last executing test programs: 29.05176506s ago: executing program 2 (id=2963): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(0x0, 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xf, 0x2, {{0x1, 0x1, 0x4}, 0x5}}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 28.120803228s ago: executing program 2 (id=2965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006e80)=@deltfilter={0x58, 0x2d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xe, 0xf}, {0xc, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x94}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000080), 0x4) 27.007667312s ago: executing program 2 (id=2967): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 26.502015916s ago: executing program 2 (id=2969): r0 = socket(0x1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000600), 0x0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000180)="dcfb3eab0670f8d62399194495674557893822c040c2112c9cbe93dac208dc53058ea2b80213a78304b79f5c2b56b0f1dde68d6a0a52e5767058443783bb782668066cf2c6ca04760ac49f45cca56d55eaacc0b0fe43a2e0bcc3f4df2e18be7a2b6c0583976577e49ae3e5af3781b82e", 0x70, 0x20000011, &(0x7f0000000300)={0x11, 0xd, r3, 0x1, 0x9, 0x6, @remote}, 0x14) 25.967060366s ago: executing program 2 (id=2973): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', 0x0, 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003700)=@newchain={0x58, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xc, 0x9}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb}}, @TCA_RATE={0x6, 0x5, {0x3, 0xe}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xd4, 0x7}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/18, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 18.817157251s ago: executing program 2 (id=2986): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x80800) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f0000000240), 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2c, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x20, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f0000001340)=[{{&(0x7f0000000240)=@ll={0x11, 0x3, 0x0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000580)="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", 0xfd}, {&(0x7f00000006c0)="b5e8d00ec668ff3708c4a506034ca270c7e68d51a7c12c9a5bf8a2d02aecaa1cbce640fbf8a5a0156398ab88947a5576c2c4b43f480bfcdf80bc6d5da6a2ee60377eee14c83015944548ee07a3893cf7122a3171163f2ebb860ce03c7c092cd4d9bf1524f23f0aa6e02b4b3871ec28301bc907f0c3abfb50d65dc467af494695fc79f9b13b5bbc7a2c9e989d700bd6357d79e044b10f24ced99bd918ad8ffc08868deaaa0cc98298f306940f2b699efaed24dc34a3", 0xb5}, {&(0x7f0000000780)="584307e8057ddba32e110229aaa0fcd17c6dacd90a5ed6afecc0cf1614c3ded56947d3b60a21e72deac327628506ca58bf2dde5a7e10966e96300c69c3c2dd26289af810d2abd3d06a542e1115d82009f6e1", 0x52}, {&(0x7f0000000880)="b3d8020492a84e0a44865dc8648ad42422641da69e4a307226f9de2fb4572d32dbe10f3569704ab82d1f99ec5a16bec17515950f3e4a99f2e93e05c8bf060c19ad9b81d3f77a4d072d35eb97e1562b6090878e73c22ad7dadd7281d586bf9044cb1f42e697cd56fff046166a0c0b770f468a2c95f72fce8cf22e6f4abb53c3aa2ccbcb5eaf26def54e3f790b5c839f2219f3e82c04a2a2", 0x97}, {0x0}], 0x5, &(0x7f0000000ac0)=[{0xc0, 0x112, 0x7, "2cb719fa66988c034a4cc3ef0f0ae284c2fa6326295e1105135e75b8e1a6e26a1044655f195a877da263a87c305425ab50e4a4ce6c936e41a865148e40f315f1921ef39ea640d4f8bbd8d9f7fefd0a4d0d160cb35d1e63aa7a93216483029241eba21d874d27ff54b50db063cd605985999166428ab83cd2d21ea98cc3210266fd833bfe53520c940e3b24bf2fe8d1b241057d9c592e23c57786f9e4a4a12cbd9a147f86c2018bccc22debd7005037"}, {0xe0, 0x115, 0x40, "8baabea575b22b556e8c68fc1229c082da815943f1ae0e6e8c267ce728ad67e312f210853c642ca23b110c7cdd21a7edbf3186f892e5a882d1a68ac45efe1e4599704bf41b39f104c4d4551508facc8b3be22961188e9b6f33c432a7011a5ffbc49acb1c44f67a651926c4b7b1ed85c83e3550965328b7f1cfd5aa2b389d6d1570b9a76c776b90b75b5cb314f6bf0439d834a0816f635fade6e19eca720c33a8e1b6cf463d7716a991b62fcd500790ae1d369a8a6706f66aceb24c3af2094dd840fefae19884f1f1f611d080b1"}], 0x1a0}}, {{&(0x7f0000000c80)=@in6={0xa, 0x4e22, 0xb, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7fff}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000d00)="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", 0xfa}, {&(0x7f0000000e00)="c396c3dd625b9c66652d38b4e42e30ab6ac48e7ddb3b4edb96e1fb1fd17ce4dfbb837cff29f0177dc6d3176c0a35b53c786343a9a2701a2db2ba4d9855def61e9dde5798562b2b070d309ce0ad1385", 0x4f}, {&(0x7f0000000300)="999956939729b874a49f2cf62b9d551c16ba069c66e288be6fba874db7c8090afe237e89222d1df9021226d72bb981bd28eaa47c88149e4ad14f3c8b713697f5118b8c37", 0x44}, {&(0x7f0000000f00)}, {&(0x7f0000001000)="a7717eef8b6cd7aeb8a17c62fcd3753639e650ea2b82636a843b1425c8c20f1bf0bcea8caa78651bdca242bef4c54d5711902cdb6ec75884043c5c31a107f0ac15919add0dca22a82fd1c0f48e507b8dbada9d93e3692bcdcb13e22aefd7929dd6ba72216a0b6e8b775a75c5d59a2891ddeafa68f3cc7a8d0a540c9e62136c180ac42d531e709bc8d43d462c8062aab7d3409e6942d6018287de44b0a4baae70dbc55e023f3f32de138353b0fbeae45b06ae029eb89e86b6f96d87d813d4f98287793edbe9cd65db83b89d3754088710e3cfb7051f99fc58e147f1a61a689e31388d49ac5aa7038415e07ac41ada96968855", 0xf2}, {&(0x7f0000001100)="f87df4231e3c9aaaef9d1534608133880e9f646797a7cfd61b9c522e20d5c1992dddf1dc6a5cc9fb52b16b54d7c5a88381ae8e71916cb10575d69471db018425010cfc459516e65e20bb79f567ac43967563be678cfbcceb2954a8741f9b99018b54", 0x62}, {&(0x7f0000001180)="cbc306b527a7463c98c67d88e6b4e1695db3792b6304d36db084acf7421cb05924cfb45183887effa25c70550931307e29e01c14ab9e726ac9217eeff1ffeeb2b8e83cd7764885bf71391b698f", 0x4d}], 0x7, &(0x7f0000001280)=[{0xa8, 0x10b, 0x3, "ef4910d40665bb251f8d6549795fd4760a2406aa79df7d013117192907a4e366058f88fdd6b4eae710c82b7a3dfc0463b38291c2d6b1a375fd14ece4236907afb6768175ca0cfbd7ca1fc6567451f74a2947daafadcd6669d0bcca67d2541bff9120bd816cda6e4c67f4be6cfe084cda562225aafdf7fd4d55e43b7b1f3e5409506b3029dbfef763196b53c1bcf3c01fc5cc499357"}], 0xa8}}], 0x2, 0x2000ffd8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x4e, &(0x7f0000000100)=[{0x4, 0x1, 0x0, 0x1000}]}) pause() sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c0001000000e4ff0000000010000a800c0001"], 0x100}}, 0x0) close_range(r0, r2, 0x2) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) landlock_restrict_self(0xffffffffffffffff, 0xc) 13.883756256s ago: executing program 0 (id=2994): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd2", 0x59}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x400002}], 0x2, 0x20000020, 0x0) 13.807328876s ago: executing program 0 (id=2995): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xb0, 0xf8, 0x7000000, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="50010001000000000000000200000000000000d8", @ANYRESDEC=r5], 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, 0x0) 8.077005447s ago: executing program 0 (id=3002): socket$kcm(0x2, 0x200000000000001, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0xb, 0x6, 0xff}, 0x3c, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0x40d, 0x1, 0x0, 0xffffffff, 0xe661, 0x8000004, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0xa, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x7, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x6, 0x1000a, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x8, 0xffffffff, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x2, 0x6d02, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xd, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x2, 0x2, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x2, 0x226, 0x5, 0x5, 0x1, 0x30b1d68f, 0xa1f, 0xf40, 0x800, 0x1, 0x6c1b, 0x0, 0x2, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x3) 6.781228217s ago: executing program 0 (id=3007): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x0, 0x5002) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r3}, @ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0x2}]}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) getpgid(0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 6.555165458s ago: executing program 4 (id=3008): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x300) syz_open_dev$video4linux(&(0x7f0000000040), 0x8e3, 0x88800) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socket$pptp(0x18, 0x1, 0x2) open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 5.601260593s ago: executing program 4 (id=3011): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xb0, 0xf8, 0x7000000, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="50010001000000000000000200000000000000d800", @ANYRESDEC=r5], 0x0, 0x0, 0x0}) mount$bpf(0x0, 0x0, 0x0, 0x3a84821, 0x0) 4.574492208s ago: executing program 1 (id=3012): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1a8) fanotify_init(0x8, 0x1000) 4.571684188s ago: executing program 0 (id=3013): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x15) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) chdir(0x0) mknodat(0xffffffffffffffff, 0x0, 0x10, 0x2) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="b979"]) 3.855365274s ago: executing program 4 (id=3015): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r3, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x70, &(0x7f0000000680)={0x70, 0x1, {0x0, 0x9, 0xc, 0xc, 0xd, 0xa}, {}, {}, {0x0, 0xfffffffd}}}}) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r5, 0xc997405dd37fff69, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 3.433864039s ago: executing program 1 (id=3016): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60040000", @ANYRES16=r0, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r1, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381", @ANYRESOCT=r1], 0x460}}, 0x0) 2.478363314s ago: executing program 3 (id=3017): socket$inet_icmp(0x2, 0x2, 0x1) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) 2.37531284s ago: executing program 1 (id=3018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) 2.278464858s ago: executing program 4 (id=3019): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) 2.269743717s ago: executing program 1 (id=3020): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x1, 0x2, 0x6, 0x3}, 0x61) close(0x3) 1.435126488s ago: executing program 1 (id=3021): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x2) 1.423541726s ago: executing program 3 (id=3022): r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.163165833s ago: executing program 3 (id=3023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006e80)=@deltfilter={0x6c, 0x2d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xe, 0xf}, {0xc, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x94}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000080), 0x4) 1.127813517s ago: executing program 4 (id=3024): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xb0, 0xf8, 0x7000000, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="50010001000000000000000200000000000000d800", @ANYRESDEC=r5], 0x0, 0x0, 0x0}) mount$bpf(0x0, 0x0, 0x0, 0x3a84821, 0x0) 327.021273ms ago: executing program 1 (id=3025): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000b0000000000001104020000070000000a00000000000006000000"], 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 231.67249ms ago: executing program 3 (id=3026): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x2, 0x0, 0x0, 0x40088c5}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x400002}], 0x2, 0x20000020, 0x0) 83.407371ms ago: executing program 3 (id=3027): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381", @ANYRESOCT=r2], 0x460}}, 0x0) 66.492029ms ago: executing program 4 (id=3028): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r3, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x70, &(0x7f0000000680)={0x70, 0x1, {0x0, 0x9, 0xc, 0xc, 0xd, 0xa}, {}, {}, {0x0, 0xfffffffd}}}}) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r5, 0xc997405dd37fff69, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 11.303482ms ago: executing program 0 (id=3029): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) shutdown(r0, 0x1) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) 0s ago: executing program 3 (id=3030): r0 = io_uring_setup(0x64eb, &(0x7f00000000c0)={0x0, 0x78e1, 0x3000, 0x1, 0x29a}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, 0x0, 0x1) kernel console output (not intermixed with test programs): : New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 948.333436][ T4349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.849557][ T26] audit: type=1800 audit(1790239226.841:41): pid=13060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2466" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 949.872814][ T4349] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 949.903645][ T4349] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 949.918601][ T4349] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 949.932034][ T4349] cxacru: probe of 1-1:1.0 failed with error -71 [ 949.955019][ T4349] usb 1-1: USB disconnect, device number 110 [ 950.124318][T13071] autofs4:pid:13071:autofs_fill_super: called with bogus options [ 950.509614][ T9386] Bluetooth: hci0: Opcode 0x0c24 failed: -112 [ 950.875957][ T9386] Bluetooth: hci1: command 0x0c24 tx timeout [ 950.882293][T12350] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 951.235203][T13071] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 951.267805][T13093] fuse: Bad value for 'fd' [ 951.298611][T13071] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 951.305117][T13071] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 951.329982][T13071] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 952.075054][T13071] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 952.376115][T13071] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 952.486416][T13071] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 952.496423][T13071] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 952.556030][T12350] Bluetooth: hci0: command 0x0c1a tx timeout [ 953.356197][T12350] Bluetooth: hci2: command 0x0c1a tx timeout [ 953.362409][ T9386] Bluetooth: hci1: command 0x0c1a tx timeout [ 953.946200][ T4318] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 954.076075][ T9386] Bluetooth: hci3: command 0x0c1a tx timeout [ 954.166348][ T4318] usb 5-1: Using ep0 maxpacket: 16 [ 954.183107][ T4318] usb 5-1: unable to get BOS descriptor or descriptor too short [ 954.271243][ T4318] usb 5-1: config 249 has an invalid interface number: 60 but max is 0 [ 954.376524][ T4318] usb 5-1: config 249 has no interface number 0 [ 954.501481][ T4318] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 954.556013][ T9386] Bluetooth: hci4: command 0x0c1a tx timeout [ 954.567622][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.625597][ T4318] usb 5-1: Product: syz [ 954.664718][ T4318] usb 5-1: Manufacturer: syz [ 954.706534][ T4318] usb 5-1: SerialNumber: syz [ 954.956034][ T4681] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 955.173416][ T4681] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 955.203209][ T4681] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 955.325233][ T4681] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 955.526098][ T9386] Bluetooth: hci1: command 0x0406 tx timeout [ 955.653175][ T4681] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 955.735835][ T4681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.952512][T13144] gadgetfs: bound to dummy_udc driver [ 956.162193][ T9386] Bluetooth: hci3: command 0x0406 tx timeout [ 956.236068][T12837] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 956.378294][ T4681] cxacru 2-1:1.0: send of cm 0x91 failed (-71) [ 956.390540][ T4681] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 956.398847][ T4681] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 956.407896][ T4681] cxacru: probe of 2-1:1.0 failed with error -71 [ 956.420897][ T4681] usb 2-1: USB disconnect, device number 112 [ 956.437435][T12837] usb 1-1: not running at top speed; connect to a high speed hub [ 