last executing test programs: 9m8.034130954s ago: executing program 2 (id=2847): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r0, 0xaeb, 0x1) getdents64(r0, 0x0, 0x4f) socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x1e8, r7, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1bc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ceph\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'aead\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbbf6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.:/\xbf.\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '%\'!(,/\xa8%$-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x4}]}, @ETHTOOL_A_BITSET_MASK={0xc4, 0x5, "8c43c5b08f8ce7cfb5f0a9faea887e3aae3270eeda3f65521dddfaf3c8856e5ac7d0abbb11ec7198057ef61f50c67525aaff9f2546219a5864829a30b8cb5b7743d5b864aea3ebe2c528c327a4bd74d4fbcb748390b32415282e8bf848a11e6a1cc3ac4dda061ce2bd0d4cb10692f1eb5cc58f4dabf3221acd88409738efedac94b13d31dbb5850e8bd6ef4b88b971e34c83dd3bae983f4fc536035439c1d2eb9b343512cc1fb9fd177bcaf4eda6d4b759bdb59c1069fa3381d6fb3ef36dc56b"}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x4048086) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x81, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x9, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9m5.339708294s ago: executing program 2 (id=2865): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 9m5.10104076s ago: executing program 2 (id=2871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x40002022) 9m5.019114146s ago: executing program 2 (id=2874): write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') unshare(0x2000600) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 9m4.902976288s ago: executing program 2 (id=2875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x1, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000) 9m4.78591125s ago: executing program 2 (id=2876): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x800) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 8m49.742929171s ago: executing program 32 (id=2876): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x800) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 2m49.668844792s ago: executing program 1 (id=5243): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, 0x0, 0x1, {0x1, 0xf0, 0x1}, 0xff}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, {0xb, 0xfff2}, {0xfff1, 0xf}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) accept4(r0, 0x0, 0x0, 0x80000) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT_ANY(r6, 0xf, &(0x7f0000000000)=""/63) recvmmsg(0xffffffffffffffff, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000240)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) 2m49.510199583s ago: executing program 1 (id=5246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000880)) 2m49.367164373s ago: executing program 1 (id=5249): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140007"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, 0x0, 0x0, 0x40) syz_emit_vhci(&(0x7f0000003040)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xd, 0xc8}}}, 0x6) r3 = openat$tun(0xffffff9c, 0x0, 0x6940, 0x0) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) 2m49.297655497s ago: executing program 1 (id=5250): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) 2m49.256365113s ago: executing program 1 (id=5251): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) 2m49.048917549s ago: executing program 1 (id=5252): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 2m36.391273281s ago: executing program 3 (id=5338): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000000060400", 0x32}], 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$media(0x0, 0x4, 0x10000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc01c7c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)=[{{0x80000000}}]}) r8 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r8, 0xc0487c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffff32, 0x0, 0x0, 0x1c, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f00000003c0)={{0x80000000, 0x0, 0x3, [0xff7fffff, 0x9]}, {0x80000000, 0x0, 0x2, [0x8, 0xe7]}, 0x2, [0x93e, 0x7fffffff]}) r9 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, &(0x7f0000000800)={0x80000000, 0x0, &(0x7f0000000b00)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) close_range(r9, r4, 0x2) ioctl$MEDIA_IOC_SETUP_LINK(r9, 0xc0347c03, &(0x7f00000001c0)={{r11, r10, 0x1, [0x0, 0xf7df]}, {r11, r12, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x6, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000780)=[{}], 0x7, 0x0, &(0x7f0000000880)=[{}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000980)=[{}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000ac0)={{r7, 0x0, 0x4, [0x6, 0x4]}, {r11, r13, 0x0, [0x2, 0x4]}, 0x0, [0x7, 0x9]}) sendmsg$nl_route(r6, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2m34.960866587s ago: executing program 3 (id=5343): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x301, 0x0, 0xfffffffd, {}, [{0x34, 0x1, [@m_csum={0x30, 0x3ffd, 0x0, 0x0, {{0x9}, {0x4, 0x21}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m34.910762357s ago: executing program 3 (id=5344): r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, 0x0) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 2m34.909763472s ago: executing program 3 (id=5345): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) openat(0xffffffffffffff9c, 0x0, 0x40400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/ep1in-bulk\x00', 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, 0x0, 0x20040090) 2m34.875792347s ago: executing program 3 (id=5346): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x8080, 0x8, 0x3, 0x0, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)) 2m34.792843845s ago: executing program 3 (id=5347): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write$P9_RSTATu(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRES64], 0x55) 2m34.714353541s ago: executing program 33 (id=5347): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write$P9_RSTATu(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRES64], 0x55) 2m33.698955714s ago: executing program 34 (id=5252): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 2m10.509241378s ago: executing program 5 (id=5535): syz_emit_ethernet(0x27, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000700)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x185}}, 0x20) write$P9_RLERRORu(r0, &(0x7f0000000500)={0x96, 0x7, 0x1, {{0x89, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec'}, 0x78e56403}}, 0x96) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f00000002c0)={'exec ', ':\x00\b\xc4\x99\x10\tI\xc22b\xe8\r\xfa\xc1\xd6[Wk\x8c\xe9\x1e\xf3\xf8-\b\xd4-\xce\xeapE\xb53&\v\xa0\xd3\v#E\xc4I\x97\xfd\x10\xd5m\x0e,B{<\xa7:\xc2\njN\f\xf5}\xdes\xab\xc9\xd5\x9b\x80I\x83\x8b\x1c\x00\x9ci\x9a\x03\xdd\xd6t\xe5we\n\xb0(L\x95\xf7P\x1f\x95\x06\x01\xb8\xa3\"\xc7M\x9e\xdfk\xc0j\xea\x1f\xf1\xa4&\x95)\xff\xa5\xe9\b\x80\xf10t\xc5B\xe5an\xb8+;\x86\v_\x18tX\xe5\f\xef\x0fO\x10Y!\a\xad\xe7\x94\x96gPs\'Y!7\xc2\v^wt\xe5\x1a\xdc`\xeeQo\xd2|<\xd9\x84\v\x1c%V8\"\x14\xea(tm\xf6\xa5\xd6\xd7\xd5\xec\x9b\x12\xa6\xd5\x1c\x19\x99\xe7\xa0\t\x1b\xfd\nZ%\xfeC\x06^\'^K\x8c\x95\x13\x9e\x8a\f+\x83c\xc0\xfd}'}, 0xe3) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00i\x00\x00\x00\x00', 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)}], 0x1}, 0xff03}], 0x2, 0x8000) 2m9.680568887s ago: executing program 5 (id=5538): r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 2m9.57686187s ago: executing program 5 (id=5541): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140007"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 2m8.774231527s ago: executing program 5 (id=5543): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) openat(0xffffffffffffff9c, 0x0, 0x40400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/ep1in-bulk\x00', 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2m8.598799466s ago: executing program 5 (id=5545): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb\v1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2', &(0x7f0000000300)='\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xc9\xe1\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x17\x81>\t\xc30-\xe2\xb3\xb00x0}) syz_emit_ethernet(0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000021001122334455000442420300010104010000c9b196fca5a302f3205d9b62a8af05669e6990e8f7ce661c7b418dbbb417975fba701b023297b42fb32a388af37035c2481357decb68905d752aea00a34925a49a18e1"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c00010029bd7000fadbdf2507000000", @ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48088) 27.22742048s ago: executing program 7 (id=6313): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) mq_unlink(&(0x7f0000000000)='eth0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0xd3, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x8009, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) creat(0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 26.41061749s ago: executing program 7 (id=6317): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@errors_remount}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000700)="$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") prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 25.338595362s ago: executing program 7 (id=6322): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0, 0x0, r1}, 0x68) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES32=r3], 0xfdef) 24.955453687s ago: executing program 7 (id=6328): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xa) 24.596869554s ago: executing program 36 (id=6328): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xa) 5.529014588s ago: executing program 4 (id=6455): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$cont(0x15, r0, 0x6, 0x4d3) 5.30414144s ago: executing program 4 (id=6458): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000080)={0x2, 0x4e27, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000340)="e9449dcf790e44a711d07badc0bd6660b33d6aa88605fce581c64259a652d784c923f26e51", 0x25}], 0x1}}], 0x1, 0x4) 4.421812573s ago: executing program 4 (id=6460): r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000001c0)) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000014001b5729bd7000fedbdf251014"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40) ptrace$peekuser(0x3, r5, 0x7) 4.012880657s ago: executing program 8 (id=6466): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000d40)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0xc0105b08, 0x0) 3.666271831s ago: executing program 9 (id=6471): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000800)='10000', 0x5) 3.463705396s ago: executing program 9 (id=6473): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) mq_unlink(&(0x7f0000000000)='eth0\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0xd3, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x8009, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) creat(0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2.393439661s ago: executing program 9 (id=6477): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @loopback}, 0x1, 0x0, 0x1}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @loopback}, 0x1, 0x1, 0x1, 0x1}}, 0x26) r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./proc/net/pppol2tp\x00', 0x0, 0x0) read(r3, &(0x7f0000003000), 0x100) read$FUSE(r3, &(0x7f0000002040)={0x2020}, 0x2020) read(r3, &(0x7f0000004000), 0x100) read(r3, &(0x7f0000005000), 0x100) 2.164420022s ago: executing program 9 (id=6480): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x7, 0x2) setuid(0xee01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x48634000) mlockall(0x3) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca946e64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1) 2.154326675s ago: executing program 0 (id=6481): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, 0x0, 0x0, 0x41) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x1, {0x1, 0xf0, 0x1}, 0xff}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0xf}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) accept4(r0, 0x0, 0x0, 0x80000) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT_ANY(r7, 0xf, &(0x7f0000000000)=""/63) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000240)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) 1.992810186s ago: executing program 8 (id=6483): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000800)='10000', 0x5) 1.964175838s ago: executing program 6 (id=6484): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) mount$fuse(0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000 00000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_setup(0x66, &(0x7f0000000400)=0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r2, &(0x7f00000000c0)='-5', 0x12, 0x0, 0x0, 0x4}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/drivers/serial/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='00:04\n', 0x6) 1.876576311s ago: executing program 8 (id=6485): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc) r1 = syz_io_uring_setup(0x574b, 0x0, &(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000000)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) pread64(r2, &(0x7f0000000000)=""/4, 0x4, 0x7) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="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"]) 1.812999933s ago: executing program 4 (id=6486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010005bd70000000000000000000", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.746804957s ago: executing program 6 (id=6487): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000240)={'lo\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 1.733205455s ago: executing program 0 (id=6488): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) mq_unlink(&(0x7f0000000000)='eth0\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0xd3, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x8009, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) creat(0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 993.257169ms ago: executing program 4 (id=6489): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="880000001900010000000000000000001d01000005000d0001000000150003000000000000000000062e346aa0f998570000000015000200000000000002000003ef7506ecbef970060000001500040000"], 0x88}}, 0x0) 984.588067ms ago: executing program 6 (id=6490): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @loopback}, 0x1, 0x1, 0x1, 0x1}}, 0x26) r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./proc/net/pppol2tp\x00', 0x0, 0x0) read(r3, &(0x7f0000003000), 0x100) read$FUSE(r3, &(0x7f0000002040)={0x2020}, 0x2020) read(r3, &(0x7f0000004000), 0x100) read(r3, &(0x7f0000005000), 0x100) 887.772052ms ago: executing program 8 (id=6491): mknodat$loop(0xffffffffffffff9c, 0x0, 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30024404, 0x0, 0xfffe, 0x9, 0xfffffffe, 0x0, 0x0, 0x10, 0x4}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13) close(r0) 886.7373ms ago: executing program 0 (id=6492): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r0 = openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x12) r1 = open_tree(r0, &(0x7f00000002c0)='./file0\x00', 0x0) recvmsg$can_j1939(r1, &(0x7f00000007c0)={&(0x7f0000000300)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)=""/113, 0x71}, {0x0}], 0x2, &(0x7f0000000680)=""/240, 0xf0}, 0x12000) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1a4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='./file0\x00', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='1\x00', 0x2) write(r4, &(0x7f0000000200)='0\x00', 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80, 0x0}, 0x8eec3816282631eb) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000000080)=@vmx={0x86, 0x0, 0x2080, {0x2000, 0x58000, {0x2}, 0x0, 0x9}, {"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", "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"}}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000180)={r1, 0x0, 0xe5, 0x0, &(0x7f0000000000)="070d2de48e2f1ee5d7a6abd624d75512c42f9ea929fe12fef49dafc28747fd255b66873401de302a70ca3642d35ee24618107293478c6b97554ea1bc473e417203ba7959d3f81d84020dd3b8e41c284ddb1aaceb2c047fd6e3ab865b3b291b1ee2f5962e65f9cfaadddcc7af01d24ef108f0ee3cce1d4b31dc0a2fc2412ab2df7c655ab24a73179821eb155e7dac5fe7cefdc42ae4792eb4ee5c50474af0a42c9c9ba4681b67dde3766f2be01ce827b7fc382c89b3495cec547e8690ee6996254c09ca315f131e18923bd9bd781ed80eb65c19207c4883926dbff6fb0ca3fbe96e35b5dea5", 0x0, 0x1, 0x0, 0x57, 0x0, &(0x7f0000000200)="60b70533be3efe1c4330af25f4bd2e8762330600000094cffbad904f70aa2db1caffb4e5eaba708288003bcbd8a1c338afe31cf6c7fe3e3bf7555430ff2e3d761fed4849731b009db0d7049300"/87, 0x0, 0x2, 0x0, 0x6}, 0x4c) syz_io_uring_setup(0xf00, &(0x7f0000000300)={0x0, 0x5961, 0x400, 0x0, 0x3c9}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_SYMLINKAT={0x26, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, r11, &(0x7f0000002180)=@IORING_OP_BIND=@ipv6={0x38, 0x54, 0x0, r3, 0x1c, &(0x7f0000002100)={{0xa, 0x4e22, 0x0, @remote, 0x4}}, 0x0, 0x0, 0x1, {0x0, r12}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 839.751186ms ago: executing program 4 (id=6493): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000d40)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0xc0105b08, 0x0) 797.226022ms ago: executing program 6 (id=6494): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_open_procfs(r1, &(0x7f0000000140)='attr/exec\x00') r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001100050026bd7000ffdbdf25070fef93", @ANYRES32=r3, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) 745.203555ms ago: executing program 8 (id=6495): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000800)='10000', 0x5) 682.663488ms ago: executing program 6 (id=6496): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000080)={0x2, 0x4e27, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000340)="e9449dcf790e44a711d07badc0bd6660b33d6aa88605fce581c64259a652d784c923f26e51", 0x25}], 0x1}}], 0x1, 0x4) 598.053355ms ago: executing program 8 (id=6497): r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000001c0)) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000014001b5729bd7000fedbdf251014"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40) ptrace$peekuser(0x3, r5, 0x7) 596.940166ms ago: executing program 0 (id=6498): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) mount$fuse(0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000 00000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_setup(0x66, &(0x7f0000000400)=0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r2, &(0x7f00000000c0)='-5', 0x12, 0x0, 0x0, 0x4}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/drivers/serial/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='00:04\n', 0x6) 574.979517ms ago: executing program 6 (id=6499): select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000003c00000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 411.811987ms ago: executing program 0 (id=6500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010005bd70000000000000000000", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 201.858678ms ago: executing program 0 (id=6501): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc) r1 = syz_io_uring_setup(0x574b, 0x0, &(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000000)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) pread64(r2, &(0x7f0000000000)=""/4, 0x4, 0x7) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c0070b550d2e8c829e881860d1c14257dc1ffbebafd9849201463c955071736b618a5f0455e50a39285f3e464736e2a081bd988fc1d00f91c1bf241183ffe5ff67eb5fe2e5fc5c47ddb8e1f44600fd00c3a896ca2615ad477fa51ef7208bd27a59f041f880157267948bc4a3a61f51905609c7f94b7774770d9e490f1d324a3a15ba197bc9b5ee8c0f9c066fecf4c48d35c1225000062a9f41ee5fd872cf8eec20aa430990ff4c5d16ff8b567b05d626b7076b22de3b3582b7f6df7c59f4ab7dc80f26cc81bd276ea9b5cc9cfc6f40c99e531cfdf7e25f7fa3f00630184ff8a7c913ae0bb71fb4461f48c7da542ca2565fe1e7dc16b2f00abbb8c6ccbc3d2c8e3feee443bdea6212eddf90fb49f19812303941911efd40b6f8505afa39ad968c754b580d617eea4298947542bdc"]) 96.642801ms ago: executing program 9 (id=6502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32], 0x1, 0x1b9, &(0x7f0000000800)="$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") open(0x0, 0x6000, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000000)) 0s ago: executing program 9 (id=6503): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) mq_unlink(&(0x7f0000000000)='eth0\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0xd3, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x8009, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) creat(0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): mmand tx timeout [ 76.144609][ T4931] Bluetooth: hci1: command tx timeout [ 76.144645][ T4931] Bluetooth: hci0: command tx timeout [ 76.213854][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.278012][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.278056][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.338506][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.385493][ T4931] Bluetooth: hci3: command tx timeout [ 76.385912][ T52] Bluetooth: hci4: command tx timeout [ 76.506141][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.506189][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.563657][ T5832] loop0: detected capacity change from 0 to 2048 [ 76.587559][ T5832] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.638252][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.638471][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.638627][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.671541][ T5835] syzkaller0: entered promiscuous mode [ 76.671591][ T5835] syzkaller0: entered allmulticast mode [ 76.865195][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.865237][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.057519][ T5850] jffs2: notice: (5850) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 77.068254][ T4586] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.170671][ T5847] configfs-gadget.g1 gadget.0: HOST MAC e6:fa:63:68:fb:a4 [ 77.170716][ T5847] configfs-gadget.g1 gadget.0: MAC 96:68:18:69:89:42 [ 77.225452][ T4586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.225494][ T4586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.304954][ T5856] ip_tables: iptables: counters copy to user failed while replacing table [ 77.454420][ T5728] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.636447][ T5728] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 77.657173][ T5728] usb 1-1: Dual-Role OTG device on HNP port [ 77.669423][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.706961][ T5728] usb 1-1: No union descriptors [ 77.716257][ T5728] gspca_main: spca501-2.14.0 probing 0000:0000 [ 77.723450][ T5728] gspca_spca501: reg write: error -32 [ 77.730136][ T5728] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 77.737672][ T5728] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 77.791351][ T5868] loop1: detected capacity change from 0 to 2048 [ 77.834719][ T5868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.032441][ T5881] fuse: Unknown parameter 'use00000000000000000000' [ 78.213090][ T5892] Bluetooth: MGMT ver 1.23 [ 78.761163][ T5908] loop4: detected capacity change from 0 to 512 [ 78.882439][ T5908] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.39: corrupted inode contents [ 78.882948][ T5908] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.883963][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 78.883987][ C1] EXT4-fs (loop4): initial error at time 1786062892: ext4_do_update_inode:5801: inode 15 [ 78.884038][ C1] EXT4-fs (loop4): last error at time 1786062892: ext4_do_update_inode:5801: inode 15 [ 78.964820][ T5908] EXT4-fs error (device loop4) in ext4_orphan_del:304: Corrupt filesystem [ 78.966535][ T5908] loop4: lost filesystem error report for type 5 error -117 [ 78.971563][ T5908] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.39: corrupted inode contents [ 78.971594][ T5908] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.972452][ T5908] EXT4-fs error (device loop4): ext4_evict_inode:315: inode #15: comm syz.4.39: mark_inode_dirty error [ 78.972477][ T5908] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.974313][ T5908] EXT4-fs (loop4): 1 orphan inode deleted [ 78.977478][ T5908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.130053][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.558042][ T5924] loop0: detected capacity change from 0 to 2048 [ 79.581511][ T5924] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.650003][ T5930] fuse: Unknown parameter 'use00000000000000000000' [ 79.782088][ T5932] loop4: detected capacity change from 0 to 1024 [ 79.995643][ T5932] hfsplus: keylen 65060 too large [ 79.995680][ T5932] hfsplus: xattr search failed [ 80.007382][ T5932] hfsplus: keylen 65060 too large [ 80.007406][ T5932] hfsplus: xattr search failed [ 80.427057][ T5947] loop0: detected capacity change from 0 to 40427 [ 80.437225][ T5947] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 80.437253][ T5947] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 80.561617][ T5947] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 80.578060][ T5947] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 80.578232][ T5947] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 80.636100][ T31] audit: type=1804 audit(1786062894.369:2): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.50" name="/newroot/10/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 80.666967][ T5947] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 80.696937][ T5947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.50'. [ 80.976104][ T5969] loop5: detected capacity change from 0 to 7 [ 81.015996][ T5969] Dev loop5: unable to read RDB block 7 [ 81.016045][ T5969] loop5: AHDI p1 p3 p4 [ 81.016429][ T5969] loop5: partition table partially beyond EOD, truncated [ 81.016634][ T5969] loop5: p1 size 100663296 extends beyond EOD, truncated [ 81.058508][ T5969] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 81.084424][ T13] kworker/u8:1: attempt to access beyond end of device [ 81.084424][ T13] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 81.256599][ T5976] Dev loop5: unable to read RDB block 7 [ 81.256659][ T5976] loop5: AHDI p1 p3 p4 [ 81.256678][ T5976] loop5: partition table partially beyond EOD, truncated [ 81.259640][ T5976] loop5: p1 size 100663296 extends beyond EOD, truncated [ 81.280447][ T5976] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 81.358585][ T5630] udevd[5630]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 81.519618][ T5625] udevd[5625]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 81.524492][ T5630] udevd[5630]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 81.843583][ T5991] fuse: Unknown parameter 'use00000000000000000000' [ 82.430713][ T5997] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 83.554716][ T6028] netlink: 40 bytes leftover after parsing attributes in process `syz.1.71'. [ 83.588636][ T6028] netlink: 32 bytes leftover after parsing attributes in process `syz.1.71'. [ 84.160796][ T6035] netlink: 236 bytes leftover after parsing attributes in process `syz.2.77'. [ 84.161152][ T6035] unsupported nlmsg_type 40 [ 84.515461][ T5728] libceph: connect (1)[c::]:6789 error -101 [ 84.516502][ T5728] libceph: mon0 (1)[c::]:6789 connect error [ 84.531616][ T6036] ceph: No mds server is up or the cluster is laggy [ 85.223076][ T6059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.223537][ T6059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.603165][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 85.688750][ T6068] netlink: 236 bytes leftover after parsing attributes in process `syz.1.88'. [ 86.307265][ T6071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.89'. [ 86.339685][ T6071] netlink: 32 bytes leftover after parsing attributes in process `syz.2.89'. [ 86.719944][ T6083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.720357][ T6083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.740533][ T25] cfg80211: failed to load regulatory.db [ 87.080795][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 88.044270][ T5721] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.076582][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 88.096540][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 88.101202][ T6117] netlink: 244 bytes leftover after parsing attributes in process `syz.3.106'. [ 88.114907][ T6109] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 88.215856][ T5721] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 88.223102][ T5721] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 88.223135][ T5721] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 88.223170][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.264162][ T6103] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 88.345782][ T6124] FAULT_INJECTION: forcing a failure. [ 88.345782][ T6124] name fail_futex, interval 1, probability 0, space 0, times 1 [ 88.361696][ T6124] CPU: 1 UID: 0 PID: 6124 Comm: syz.2.109 Not tainted syzkaller #0 PREEMPT(full) [ 88.361726][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.361745][ T6124] Call Trace: [ 88.361758][ T6124] [ 88.361767][ T6124] dump_stack_lvl+0xe8/0x150 [ 88.361805][ T6124] should_fail_ex+0x40c/0x560 [ 88.361842][ T6124] get_futex_key+0x1b4/0x1580 [ 88.361870][ T6124] ? __pfx_get_futex_key+0x10/0x10 [ 88.361894][ T6124] ? lock_acquire+0x115/0x350 [ 88.361933][ T6124] futex_wait_setup+0x4a/0x590 [ 88.361966][ T6124] ? __futex_wait+0xdf/0x400 [ 88.361998][ T6124] __futex_wait+0x15f/0x400 [ 88.362030][ T6124] ? __pfx___futex_wait+0x10/0x10 [ 88.362056][ T6124] ? __pfx_futex_wake_mark+0x10/0x10 [ 88.362074][ T6124] ? futex_hash+0x4e/0x2b0 [ 88.362085][ T6124] ? futex_hash+0x4e/0x2b0 [ 88.362095][ T6124] ? futex_hash+0x275/0x2b0 [ 88.362108][ T6124] futex_wait+0x121/0x390 [ 88.362126][ T6124] ? __pfx_futex_wait+0x10/0x10 [ 88.362167][ T6124] do_futex+0x3e7/0x4e0 [ 88.362195][ T6124] ? __pfx_do_futex+0x10/0x10 [ 88.362207][ T6124] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 88.362224][ T6124] __se_sys_futex+0x3a8/0x450 [ 88.362238][ T6124] ? ksys_write+0x242/0x270 [ 88.362249][ T6124] ? __pfx___se_sys_futex+0x10/0x10 [ 88.362262][ T6124] ? __pfx_ksys_write+0x10/0x10 [ 88.362276][ T6124] ? __x64_sys_futex+0x21/0xf0 [ 88.362290][ T6124] do_syscall_64+0x166/0x510 [ 88.362302][ T6124] ? trace_irq_disable+0x3b/0x140 [ 88.362312][ T6124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.362323][ T6124] ? clear_bhb_loop+0x40/0x90 [ 88.362335][ T6124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.362346][ T6124] RIP: 0033:0x7f56d1d9e0d9 [ 88.362369][ T6124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.362378][ T6124] RSP: 002b:00007f56d2d430e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 88.362391][ T6124] RAX: ffffffffffffffda RBX: 00007f56d2025fa8 RCX: 00007f56d1d9e0d9 [ 88.362399][ T6124] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f56d2025fa8 [ 88.362406][ T6124] RBP: 00007f56d2025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 88.362413][ T6124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.362419][ T6124] R13: 00007f56d2026038 R14: 00007ffe49de1690 R15: 00007ffe49de1778 [ 88.362435][ T6124] [ 88.404912][ T5721] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 89.934852][ T6127] IPv6: NLM_F_CREATE should be specified when creating new route [ 89.935151][ T6127] IPv6: Can't replace route, no match found [ 89.965064][ T6127] mmap: syz.4.110 (6127) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.209122][ T6141] kAFS: bad VL server IP address [ 90.258477][ T5721] usb 2-1: USB disconnect, device number 2 [ 91.572804][ T6159] loop2: detected capacity change from 0 to 512 [ 91.613112][ T6159] EXT4-fs (loop2): Test dummy encryption mode enabled [ 91.617088][ T6159] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.617103][ T6159] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.656407][ T6159] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.120: bad orphan inode 131083 [ 91.656457][ T6159] loop2: lost filesystem error report for type 5 error -117 [ 91.672413][ T6159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.738909][ T5721] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.800735][ T5622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.906759][ T5721] usb 2-1: Using ep0 maxpacket: 8 [ 91.913569][ T5721] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 91.915226][ T5721] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 91.915250][ T5721] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 91.915269][ T5721] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 91.915288][ T5721] usb 2-1: config 250 has no interface number 0 [ 91.915328][ T5721] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 91.915352][ T5721] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 91.915375][ T5721] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 91.915395][ T5721] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 91.915416][ T5721] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 91.915442][ T5721] usb 2-1: config 250 interface 228 has no altsetting 0 [ 91.922108][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 91.922134][ T5721] usb 2-1: Product: syz [ 91.922148][ T5721] usb 2-1: SerialNumber: syz [ 92.005529][ T5721] hub 2-1:250.228: bad descriptor, ignoring hub [ 92.005556][ T5721] hub 2-1:250.228: probe with driver hub failed with error -5 [ 92.222062][ T5721] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 92.274285][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.213849][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 93.227648][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.227718][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 93.227756][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 93.227782][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.227826][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.767919][ T6155] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 94.147478][ T10] gud 3-1:1.0: Failed to get connectors (error=-5) [ 94.147531][ T10] gud 3-1:1.0: probe with driver gud failed with error -5 [ 94.356999][ T10] usb 3-1: USB disconnect, device number 2 [ 94.534292][ T5349] usb 2-1: USB disconnect, device number 3 [ 94.557056][ T5349] usblp0: removed [ 94.816675][ T6200] loop0: detected capacity change from 0 to 32768 [ 94.854420][ T6200] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 94.871587][ T6200] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 94.883378][ T5349] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.065921][ T5349] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 95.077453][ T5349] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.077498][ T5349] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 95.077536][ T5349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.099378][ T6200] XFS (loop0): Ending clean mount [ 95.119997][ T6216] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.141265][ T6200] XFS (loop0): Quotacheck needed: Please wait. [ 95.149479][ T5349] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 96.233195][ T6200] XFS (loop0): Quotacheck: Done. [ 96.365364][ T6200] 9pnet_virtio: no channels available for device syz [ 96.674139][ T6245] raw_sendmsg: syz.2.135 forgot to set AF_INET. Fix it! [ 96.795266][ T5614] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.947827][ T5728] usb 5-1: USB disconnect, device number 2 [ 97.270589][ T10] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 97.526075][ T6258] fido_id[6258]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 97.548639][ T6262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.549071][ T6262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.731046][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 99.880486][ T6295] tipc: Started in network mode [ 99.880529][ T6295] tipc: Node identity ae010407af, cluster identity 4711 [ 99.887629][ T6295] tipc: Enabled bearer , priority 10 [ 99.946494][ T6295] netlink: 40 bytes leftover after parsing attributes in process `syz.1.154'. [ 99.946551][ T6295] netlink: 32 bytes leftover after parsing attributes in process `syz.1.154'. [ 99.949151][ T6297] netlink: 17780 bytes leftover after parsing attributes in process `syz.2.151'. [ 100.054098][ T5728] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.207113][ T5728] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.208390][ T5728] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.208420][ T5728] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.208455][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.223198][ T6293] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.242163][ T5728] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.244006][ T5616] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.386655][ T5616] usb 5-1: Using ep0 maxpacket: 32 [ 100.389641][ T5616] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 100.402850][ T5616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.402887][ T5616] usb 5-1: Product: syz [ 100.402930][ T5616] usb 5-1: Manufacturer: syz [ 100.402943][ T5616] usb 5-1: SerialNumber: syz [ 100.415937][ T5616] usb 5-1: config 0 descriptor?? [ 100.432219][ T5616] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 100.432573][ T5616] dvb-usb: bulk message failed: -22 (4/0) [ 100.432589][ T5616] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 100.432704][ T5616] dvb-usb: bulk message failed: -22 (5/0) [ 100.432716][ T5616] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 100.482296][ T5616] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.489652][ T5616] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 100.489704][ T5616] usb 5-1: media controller created [ 100.727558][ T5616] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.797357][ T6309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.798400][ T6309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.885237][ T5728] tipc: Node number set to 16843783 [ 100.996410][ T5616] usb 5-1: selecting invalid altsetting 3 [ 100.996457][ T5616] ttusb2: set interface to alts=3 failed [ 101.092125][ T5714] usb 4-1: USB disconnect, device number 2 [ 101.193547][ T5616] DVB: Unable to find symbol tda10086_attach() [ 101.193575][ T5616] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 101.197112][ T5616] dvb-usb: bulk message failed: -22 (4/0) [ 101.197131][ T5616] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 101.197246][ T5616] dvb-usb: bulk message failed: -22 (5/0) [ 101.197258][ T5616] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 101.197320][ T5616] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 101.669244][ T5616] usb 5-1: USB disconnect, device number 3 [ 101.858048][ T5616] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 102.180504][ T6331] tipc: Enabling of bearer rejected, already enabled [ 102.893498][ T6331] netlink: 40 bytes leftover after parsing attributes in process `syz.1.167'. [ 102.893621][ T6331] netlink: 32 bytes leftover after parsing attributes in process `syz.1.167'. [ 104.006786][ T6348] loop2: detected capacity change from 0 to 40427 [ 104.035085][ T6348] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 104.035130][ T6348] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 104.106483][ T6348] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 104.122098][ T6348] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 104.122125][ T6348] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 104.154852][ T31] audit: type=1804 audit(1786062917.909:3): pid=6345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.171" name="/newroot/38/bus/bus" dev="loop2" ino=10 res=1 errno=0 [ 104.215328][ T6348] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 104.236243][ T6348] netlink: 20 bytes leftover after parsing attributes in process `syz.2.171'. [ 105.312284][ T1138] kworker/u8:7: attempt to access beyond end of device [ 105.312284][ T1138] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 105.373447][ T6355] printk: console [ttyS0] disabled syzkaller syzkaller login: [ 952.113047][T23645] printk: console [ttyS0] enabled [ 952.118781][ T5706] usb 8-1: Using ep0 maxpacket: 8 [ 952.124743][ T5706] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 952.135520][ T5706] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 952.135570][ T5706] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 952.135588][ T5706] usb 8-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 952.135604][ T5706] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 952.135620][ T5706] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 952.135634][ T5706] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 952.135656][ T5706] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.370650][ T5706] usb 8-1: usb_control_msg returned -32 [ 952.370681][ T5706] usbtmc 8-1:16.0: can't read capabilities [ 952.389740][T23650] random: crng reseeded on system resumption [ 952.405975][ T5706] usb 8-1: USB disconnect, device number 21 [ 952.422057][T23650] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 952.433975][T23650] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 952.442105][T23650] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 952.442120][T23650] PM: hibernation: Basic memory bitmaps created [ 952.489177][T23649] PM: hibernation: Basic memory bitmaps freed [ 952.783676][T11964] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 953.286831][T11964] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 953.298514][T11964] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 953.298545][T11964] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 953.298569][T11964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.336281][T11964] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 953.349461][T11964] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 953.824532][T22888] Bluetooth: hci1: command 0x1003 tx timeout [ 953.824572][T14277] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 954.275174][T23663] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 954.335084][T23655] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 954.342257][T23655] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 954.349901][T23655] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 954.417907][T23655] SPCP8x5 ttyUSB0: Set UART format 0xb failed (error = -32) [ 954.473319][T23624] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpr! [ 954.485564][T23679] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpr" [ 954.664150][T23696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5839'. [ 954.704201][T11964] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 954.853558][T11964] usb 9-1: Using ep0 maxpacket: 8 [ 954.859540][T11964] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 954.869405][T11964] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 954.869426][T11964] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 954.869453][T11964] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 954.899985][T11964] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.900018][T11964] usb 9-1: Product: syz [ 954.900057][T11964] usb 9-1: Manufacturer: syz [ 954.900067][T11964] usb 9-1: SerialNumber: syz [ 955.187183][ T31] audit: type=1804 audit(1786063768.949:328): pid=23712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.5847" name="file1" dev="ramfs" ino=105501 res=1 errno=0 [ 955.516323][ T5706] usb 5-1: USB disconnect, device number 118 [ 955.524107][ T5706] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 955.533107][ T5706] spcp8x5 5-1:1.0: device disconnected [ 956.437539][T11964] usb 9-1: 1:1: cannot get freq (v2/v3): err -71 [ 956.444291][T11964] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 956.550423][T11964] usb 9-1: USB disconnect, device number 5 [ 956.568598][T13163] udevd[13163]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 956.683600][ T5706] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 956.769598][T23746] gadgetfs: bound to dummy_udc driver [ 956.783648][T20695] Bluetooth: hci1: command 0x1003 tx timeout [ 956.789690][T14277] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 956.833644][ T5706] usb 5-1: Using ep0 maxpacket: 8 [ 956.838982][ T5706] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 956.849634][ T5706] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 956.849661][ T5706] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 956.849679][ T5706] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 956.849695][ T5706] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 956.849709][ T5706] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 956.849724][ T5706] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 956.849750][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.099957][ T5706] usb 5-1: GET_CAPABILITIES returned 0 [ 957.099987][ T5706] usbtmc 5-1:16.0: can't read capabilities [ 957.936850][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 957.936877][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 957.936895][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 957.936912][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 957.936929][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 957.936946][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 957.936962][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 957.936979][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 957.936996][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 957.937012][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 957.937028][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 957.937044][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 957.946216][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 957.946236][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 957.946251][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 957.946266][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.154851][T23732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.154986][T23732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.623563][T22888] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 958.860521][ T5706] usb 5-1: USB disconnect, device number 119 [ 959.847112][ T31] audit: type=1804 audit(1786063773.609:329): pid=23775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.5874" name="file1" dev="ramfs" ino=105842 res=1 errno=0 [ 959.964874][T23789] gadgetfs: bound to dummy_udc driver [ 959.974220][T23791] loop8: detected capacity change from 0 to 128 [ 960.002385][T23791] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 960.093234][T22660] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 962.571803][T23826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5893'. [ 962.759326][T14277] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 962.868268][T23843] netlink: 774 bytes leftover after parsing attributes in process `syz.7.5900'. [ 962.879446][T23843] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5900'. [ 962.907943][T23843] netlink: 512 bytes leftover after parsing attributes in process `syz.7.5900'. [ 962.953849][T14307] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 963.298826][T14307] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 963.772249][T14307] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 963.772275][T14307] usb 5-1: Product: syz [ 963.772290][T14307] usb 5-1: Manufacturer: syz [ 963.772300][T14307] usb 5-1: SerialNumber: syz [ 963.798303][T14307] usb 5-1: config 0 descriptor?? [ 964.652942][T11964] usb 5-1: USB disconnect, device number 120 [ 964.706772][T23862] gadgetfs: bound to dummy_udc driver [ 964.788251][T23864] Driver unsupported XDP return value 0 on prog (id 161) dev N/A, expect packet loss! [ 965.053584][T14307] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 965.204010][T14307] usb 8-1: Using ep0 maxpacket: 8 [ 965.210340][T14307] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 965.221789][T14307] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 965.231607][T14307] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 965.231623][T14307] usb 8-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 965.231636][T14307] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 965.231650][T14307] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 965.231661][T14307] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 965.231686][T14307] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.519670][T14307] usb 8-1: GET_CAPABILITIES returned 0 [ 965.519701][T14307] usbtmc 8-1:16.0: can't read capabilities [ 965.903650][T20695] Bluetooth: hci1: command 0x1003 tx timeout [ 965.909748][T14277] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 966.367597][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 966.367624][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 966.367641][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 966.367658][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 966.367674][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 966.367691][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 966.367707][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 966.367723][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 966.367740][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 966.376990][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 966.377010][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 966.377026][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 966.377041][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 966.377056][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 966.377071][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 966.377086][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 967.047084][T14277] Bluetooth: hci6: command 0x1003 tx timeout [ 967.047123][T22888] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 967.083354][T23866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.094257][T23866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.107301][ T5706] usb 8-1: USB disconnect, device number 22 [ 967.198171][T23887] loop8: detected capacity change from 0 to 128 [ 967.216647][T23887] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 967.279701][T22660] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 970.051743][T23931] bridge0: entered allmulticast mode [ 970.074826][T14307] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 970.234409][ T5706] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 970.243055][T14307] usb 8-1: Using ep0 maxpacket: 16 [ 970.249781][T14307] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 970.260149][T14307] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 970.260169][T14307] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 970.281465][T14307] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 970.281480][T14307] usb 8-1: SerialNumber: syz [ 970.300298][T14307] usb 8-1: 0:2 : does not exist [ 970.404269][ T5706] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 970.414321][ T5706] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 970.424783][ T5706] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 970.424809][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.443149][ T5706] usb 5-1: config 0 descriptor?? [ 970.463743][T22888] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 970.510825][T23946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5943'. [ 970.594140][T22065] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 970.605234][T23950] syzkaller0: entered promiscuous mode [ 970.610772][T23950] syzkaller0: entered allmulticast mode [ 970.709130][T14307] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5) [ 970.718038][T14307] usb 8-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 970.718063][T14307] usb 8-1: [5] FU [Ё Playback Volume] ch = 2, val = 0/1/1 [ 970.740391][T14307] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5) [ 970.740414][T14307] usb 8-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 970.740430][T14307] usb 8-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/1/1 [ 970.758631][T22065] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 970.780709][T22065] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.780731][T22065] usb 9-1: Product: syz [ 970.780767][T22065] usb 9-1: Manufacturer: syz [ 970.780777][T22065] usb 9-1: SerialNumber: syz [ 970.800001][T22065] usb 9-1: config 0 descriptor?? [ 970.812423][T22065] ch341 9-1:0.0: ch341-uart converter detected [ 970.819164][T14307] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 970.831995][T14307] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 970.852471][T14307] usb 8-1: 5:0: cannot get min/max values for control 8 (id 5) [ 970.865401][T14307] usb 8-1: 5:0: cannot get min/max values for control 8 (id 5) [ 970.874462][ T5706] usb 5-1: Direct firmware load for ar3k/AthrBT_0x0b6b634a.dfu failed with error -2 [ 970.874490][ T5706] usb 5-1: Falling back to sysfs fallback for: ar3k/AthrBT_0x0b6b634a.dfu [ 970.902454][T14307] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 970.927348][T14307] usb 8-1: USB disconnect, device number 23 [ 970.961496][T13165] udevd[13165]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 972.700783][T23967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5954'. [ 972.834641][T23972] netlink: 774 bytes leftover after parsing attributes in process `syz.4.5956'. [ 972.834679][T23972] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5956'. [ 972.886983][T23972] netlink: 512 bytes leftover after parsing attributes in process `syz.4.5956'. [ 973.071161][T22065] ch341-uart ttyUSB0: break control not supported, using simulated break [ 973.081764][T22065] usb 9-1: ch341-uart converter now attached to ttyUSB0 [ 973.095332][T22065] usb 9-1: USB