522] ? __pfx_kthread+0x10/0x10 [ 596.160334][ T3522] ret_from_fork_asm+0x1a/0x30 [ 596.165205][ T3522] [ 596.168663][ T3522] Kernel Offset: disabled [ 596.173034][ T3522] Rebooting in 86400 seconds..