956.447885][T12837] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 956.460932][T12837] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 956.471116][T12837] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 956.488573][T12837] usb 1-1: Product: syz [ 956.493073][T12837] usb 1-1: Manufacturer: syz [ 956.523505][T12837] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 956.636048][ T9386] Bluetooth: hci4: command 0x0406 tx timeout [ 956.736518][T12837] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 956.757505][T13157] autofs4:pid:13157:autofs_fill_super: called with bogus options [ 956.758981][T12837] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 956.782572][T12837] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 956.813126][T12837] usb 1-1: USB disconnect, device number 111 [ 960.410954][ T4318] ems_usb 5-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 960.446055][ T4318] ems_usb: probe of 5-1:249.60 failed with error -22 [ 960.589685][ T4352] usb 5-1: USB disconnect, device number 91 [ 961.599509][T13196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2500'. [ 962.317809][T13201] autofs4:pid:13201:autofs_fill_super: called with bogus options [ 962.476186][T11001] Bluetooth: hci0: command 0x0c24 tx timeout [ 962.482238][T11001] Bluetooth: hci1: command 0x0c24 tx timeout [ 962.483204][T12350] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 962.494350][ T9386] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 962.559379][ T22] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 962.871849][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 962.997931][ T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 963.182464][ T22] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 963.362334][ T22] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 963.476181][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.926101][ T4352] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 963.938437][ T22] cxacru 5-1:1.0: send of cm 0x91 failed (-71) [ 963.999694][ T22] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 964.441874][ T4352] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.934561][ T22] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 964.941674][ T4352] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 964.955754][ T22] cxacru: probe of 5-1:1.0 failed with error -71 [ 964.965342][ T22] usb 5-1: USB disconnect, device number 92 [ 964.971449][ T4352] usb 4-1: config 0 interface 0 has no altsetting 0 [ 964.979357][ T4352] usb 4-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00 [ 964.990062][ T4352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.001570][ T4352] usb 4-1: config 0 descriptor?? [ 966.640095][ T4352] ntrig 0003:1B96:0006.000E: unknown main item tag 0x0 [ 966.652048][ T4352] ntrig 0003:1B96:0006.000E: unbalanced collection at end of report description [ 966.664705][ T4352] ntrig 0003:1B96:0006.000E: parse failed [ 966.687146][ T4352] ntrig: probe of 0003:1B96:0006.000E failed with error -22 [ 966.714805][T13249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2514'. [ 966.715975][ T4318] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 966.887889][ T4352] usb 4-1: USB disconnect, device number 112 [ 967.245982][ T4318] usb 2-1: Using ep0 maxpacket: 16 [ 967.253858][ T4318] usb 2-1: unable to get BOS descriptor or descriptor too short [ 967.277345][ T4318] usb 2-1: config 249 has an invalid interface number: 60 but max is 0 [ 967.594683][ T4318] usb 2-1: config 249 has no interface number 0 [ 967.768626][ T4318] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 967.778880][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.788075][ T4318] usb 2-1: Product: syz [ 967.792348][ T4318] usb 2-1: Manufacturer: syz [ 967.797092][ T4318] usb 2-1: SerialNumber: syz [ 968.471620][T13263] autofs4:pid:13263:autofs_fill_super: called with bogus options [ 969.636522][ T4318] ems_usb 2-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 969.673958][ T4318] ems_usb: probe of 2-1:249.60 failed with error -22 [ 969.748412][ T4318] usb 2-1: USB disconnect, device number 113 [ 969.899139][T13283] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2526'. [ 971.453054][T13306] xt_cgroup: no path or classid specified [ 971.509733][T13308] autofs4:pid:13308:autofs_fill_super: called with bogus options [ 971.613482][ T22] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 972.221691][ T22] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.232849][ T22] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 972.277242][ T22] usb 1-1: config 0 interface 0 has no altsetting 0 [ 972.381332][ T22] usb 1-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00 [ 972.442851][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.452069][T13308] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 972.475749][T13308] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 972.512433][T13308] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 972.573403][T13308] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 972.635935][ T22] usb 1-1: config 0 descriptor?? [ 972.709311][T13308] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 972.766082][T13308] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 972.781361][T13308] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 972.813082][T13308] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 973.113215][ T22] ntrig 0003:1B96:0006.000F: unknown main item tag 0x0 [ 973.156495][ T22] ntrig 0003:1B96:0006.000F: unbalanced collection at end of report description [ 973.205464][ T22] ntrig 0003:1B96:0006.000F: parse failed [ 973.222040][ T22] ntrig: probe of 0003:1B96:0006.000F failed with error -22 [ 973.314703][T11836] usb 1-1: USB disconnect, device number 112 [ 973.756048][T12350] Bluetooth: hci0: command 0x0c1a tx timeout [ 974.291175][T13331] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2540'. [ 974.556061][T12350] Bluetooth: hci1: command 0x0c1a tx timeout [ 974.637421][T12350] Bluetooth: hci2: command 0x0c1a tx timeout [ 974.715967][T12350] Bluetooth: hci3: command 0x0c1a tx timeout [ 974.796142][T12350] Bluetooth: hci4: command 0x0c1a tx timeout [ 976.646147][T12350] Bluetooth: hci1: command 0x0406 tx timeout [ 976.796059][ T9386] Bluetooth: hci3: command 0x0406 tx timeout [ 976.886075][ T9386] Bluetooth: hci4: command 0x0406 tx timeout [ 978.088914][ T4352] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 978.111583][T13366] autofs4:pid:13366:autofs_fill_super: called with bogus options [ 978.276521][ T4352] usb 5-1: Using ep0 maxpacket: 16 [ 978.298787][ T4352] usb 5-1: unable to get BOS descriptor or descriptor too short [ 978.320334][ T4352] usb 5-1: config 249 has an invalid interface number: 60 but max is 0 [ 978.806173][ T4352] usb 5-1: config 249 has no interface number 0 [ 979.410698][ T4352] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 979.464374][T13366] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 979.484443][ T4352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.484465][T13366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 979.503074][ T4352] usb 5-1: Product: syz [ 979.517234][ T4352] usb 5-1: Manufacturer: syz [ 979.535869][ T4352] usb 5-1: SerialNumber: syz [ 979.552078][T13366] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 979.566097][T13366] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 979.600919][T13366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 979.628552][T13366] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 979.636318][T13366] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 979.651594][T13366] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 980.541338][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2552'. [ 980.550297][T13384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2552'. [ 981.516003][ T9386] Bluetooth: hci1: command 0x0c1a tx timeout [ 981.522125][T12350] Bluetooth: hci0: command 0x0c1a tx timeout [ 981.595984][T12350] Bluetooth: hci2: command 0x0c1a tx timeout [ 981.676219][ T9386] Bluetooth: hci3: command 0x0c1a tx timeout [ 981.682336][T12350] Bluetooth: hci4: command 0x0c1a tx timeout [ 982.194551][ T4352] ems_usb 5-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 982.237515][ T4352] ems_usb: probe of 5-1:249.60 failed with error -22 [ 982.263082][ T4352] usb 5-1: USB disconnect, device number 93 [ 983.617620][T12350] Bluetooth: hci1: command 0x0406 tx timeout [ 983.756133][ T9386] Bluetooth: hci3: command 0x0406 tx timeout [ 983.762407][T12350] Bluetooth: hci4: command 0x0406 tx timeout [ 984.416256][ T4352] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 984.968153][ T4352] usb 4-1: unable to get BOS descriptor or descriptor too short [ 985.004123][ T4352] usb 4-1: New USB device found, idVendor=06cd, idProduct=0103, bcdDevice=3c.0e [ 985.066930][ T4352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.095435][ T4352] usb 4-1: Product: syz [ 985.100401][T13411] autofs4:pid:13411:autofs_fill_super: called with bogus options [ 985.104160][ T4352] usb 4-1: Manufacturer: syz [ 985.135559][ T4352] usb 4-1: SerialNumber: syz [ 985.277923][ T26] audit: type=1800 audit(1790239263.091:42): pid=13417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2562" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 985.849576][T13419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2558'. [ 985.904671][T13411] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 985.914730][T13411] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 985.926895][T13411] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 985.934757][T13411] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 985.965013][T13411] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 986.054564][T13411] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 986.195043][T13411] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 986.310175][T13411] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 986.440524][ T4352] keyspan 4-1:1.0: Keyspan - (without firmware) converter detected [ 986.570795][ T4352] usb 4-1: USB disconnect, device number 113 [ 986.726892][ T4352] keyspan 4-1:1.0: device disconnected [ 986.920163][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2563'. [ 986.929096][T13427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2563'. [ 988.173281][ T9386] Bluetooth: hci0: command 0x0c1a tx timeout [ 988.174956][T12350] Bluetooth: hci1: command 0x0c1a tx timeout [ 988.179341][ T9386] Bluetooth: hci2: command 0x0c1a tx timeout [ 988.185304][T12350] Bluetooth: hci3: command 0x0c1a tx timeout [ 988.241420][ T49] Bluetooth: hci4: command 0x0c1a tx timeout [ 988.606001][ T4681] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 988.726095][ T4316] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 989.582904][ T4316] usb 2-1: device descriptor read/64, error -71 [ 989.616029][ T4681] usb 5-1: Using ep0 maxpacket: 16 [ 990.658893][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 990.664943][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 990.916168][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 990.926224][ T4681] usb 5-1: unable to get BOS descriptor or descriptor too short [ 990.936589][ T4681] usb 5-1: config 249 has an invalid interface number: 60 but max is 0 [ 991.359106][ T4681] usb 5-1: config 249 has no interface number 0 [ 991.414774][ T4681] usb 5-1: string descriptor 0 read error: -71 [ 991.425998][ T4316] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 991.440930][ T4681] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 991.493113][ T4681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.533845][ T4681] usb 5-1: can't set config #249, error -71 [ 991.551036][ T4681] usb 5-1: USB disconnect, device number 94 [ 991.574801][T13464] autofs4:pid:13464:autofs_fill_super: called with bogus options [ 991.621855][ T26] audit: type=1800 audit(1790239269.441:43): pid=13467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2573" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 992.426661][T13464] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 992.481312][T13464] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 992.502570][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2576'. [ 992.511533][T13473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2576'. [ 992.516814][T13464] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 992.663093][T13464] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 992.669234][T13464] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 992.675522][T13464] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 992.681704][T13464] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 992.687882][T13464] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 992.798448][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.804816][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.828724][T12813] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 993.286300][ T22] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 994.396384][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 994.556163][ T49] Bluetooth: hci1: command 0x0c1a tx timeout [ 994.572722][ T22] usb 4-1: unable to get BOS descriptor or descriptor too short [ 994.609915][ T22] usb 4-1: New USB device found, idVendor=06cd, idProduct=0103, bcdDevice=3c.0e [ 994.635380][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.653753][ T22] usb 4-1: Product: syz [ 994.671755][ T22] usb 4-1: Manufacturer: syz [ 994.681933][ T22] usb 4-1: SerialNumber: syz [ 994.706306][ T9514] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 994.720583][ T49] Bluetooth: hci4: command 0x0c1a tx timeout [ 994.726211][T12350] Bluetooth: hci3: command 0x0c1a tx timeout [ 994.726703][ T49] Bluetooth: hci2: command 0x0c1a tx timeout [ 994.896324][ T9514] usb 3-1: Using ep0 maxpacket: 32 [ 994.923408][ T9514] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.943917][ T9514] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 994.962501][ T9514] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 994.972610][ T9514] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.989821][ T9514] usb 3-1: config 0 descriptor?? [ 995.005640][ T9514] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 995.217754][ T4350] usb 3-1: USB disconnect, device number 114 [ 995.346097][ T9514] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 995.505976][ T9514] usb 2-1: device descriptor read/64, error -71 [ 995.911952][ T9514] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 995.927284][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2588'. [ 995.984437][T13520] autofs4:pid:13520:autofs_fill_super: called with bogus options [ 996.134627][ T9514] usb 2-1: device descriptor read/64, error -71 [ 996.268916][ T9514] usb usb2-port1: attempt power cycle [ 996.305075][ T26] audit: type=1800 audit(1790239274.111:44): pid=13526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2590" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 996.636644][ T9386] Bluetooth: hci1: command 0x0406 tx timeout [ 996.796272][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 996.802672][ T9386] Bluetooth: hci3: command 0x0406 tx timeout [ 996.809307][T13520] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 996.815408][T13520] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 996.822649][T13520] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 996.828909][T13520] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 996.835179][T13520] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 996.841478][T13520] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 996.847983][T13520] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 996.853942][T13520] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 997.357746][T13537] ubi: mtd0 is already attached to ubi0 [ 997.522816][T13504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 997.784988][ T9514] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 997.826716][ T9514] usb 2-1: device descriptor read/8, error -71 [ 997.861290][ T22] keyspan 4-1:1.0: Keyspan - (without firmware) converter detected [ 997.884977][ T22] usb 4-1: USB disconnect, device number 114 [ 997.930028][ T22] keyspan 4-1:1.0: device disconnected [ 999.052392][T12350] Bluetooth: hci0: command 0x0c1a tx timeout [ 999.052415][ T9386] Bluetooth: hci4: command 0x0c1a tx timeout [ 999.058434][T12350] Bluetooth: hci3: command 0x0c1a tx timeout [ 999.064401][ T9386] Bluetooth: hci2: command 0x0c1a tx timeout [ 999.071327][T12350] Bluetooth: hci1: command 0x0c1a tx timeout [ 999.244932][ T9514] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 999.662562][ T9514] usb 2-1: device not accepting address 119, error -71 [ 999.704977][ T9514] usb usb2-port1: unable to enumerate USB device [ 999.771109][T13560] gadgetfs: bound to dummy_udc driver [ 1001.015963][ T22] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 1001.028339][ C1] gadgetfs: connected [ 1001.032557][ T22] gadgetfs: disconnected [ 1001.187264][ T9386] Bluetooth: hci1: command 0x0406 tx timeout [ 1001.194860][ T9386] Bluetooth: hci3: command 0x0406 tx timeout [ 1001.202312][ T9386] Bluetooth: hci4: command 0x0406 tx timeout [ 1001.221991][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2600'. [ 1001.306212][ C1] gadgetfs: connected [ 1001.311605][ T22] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1001.322621][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1001.375764][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.408392][ T26] audit: type=1800 audit(1790239279.221:45): pid=13578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2602" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1001.707539][ C1] gadgetfs: configuration #1 [ 1001.914147][T13577] autofs4:pid:13577:autofs_fill_super: called with bogus options [ 1002.322162][T13560] gadgetfs: suspended from state 3 [ 1002.327424][T13560] gadgetfs: disconnected [ 1002.357111][T13580] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1002.396047][ T4681] usb 1-1: USB disconnect, device number 113 [ 1002.455965][T13580] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1002.481309][T13580] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1002.493636][T13580] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1002.512006][T13580] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1002.542064][T13580] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1002.552305][T13580] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1002.572487][T13580] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1002.597768][T13587] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2603'. [ 1002.689746][T13587] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2603'. [ 1002.772244][T13587] netlink: 'syz.1.2603': attribute type 5 has an invalid length. [ 1002.827917][T13587] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2603'. [ 1003.105558][ T4681] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1003.756706][ T4681] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1003.877214][ T4681] usb 1-1: New USB device found, idVendor=06cd, idProduct=0103, bcdDevice=3c.0e [ 1003.895950][ T4681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.904014][ T4681] usb 1-1: Product: syz [ 1003.908471][ T4681] usb 1-1: Manufacturer: syz [ 1003.913082][ T4681] usb 1-1: SerialNumber: syz [ 1003.953175][T13608] binder: 13607:13608 ioctl 4018620d 0 returned -22 [ 1004.316164][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 1004.395998][ T49] Bluetooth: hci1: command 0x0c1a tx timeout [ 1004.612703][ T9386] Bluetooth: hci4: command 0x0c1a tx timeout [ 1004.619008][ T49] Bluetooth: hci3: command 0x0c1a tx timeout [ 1004.627944][ T49] Bluetooth: hci2: command 0x0c1a tx timeout [ 1005.427717][T13620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2604'. [ 1005.627989][ T4681] keyspan 1-1:1.0: Keyspan - (without firmware) converter detected [ 1005.663309][ T4681] usb 1-1: USB disconnect, device number 114 [ 1005.711933][ T4681] keyspan 1-1:1.0: device disconnected [ 1006.476014][T12350] Bluetooth: hci1: command 0x0406 tx timeout [ 1006.553615][T13638] autofs4:pid:13638:autofs_fill_super: called with bogus options [ 1006.674621][T12350] Bluetooth: hci4: command 0x0406 tx timeout [ 1006.680786][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 1006.687631][T13640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 1006.846000][ T32] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1007.036099][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 1007.716379][T13657] gadgetfs: bound to dummy_udc driver [ 1008.586977][T13638] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1008.937430][T13638] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1008.943489][T13638] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1008.957033][T12350] Bluetooth: hci0: command 0x0c1a tx timeout [ 1008.973598][T13638] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1009.037961][T13660] overlayfs: overlapping lowerdir path [ 1009.306631][T13638] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1009.336209][T13638] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1009.363015][T13638] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1009.370469][T13638] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1009.455981][ T4316] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 1009.467196][ C0] gadgetfs: connected [ 1009.471393][ T4316] gadgetfs: disconnected [ 1009.756165][ C0] gadgetfs: connected [ 1009.761403][ T4316] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1009.770899][ T4316] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1009.780120][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.790843][ C0] gadgetfs: configuration #1 [ 1010.393822][T13657] gadgetfs: suspended from state 3 [ 1010.399059][T13657] gadgetfs: disconnected [ 1010.502352][ T4314] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1010.546023][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1010.554445][ T4349] usb 1-1: USB disconnect, device number 115 [ 1010.573486][T13672] binder: 13671:13672 ioctl 4018620d 0 returned -22 [ 1010.581959][ T32] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1010.598289][ T32] usb 4-1: can't read configurations, error -71 [ 1010.909842][T13679] ubi: mtd0 is already attached to ubi0 [ 1011.176213][ T49] Bluetooth: hci2: command 0x0c1a tx timeout [ 1011.182437][T12350] Bluetooth: hci1: command 0x0c1a tx timeout [ 1011.356059][T12350] Bluetooth: hci3: command 0x0c1a tx timeout [ 1011.386117][ T4314] usb 3-1: Using ep0 maxpacket: 16 [ 1011.393726][ T4314] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1011.426063][ T4314] usb 3-1: config 249 has an invalid interface number: 60 but max is 0 [ 1011.436143][T12350] Bluetooth: hci4: command 0x0c1a tx timeout [ 1011.497263][ T4314] usb 3-1: config 249 has no interface number 0 [ 1011.505807][ T4314] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1011.522933][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.268432][ T4314] usb 3-1: Product: syz [ 1012.272647][ T4314] usb 3-1: Manufacturer: syz [ 1012.277302][ T4314] usb 3-1: SerialNumber: syz [ 1012.671970][T13693] gadgetfs: bound to dummy_udc driver [ 1012.946061][ T4316] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 1013.187852][ C0] gadgetfs: connected [ 1013.192044][ T4316] gadgetfs: disconnected [ 1014.259594][T12350] Bluetooth: hci1: command 0x0406 tx timeout [ 1014.260602][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 1014.265623][T12350] Bluetooth: hci4: command 0x0406 tx timeout [ 1014.477523][ T4314] ems_usb 3-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1014.488175][ T4314] ems_usb: probe of 3-1:249.60 failed with error -22 [ 1014.630538][ T4314] usb 3-1: USB disconnect, device number 115 [ 1014.855406][T13710] overlayfs: overlapping lowerdir path [ 1016.046013][ T32] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1016.063647][T13722] binder: 13721:13722 ioctl 4018620d 0 returned -22 [ 1016.236076][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 1017.053247][T13732] gadgetfs: bound to dummy_udc driver [ 1017.915947][ T4350] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1018.130737][ T4350] usb 4-1: device descriptor read/64, error -71 [ 1018.286585][ T4349] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 1018.344600][ C1] gadgetfs: connected [ 1018.357575][ T4349] gadgetfs: disconnected [ 1018.580447][ T4350] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1018.858908][ T4350] usb 4-1: device descriptor read/64, error -71 [ 1018.926325][ C1] gadgetfs: connected [ 1018.935375][ T4349] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1018.963917][ T4349] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1019.028957][T13732] gadgetfs: suspended from state 3 [ 1019.034182][T13732] gadgetfs: disconnected [ 1019.141207][ T4350] usb usb4-port1: attempt power cycle [ 1019.146849][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1019.197407][ T32] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1019.219321][ T4349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.246649][ T32] usb 3-1: can't read configurations, error -71 [ 1019.296216][ T4349] usb 1-1: can't set config #1, error -71 [ 1019.364477][ T4349] usb 1-1: USB disconnect, device number 117 [ 1020.156820][ T4368] rpcbind: server 127.0.0.1 not responding, timed out [ 1022.175342][T13780] binder: 13779:13780 ioctl c0306201 0 returned -14 [ 1023.186264][ T4316] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1023.194072][ T4314] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1025.028259][ T4359] rpcbind: server 127.0.0.1 not responding, timed out [ 1025.086998][ T4314] usb 1-1: device descriptor read/64, error -71 [ 1025.116974][ T4316] usb 2-1: Using ep0 maxpacket: 16 [ 1025.475996][T13803] gadgetfs: bound to dummy_udc driver [ 1026.976180][ T4314] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 1026.987432][ C0] gadgetfs: connected [ 1026.998710][ T4314] gadgetfs: disconnected [ 1027.146430][T13803] gadgetfs: suspended from state 2 [ 1027.185812][ T4316] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1027.208136][ T4314] usb 1-1: device descriptor read/all, error -71 [ 1027.268112][ T4314] usb usb1-port1: attempt power cycle [ 1027.287904][ T4316] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1027.412831][ T4316] usb 2-1: can't read configurations, error -71 [ 1027.914916][T13814] binder: 13813:13814 ioctl c0306201 200000000080 returned -14 [ 1028.017899][T13814] binder: 13813:13814 ioctl c0306201 2000000003c0 returned -14 [ 1029.955968][ T4316] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1030.740534][ T4314] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1030.779431][ T4316] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.790685][ T4316] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1030.802819][ T4316] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1030.963403][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.082870][ T4314] usb 1-1: Using ep0 maxpacket: 16 [ 1031.548297][T13755] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1031.571242][ T4314] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1031.618310][ T4316] usb 2-1: config 0 descriptor?? [ 1031.632940][ T4314] usb 1-1: config 249 has an invalid interface number: 60 but max is 0 [ 1031.657194][ T4316] usb 2-1: can't set config #0, error -71 [ 1031.675323][T13857] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2672'. [ 1031.691639][ T4316] usb 2-1: USB disconnect, device number 121 [ 1031.704212][ T4314] usb 1-1: config 249 has no interface number 0 [ 1031.732671][ T4314] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1031.742343][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.755031][ T4314] usb 1-1: Product: syz [ 1031.762549][ T4314] usb 1-1: Manufacturer: syz [ 1031.771986][ T4314] usb 1-1: SerialNumber: syz [ 1031.885982][T13755] usb 3-1: Using ep0 maxpacket: 16 [ 1031.902515][T13755] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.319794][T11832] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1032.328020][T13755] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1032.341126][T13755] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1032.348199][T13755] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 1032.357386][T13755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.368340][T13755] usb 3-1: config 0 descriptor?? [ 1032.501382][T13869] gadgetfs: bound to dummy_udc driver [ 1032.550825][T11832] usb 4-1: Using ep0 maxpacket: 16 [ 1032.558979][T11832] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1032.662602][T11832] usb 4-1: config 249 has an invalid interface number: 60 but max is 0 [ 1032.671002][T11832] usb 4-1: config 249 has no interface number 0 [ 1032.697948][T11832] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1032.727676][T13874] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2674'. [ 1032.736758][T11832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.744791][T11832] usb 4-1: Product: syz [ 1032.769593][T11832] usb 4-1: Manufacturer: syz [ 1032.790120][T13755] input: HID 04f3:074d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:04F3:074D.0010/input/input8 [ 1032.806821][T13866] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 1032.812963][T11832] usb 4-1: SerialNumber: syz [ 1032.819521][ C0] gadgetfs: connected [ 1032.833352][T13866] gadgetfs: disconnected [ 1032.838472][T13874] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2674'. [ 1032.902231][T13755] elan 0003:04F3:074D.