disconnect, device number 6 [ 973.106346][T22065] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 973.118977][T22065] ch341 9-1:0.0: device disconnected [ 973.414935][T23986] comedi comedi3: pcl818: I/O base address or length out of range [ 974.164565][T23995] hub 8-0:1.0: USB hub found [ 974.165252][T23995] hub 8-0:1.0: 1 port detected [ 974.873174][ T5714] libceph: connect (1)[c::]:6789 error -101 [ 974.873241][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 974.900601][T23994] ceph: No mds server is up or the cluster is laggy [ 975.106631][T22888] Bluetooth: hci1: command 0x1003 tx timeout [ 975.112712][T14277] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 975.146546][T24010] gadgetfs: bound to dummy_udc driver [ 975.917371][T24014] gadgetfs: bound to dummy_udc driver [ 975.971718][T24013] sctp_transport_update_pmtu: 46 callbacks suppressed [ 975.971746][T24013] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 975.971993][T24013] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 975.972236][T24013] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 975.972474][T24013] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 975.973298][T24013] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 975.977644][T24013] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 975.977880][T24013] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 975.978155][T24013] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 975.978386][T24013] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 975.978629][T24013] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 976.168138][T24012] gadgetfs: suspended from state 2 [ 976.193737][T22065] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 976.681348][T24048] gadgetfs: bound to dummy_udc driver [ 976.704955][T14307] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 976.807613][T24052] gadgetfs: bound to dummy_udc driver [ 976.865509][T14307] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 976.875167][T14307] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 976.875192][T14307] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 976.875216][T14307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.908213][T24033] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 976.921907][T14307] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 976.946631][T24056] loop0: detected capacity change from 0 to 512 [ 976.961037][T24056] EXT4-fs (loop0): fragment/cluster size (4096) != block size (1024) [ 977.313938][T14307] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 977.329007][T22065] usb 7-1: USB disconnect, device number 7 [ 977.464288][T24074] loop4: detected capacity change from 0 to 4096 [ 977.472370][T14307] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 977.487933][T14307] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 977.487955][T14307] usb 9-1: Product: syz [ 977.487977][T14307] usb 9-1: Manufacturer: syz [ 977.487986][T14307] usb 9-1: SerialNumber: syz [ 977.516447][T14307] usb 9-1: config 0 descriptor?? [ 977.531332][T24074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 977.578700][T24078] loop7: detected capacity change from 0 to 512 [ 977.627112][T24078] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 977.641576][T24078] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 977.739192][T24078] EXT4-fs error (device loop7): ext4_readdir:280: inode #2: block 3: comm syz.7.5994: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 977.764938][T14307] usb 9-1: USB disconnect, device number 7 [ 977.820485][T21887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.917691][T24084] gadgetfs: bound to dummy_udc driver [ 978.852869][T14307] libceph: connect (1)[c::]:6789 error -101 [ 978.852942][T14307] libceph: mon0 (1)[c::]:6789 connect error [ 978.876614][T24096] ceph: No mds server is up or the cluster is laggy [ 978.968184][T24102] bridge0: entered allmulticast mode [ 979.107273][T14957] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.293597][T14307] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 979.443796][T14307] usb 8-1: Using ep0 maxpacket: 8 [ 979.449395][T14307] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 979.459431][T14307] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 979.459457][T14307] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 979.459485][T14307] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 979.459499][T14307] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 979.459513][T14307] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 979.459534][T14307] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.527414][T14307] usbtmc 8-1:16.0: bulk endpoints not found [ 979.815993][T24118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6007'. [ 980.836330][T14307] libceph: connect (1)[c::]:6789 error -101 [ 980.836405][T14307] libceph: mon0 (1)[c::]:6789 connect error [ 980.864629][T24143] ceph: No mds server is up or the cluster is laggy [ 981.649299][T24151] bridge0: entered allmulticast mode [ 981.855272][T24166] gadgetfs: bound to dummy_udc driver [ 982.073206][T14307] usb 8-1: USB disconnect, device number 24 [ 983.047970][T24200] gadgetfs: bound to dummy_udc driver [ 983.250097][T24217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.260610][T24217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.279340][T24215] syzkaller0: entered promiscuous mode [ 983.279368][T24215] syzkaller0: entered allmulticast mode [ 983.323752][T24217] syzkaller1: entered promiscuous mode [ 983.323775][T24217] syzkaller1: entered allmulticast mode [ 983.339397][T24219] bridge0: entered allmulticast mode [ 983.348302][ T31] audit: type=1804 audit(1786063797.109:330): pid=24196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.6036" name="file1" dev="ramfs" ino=108025 res=1 errno=0 [ 984.075153][T24221] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 984.179023][T24226] netlink: 830 bytes leftover after parsing attributes in process `syz.6.6046'. [ 984.199529][T24229] loop8: detected capacity change from 0 to 512 [ 984.217434][T24229] ext2: Unknown parameter 'obj_type' [ 984.229389][T24226] netlink: 512 bytes leftover after parsing attributes in process `syz.6.6046'. [ 984.985897][T24233] Bluetooth: MGMT ver 1.23 [ 984.990942][T22888] Bluetooth: hci4: command 0x0406 tx timeout [ 985.330501][T24251] gadgetfs: bound to dummy_udc driver [ 985.458429][T24259] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 985.494178][T24259] md: could not open device unknown-block(1,0). [ 985.513730][T24259] md: could not open device unknown-block(1,3). [ 985.582268][T24259] md/raid:md0: not clean -- starting background reconstruction [ 985.590178][T24259] raid456: run(md0) called. [ 985.595694][T24259] md/raid:md0: device ram3 operational as raid disk 3 [ 985.595714][T24259] md/raid:md0: device ram2 operational as raid disk 2 [ 985.637236][T24259] md/raid:md0: allocated 4318kB [ 985.644945][T24259] md/raid:md0: not enough operational devices (2/4 failed) [ 985.654641][T24259] RAID conf printout: [ 985.654657][T24259] --- level:5 rd:4 wd:2 [ 985.654671][T24259] disk 2, o:1, dev:ram2 [ 985.654682][T24259] disk 3, o:1, dev:ram3 [ 985.654698][T24259] remove_hash(), stripe 0 [ 985.654735][T24259] remove_hash(), stripe 0 [ 985.654767][T24259] remove_hash(), stripe 0 [ 985.654799][T24259] remove_hash(), stripe 0 [ 985.654829][T24259] remove_hash(), stripe 0 [ 985.654862][T24259] remove_hash(), stripe 0 [ 985.654894][T24259] remove_hash(), stripe 0 [ 985.654926][T24259] remove_hash(), stripe 0 [ 985.654957][T24259] remove_hash(), stripe 0 [ 985.654989][T24259] remove_hash(), stripe 0 [ 985.655030][T24259] remove_hash(), stripe 0 [ 985.655061][T24259] remove_hash(), stripe 0 [ 985.655093][T24259] remove_hash(), stripe 0 [ 985.655125][T24259] remove_hash(), stripe 0 [ 985.655156][T24259] remove_hash(), stripe 0 [ 985.655189][T24259] remove_hash(), stripe 0 [ 985.655221][T24259] remove_hash(), stripe 0 [ 985.655252][T24259] remove_hash(), stripe 0 [ 985.655282][T24259] remove_hash(), stripe 0 [ 985.655320][T24259] remove_hash(), stripe 0 [ 985.655352][T24259] remove_hash(), stripe 0 [ 985.655383][T24259] remove_hash(), stripe 0 [ 985.655415][T24259] remove_hash(), stripe 0 [ 985.655446][T24259] remove_hash(), stripe 0 [ 985.655476][T24259] remove_hash(), stripe 0 [ 985.655509][T24259] remove_hash(), stripe 0 [ 985.655539][T24259] remove_hash(), stripe 0 [ 985.655587][T24259] remove_hash(), stripe 0 [ 985.655620][T24259] remove_hash(), stripe 0 [ 985.655653][T24259] remove_hash(), stripe 0 [ 985.655687][T24259] remove_hash(), stripe 0 [ 985.655721][T24259] remove_hash(), stripe 0 [ 985.655751][T24259] remove_hash(), stripe 0 [ 985.655783][T24259] remove_hash(), stripe 0 [ 985.655820][T24259] remove_hash(), stripe 0 [ 985.655850][T24259] remove_hash(), stripe 0 [ 985.655881][T24259] remove_hash(), stripe 0 [ 985.655914][T24259] remove_hash(), stripe 0 [ 985.655944][T24259] remove_hash(), stripe 0 [ 985.655980][T24259] remove_hash(), stripe 0 [ 985.656011][T24259] remove_hash(), stripe 0 [ 985.656043][T24259] remove_hash(), stripe 0 [ 985.656075][T24259] remove_hash(), stripe 0 [ 985.656106][T24259] remove_hash(), stripe 0 [ 985.891810][T24259] remove_hash(), stripe 0 [ 985.891860][T24259] remove_hash(), stripe 0 [ 985.891893][T24259] remove_hash(), stripe 0 [ 985.891927][T24259] remove_hash(), stripe 0 [ 985.891958][T24259] remove_hash(), stripe 0 [ 985.891991][T24259] remove_hash(), stripe 0 [ 985.892022][T24259] remove_hash(), stripe 0 [ 985.892053][T24259] remove_hash(), stripe 0 [ 985.892084][T24259] remove_hash(), stripe 0 [ 985.892117][T24259] remove_hash(), stripe 0 [ 985.892152][T24259] remove_hash(), stripe 0 [ 985.892183][T24259] remove_hash(), stripe 0 [ 985.892216][T24259] remove_hash(), stripe 0 [ 985.892248][T24259] remove_hash(), stripe 0 [ 985.892286][T24259] remove_hash(), stripe 0 [ 985.892319][T24259] remove_hash(), stripe 0 [ 985.892350][T24259] remove_hash(), stripe 0 [ 985.892385][T24259] remove_hash(), stripe 0 [ 985.892416][T24259] remove_hash(), stripe 0 [ 985.892448][T24259] remove_hash(), stripe 0 [ 985.892481][T24259] remove_hash(), stripe 0 [ 985.892513][T24259] remove_hash(), stripe 0 [ 985.892545][T24259] remove_hash(), stripe 0 [ 985.892584][T24259] remove_hash(), stripe 0 [ 985.892615][T24259] remove_hash(), stripe 0 [ 985.892646][T24259] remove_hash(), stripe 0 [ 985.892678][T24259] remove_hash(), stripe 0 [ 985.892709][T24259] remove_hash(), stripe 0 [ 985.892742][T24259] remove_hash(), stripe 0 [ 985.892787][T24259] remove_hash(), stripe 0 [ 985.892830][T24259] remove_hash(), stripe 0 [ 985.892862][T24259] remove_hash(), stripe 0 [ 985.892894][T24259] remove_hash(), stripe 0 [ 985.892925][T24259] remove_hash(), stripe 0 [ 985.892956][T24259] remove_hash(), stripe 0 [ 985.892987][T24259] remove_hash(), stripe 0 [ 985.893018][T24259] remove_hash(), stripe 0 [ 985.893051][T24259] remove_hash(), stripe 0 [ 985.893082][T24259] remove_hash(), stripe 0 [ 985.893114][T24259] remove_hash(), stripe 0 [ 985.893144][T24259] remove_hash(), stripe 0 [ 985.893175][T24259] remove_hash(), stripe 0 [ 986.034590][T24259] remove_hash(), stripe 0 [ 986.034631][T24259] remove_hash(), stripe 0 [ 986.034664][T24259] remove_hash(), stripe 0 [ 986.034695][T24259] remove_hash(), stripe 0 [ 986.034724][T24259] remove_hash(), stripe 0 [ 986.034754][T24259] remove_hash(), stripe 0 [ 986.034785][T24259] remove_hash(), stripe 0 [ 986.034817][T24259] remove_hash(), stripe 0 [ 986.034849][T24259] remove_hash(), stripe 0 [ 986.034880][T24259] remove_hash(), stripe 0 [ 986.034909][T24259] remove_hash(), stripe 0 [ 986.034940][T24259] remove_hash(), stripe 0 [ 986.034970][T24259] remove_hash(), stripe 0 [ 986.034999][T24259] remove_hash(), stripe 0 [ 986.035029][T24259] remove_hash(), stripe 0 [ 986.035059][T24259] remove_hash(), stripe 0 [ 986.035092][T24259] remove_hash(), stripe 0 [ 986.035122][T24259] remove_hash(), stripe 0 [ 986.035151][T24259] remove_hash(), stripe 0 [ 986.035181][T24259] remove_hash(), stripe 0 [ 986.035210][T24259] remove_hash(), stripe 0 [ 986.035241][T24259] remove_hash(), stripe 0 [ 986.035279][T24259] remove_hash(), stripe 0 [ 986.035310][T24259] remove_hash(), stripe 0 [ 986.035339][T24259] remove_hash(), stripe 0 [ 986.035370][T24259] remove_hash(), stripe 0 [ 986.035402][T24259] remove_hash(), stripe 0 [ 986.035432][T24259] remove_hash(), stripe 0 [ 986.035464][T24259] remove_hash(), stripe 0 [ 986.035504][T24259] remove_hash(), stripe 0 [ 986.035536][T24259] remove_hash(), stripe 0 [ 986.175557][T24259] remove_hash(), stripe 0 [ 986.175596][T24259] remove_hash(), stripe 0 [ 986.175629][T24259] remove_hash(), stripe 0 [ 986.175660][T24259] remove_hash(), stripe 0 [ 986.175690][T24259] remove_hash(), stripe 0 [ 986.175721][T24259] remove_hash(), stripe 0 [ 986.175754][T24259] remove_hash(), stripe 0 [ 986.175787][T24259] remove_hash(), stripe 0 [ 986.175818][T24259] remove_hash(), stripe 0 [ 986.175848][T24259] remove_hash(), stripe 0 [ 986.175877][T24259] remove_hash(), stripe 0 [ 986.175911][T24259] remove_hash(), stripe 0 [ 986.219523][T24259] remove_hash(), stripe 0 [ 986.219562][T24259] remove_hash(), stripe 0 [ 986.219596][T24259] remove_hash(), stripe 0 [ 986.219626][T24259] remove_hash(), stripe 0 [ 986.219657][T24259] remove_hash(), stripe 0 [ 986.219688][T24259] remove_hash(), stripe 0 [ 986.219719][T24259] remove_hash(), stripe 0 [ 986.219748][T24259] remove_hash(), stripe 0 [ 986.219779][T24259] remove_hash(), stripe 0 [ 986.219808][T24259] remove_hash(), stripe 0 [ 986.219840][T24259] remove_hash(), stripe 