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.2-1/input0 [ 1032.910552][T13874] netlink: 'syz.4.2674': attribute type 5 has an invalid length. [ 1032.954828][T13874] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2674'. [ 1033.026210][ C0] gadgetfs: connected [ 1033.285732][T13866] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1033.814532][T13866] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1033.824199][T13866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.834784][ C0] gadgetfs: configuration #1 [ 1034.106818][T13866] usb 3-1: USB disconnect, device number 118 [ 1034.157315][T13883] fido_id[13883]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1035.025539][T13898] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2678'. [ 1035.034617][T13898] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2678'. [ 1035.043659][T13898] netlink: 'syz.2.2678': attribute type 5 has an invalid length. [ 1035.051467][T13898] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2678'. [ 1035.415126][T13865] gadgetfs: suspended from state 3 [ 1035.491964][T13867] usb 2-1: USB disconnect, device number 122 [ 1035.499370][T13865] gadgetfs: disconnected [ 1035.782250][ T4314] ems_usb 1-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1035.796108][ T4314] ems_usb: probe of 1-1:249.60 failed with error -22 [ 1035.805427][ T4314] usb 1-1: USB disconnect, device number 121 [ 1038.178832][T11832] ems_usb 4-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1038.253516][T11832] ems_usb: probe of 4-1:249.60 failed with error -22 [ 1038.510388][T13933] autofs4:pid:13933:autofs_fill_super: called with bogus options [ 1039.202449][T13937] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1039.627487][T13937] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1039.680498][T13937] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1039.697981][T13937] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1039.704046][T13937] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1039.710702][T13937] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1039.717078][T13937] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1039.726229][T13937] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1040.046055][T11832] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1040.286341][T11832] usb 1-1: Using ep0 maxpacket: 16 [ 1040.300908][T11832] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1040.497645][T11832] usb 1-1: config 249 has an invalid interface number: 60 but max is 0 [ 1040.506657][T11832] usb 1-1: config 249 has no interface number 0 [ 1040.515258][T11832] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1040.533653][T11832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.542526][T11832] usb 1-1: Product: syz [ 1040.549333][T11832] usb 1-1: Manufacturer: syz [ 1040.554491][T11832] usb 1-1: SerialNumber: syz [ 1041.200260][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 1041.641700][T11836] usb 4-1: USB disconnect, device number 120 [ 1041.685913][ T49] Bluetooth: hci1: command 0x0c1a tx timeout [ 1041.756488][ T9386] Bluetooth: hci4: command 0x0c1a tx timeout [ 1041.762866][ T9386] Bluetooth: hci3: command 0x0c1a tx timeout [ 1041.769440][ T9386] Bluetooth: hci2: command 0x0c1a tx timeout [ 1042.143865][T13979] gadgetfs: bound to dummy_udc driver [ 1042.476291][ T4314] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1042.484181][ C0] gadgetfs: connected [ 1042.509850][ T4314] gadgetfs: disconnected [ 1043.826116][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 1043.836309][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 1043.860335][ T9386] Bluetooth: hci4: command 0x0406 tx timeout [ 1044.021963][T13998] autofs4:pid:13998:autofs_fill_super: called with bogus options [ 1044.046898][ C0] gadgetfs: connected [ 1044.054586][ T4314] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1044.094138][ T4314] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1044.231268][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.447100][ C0] gadgetfs: configuration #1 [ 1044.929427][T14014] fuse: Bad value for 'fd' [ 1045.216948][T13998] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1045.242366][T13998] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1045.257446][T13998] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1045.278302][T13998] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1045.286401][T13998] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1045.295642][T13998] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1045.347052][T13998] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1045.365055][T13998] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1045.764688][T13970] gadgetfs: suspended from state 3 [ 1046.411678][T13970] gadgetfs: disconnected [ 1046.430917][T11836] usb 2-1: USB disconnect, device number 123 [ 1046.920220][ T4355] rpcbind: server 127.0.0.1 not responding, timed out [ 1046.946538][T11832] ems_usb 1-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1046.959184][T11832] ems_usb: probe of 1-1:249.60 failed with error -22 [ 1046.973537][T11832] usb 1-1: USB disconnect, device number 122 [ 1047.932030][ T49] Bluetooth: hci1: command 0x0c1a tx timeout [ 1047.938128][T12350] Bluetooth: hci0: command 0x0c1a tx timeout [ 1047.944143][T12350] Bluetooth: hci3: command 0x0c1a tx timeout [ 1047.950748][ T49] Bluetooth: hci2: command 0x0c1a tx timeout [ 1047.966615][T12350] Bluetooth: hci4: command 0x0c1a tx timeout [ 1048.346063][ T4681] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1048.385977][ T4314] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1048.536061][ T4681] usb 2-1: Using ep0 maxpacket: 16 [ 1048.545447][ T4681] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1048.563099][ T4681] usb 2-1: config 249 has an invalid interface number: 60 but max is 0 [ 1048.573756][ T4681] usb 2-1: config 249 has no interface number 0 [ 1048.585088][ T4681] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1048.598661][ T4314] usb 4-1: Using ep0 maxpacket: 16 [ 1048.605320][ T4681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.615593][ T4681] usb 2-1: Product: syz [ 1048.623713][ T4681] usb 2-1: Manufacturer: syz [ 1048.634884][ T4314] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.650950][ T4681] usb 2-1: SerialNumber: syz [ 1048.658895][ T4314] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1048.684643][ T4314] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1048.695421][ T4314] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 1048.709597][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.744711][ T4314] usb 4-1: config 0 descriptor?? [ 1049.047019][ T4314] usbhid 4-1:0.0: can't add hid device: -71 [ 1049.066747][ T4314] usbhid: probe of 4-1:0.0 failed with error -71 [ 1049.105011][ T4314] usb 4-1: USB disconnect, device number 121 [ 1049.228110][T14059] gadgetfs: bound to dummy_udc driver [ 1050.362397][T12350] Bluetooth: hci3: command 0x0406 tx timeout [ 1050.364009][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 1050.374652][ T9386] Bluetooth: hci4: command 0x0406 tx timeout [ 1050.406239][ T4326] rpcbind: server 127.0.0.1 not responding, timed out [ 1050.526530][T11832] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 1050.534391][ C1] gadgetfs: connected [ 1050.553496][T11832] gadgetfs: disconnected [ 1050.766155][ C1] gadgetfs: connected [ 1050.771522][T11832] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1050.781050][T11832] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1050.822417][T11832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.852402][ C1] gadgetfs: configuration #1 [ 1050.896350][T14083] bridge0: port 3(syz_tun) entered blocking state [ 1050.905631][T14082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.914436][T14082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.933011][T14083] bridge0: port 3(syz_tun) entered disabled state [ 1051.013691][T14083] device syz_tun entered promiscuous mode [ 1051.081523][T14083] bridge0: port 3(syz_tun) entered blocking state [ 1051.088162][T14083] bridge0: port 3(syz_tun) entered forwarding state [ 1051.333886][T14090] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2726'. [ 1051.677532][ T8127] rpcbind: server 127.0.0.1 not responding, timed out [ 1052.511304][ T35] rpcbind: server 127.0.0.1 not responding, timed out [ 1052.875990][T12350] Bluetooth: hci1: command 0x0c24 tx timeout [ 1052.876125][ T9386] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 1052.882049][T12350] Bluetooth: hci0: command 0x0c24 tx timeout [ 1052.894096][ T49] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 1052.976806][ T4364] rpcbind: server 127.0.0.1 not responding, timed out [ 1053.303256][T14110] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2729'. [ 1053.758554][ T4681] ems_usb 2-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1054.237499][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.243914][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.377343][ T4681] ems_usb: probe of 2-1:249.60 failed with error -22 [ 1055.888389][T14055] gadgetfs: suspended from state 3 [ 1055.894699][ T4681] usb 1-1: USB disconnect, device number 123 [ 1055.900920][T14055] gadgetfs: disconnected [ 1055.913287][ T4314] usb 2-1: USB disconnect, device number 124 [ 1057.164633][ T4359] rpcbind: server 127.0.0.1 not responding, timed out [ 1057.396057][ T26] audit: type=1800 audit(1790239335.131:46): pid=14133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2736" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1058.075981][T11001] Bluetooth: hci1: command 0x0c24 tx timeout [ 1058.082039][T11001] Bluetooth: hci0: command 0x0c24 tx timeout [ 1058.088492][T12350] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 1058.094686][ T49] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 1060.911824][T14162] block device autoloading is deprecated and will be removed. [ 1060.938622][T14162] syz.0.2745: attempt to access beyond end of device [ 1060.938622][T14162] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1060.976178][T11836] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1062.256035][T11836] usb 4-1: Using ep0 maxpacket: 16 [ 1062.582147][T14182] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1062.956569][T12350] Bluetooth: hci1: command 0x0c24 tx timeout [ 1062.956625][ T49] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 1062.956865][ T9386] Bluetooth: hci0: command 0x0c24 tx timeout [ 1062.956914][T11001] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 1063.703164][T11836] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1063.717065][T11836] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1063.724656][T11836] usb 4-1: can't read configurations, error -71 [ 1064.306573][ T26] audit: type=1800 audit(1790239342.121:47): pid=14192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2751" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1067.345983][ T4314] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1068.025969][ T4314] usb 2-1: Using ep0 maxpacket: 16 [ 1068.033285][ T4314] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1068.054637][ T4314] usb 2-1: config 249 has an invalid interface number: 60 but max is 0 [ 1068.064278][ T4314] usb 2-1: config 249 has no interface number 0 [ 1068.088317][ T4314] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1068.106043][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.114107][ T4314] usb 2-1: Product: syz [ 1068.118650][ T4314] usb 2-1: Manufacturer: syz [ 1068.123262][ T4314] usb 2-1: SerialNumber: syz [ 1068.451810][T14207] gadgetfs: bound to dummy_udc driver [ 1068.724430][ T4314] ems_usb 2-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1069.085154][ T4314] ems_usb: probe of 2-1:249.60 failed with error -22 [ 1069.108547][ T4314] usb 2-1: USB disconnect, device number 125 [ 1069.185027][T14239] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2760'. [ 1069.194124][T14239] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2760'. [ 1069.203146][T14239] netlink: 'syz.0.2760': attribute type 5 has an invalid length. [ 1069.211079][T14239] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2760'. [ 1069.926119][T11832] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1070.763367][ T9386] Bluetooth: hci0: command 0x0c24 tx timeout [ 1070.763407][T11001] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 1070.763440][T12350] Bluetooth: hci1: command 0x0c24 tx timeout [ 1070.782324][ T49] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 1070.976106][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2761'. [ 1071.186150][T11832] usb 3-1: Using ep0 maxpacket: 16 [ 1071.195563][T11832] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1071.208928][T11832] usb 3-1: config 249 has an invalid interface number: 60 but max is 0 [ 1071.219586][T11832] usb 3-1: config 249 has no interface number 0 [ 1071.252235][T11832] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1071.262458][T11832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.272223][T11832] usb 3-1: Product: syz [ 1071.280411][T11832] usb 3-1: Manufacturer: syz [ 1071.287108][T11832] usb 3-1: SerialNumber: syz [ 1071.780113][T14237] gadgetfs: bound to dummy_udc driver [ 1072.045645][T11832] ems_usb 3-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1072.074524][T11832] ems_usb: probe of 3-1:249.60 failed with error -22 [ 1072.125068][T11832] usb 3-1: USB disconnect, device number 119 [ 1076.466049][ T4314] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1076.813889][ T4368] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.956554][ T4314] usb 2-1: Using ep0 maxpacket: 16 [ 1076.975445][ T4314] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1077.004617][ T4314] usb 2-1: config 249 has an invalid interface number: 60 but max is 0 [ 1077.016278][ T4368] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.026795][ T4314] usb 2-1: config 249 has no interface number 0 [ 1077.036521][ T4314] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1077.045785][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.054568][ T4314] usb 2-1: Product: syz [ 1077.059237][ T4314] usb 2-1: Manufacturer: syz [ 1077.063864][ T4314] usb 2-1: SerialNumber: syz [ 1077.102545][ T4368] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.817899][T14302] gadgetfs: bound to dummy_udc driver [ 1078.440405][ T4314] ems_usb 2-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1078.454249][ T4314] ems_usb: probe of 2-1:249.60 failed with error -22 [ 1078.465483][ T4314] usb 2-1: USB disconnect, device number 126 [ 1078.490665][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1078.499837][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1078.517142][T11832] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1078.525030][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1078.536730][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1078.545492][ T49] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1078.553039][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1078.558250][ T4368] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.728113][T14320] chnl_net:caif_netlink_parms(): no params data found [ 1078.796081][T11832] usb 4-1: Using ep0 maxpacket: 16 [ 1078.803822][T11832] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1078.823156][T11832] usb 4-1: config 249 has an invalid interface number: 60 but max is 0 [ 1078.832401][T11832] usb 4-1: config 249 has no interface number 0 [ 1079.726286][T11832] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1079.735372][T11832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.755973][T11832] usb 4-1: Product: syz [ 1079.760168][T11832] usb 4-1: Manufacturer: syz [ 1079.764770][T11832] usb 4-1: SerialNumber: syz [ 1079.791138][ T4368] tipc: Left network mode [ 1079.876886][T14320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.896098][T14320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.904437][T14320] device bridge_slave_0 entered promiscuous mode [ 1080.047321][T14316] gadgetfs: bound to dummy_udc driver [ 1080.063825][T14320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.754864][ T9386] Bluetooth: hci3: command 0x0409 tx timeout [ 1080.937461][T14320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.945881][T14320] device bridge_slave_1 entered promiscuous mode [ 1081.071757][T14320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.137896][T14320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1081.186584][ T9386] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 1081.225210][T14320] team0: Port device team_slave_0 added [ 1081.234062][T14320] team0: Port device team_slave_1 added [ 1081.297389][T14320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.300998][T14315] gadgetfs: suspended from state 2 [ 1081.304341][T14320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.339312][T13866] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 1081.348722][T11832] ems_usb 4-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1081.390122][T11832] ems_usb: probe of 4-1:249.60 failed with error -22 [ 1081.406827][T14320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.418350][T11832] usb 4-1: USB disconnect, device number 124 [ 1081.505405][T14320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.516199][T14320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.588786][T14320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.646435][ T4681] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1081.856017][ T4681] usb 2-1: Using ep0 maxpacket: 16 [ 1081.864462][ T4681] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1081.957131][ T4681] usb 2-1: config 249 has an invalid interface number: 60 but max is 0 [ 1082.042847][ T4681] usb 2-1: config 249 has no interface number 0 [ 1082.142065][ T4681] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1082.239979][ T4681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.316405][ T4681] usb 2-1: Product: syz [ 1082.355547][ T4681] usb 2-1: Manufacturer: syz [ 1082.424226][ T4681] usb 2-1: SerialNumber: syz [ 1082.655683][T14363] ubi: mtd0 is already attached to ubi0 [ 1082.667521][T14320] device hsr_slave_0 entered promiscuous mode [ 1082.796164][ T9386] Bluetooth: hci3: command 0x041b tx timeout [ 1082.885664][T14347] gadgetfs: bound to dummy_udc driver [ 1082.895181][T14320] device hsr_slave_1 entered promiscuous mode [ 1083.175746][T14320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1083.188838][T14320] Cannot create hsr debugfs directory [ 1083.194855][ T4681] ems_usb 2-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1084.101574][T14384] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2791'. [ 1084.110782][T14384] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2791'. [ 1084.119787][T14384] netlink: 'syz.2.2791': attribute type 5 has an invalid length. [ 1084.127549][T14384] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2791'. [ 1084.448053][ T4681] ems_usb: probe of 2-1:249.60 failed with error -22 [ 1084.460748][ T4681] usb 2-1: USB disconnect, device number 127 [ 1085.444681][ T49] Bluetooth: hci3: command 0x040f tx timeout [ 1085.865997][T11832] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1086.556280][T11832] usb 4-1: Using ep0 maxpacket: 16 [ 1086.576494][T11832] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1086.592748][T11832] usb 4-1: config 249 has an invalid interface number: 60 but max is 0 [ 1086.601782][T11832] usb 4-1: config 249 has no interface number 0 [ 1086.610735][T11832] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1086.620321][T11832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.628601][T11832] usb 4-1: Product: syz [ 1086.670686][T11832] usb 4-1: Manufacturer: syz [ 1086.675449][T11832] usb 4-1: SerialNumber: syz [ 1087.007311][T14405] gadgetfs: bound to dummy_udc driver [ 1087.365535][T11832] ems_usb 4-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1087.499026][T11832] ems_usb: probe of 4-1:249.60 failed with error -22 [ 1087.526080][ T49] Bluetooth: hci3: command 0x0419 tx timeout [ 1087.663680][T11832] usb 4-1: USB disconnect, device number 125 [ 1087.791113][ T4368] device hsr_slave_0 left promiscuous mode [ 1087.808968][ T4368] device hsr_slave_1 left promiscuous mode [ 1087.829188][ T4368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1087.909181][T14427] ubi: mtd0 is already attached to ubi0 [ 1087.958482][ T4368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.967099][ T4368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1087.974592][ T4368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.982604][ T4368] device bridge_slave_1 left promiscuous mode [ 1087.990747][ T4368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.092542][ T4368] device bridge_slave_0 left promiscuous mode [ 1088.126309][ T4368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.230913][T14431] ubi: mtd0 is already attached to ubi0 [ 1088.402817][ T4368] device veth1_macvtap left promiscuous mode [ 1088.429994][ T4368] device veth0_macvtap left promiscuous mode [ 1088.459463][ T4368] device veth1_vlan left promiscuous mode [ 1088.491982][ T4368] device veth0_vlan left promiscuous mode [ 1088.936075][T11836] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1089.149711][T11836] usb 4-1: Using ep0 maxpacket: 16 [ 1089.159341][T11836] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1089.178456][T11836] usb 4-1: config 249 has an invalid interface number: 60 but max is 0 [ 1089.199227][T11836] usb 4-1: config 249 has no interface number 0 [ 1089.212706][T11836] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1089.234874][T11836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.255393][T11836] usb 4-1: Product: syz [ 1089.261794][T11836] usb 4-1: Manufacturer: syz [ 1089.272414][T11836] usb 4-1: SerialNumber: syz [ 1089.674678][T14438] gadgetfs: bound to dummy_udc driver [ 1090.027025][T11836] ems_usb 4-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1090.032768][ T4368] team0 (unregistering): Port device team_slave_1 removed [ 1090.056079][T11836] ems_usb: probe of 4-1:249.60 failed with error -22 [ 1090.086714][T11836] usb 4-1: USB disconnect, device number 126 [ 1090.180453][ T4368] team0 (unregistering): Port device team_slave_0 removed [ 1090.243727][ T4368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1090.293785][ T4368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.081021][ T4368] bond0 (unregistering): Released all slaves [ 1092.087506][T11836] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 1092.329181][T11836] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1092.345287][T11836] usb 5-1: config 0 has no interface number 0 [ 1092.366432][T11836] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1092.410309][T11836] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1092.440347][T11836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.482688][T11836] usb 5-1: Product: syz [ 1092.492433][T11836] usb 5-1: Manufacturer: syz [ 1092.499460][T11836] usb 5-1: SerialNumber: syz [ 1092.508875][T11836] usb 5-1: config 0 descriptor?? [ 1092.644824][T14482] ubi: mtd0 is already attached to ubi0 [ 1092.906098][ T32] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1092.935482][T11836] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1092.964435][T11836] CoreChips: probe of 5-1:0.41 failed with error -71 [ 1092.985623][T11836] usb 5-1: USB disconnect, device number 95 [ 1093.127814][T14485] ubi: mtd0 is already attached to ubi0 [ 1093.336253][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 1093.344511][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1093.470645][ T32] usb 4-1: config 249 has an invalid interface number: 60 but max is 0 [ 1093.504308][ T32] usb 4-1: config 249 has no interface number 0 [ 1093.532421][ T32] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1093.567289][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.616504][ T32] usb 4-1: Product: syz [ 1093.621651][ T32] usb 4-1: Manufacturer: syz [ 1093.630966][T14320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1093.646239][ T32] usb 4-1: SerialNumber: syz [ 1093.670365][T14320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1093.724076][T14320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1093.750192][T14320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1093.796123][ T4314] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1094.700384][T14499] gadgetfs: bound to dummy_udc driver [ 1095.019880][ T4314] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.022288][T14320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.046595][ T4314] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1095.072618][ T4314] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1095.073043][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1095.110083][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.116704][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1095.138782][T14320] 8021q: adding VLAN 0 to HW filter on device team0 [ 1095.151882][ T4314] usb 2-1: config 0 descriptor?? [ 1095.177059][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1095.186804][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1095.196279][T11836] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 1095.204151][ C1] gadgetfs: connected [ 1095.217277][T11836] gadgetfs: disconnected [ 1095.229368][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.236504][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.286098][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1095.302748][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1095.314919][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1095.326459][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.333571][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.366483][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1095.401180][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1095.422363][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1095.431337][ C1] gadgetfs: connected [ 1095.441450][T11836] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1095.455965][T11836] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1095.465052][T11836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.491054][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1095.534125][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1095.553605][ C1] gadgetfs: configuration #1 [ 1095.585700][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1095.604841][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1095.614348][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1095.627313][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1095.649931][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1095.678168][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1095.703671][T14320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1095.740657][T14508] bridge0: port 3(wlan1) entered blocking state [ 1095.776877][T14508] bridge0: port 3(wlan1) entered disabled state [ 1095.796096][T14508] device wlan1 entered promiscuous mode [ 1095.843770][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1095.857804][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1095.879516][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1095.901457][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1095.928881][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1095.955114][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1095.998890][T14499] gadgetfs: suspended from state 3 [ 1096.004055][T14499] gadgetfs: disconnected [ 1096.019929][ T32] ems_usb 4-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1096.062758][ T32] ems_usb: probe of 4-1:249.60 failed with error -22 [ 1096.076172][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.087974][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.094694][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.126055][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.132776][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.144474][ T32] usb 4-1: USB disconnect, device number 127 [ 1096.182589][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.211501][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.236239][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.242962][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.297377][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.314573][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.334872][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.345022][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.363938][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.401343][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.424745][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.444304][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.460696][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.475987][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.482739][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.495995][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.502706][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.522408][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.541041][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.556347][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.563101][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.578093][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.584804][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.604405][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1096.620465][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1096.625992][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.637899][T14320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1096.645604][ T4314] lua 0003:1E7D:2C2E.0011: unknown main item tag 0x0 [ 1096.656061][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1096.699510][ T8127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1096.720328][ T5688] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1096.731409][ T8127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1096.856155][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 1097.021790][ T5688] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA4, skipping [ 1098.009475][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1098.071723][ T4681] usb 1-1: USB disconnect, device number 127 [ 1098.095710][ T4314] lua 0003:1E7D:2C2E.0011: hidraw0: USB HID v0.20 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 1098.110241][ T4314] usb 2-1: USB disconnect, device number 2 [ 1098.118042][ T8127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1098.247353][ T8127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1098.301674][ T5688] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1098.311184][ T5688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.314254][ T8127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1098.320235][ T32] usb 4-1: config 249 has an invalid interface number: 60 but max is 0 [ 1098.335542][ T32] usb 4-1: config 249 has no interface number 0 [ 1098.350419][ T5688] usb 5-1: config 0 descriptor?? [ 1098.388155][ T32] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1098.411849][ T8127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1098.421612][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.443052][T14320] device veth0_vlan entered promiscuous mode [ 1098.451368][ T32] usb 4-1: Product: syz [ 1098.480933][T14320] device veth1_vlan entered promiscuous mode [ 1098.501061][ T32] usb 4-1: Manufacturer: syz [ 1098.505709][ T32] usb 4-1: SerialNumber: syz [ 1098.535617][T14541] device syzkaller0 entered promiscuous mode [ 1098.560922][ T5688] ath6kl: Failed to submit usb control message: -71 [ 1098.572750][ T5688] ath6kl: unable to send the bmi data to the device: -71 [ 1098.598900][ T5688] ath6kl: Unable to send get target info: -71 [ 1098.624125][T14536] fido_id[14536]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1098.649685][T14548] ubi: mtd0 is already attached to ubi0 [ 1098.656709][ T5688] ath6kl: Failed to init ath6kl core: -71 [ 1098.691584][ T5688] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 1098.768477][ T5688] usb 5-1: USB disconnect, device number 96 [ 1099.052769][T11192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1099.073949][T14553] gadgetfs: bound to dummy_udc driver [ 1099.095149][T11192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1099.175453][T14555] ubi: mtd0 is already attached to ubi0 [ 1099.645846][T14320] device veth0_macvtap entered promiscuous mode [ 1099.676204][T13866] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 1099.687055][T14320] device veth1_macvtap entered promiscuous mode [ 1099.698086][ C0] gadgetfs: connected [ 1099.702206][T13866] gadgetfs: disconnected [ 1099.734226][T11192] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1099.775408][T11192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1099.856819][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.884142][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.906426][ C0] gadgetfs: connected [ 1099.908256][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.911721][T13866] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1099.937191][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.950699][T14320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.962873][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1099.989793][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1100.007832][T13866] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1100.020386][T13866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.026506][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1100.071101][ C0] gadgetfs: configuration #1 [ 1100.091606][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.143602][T14320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1100.184991][T14320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.215258][T14320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1100.251165][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1100.271546][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1100.302166][T14320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.315021][T14320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.324730][T14320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.333560][T14320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.435990][T13866] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1100.611690][ T26] audit: type=1800 audit(1790239378.271:48): pid=14585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2829" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1100.702352][T14550] gadgetfs: suspended from state 3 [ 1100.707632][T14550] gadgetfs: disconnected [ 1100.760665][ T5688] usb 1-1: USB disconnect, device number 2 [ 1100.773985][ T32] ems_usb 4-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1100.803097][ T32] ems_usb: probe of 4-1:249.60 failed with error -22 [ 1100.815990][T13866] usb 3-1: Using ep0 maxpacket: 16 [ 1100.831871][T13866] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1100.844446][ T32] usb 4-1: USB disconnect, device number 2 [ 1100.907467][T13866] usb 3-1: config 249 has an invalid interface number: 60 but max is 0 [ 1100.972900][T13866] usb 3-1: config 249 has no interface number 0 [ 1101.002870][T13866] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1101.030275][T13866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.052631][T13866] usb 3-1: Product: syz [ 1101.063421][T13866] usb 3-1: Manufacturer: syz [ 1101.078976][T13866] usb 3-1: SerialNumber: syz [ 1101.121512][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.140549][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.156661][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1101.255947][T11832] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1101.265770][ T8127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.281602][ T8127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.289665][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1101.446959][T11832] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.529638][T11832] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1102.172315][T14602] gadgetfs: bound to dummy_udc driver [ 1102.444226][T11192] rpcbind: server 127.0.0.1 not responding, timed out [ 1102.507359][T11832] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1102.564325][T11832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.590505][T14607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.619087][T11832] usb 2-1: config 0 descriptor?? [ 1102.624601][T14607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.866021][ T4350] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 1102.892145][ C1] gadgetfs: connected [ 1102.897220][T14607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.905864][ T4350] gadgetfs: disconnected [ 1102.924315][T14607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.059399][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.086118][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.096997][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.106377][ C1] gadgetfs: connected [ 1103.111663][ T4350] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1103.127012][ T4350] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1103.145103][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.154057][ T4350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.162791][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.170741][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.179099][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.185819][ C1] gadgetfs: configuration #1 [ 1103.191952][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.199050][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.206876][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.213587][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.222869][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.229973][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.240113][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.248077][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.257934][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.265128][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.292560][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.302720][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.320215][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.330381][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.347783][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.364787][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.373968][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.390949][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.401056][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.408090][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.414866][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.422022][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.433782][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.445111][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.474869][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.485078][T14602] gadgetfs: suspended from state 3 [ 1103.490302][T14602] gadgetfs: disconnected [ 1103.500216][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.509626][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1103.560187][T13867] usb 1-1: USB disconnect, device number 3 [ 1103.568140][T13866] ems_usb 3-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1103.649545][T13866] ems_usb: probe of 3-1:249.60 failed with error -22 [ 1103.692750][T13866] usb 3-1: USB disconnect, device number 120 [ 1104.223184][T14621] ubi: mtd0 is already attached to ubi0 [ 1104.243281][T14619] device vlan2 entered promiscuous mode [ 1104.838433][T14619] device netdevsim0 entered promiscuous mode [ 1104.857259][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1104.864008][T11832] lua 0003:1E7D:2C2E.0012: unknown main item tag 0x0 [ 1104.912203][T11832] lua 0003:1E7D:2C2E.0012: hidraw0: USB HID v0.20 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 1104.966183][T11832] usb 2-1: USB disconnect, device number 3 [ 1105.044903][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1106.123138][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1106.196112][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x483c instead [ 1106.230701][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x1b93 instead [ 1106.266763][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1106.277328][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1106.287771][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1106.298252][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1106.308760][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1106.319297][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1106.330044][T14626] jffs2: Further such events for this erase block will not be printed [ 1106.339724][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1106.350246][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1106.360739][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x483c instead [ 1106.371191][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x1b93 instead [ 1106.386321][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1106.396810][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1106.407286][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1106.417779][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1106.428198][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1106.476297][T13866] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1106.558280][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1106.569429][T14626] jffs2: Further such events for this erase block will not be printed [ 1106.579403][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1106.590228][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1106.600795][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x483c instead [ 1106.611335][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xd0ac instead [ 1106.622019][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1106.632552][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1106.643227][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x483c instead [ 1106.653820][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xd0ac instead [ 1106.943616][T14635] fido_id[14635]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1106.975227][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1106.990758][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1107.011824][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x483c instead [ 1107.022713][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xd0ac instead [ 1107.033384][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1107.044307][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1107.085992][T13866] usb 5-1: Using ep0 maxpacket: 16 [ 1107.115045][ T26] audit: type=1800 audit(1790239384.931:49): pid=14641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2842" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1107.298917][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x483c instead [ 1107.313251][T13866] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1107.329861][T13866] usb 5-1: config 249 has an invalid interface number: 60 but max is 0 [ 1107.346963][T13866] usb 5-1: config 249 has no interface number 0 [ 1107.363669][T13866] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1107.381369][T13866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.398565][T13866] usb 5-1: Product: syz [ 1107.407093][T13866] usb 5-1: Manufacturer: syz [ 1107.417202][T13866] usb 5-1: SerialNumber: syz [ 1107.836786][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xd0ac instead [ 1107.904707][T14646] gadgetfs: bound to dummy_udc driver [ 1108.291883][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1108.366585][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1108.390113][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x483c instead [ 1108.400968][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xd0ac instead [ 1108.411921][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1108.425309][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1108.436315][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x483c instead [ 1108.447209][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xd0ac instead [ 1108.459013][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1108.469904][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1108.476009][T13867] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1108.488129][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x483c instead [ 1108.500737][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xd0ac instead [ 1108.511864][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1108.522874][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1108.536557][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x483c instead [ 1108.547778][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xd0ac instead [ 1108.558410][ C0] gadgetfs: connected [ 1108.562564][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1108.566283][T13867] gadgetfs: disconnected [ 1108.573346][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1108.588098][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x483c instead [ 1108.598902][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xd0ac instead [ 1108.609904][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1108.620736][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1108.634011][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x483c instead [ 1108.651783][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xd0ac instead [ 1108.662641][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1108.676028][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1108.690433][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x483c instead [ 1108.701758][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xd0ac instead [ 1108.718679][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1108.729705][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1108.740600][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x483c instead [ 1108.753636][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xd0ac instead [ 1108.781519][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1108.802295][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1108.920435][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x483c instead [ 1108.938228][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xd0ac instead [ 1108.949148][ C0] gadgetfs: connected [ 1108.954454][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1108.965693][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1108.966368][T11832] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1108.979878][T13867] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1108.993077][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x483c instead [ 1109.004008][T13867] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1109.034330][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xd0ac instead [ 1109.061630][T13867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.076398][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1109.100518][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1109.121564][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x483c instead [ 1109.143513][ C0] gadgetfs: configuration #1 [ 1109.152536][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xd0ac instead [ 1109.173932][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1109.186642][T11832] usb 4-1: Using ep0 maxpacket: 16 [ 1109.198369][T11832] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1109.223504][T11832] usb 4-1: config 249 has an invalid interface number: 60 but max is 0 [ 1109.252260][T14646] gadgetfs: suspended from state 3 [ 1109.257452][T14646] gadgetfs: disconnected [ 1109.313391][T13867] usb 1-1: USB disconnect, device number 4 [ 1109.320548][T13866] ems_usb 5-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1109.333073][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1109.339489][T13866] ems_usb: probe of 5-1:249.60 failed with error -22 [ 1109.358918][T13866] usb 5-1: USB disconnect, device number 97 [ 1109.382427][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x483c instead [ 1109.397169][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xd0ac instead [ 1109.406629][T11832] usb 4-1: config 249 has no interface number 0 [ 1109.415713][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1109.431728][T11832] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1109.446874][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1109.492104][T11832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.493961][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x483c instead [ 1109.509514][T11832] usb 4-1: Product: syz [ 1109.524846][T11832] usb 4-1: Manufacturer: syz [ 1109.556842][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xd0ac instead [ 1109.561418][T11832] usb 4-1: SerialNumber: syz [ 1109.584521][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1109.720533][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1109.741984][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x483c instead [ 1109.759473][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xd0ac instead [ 1110.326230][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1110.365991][T13866] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1110.513449][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1110.544739][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x483c instead [ 1110.615043][T14671] gadgetfs: bound to dummy_udc driver [ 1110.875504][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xd0ac instead [ 1110.950999][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1110.981557][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1110.994498][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x483c instead [ 1111.005309][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xd0ac instead [ 1111.016075][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1111.026738][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1111.037549][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x483c instead [ 1111.048398][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xd0ac instead [ 1111.059401][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1111.083777][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1111.101498][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x483c instead [ 1111.112196][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xd0ac instead [ 1111.122876][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1111.133613][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1111.144689][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x483c instead [ 1111.155728][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xd0ac instead [ 1111.166468][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1111.177622][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1111.178221][T13866] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.199940][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x483c instead [ 1111.210836][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xd0ac instead [ 1111.227627][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1111.238398][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1111.249116][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x483c instead [ 1111.267712][ T4681] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1111.277000][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xd0ac instead [ 1111.287689][T13866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1111.294300][ C0] gadgetfs: connected [ 1111.429442][ T4681] gadgetfs: disconnected [ 1111.435717][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1111.446503][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1111.449775][T13866] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1111.470844][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x483c instead [ 1111.481427][T13866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.035100][T14671] gadgetfs: suspended from state 2 [ 1112.073956][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xd0ac instead [ 1112.076266][T11832] ems_usb 4-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1112.136372][T13866] usb 5-1: config 0 descriptor?? [ 1112.195041][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1112.199198][T11832] ems_usb: probe of 4-1:249.60 failed with error -22 [ 1112.220905][T11832] usb 4-1: USB disconnect, device number 3 [ 1112.266507][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1112.301918][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x483c instead [ 1112.312724][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xd0ac instead [ 1112.323689][ T4681] usb 1-1: device not accepting address 5, error -71 [ 1113.169304][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1113.187906][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1113.206313][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x483c instead [ 1113.225951][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xd0ac instead [ 1113.242709][T13866] usbhid 5-1:0.0: can't add hid device: -71 [ 1113.250424][T13866] usbhid: probe of 5-1:0.0 failed with error -71 [ 1113.257962][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1113.269475][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1113.306204][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x483c instead [ 1113.363868][T13866] usb 5-1: USB disconnect, device number 98 [ 1113.376017][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xd0ac instead [ 1113.429879][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1113.432278][ T49] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 1113.454974][ T49] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1113.487620][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1113.618185][ T26] audit: type=1800 audit(1790239391.381:50): pid=14690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2853" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1113.762635][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x483c instead [ 1113.788011][T14626] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xd0ac instead [ 1113.802859][T14626] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1113.813603][T14626] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1114.255673][T14701] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2854'. [ 1114.411421][T14701] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2854'. [ 1114.956049][ T4681] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1115.308800][T14701] netlink: 'syz.2.2854': attribute type 5 has an invalid length. [ 1115.516144][ T4681] usb 4-1: Using ep0 maxpacket: 16 [ 1115.539156][T14713] syz.0.2860 (14713): drop_caches: 2 [ 1115.679343][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.687184][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.311899][T14701] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2854'. [ 1116.323382][ T4681] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1116.346659][ T4681] usb 4-1: config 249 has an invalid interface number: 60 but max is 0 [ 1116.375959][ T4681] usb 4-1: config 249 has no interface number 0 [ 1116.388306][ T4681] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1116.406370][ T4681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.414390][ T4681] usb 4-1: Product: syz [ 1116.418668][ T4681] usb 4-1: Manufacturer: syz [ 1116.423284][ T4681] usb 4-1: SerialNumber: syz [ 1117.161890][T14725] gadgetfs: bound to dummy_udc driver [ 1117.616150][T13866] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1117.956427][ T32] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1117.973113][ C1] gadgetfs: connected [ 1117.979243][ T32] gadgetfs: disconnected [ 1118.008841][T13866] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.020553][T13866] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1118.027278][T13866] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1118.036386][T13866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.047219][T13866] usb 1-1: config 0 descriptor?? [ 1118.166162][ C1] gadgetfs: connected [ 1118.171618][ T32] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1118.186089][ T32] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1118.226211][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.252084][ C1] gadgetfs: configuration #1 [ 1118.482794][T14716] bridge0: port 3(wlan1) entered blocking state [ 1118.498933][T14716] bridge0: port 3(wlan1) entered disabled state [ 1118.522042][T14716] device wlan1 entered promiscuous mode [ 1118.588222][T14725] gadgetfs: suspended from state 3 [ 1118.593418][T14725] gadgetfs: disconnected [ 1118.639829][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1118.647245][T12837] usb 2-1: USB disconnect, device number 4 [ 1118.654540][ T4681] ems_usb 4-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1118.691075][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1118.706162][ T4681] ems_usb: probe of 4-1:249.60 failed with error -22 [ 1118.715747][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1118.724189][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1118.731448][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1118.741964][ T4681] usb 4-1: USB disconnect, device number 4 [ 1118.748142][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1118.758150][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1118.764865][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1118.785978][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1118.797628][ T26] audit: type=1800 audit(1790239396.621:51): pid=14746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2868" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1118.821997][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1118.835979][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1118.851947][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1118.859015][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1118.865722][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1118.877474][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1118.884395][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1118.893586][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1119.550943][T14756] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2871'. [ 1119.577355][T14756] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2871'. [ 1119.601269][T14756] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2871'. [ 1119.675574][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1119.682634][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1119.689406][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1119.696175][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1119.702881][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1119.714197][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1119.721006][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1119.727902][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1119.734601][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1119.746103][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1119.752820][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1119.759811][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1119.766585][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1119.773281][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1119.780057][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1119.786790][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1119.793484][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1119.800220][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1119.806936][T13866] lua 0003:1E7D:2C2E.0013: unknown main item tag 0x0 [ 1119.831011][T13866] lua 0003:1E7D:2C2E.0013: hidraw0: USB HID v0.20 Device [HID 1e7d:2c2e] on usb-dummy_hcd.0-1/input0 [ 1119.845697][T13866] usb 1-1: USB disconnect, device number 7 [ 1121.061376][T14762] fido_id[14762]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1121.938247][ T26] audit: type=1326 audit(1790239399.761:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14775 comm="syz.3.2880" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912699e159 code=0x7ffc0000 [ 1122.117215][ T26] audit: type=1326 audit(1790239399.871:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14775 comm="syz.3.2880" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f912699e159 code=0x7ffc0000 [ 1122.356007][ T4681] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1122.596427][ T4350] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1122.812100][ T4350] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.382824][ T4350] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1123.469555][ T4350] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1123.561980][ T4350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.700946][ T4350] usb 3-1: config 0 descriptor?? [ 1124.435983][ T4681] usb 2-1: Using ep0 maxpacket: 16 [ 1124.464523][ T26] audit: type=1800 audit(1790239402.281:54): pid=14794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2882" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1124.964981][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1125.002998][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1125.058023][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1125.120096][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1125.228445][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1125.284090][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1125.335518][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1125.387434][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1125.455068][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1125.514027][ T4681] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1125.538425][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1125.538809][ T4681] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1125.545123][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1125.557614][ T4681] usb 2-1: can't read configurations, error -71 [ 1126.525872][T14800] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2884'. [ 1126.569569][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1126.602606][T14800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2884'. [ 1126.612368][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1126.649377][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1126.659217][T14800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2884'. [ 1126.679143][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1126.695477][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1126.724202][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1127.592962][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1127.600191][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1127.607820][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1127.614851][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1127.622082][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1127.630195][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1127.637805][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1127.644691][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1127.651749][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1127.659082][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1127.665781][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1127.672816][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1127.680034][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1127.687356][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1127.696146][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1127.708988][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1127.715691][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1127.722722][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1127.729737][ T4350] lua 0003:1E7D:2C2E.0014: unknown main item tag 0x0 [ 1127.849287][ T4350] lua 0003:1E7D:2C2E.0014: hidraw0: USB HID v0.20 Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 1127.890553][ T4350] usb 3-1: USB disconnect, device number 121 [ 1129.492848][T14814] fido_id[14814]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1130.549455][ T26] audit: type=1800 audit(1790239408.371:55): pid=14844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2893" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1130.661715][T14816] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1130.678506][T14816] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1130.686033][T14816] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1130.702399][T14816] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1130.722526][T14816] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1130.728580][T14816] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1130.744947][T14816] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1130.756169][T14816] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1130.767318][T14816] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1130.876225][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 1131.037106][ T2935] rpcbind: server 127.0.0.1 not responding, timed out [ 1131.056214][T13866] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1131.246073][T13866] usb 3-1: Using ep0 maxpacket: 16 [ 1131.254320][T13866] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1131.322844][T13866] usb 3-1: config 249 has an invalid interface number: 60 but max is 0 [ 1131.332543][T13866] usb 3-1: config 249 has no interface number 0 [ 1131.353096][T13866] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1131.362720][T14857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2900'. [ 1131.370332][T13866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.449548][T11836] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1131.706994][T11836] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.947894][T11836] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1131.958099][T11836] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1131.981892][T11836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.159729][T11836] usb 4-1: config 0 descriptor?? [ 1132.255348][T13866] usb 3-1: Product: syz [ 1132.259624][T13866] usb 3-1: Manufacturer: syz [ 1132.264229][T13866] usb 3-1: SerialNumber: syz [ 1132.712855][T14868] gadgetfs: bound to dummy_udc driver [ 1132.726487][ T49] Bluetooth: hci4: command 0x0c1a tx timeout [ 1132.732810][ T9386] Bluetooth: hci2: command 0x0c1a tx timeout [ 1132.733097][T11001] Bluetooth: hci1: command 0x0c1a tx timeout [ 1133.036707][T11001] Bluetooth: hci3: command 0x0c1a tx timeout [ 1133.310772][ T4681] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1134.111930][T14868] gadgetfs: suspended from state 2 [ 1134.121504][T13866] ems_usb 3-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1134.186397][T13866] ems_usb: probe of 3-1:249.60 failed with error -22 [ 1134.835968][T11001] Bluetooth: hci1: command 0x0406 tx timeout [ 1134.842097][T11001] Bluetooth: hci4: command 0x0406 tx timeout [ 1135.116136][T11001] Bluetooth: hci3: command 0x0406 tx timeout [ 1135.175507][T13866] usb 3-1: USB disconnect, device number 122 [ 1135.191977][T14888] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1135.211680][T14878] bridge0: port 4(wlan1) entered blocking state [ 1135.219711][T14878] bridge0: port 4(wlan1) entered disabled state [ 1135.264939][T14878] device wlan1 entered promiscuous mode [ 1135.376252][T11836] usbhid 4-1:0.0: can't add hid device: -71 [ 1135.382261][T11836] usbhid: probe of 4-1:0.0 failed with error -71 [ 1135.437802][T11836] usb 4-1: USB disconnect, device number 5 [ 1136.974383][T14916] CIFS: Attempting to mount \\127.0.0.1\share [ 1137.104869][T14918] CIFS: VFS: Invalid response size 0 for command 0 [ 1137.142778][T14918] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x8 [ 1138.226091][T14916] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 1138.279957][T14916] CIFS: VFS: cifs_mount failed w/return code = -5 [ 1138.355967][ T4681] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1138.546143][ T4681] usb 4-1: Using ep0 maxpacket: 16 [ 1138.571234][ T4681] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1139.310251][ T4681] usb 4-1: config 249 has an invalid interface number: 60 but max is 0 [ 1139.349121][ T4681] usb 4-1: config 249 has no interface number 0 [ 1139.371328][ T4681] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1140.816787][ T4681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.872615][ T4681] usb 4-1: Product: syz [ 1140.877202][ T4681] usb 4-1: Manufacturer: syz [ 1140.885450][ T4681] usb 4-1: SerialNumber: syz [ 1141.336771][ T4681] usb 4-1: can't set config #249, error -71 [ 1141.466190][ T4681] usb 4-1: USB disconnect, device number 6 [ 1141.490873][T14953] device syzkaller0 entered promiscuous mode [ 1142.606089][ T4681] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1143.483465][ T4681] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.498384][ T4681] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1143.505022][ T4681] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1143.707294][ T4335] bond0: (slave bond_slave_0): interface is now down [ 1143.722310][ T4681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.725178][ T4335] bond0: (slave bond_slave_1): interface is now down [ 1144.098275][ T4335] bond0: now running without any active interface! [ 1144.193847][ T4681] usb 4-1: config 0 descriptor?? [ 1144.531409][ T4681] usb 4-1: can't set config #0, error -71 [ 1144.571811][ T4681] usb 4-1: USB disconnect, device number 7 [ 1148.313178][T15015] syz.0.2938 (15015): drop_caches: 2 [ 1148.690027][T15019] tipc: Started in network mode [ 1148.695126][T15019] tipc: Node identity ac14140f, cluster identity 4711 [ 1149.334966][T15019] tipc: New replicast peer: 255.255.255.255 [ 1149.491846][T15019] tipc: Enabled bearer , priority 10 [ 1150.634019][T15036] binder: 15030:15036 ioctl c0306201 0 returned -14 [ 1150.641547][T13866] tipc: Node number set to 2886997007 [ 1153.569613][T15081] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1154.304778][T15084] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2950'. [ 1154.339320][T15084] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2950'. [ 1154.348372][T15084] netlink: 'syz.4.2950': attribute type 5 has an invalid length. [ 1154.356439][T15087] binder: 15085:15087 ioctl c0306201 0 returned -14 [ 1154.363133][T15084] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2950'. [ 1155.485982][ T4350] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1155.554475][T15102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2960'. [ 1155.569802][T15102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2960'. [ 1155.687778][ T4350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.716006][ T4350] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1155.735575][ T4350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.911139][ T4350] usb 4-1: config 0 descriptor?? [ 1156.208174][ T4350] usbhid 4-1:0.0: can't add hid device: -71 [ 1156.244035][ T4350] usbhid: probe of 4-1:0.0 failed with error -71 [ 1156.408827][ T4350] usb 4-1: USB disconnect, device number 8 [ 1158.687641][T15134] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1159.138997][ T4350] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1159.406567][ T4350] usb 4-1: Using ep0 maxpacket: 16 [ 1159.418110][ T4350] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1159.563861][ T4350] usb 4-1: config 249 has an invalid interface number: 60 but max is 0 [ 1159.628171][ T4350] usb 4-1: config 249 has no interface number 0 [ 1159.647634][ T4350] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 1159.690611][ T4350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.725938][ T4350] usb 4-1: Product: syz [ 1159.730125][ T4350] usb 4-1: Manufacturer: syz [ 1159.734717][ T4350] usb 4-1: SerialNumber: syz [ 1160.202057][T15155] gadgetfs: bound to dummy_udc driver [ 1160.976053][T11836] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1160.988232][ C1] gadgetfs: connected [ 1160.992504][T11836] gadgetfs: disconnected [ 1162.307373][ T4350] ems_usb 4-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1162.318944][ T4350] ems_usb: probe of 4-1:249.60 failed with error -22 [ 1162.328871][ T4350] usb 4-1: USB disconnect, device number 10 [ 1163.256742][T15183] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2978'. [ 1163.265743][T15183] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2978'. [ 1163.274761][T15183] netlink: 'syz.4.2978': attribute type 5 has an invalid length. [ 1163.283059][T15183] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2978'. [ 1172.015196][ T47] rpcbind: server 127.0.0.1 not responding, timed out [ 1172.015339][ T7534] rpcbind: server 127.0.0.1 not responding, timed out [ 1172.323280][T12350] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1172.333130][T12350] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1172.349602][T12350] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1172.358303][T12350] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1172.366538][T12350] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1172.373894][T12350] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1172.998324][T15246] chnl_net:caif_netlink_parms(): no params data found [ 1173.405181][T15246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.440926][T15246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.487002][T15246] device bridge_slave_0 entered promiscuous mode [ 1174.424241][T11001] Bluetooth: hci4: command 0x0409 tx timeout [ 1174.487153][T15246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.540887][T15246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.567591][T15246] device bridge_slave_1 entered promiscuous mode [ 1175.616479][T15246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.246193][T15246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.477245][T11001] Bluetooth: hci4: command 0x041b tx timeout [ 1176.845433][T15246] team0: Port device team_slave_0 added [ 1177.042244][T15246] team0: Port device team_slave_1 added [ 1177.117994][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.124561][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.622937][T15297] atomic_op ffff88805516e198 conn xmit_atomic 0000000000000000 [ 1178.682446][T11001] Bluetooth: hci4: command 0x040f tx timeout [ 1180.044051][T15246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.056802][T15246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.479828][T15246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.724566][T11001] Bluetooth: hci4: command 0x0419 tx timeout [ 1180.947059][T15246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.008632][T15246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.303951][T15246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.586154][T13867] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1181.796708][T15246] device hsr_slave_0 entered promiscuous mode [ 1181.841533][T15246] device hsr_slave_1 entered promiscuous mode [ 1181.888913][T15246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1181.924706][T15246] Cannot create hsr debugfs directory [ 1182.396223][T13867] usb 1-1: Using ep0 maxpacket: 8 [ 1182.403690][T13867] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1182.435976][T13867] usb 1-1: config 179 has no interface number 0 [ 1182.450929][T13867] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1182.502776][T13867] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1182.518991][T13867] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1182.531352][T13867] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1182.546064][T13867] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1182.566060][T13867] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1182.584180][T13867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.257430][T15331] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1183.712267][T13867] usb 1-1: USB disconnect, device number 10 [ 1183.718353][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1183.718398][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1184.540546][ T4359] device hsr_slave_0 left promiscuous mode [ 1184.605072][ T4359] device hsr_slave_1 left promiscuous mode [ 1184.717033][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1184.770023][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1184.783461][ T4359] device bridge_slave_1 left promiscuous mode [ 1184.806586][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.847040][ T4359] device bridge_slave_0 left promiscuous mode [ 1184.905209][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.015813][ T4359] general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] PREEMPT SMP KASAN [ 1185.027908][ T4359] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127] [ 1185.037197][ T4359] CPU: 0 PID: 4359 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 1185.044744][ T4359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1185.054799][ T4359] Workqueue: netns cleanup_net [ 1185.059578][ T4359] RIP: 0010:br_del_frame+0xcd/0x150 [ 1185.064858][ T4359] Code: f8 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 fd b7 bb f8 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 64 b8 bb f8 4d 89 37 4d 85 f6 74 [ 1185.084465][ T4359] RSP: 0000:ffffc900046af8f0 EFLAGS: 00010a06 [ 1185.090532][ T4359] RAX: 1bd5a00000000024 RBX: ffffffff8e229730 RCX: ffff88807b911e00 [ 1185.098503][ T4359] RDX: 0000000000000000 RSI: ffffffff8e229718 RDI: ffffffff8e229728 [ 1185.106483][ T4359] RBP: 000000000000001d R08: ffffffff90b0f24f R09: 1ffffffff2161e49 [ 1185.114464][ T4359] R10: dffffc0000000000 R11: fffffbfff2161e4a R12: dffffc0000000000 [ 1185.122442][ T4359] R13: 1ffffffff1c452e6 R14: 0000000000000000 R15: dead000000000122 [ 1185.130414][ T4359] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1185.139347][ T4359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1185.145932][ T4359] CR2: 00007f9dd6e1a368 CR3: 00000000797bf000 CR4: 00000000003526f0 [ 1185.153908][ T4359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1185.161882][ T4359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1185.169853][ T4359] Call Trace: [ 1185.173129][ T4359] [ 1185.176067][ T4359] br_cfm_port_del+0x112/0x1b0 [ 1185.180944][ T4359] del_nbp+0x167/0x9e0 [ 1185.185019][ T4359] br_dev_delete+0x6a/0x130 [ 1185.189525][ T4359] ? nbp_backup_change+0x380/0x380 [ 1185.194640][ T4359] default_device_exit_batch+0x8bc/0x9f0 [ 1185.200284][ T4359] ? __might_sleep+0xd0/0xd0 [ 1185.204874][ T4359] ? rdma_dev_exit_net+0x2af/0x330 [ 1185.210010][ T4359] ? net_rps_action_and_irq_enable+0x200/0x200 [ 1185.216169][ T4359] ? rdma_dev_init_net+0x270/0x270 [ 1185.221283][ T4359] ? net_rps_action_and_irq_enable+0x200/0x200 [ 1185.227437][ T4359] cleanup_net+0x78e/0xba0 [ 1185.231861][ T4359] ? ops_free_list+0x3b0/0x3b0 [ 1185.236633][ T4359] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1185.242535][ T4359] ? _raw_spin_unlock+0x40/0x40 [ 1185.247391][ T4359] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1185.252593][ T4359] ? process_one_work+0x7b4/0x1160 [ 1185.257769][ T4359] process_one_work+0x8ab/0x1160 [ 1185.262715][ T4359] ? worker_detach_from_pool+0x240/0x240 [ 1185.268352][ T4359] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1185.273384][ T4359] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1185.278936][ T4359] ? wq_worker_running+0x97/0x190 [ 1185.283961][ T4359] worker_thread+0xaf5/0x12a0 [ 1185.288651][ T4359] kthread+0x29d/0x330 [ 1185.292773][ T4359] ? worker_clr_flags+0x1a0/0x1a0 [ 1185.297799][ T4359] ? kthread_blkcg+0xd0/0xd0 [ 1185.302393][ T4359] ret_from_fork+0x1f/0x30 [ 1185.306874][ T4359] [ 1185.309896][ T4359] Modules linked in: [ 1185.454648][ T4359] ---[ end trace 0000000000000000 ]--- [ 1185.460217][ T4359] RIP: 0010:br_del_frame+0xcd/0x150 [ 1185.525652][ T4359] Code: f8 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 fd b7 bb f8 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 64 b8 bb f8 4d 89 37 4d 85 f6 74 [ 1185.653693][ T4359] RSP: 0000:ffffc900046af8f0 EFLAGS: 00010a06 [ 1185.684826][ T4359] RAX: 1bd5a00000000024 RBX: ffffffff8e229730 RCX: ffff88807b911e00 [ 1185.722543][ T4359] RDX: 0000000000000000 RSI: ffffffff8e229718 RDI: ffffffff8e229728 [ 1185.761414][ T4359] RBP: 000000000000001d R08: ffffffff90b0f24f R09: 1ffffffff2161e49 [ 1185.769519][ T4359] R10: dffffc0000000000 R11: fffffbfff2161e4a R12: dffffc0000000000 [ 1185.777617][ T4359] R13: 1ffffffff1c452e6 R14: 0000000000000000 R15: dead000000000122 [ 1185.787101][ T4359] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1185.806494][ T4359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1185.813110][ T4359] CR2: 0000556fc8bd8950 CR3: 000000007e54e000 CR4: 00000000003526f0 [ 1185.822016][ T4359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1185.840623][ T4359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1185.849081][ T4359] Kernel panic - not syncing: Fatal exception [ 1185.855372][ T4359] Kernel Offset: disabled [ 1185.859687][ T4359] Rebooting in 86400 seconds..