0 [ 986.219869][T24259] remove_hash(), stripe 0 [ 986.219899][T24259] remove_hash(), stripe 0 [ 986.219930][T24259] remove_hash(), stripe 0 [ 986.219959][T24259] remove_hash(), stripe 0 [ 986.219993][T24259] remove_hash(), stripe 0 [ 986.220023][T24259] remove_hash(), stripe 0 [ 986.220053][T24259] remove_hash(), stripe 0 [ 986.220082][T24259] remove_hash(), stripe 0 [ 986.278891][T24259] remove_hash(), stripe 0 [ 986.278944][T24259] remove_hash(), stripe 0 [ 986.278975][T24259] remove_hash(), stripe 0 [ 986.279006][T24259] remove_hash(), stripe 0 [ 986.279039][T24259] remove_hash(), stripe 0 [ 986.279070][T24259] remove_hash(), stripe 0 [ 986.279099][T24259] remove_hash(), stripe 0 [ 986.279131][T24259] remove_hash(), stripe 0 [ 986.279162][T24259] remove_hash(), stripe 0 [ 986.279192][T24259] remove_hash(), stripe 0 [ 986.279221][T24259] remove_hash(), stripe 0 [ 986.279251][T24259] remove_hash(), stripe 0 [ 986.279280][T24259] remove_hash(), stripe 0 [ 986.279311][T24259] remove_hash(), stripe 0 [ 986.279341][T24259] remove_hash(), stripe 0 [ 986.279373][T24259] remove_hash(), stripe 0 [ 986.279409][T24259] remove_hash(), stripe 0 [ 986.279439][T24259] remove_hash(), stripe 0 [ 986.279468][T24259] remove_hash(), stripe 0 [ 986.279500][T24259] remove_hash(), stripe 0 [ 986.279552][T24259] remove_hash(), stripe 0 [ 986.279583][T24259] remove_hash(), stripe 0 [ 986.279613][T24259] remove_hash(), stripe 0 [ 986.279644][T24259] remove_hash(), stripe 0 [ 986.519884][T24259] remove_hash(), stripe 0 [ 986.519933][T24259] remove_hash(), stripe 0 [ 986.519967][T24259] remove_hash(), stripe 0 [ 986.519999][T24259] remove_hash(), stripe 0 [ 986.520031][T24259] remove_hash(), stripe 0 [ 986.520065][T24259] remove_hash(), stripe 0 [ 986.520096][T24259] remove_hash(), stripe 0 [ 986.520129][T24259] remove_hash(), stripe 0 [ 986.520160][T24259] remove_hash(), stripe 0 [ 986.520192][T24259] remove_hash(), stripe 0 [ 986.520223][T24259] remove_hash(), stripe 0 [ 986.520263][T24259] remove_hash(), stripe 0 [ 986.520294][T24259] remove_hash(), stripe 0 [ 986.520328][T24259] remove_hash(), stripe 0 [ 986.520361][T24259] remove_hash(), stripe 0 [ 986.520394][T24259] remove_hash(), stripe 0 [ 986.520425][T24259] remove_hash(), stripe 0 [ 986.520458][T24259] remove_hash(), stripe 0 [ 986.520489][T24259] remove_hash(), stripe 0 [ 986.520522][T24259] remove_hash(), stripe 0 [ 986.520553][T24259] remove_hash(), stripe 0 [ 986.520586][T24259] remove_hash(), stripe 0 [ 986.520617][T24259] remove_hash(), stripe 0 [ 986.520650][T24259] remove_hash(), stripe 0 [ 986.520682][T24259] remove_hash(), stripe 0 [ 986.520713][T24259] remove_hash(), stripe 0 [ 986.520745][T24259] remove_hash(), stripe 0 [ 986.520775][T24259] remove_hash(), stripe 0 [ 986.520806][T24259] remove_hash(), stripe 0 [ 986.520839][T24259] remove_hash(), stripe 0 [ 986.520871][T24259] remove_hash(), stripe 0 [ 986.520917][T24259] remove_hash(), stripe 0 [ 986.520952][T24259] remove_hash(), stripe 0 [ 986.520983][T24259] remove_hash(), stripe 0 [ 986.521017][T24259] remove_hash(), stripe 0 [ 986.521050][T24259] remove_hash(), stripe 0 [ 986.521084][T24259] remove_hash(), stripe 0 [ 986.521115][T24259] remove_hash(), stripe 0 [ 986.521147][T24259] remove_hash(), stripe 0 [ 986.521181][T24259] remove_hash(), stripe 0 [ 986.521214][T24259] remove_hash(), stripe 0 [ 986.521252][T24259] remove_hash(), stripe 0 [ 986.602234][T24274] loop7: detected capacity change from 0 to 512 [ 986.728853][T24259] remove_hash(), stripe 0 [ 986.728901][T24259] remove_hash(), stripe 0 [ 986.728935][T24259] remove_hash(), stripe 0 [ 986.728969][T24259] remove_hash(), stripe 0 [ 986.729001][T24259] remove_hash(), stripe 0 [ 986.729033][T24259] remove_hash(), stripe 0 [ 986.729065][T24259] remove_hash(), stripe 0 [ 986.729098][T24259] remove_hash(), stripe 0 [ 986.729130][T24259] remove_hash(), stripe 0 [ 986.729163][T24259] remove_hash(), stripe 0 [ 986.729197][T24259] remove_hash(), stripe 0 [ 986.729231][T24259] remove_hash(), stripe 0 [ 986.729271][T24259] remove_hash(), stripe 0 [ 986.729305][T24259] remove_hash(), stripe 0 [ 986.729337][T24259] remove_hash(), stripe 0 [ 986.729371][T24259] remove_hash(), stripe 0 [ 986.729403][T24259] remove_hash(), stripe 0 [ 986.729436][T24259] remove_hash(), stripe 0 [ 986.729468][T24259] remove_hash(), stripe 0 [ 986.729500][T24259] remove_hash(), stripe 0 [ 986.729532][T24259] remove_hash(), stripe 0 [ 986.729566][T24259] remove_hash(), stripe 0 [ 986.729599][T24259] remove_hash(), stripe 0 [ 986.729631][T24259] remove_hash(), stripe 0 [ 986.729664][T24259] remove_hash(), stripe 0 [ 986.729695][T24259] remove_hash(), stripe 0 [ 986.729726][T24259] remove_hash(), stripe 0 [ 986.729758][T24259] remove_hash(), stripe 0 [ 986.729789][T24259] remove_hash(), stripe 0 [ 986.729821][T24259] remove_hash(), stripe 0 [ 986.729853][T24259] remove_hash(), stripe 0 [ 986.729898][T24259] remove_hash(), stripe 0 [ 986.729930][T24259] remove_hash(), stripe 0 [ 986.729963][T24259] remove_hash(), stripe 0 [ 986.729995][T24259] remove_hash(), stripe 0 [ 986.730026][T24259] remove_hash(), stripe 0 [ 986.730058][T24259] remove_hash(), stripe 0 [ 986.730089][T24259] remove_hash(), stripe 0 [ 986.730121][T24259] remove_hash(), stripe 0 [ 986.730152][T24259] remove_hash(), stripe 0 [ 986.730184][T24259] remove_hash(), stripe 0 [ 986.730215][T24259] remove_hash(), stripe 0 [ 986.936509][T24274] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 986.976701][T24274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 986.995851][T24274] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 987.080431][T21887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.370141][T24259] md/raid:md0: failed to run raid set. [ 987.370163][T24259] md: pers->run() failed ... [ 987.802402][T24281] program syz.6.6067 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 987.812302][T24281] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 988.019791][T24293] kAFS: bad VL server IP address [ 988.166195][T22888] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 988.173616][T22888] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 988.182004][T22888] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 988.190914][T22888] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 988.200200][T22888] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 989.108482][ T4581] bridge_slave_1: left allmulticast mode [ 989.108506][ T4581] bridge_slave_1: left promiscuous mode [ 989.108607][ T4581] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.129036][ T4581] bridge_slave_0: left allmulticast mode [ 989.129058][ T4581] bridge_slave_0: left promiscuous mode [ 989.129145][ T4581] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.151003][T24310] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6076'. [ 989.164412][ T4581] bridge0: left allmulticast mode [ 989.259684][ T4581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.271946][ T4581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.284518][ T4581] bond0 (unregistering): Released all slaves [ 989.331492][ T4581] tipc: Disabling bearer [ 989.338254][ T4581] tipc: Left network mode [ 989.474121][ T4581] hsr_slave_0: left promiscuous mode [ 989.481276][ T4581] hsr_slave_1: left promiscuous mode [ 989.481589][ T4581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.500008][ T4581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.060876][T14277] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 990.223642][T22888] Bluetooth: hci6: command tx timeout [ 990.355758][ T4581] team0 (unregistering): Port device team_slave_1 removed [ 990.378341][ T4581] team0 (unregistering): Port device team_slave_0 removed [ 991.579467][ T5278] 8021q: adding VLAN 0 to HW filter on device eth17 [ 992.080609][T24298] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.089964][T24298] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.097344][T24298] bridge_slave_0: entered allmulticast mode [ 992.097854][T24298] bridge_slave_0: entered promiscuous mode [ 992.117151][T24298] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.118738][T24298] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.118906][T24298] bridge_slave_1: entered allmulticast mode [ 992.119374][T24298] bridge_slave_1: entered promiscuous mode [ 992.743479][T22888] Bluetooth: hci6: command tx timeout [ 992.787841][ T5714] libceph: connect (1)[c::]:6789 error -101 [ 992.787919][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 992.794330][T24373] ceph: No mds server is up or the cluster is laggy [ 992.864719][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.864755][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.890547][T24298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.950456][T24298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.013712][T24380] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6088'. [ 993.026477][T24298] team0: Port device team_slave_0 added [ 993.037655][T24298] team0: Port device team_slave_1 added [ 993.088444][T24298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.097188][T24298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.097217][T24298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.126733][T24298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.126744][T24298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.126758][T24298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.254776][T24389] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 993.254802][T24389] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 993.254843][T24389] vhci_hcd vhci_hcd.0: Device attached [ 993.295320][T24298] hsr_slave_0: entered promiscuous mode [ 993.302924][T24298] hsr_slave_1: entered promiscuous mode [ 993.310481][T24298] debugfs: 'hsr0' already exists in 'hsr' [ 993.317537][T24298] Cannot create hsr debugfs directory [ 993.487666][T24390] vhci_hcd: connection closed [ 993.487809][ T1217] vhci_hcd vhci_hcd.6: stop threads [ 993.487831][ T1217] vhci_hcd vhci_hcd.6: release socket [ 993.487853][ T1217] vhci_hcd vhci_hcd.6: disconnect device [ 993.525044][T22065] usb 46-1: enqueue for inactive port 0 [ 993.658852][ T5278] 8021q: adding VLAN 0 to HW filter on device eth18 [ 993.862224][T24298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 993.879250][T24298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 993.888827][T24298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 993.902878][T24298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 993.913829][T24298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 993.929726][T24298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 993.939617][T24298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 993.950307][T24298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 994.025618][T22065] usb usb46-port1: attempt power cycle [ 994.136775][T24298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.169104][T24298] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.193039][ T6503] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.193087][ T6503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.210070][ T6503] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.210125][ T6503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.303483][T24417] netlink: 830 bytes leftover after parsing attributes in process `syz.8.6094'. [ 994.354433][T24417] netlink: 512 bytes leftover after parsing attributes in process `syz.8.6094'. [ 994.595140][T22065] usb usb46-port1: unable to enumerate USB device [ 994.784392][T20695] Bluetooth: hci6: command tx timeout [ 994.829469][T24437] loop6: detected capacity change from 0 to 1024 [ 994.849433][T24437] hfsplus: failed to load extents file [ 995.020725][T24448] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6098'. [ 995.219238][T24298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.343913][T22888] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 995.776194][T24480] netlink: 830 bytes leftover after parsing attributes in process `syz.7.6105'. [ 995.806319][T24480] netlink: 512 bytes leftover after parsing attributes in process `syz.7.6105'. [ 995.828548][T24298] veth0_vlan: entered promiscuous mode [ 995.850661][T24298] veth1_vlan: entered promiscuous mode [ 995.914412][T24298] veth0_macvtap: entered promiscuous mode [ 995.928101][T24298] veth1_macvtap: entered promiscuous mode [ 995.968094][T24298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.986027][T24298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 996.027935][T24490] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6109'. [ 996.050733][T24298] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 996.073870][ T4581] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.084453][ T4581] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.084733][ T4581] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.084762][ T4581] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.158353][T24298] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 996.166307][ T1217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.166319][ T1217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.234778][ T6503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.234801][ T6503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.363028][T22080] libceph: connect (1)[c::]:6789 error -101 [ 996.363099][T22080] libceph: mon0 (1)[c::]:6789 connect error [ 996.596538][T24517] netlink: 830 bytes leftover after parsing attributes in process `syz.7.6119'. [ 996.614150][T14307] libceph: connect (1)[c::]:6789 error -101 [ 996.620753][T14307] libceph: mon0 (1)[c::]:6789 connect error [ 996.629636][T24517] netlink: 512 bytes leftover after parsing attributes in process `syz.7.6119'. [ 996.704779][T22080] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 996.742431][T24522] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6121'. [ 996.863678][T14277] Bluetooth: hci6: command tx timeout [ 996.869210][T22080] usb 9-1: Using ep0 maxpacket: 16 [ 996.875316][T22080] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 996.891621][T22080] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.903352][T22080] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.903378][T22080] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 996.903395][T22080] usb 9-1: config 0 interface 0 has no altsetting 0 [ 996.903415][T22080] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.944267][T22080] usb 9-1: config 0 descriptor?? [ 997.067527][T24496] ceph: No mds server is up or the cluster is laggy [ 997.158981][T24537] loop6: detected capacity change from 0 to 128 [ 997.199125][T24537] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 997.219520][T24537] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 997.390587][T22080] hid (null): usage index exceeded [ 997.581181][T24552] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6133'. [ 997.601606][T14307] usb 9-1: USB disconnect, device number 8 [ 997.630155][T24555] loop4: detected capacity change from 0 to 128 [ 997.651205][T24555] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 997.668013][T24555] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 998.058343][T21839] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 998.497524][T24298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 998.714520][T24596] loop4: detected capacity change from 0 to 16 [ 998.738862][T24596] erofs (device loop4): invalid ishare xattr prefix id 0 [ 999.038953][T24610] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801 [ 999.187416][T14307] libceph: connect (1)[c::]:6789 error -101 [ 999.187496][T14307] libceph: mon0 (1)[c::]:6789 connect error [ 999.262234][T24617] ceph: No mds server is up or the cluster is laggy [ 1000.151274][T24635] __nla_validate_parse: 3 callbacks suppressed [ 1000.151303][T24635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6166'. [ 1000.721224][ T1217] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discove! [ 1000.734885][T24655] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discove" [ 1000.747024][T24659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.755925][T24659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.830620][T24662] coredump: 411(syz.6.6171): Core dump to core aborted: cannot preserve file permissions [ 1000.979370][T24670] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6179'. [ 1001.473555][T14307] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1001.520835][T24687] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1001.520853][T24687] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1001.520892][T24687] vhci_hcd vhci_hcd.0: Device attached [ 1001.624251][T14307] usb 7-1: Using ep0 maxpacket: 8 [ 1001.630048][T14307] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1001.640840][T14307] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1001.640871][T14307] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1001.640889][T14307] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1001.640904][T14307] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1001.640916][T14307] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1001.640938][T14307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.716382][T14307] usbtmc 7-1:16.0: bulk endpoints not found [ 1001.784549][T22065] usb 34-1: SetAddress Request (11) to port 0 [ 1001.784591][T22065] usb 34-1: new SuperSpeed USB device number 11 using vhci_hcd [ 1002.137216][T24708] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6195'. [ 1002.156087][T24708] netlink: 512 bytes leftover after parsing attributes in process `syz.4.6195'. [ 1002.185009][T24688] vhci_hcd: connection reset by peer [ 1002.190799][T23624] vhci_hcd vhci_hcd.0: stop threads [ 1002.190824][T23624] vhci_hcd vhci_hcd.0: release socket [ 1002.190847][T23624] vhci_hcd vhci_hcd.0: disconnect device [ 1003.381732][T24737] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6208'. [ 1003.396191][T24737] netlink: 512 bytes leftover after parsing attributes in process `syz.0.6208'. [ 1004.254545][T14307] usb 7-1: USB disconnect, device number 8 [ 1004.342687][T24755] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6216'. [ 1004.759693][T24773] netlink: 830 bytes leftover after parsing attributes in process `syz.7.6222'. [ 1004.780287][T24773] netlink: 512 bytes leftover after parsing attributes in process `syz.7.6222'. [ 1004.932876][T24784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.949070][T24784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.063093][T24794] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1005.063111][T24794] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1005.082761][T24794] vhci_hcd vhci_hcd.0: Device attached [ 1005.117640][T24796] loop7: detected capacity change from 0 to 2048 [ 1005.124441][T24798] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6228'. [ 1005.175105][T24796] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1005.175161][T24796] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1005.271458][T21887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.343919][T14410] usb 46-1: SetAddress Request (10) to port 0 [ 1005.344307][T14410] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1005.377581][T24795] vhci_hcd: connection reset by peer [ 1005.383190][ T1217] vhci_hcd vhci_hcd.6: stop threads [ 1005.383216][ T1217] vhci_hcd vhci_hcd.6: release socket [ 1005.383238][ T1217] vhci_hcd vhci_hcd.6: disconnect device [ 1005.533987][T11964] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1005.695446][T11964] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1005.706173][T11964] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1005.706199][T11964] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1005.706223][T11964] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.738754][T24805] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1005.758565][T11964] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1005.806120][T24827] loop0: detected capacity change from 0 to 256 [ 1005.815863][T24827] vfat: Bad value for 'fmask' [ 1006.136036][T14307] usb 9-1: USB disconnect, device number 9 [ 1006.242230][T24837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6235'. [ 1006.863657][T22065] usb 34-1: device descriptor read/8, error -110 [ 1007.093832][T24846] bridge0: port 3(syz_tun) entered blocking state [ 1007.093884][T24846] bridge0: port 3(syz_tun) entered disabled state [ 1007.093984][T24846] syz_tun: entered allmulticast mode [ 1007.094444][T24846] syz_tun: entered promiscuous mode [ 1007.094626][T24846] bridge0: port 3(syz_tun) entered blocking state [ 1007.094658][T24846] bridge0: port 3(syz_tun) entered forwarding state [ 1007.321491][T22065] usb usb34-port1: attempt power cycle [ 1007.807351][T24854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6239'. [ 1007.951738][T24858] kAFS: bad VL server IP address [ 1008.143257][T24869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.154266][T24869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.216764][T22065] usb usb34-port1: unable to enumerate USB device [ 1008.536919][T24889] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1008.536936][T24889] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1008.554286][T24889] vhci_hcd vhci_hcd.0: Device attached [ 1008.813568][T24841] usb 50-1: SetAddress Request (2) to port 0 [ 1008.813611][T24841] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1009.480702][T24890] vhci_hcd: connection reset by peer [ 1009.488011][ T6503] vhci_hcd vhci_hcd.8: stop threads [ 1009.488026][ T6503] vhci_hcd vhci_hcd.8: release socket [ 1009.488047][ T6503] vhci_hcd vhci_hcd.8: disconnect device [ 1009.676162][T24913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6254'. [ 1009.809260][T24918] kAFS: bad VL server IP address [ 1010.304255][T22888] Bluetooth: hci2: command 0x0406 tx timeout [ 1010.383568][T14410] usb 46-1: device descriptor read/8, error -110 [ 1010.689743][T24929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6258'. [ 1010.706983][T24931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.707134][T24931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.793948][T14410] usb usb46-port1: attempt power cycle [ 1010.903695][T22065] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1011.053561][T22065] usb 7-1: Using ep0 maxpacket: 8 [ 1011.058985][T22065] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1011.072568][T22065] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1011.072591][T22065] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1011.072606][T22065] usb 7-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 1011.072621][T22065] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 1011.072636][T22065] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1011.072658][T22065] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1011.072680][T22065] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.312774][T22065] usb 7-1: GET_CAPABILITIES returned 0 [ 1011.319599][T22065] usbtmc 7-1:16.0: can't read capabilities [ 1011.353984][T24959] md: could not open device unknown-block(1,0). [ 1011.367200][T24959] md: could not open device unknown-block(1,3). [ 1011.408221][T24959] md/raid:md0: not clean -- starting background reconstruction [ 1011.416251][T24959] raid456: run(md0) called. [ 1011.416261][T24959] md/raid:md0: device ram3 operational as raid disk 3 [ 1011.416270][T24959] md/raid:md0: device ram2 operational as raid disk 2 [ 1011.440453][T14410] usb usb46-port1: unable to enumerate USB device [ 1011.468449][T24959] md/raid:md0: allocated 4318kB [ 1011.473778][T24959] md/raid:md0: not enough operational devices (2/4 failed) [ 1011.481320][T24959] RAID conf printout: [ 1011.486043][T24959] --- level:5 rd:4 wd:2 [ 1011.490448][T24959] disk 2, o:1, dev:ram2 [ 1011.494908][T24959] disk 3, o:1, dev:ram3 [ 1011.499389][T24959] remove_hash(), stripe 0 [ 1011.499428][T24959] remove_hash(), stripe 0 [ 1011.499459][T24959] remove_hash(), stripe 0 [ 1011.499489][T24959] remove_hash(), stripe 0 [ 1011.499518][T24959] remove_hash(), stripe 0 [ 1011.524896][T24959] remove_hash(), stripe 0 [ 1011.529742][T24959] remove_hash(), stripe 0 [ 1011.534554][T24959] remove_hash(), stripe 0 [ 1011.539067][T24959] remove_hash(), stripe 0 [ 1011.539110][T24959] remove_hash(), stripe 0 [ 1011.539144][T24959] remove_hash(), stripe 0 [ 1011.539175][T24959] remove_hash(), stripe 0 [ 1011.539205][T24959] remove_hash(), stripe 0 [ 1011.539236][T24959] remove_hash(), stripe 0 [ 1011.539269][T24959] remove_hash(), stripe 0 [ 1011.539301][T24959] remove_hash(), stripe 0 [ 1011.539330][T24959] remove_hash(), stripe 0 [ 1011.539360][T24959] remove_hash(), stripe 0 [ 1011.539389][T24959] remove_hash(), stripe 0 [ 1011.539419][T24959] remove_hash(), stripe 0 [ 1011.539448][T24959] remove_hash(), stripe 0 [ 1011.539477][T24959] remove_hash(), stripe 0 [ 1011.539513][T24959] remove_hash(), stripe 0 [ 1011.539541][T24959] remove_hash(), stripe 0 [ 1011.539571][T24959] remove_hash(), stripe 0 [ 1011.539602][T24959] remove_hash(), stripe 0 [ 1011.539639][T24959] remove_hash(), stripe 0 [ 1011.539669][T24959] remove_hash(), stripe 0 [ 1011.539701][T24959] remove_hash(), stripe 0 [ 1011.539732][T24959] remove_hash(), stripe 0 [ 1011.539761][T24959] remove_hash(), stripe 0 [ 1011.539791][T24959] remove_hash(), stripe 0 [ 1011.539820][T24959] remove_hash(), stripe 0 [ 1011.539850][T24959] remove_hash(), stripe 0 [ 1011.539880][T24959] remove_hash(), stripe 0 [ 1011.539908][T24959] remove_hash(), stripe 0 [ 1011.539937][T24959] remove_hash(), stripe 0 [ 1011.539966][T24959] remove_hash(), stripe 0 [ 1011.539995][T24959] remove_hash(), stripe 0 [ 1011.540052][T24959] remove_hash(), stripe 0 [ 1011.540082][T24959] remove_hash(), stripe 0 [ 1011.540113][T24959] remove_hash(), stripe 0 [ 1011.540144][T24959] remove_hash(), stripe 0 [ 1011.540174][T24959] remove_hash(), stripe 0 [ 1011.540204][T24959] remove_hash(), stripe 0 [ 1011.540233][T24959] remove_hash(), stripe 0 [ 1011.725368][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1011.725395][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1011.725414][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1011.725431][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1011.725448][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1011.725465][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1011.725482][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1011.725499][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1011.725516][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1011.725534][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1011.725550][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1011.725567][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1011.734958][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1011.734983][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1011.735000][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1011.735016][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1011.804800][T24959] remove_hash(), stripe 0 [ 1011.804850][T24959] remove_hash(), stripe 0 [ 1011.804880][T24959] remove_hash(), stripe 0 [ 1011.804911][T24959] remove_hash(), stripe 0 [ 1011.804940][T24959] remove_hash(), stripe 0 [ 1011.804970][T24959] remove_hash(), stripe 0 [ 1011.805001][T24959] remove_hash(), stripe 0 [ 1011.805035][T24959] remove_hash(), stripe 0 [ 1011.805066][T24959] remove_hash(), stripe 0 [ 1011.805096][T24959] remove_hash(), stripe 0 [ 1011.805125][T24959] remove_hash(), stripe 0 [ 1011.805156][T24959] remove_hash(), stripe 0 [ 1011.805187][T24959] remove_hash(), stripe 0 [ 1011.805257][T24959] remove_hash(), stripe 0 [ 1011.805292][T24959] remove_hash(), stripe 0 [ 1011.805321][T24959] remove_hash(), stripe 0 [ 1011.805351][T24959] remove_hash(), stripe 0 [ 1011.805381][T24959] remove_hash(), stripe 0 [ 1011.805411][T24959] remove_hash(), stripe 0 [ 1011.805442][T24959] remove_hash(), stripe 0 [ 1011.805472][T24959] remove_hash(), stripe 0 [ 1011.805504][T24959] remove_hash(), stripe 0 [ 1011.805534][T24959] remove_hash(), stripe 0 [ 1011.805572][T24959] remove_hash(), stripe 0 [ 1011.805603][T24959] remove_hash(), stripe 0 [ 1011.805632][T24959] remove_hash(), stripe 0 [ 1011.805661][T24959] remove_hash(), stripe 0 [ 1011.805699][T24959] remove_hash(), stripe 0 [ 1011.805729][T24959] remove_hash(), stripe 0 [ 1011.805761][T24959] remove_hash(), stripe 0 [ 1011.805792][T24959] remove_hash(), stripe 0 [ 1011.805823][T24959] remove_hash(), stripe 0 [ 1011.805910][T24959] remove_hash(), stripe 0 [ 1011.805941][T24959] remove_hash(), stripe 0 [ 1011.805971][T24959] remove_hash(), stripe 0 [ 1011.806001][T24959] remove_hash(), stripe 0 [ 1011.806030][T24959] remove_hash(), stripe 0 [ 1011.806060][T24959] remove_hash(), stripe 0 [ 1011.806090][T24959] remove_hash(), stripe 0 [ 1011.806120][T24959] remove_hash(), stripe 0 [ 1011.806148][T24959] remove_hash(), stripe 0 [ 1011.806179][T24959] remove_hash(), stripe 0 [ 1012.040671][T14410] usb 7-1: USB disconnect, device number 9 [ 1012.099626][T24959] remove_hash(), stripe 0 [ 1012.099680][T24959] remove_hash(), stripe 0 [ 1012.099714][T24959] remove_hash(), stripe 0 [ 1012.099747][T24959] remove_hash(), stripe 0 [ 1012.099781][T24959] remove_hash(), stripe 0 [ 1012.099815][T24959] remove_hash(), stripe 0 [ 1012.099848][T24959] remove_hash(), stripe 0 [ 1012.099881][T24959] remove_hash(), stripe 0 [ 1012.099913][T24959] remove_hash(), stripe 0 [ 1012.099946][T24959] remove_hash(), stripe 0 [ 1012.099981][T24959] remove_hash(), stripe 0 [ 1012.100014][T24959] remove_hash(), stripe 0 [ 1012.100046][T24959] remove_hash(), stripe 0 [ 1012.100081][T24959] remove_hash(), stripe 0 [ 1012.100112][T24959] remove_hash(), stripe 0 [ 1012.100144][T24959] remove_hash(), stripe 0 [ 1012.100200][T24959] remove_hash(), stripe 0 [ 1012.100239][T24959] remove_hash(), stripe 0 [ 1012.100271][T24959] remove_hash(), stripe 0 [ 1012.100303][T24959] remove_hash(), stripe 0 [ 1012.100367][T24959] remove_hash(), stripe 0 [ 1012.100399][T24959] remove_hash(), stripe 0 [ 1012.100432][T24959] remove_hash(), stripe 0 [ 1012.100464][T24959] remove_hash(), stripe 0 [ 1012.100518][T24959] remove_hash(), stripe 0 [ 1012.100552][T24959] remove_hash(), stripe 0 [ 1012.100586][T24959] remove_hash(), stripe 0 [ 1012.100619][T24959] remove_hash(), stripe 0 [ 1012.100651][T24959] remove_hash(), stripe 0 [ 1012.100683][T24959] remove_hash(), stripe 0 [ 1012.100714][T24959] remove_hash(), stripe 0 [ 1012.100746][T24959] remove_hash(), stripe 0 [ 1012.100778][T24959] remove_hash(), stripe 0 [ 1012.100811][T24959] remove_hash(), stripe 0 [ 1012.100842][T24959] remove_hash(), stripe 0 [ 1012.100874][T24959] remove_hash(), stripe 0 [ 1012.100905][T24959] remove_hash(), stripe 0 [ 1012.100937][T24959] remove_hash(), stripe 0 [ 1012.100980][T24959] remove_hash(), stripe 0 [ 1012.101013][T24959] remove_hash(), stripe 0 [ 1012.304076][T24959] remove_hash(), stripe 0 [ 1012.304125][T24959] remove_hash(), stripe 0 [ 1012.304159][T24959] remove_hash(), stripe 0 [ 1012.304192][T24959] remove_hash(), stripe 0 [ 1012.304224][T24959] remove_hash(), stripe 0 [ 1012.304256][T24959] remove_hash(), stripe 0 [ 1012.304288][T24959] remove_hash(), stripe 0 [ 1012.304322][T24959] remove_hash(), stripe 0 [ 1012.304357][T24959] remove_hash(), stripe 0 [ 1012.304389][T24959] remove_hash(), stripe 0 [ 1012.304421][T24959] remove_hash(), stripe 0 [ 1012.304453][T24959] remove_hash(), stripe 0 [ 1012.304487][T24959] remove_hash(), stripe 0 [ 1012.304523][T24959] remove_hash(), stripe 0 [ 1012.304558][T24959] remove_hash(), stripe 0 [ 1012.304597][T24959] remove_hash(), stripe 0 [ 1012.304629][T24959] remove_hash(), stripe 0 [ 1012.304661][T24959] remove_hash(), stripe 0 [ 1012.304693][T24959] remove_hash(), stripe 0 [ 1012.304725][T24959] remove_hash(), stripe 0 [ 1012.304761][T24959] remove_hash(), stripe 0 [ 1012.304792][T24959] remove_hash(), stripe 0 [ 1012.304828][T24959] remove_hash(), stripe 0 [ 1012.304860][T24959] remove_hash(), stripe 0 [ 1012.304892][T24959] remove_hash(), stripe 0 [ 1012.304925][T24959] remove_hash(), stripe 0 [ 1012.304956][T24959] remove_hash(), stripe 0 [ 1012.304987][T24959] remove_hash(), stripe 0 [ 1012.305019][T24959] remove_hash(), stripe 0 [ 1012.305050][T24959] remove_hash(), stripe 0 [ 1012.305082][T24959] remove_hash(), stripe 0 [ 1012.305114][T24959] remove_hash(), stripe 0 [ 1012.305145][T24959] remove_hash(), stripe 0 [ 1012.305176][T24959] remove_hash(), stripe 0 [ 1012.305210][T24959] remove_hash(), stripe 0 [ 1012.305254][T24959] remove_hash(), stripe 0 [ 1012.305288][T24959] remove_hash(), stripe 0 [ 1012.305320][T24959] remove_hash(), stripe 0 [ 1012.305351][T24959] remove_hash(), stripe 0 [ 1012.305382][T24959] remove_hash(), stripe 0 [ 1012.305415][T24959] remove_hash(), stripe 0 [ 1012.305447][T24959] remove_hash(), stripe 0 [ 1012.506548][T24959] remove_hash(), stripe 0 [ 1012.506607][T24959] remove_hash(), stripe 0 [ 1012.506640][T24959] remove_hash(), stripe 0 [ 1012.506676][T24959] remove_hash(), stripe 0 [ 1012.506707][T24959] remove_hash(), stripe 0 [ 1012.506740][T24959] remove_hash(), stripe 0 [ 1012.506773][T24959] remove_hash(), stripe 0 [ 1012.506808][T24959] remove_hash(), stripe 0 [ 1012.506841][T24959] remove_hash(), stripe 0 [ 1012.506874][T24959] remove_hash(), stripe 0 [ 1012.506906][T24959] remove_hash(), stripe 0 [ 1012.506939][T24959] remove_hash(), stripe 0 [ 1012.506970][T24959] remove_hash(), stripe 0 [ 1012.507000][T24959] remove_hash(), stripe 0 [ 1012.507032][T24959] remove_hash(), stripe 0 [ 1012.507066][T24959] remove_hash(), stripe 0 [ 1012.507097][T24959] remove_hash(), stripe 0 [ 1012.507130][T24959] remove_hash(), stripe 0 [ 1012.507161][T24959] remove_hash(), stripe 0 [ 1012.507193][T24959] remove_hash(), stripe 0 [ 1012.507226][T24959] remove_hash(), stripe 0 [ 1012.507257][T24959] remove_hash(), stripe 0 [ 1012.507288][T24959] remove_hash(), stripe 0 [ 1012.507322][T24959] remove_hash(), stripe 0 [ 1012.507394][T24959] remove_hash(), stripe 0 [ 1012.507427][T24959] remove_hash(), stripe 0 [ 1012.507459][T24959] remove_hash(), stripe 0 [ 1012.507491][T24959] remove_hash(), stripe 0 [ 1012.507522][T24959] remove_hash(), stripe 0 [ 1012.507558][T24959] remove_hash(), stripe 0 [ 1012.507591][T24959] remove_hash(), stripe 0 [ 1012.507624][T24959] remove_hash(), stripe 0 [ 1012.507656][T24959] remove_hash(), stripe 0 [ 1012.507689][T24959] remove_hash(), stripe 0 [ 1012.507720][T24959] remove_hash(), stripe 0 [ 1012.507751][T24959] remove_hash(), stripe 0 [ 1012.507784][T24959] remove_hash(), stripe 0 [ 1012.507814][T24959] remove_hash(), stripe 0 [ 1012.507845][T24959] remove_hash(), stripe 0 [ 1012.507879][T24959] remove_hash(), stripe 0 [ 1012.507919][T24959] remove_hash(), stripe 0 [ 1012.588070][T24959] remove_hash(), stripe 0 [ 1012.588108][T24959] remove_hash(), stripe 0 [ 1012.588138][T24959] remove_hash(), stripe 0 [ 1012.588167][T24959] remove_hash(), stripe 0 [ 1012.588197][T24959] remove_hash(), stripe 0 [ 1012.588231][T24959] remove_hash(), stripe 0 [ 1012.588261][T24959] remove_hash(), stripe 0 [ 1012.588291][T24959] remove_hash(), stripe 0 [ 1012.588321][T24959] remove_hash(), stripe 0 [ 1012.588350][T24959] remove_hash(), stripe 0 [ 1012.588381][T24959] remove_hash(), stripe 0 [ 1012.588410][T24959] remove_hash(), stripe 0 [ 1012.588443][T24959] remove_hash(), stripe 0 [ 1012.588473][T24959] remove_hash(), stripe 0 [ 1012.588502][T24959] remove_hash(), stripe 0 [ 1012.588532][T24959] remove_hash(), stripe 0 [ 1012.588569][T24959] remove_hash(), stripe 0 [ 1012.588602][T24959] remove_hash(), stripe 0 [ 1012.588634][T24959] remove_hash(), stripe 0 [ 1012.588665][T24959] remove_hash(), stripe 0 [ 1012.588694][T24959] remove_hash(), stripe 0 [ 1012.588727][T24959] remove_hash(), stripe 0 [ 1012.588757][T24959] remove_hash(), stripe 0 [ 1012.588786][T24959] remove_hash(), stripe 0 [ 1012.588817][T24959] remove_hash(), stripe 0 [ 1012.588873][T24959] remove_hash(), stripe 0 [ 1012.588905][T24959] remove_hash(), stripe 0 [ 1012.588934][T24959] remove_hash(), stripe 0 [ 1012.588963][T24959] remove_hash(), stripe 0 [ 1012.588993][T24959] remove_hash(), stripe 0 [ 1012.589024][T24959] remove_hash(), stripe 0 [ 1012.589053][T24959] remove_hash(), stripe 0 [ 1012.589083][T24959] remove_hash(), stripe 0 [ 1012.589113][T24959] remove_hash(), stripe 0 [ 1012.589154][T24959] remove_hash(), stripe 0 [ 1012.589235][T24959] remove_hash(), stripe 0 [ 1012.589267][T24959] remove_hash(), stripe 0 [ 1012.589298][T24959] remove_hash(), stripe 0 [ 1012.589329][T24959] remove_hash(), stripe 0 [ 1012.589359][T24959] remove_hash(), stripe 0 [ 1012.589388][T24959] remove_hash(), stripe 0 [ 1012.589417][T24959] remove_hash(), stripe 0 [ 1012.589451][T24959] remove_hash(), stripe 0 [ 1012.762002][T24959] remove_hash(), stripe 0 [ 1012.762045][T24959] remove_hash(), stripe 0 [ 1013.060064][T24974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6265'. [ 1013.095656][T24959] md/raid:md0: failed to run raid set. [ 1013.102850][T24959] md: pers->run() failed ... [ 1013.141413][T24975] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6266'. [ 1013.264757][T24982] kAFS: bad VL server IP address [ 1013.319687][T24986] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6271'. [ 1013.422905][T24994] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6274'. [ 1013.453593][T14410] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1013.587662][T25004] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6279'. [ 1013.603605][T14410] usb 7-1: Using ep0 maxpacket: 8 [ 1013.613009][T14410] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1013.622891][T14410] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1013.622921][T14410] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1013.622935][T14410] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1013.622950][T14410] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1013.622963][T14410] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1013.622976][T14410] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1013.622997][T14410] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.675409][T14410] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 1013.904256][T24841] usb 50-1: device descriptor read/8, error -110 [ 1014.018089][T25023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6288'. [ 1014.159126][T25032] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6292'. [ 1014.294080][T24841] usb usb50-port1: attempt power cycle [ 1014.300946][T25040] 9p: Bad value for 'wfdno' [ 1014.516442][T25052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6300'. [ 1014.723018][T25065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6304'. [ 1014.855814][T24841] usb usb50-port1: unable to enumerate USB device [ 1014.918467][T25077] gadgetfs: bound to dummy_udc driver [ 1015.042559][T25080] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6312'. [ 1015.423892][T20695] Bluetooth: hci5: command 0x0406 tx timeout [ 1015.792142][T25082] bridge0: port 3(syz_tun) entered blocking state [ 1015.792181][T25082] bridge0: port 3(syz_tun) entered disabled state [ 1015.792271][T25082] syz_tun: entered allmulticast mode [ 1015.792747][T25082] syz_tun: entered promiscuous mode [ 1015.792953][T25082] bridge0: port 3(syz_tun) entered blocking state [ 1015.792986][T25082] bridge0: port 3(syz_tun) entered forwarding state [ 1015.983577][T14277] Bluetooth: hci1: command 0x1003 tx timeout [ 1015.989662][T22888] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1016.334426][T25094] fuse: Bad value for 'fd' [ 1016.617219][T25092] loop7: detected capacity change from 0 to 512 [ 1016.647557][T25092] EXT4-fs (loop7): 1 truncate cleaned up [ 1016.656671][T25092] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1016.677405][T24841] usb 7-1: USB disconnect, device number 10 [ 1016.926638][T21887] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 1016.952361][T25102] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6317: bg 0: block 465: padding at end of block bitmap is not set [ 1016.967358][T25102] EXT4-fs (loop7): Remounting filesystem read-only [ 1017.090804][T21887] bridge0: port 3(syz_tun) entered disabled state [ 1017.113212][T21887] syz_tun (unregistering): left allmulticast mode [ 1017.113236][T21887] syz_tun (unregistering): left promiscuous mode [ 1017.113270][T21887] bridge0: port 3(syz_tun) entered disabled state [ 1017.269227][T21887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.285029][T24841] libceph: connect (1)[c::]:6789 error -101 [ 1017.285098][T24841] libceph: mon0 (1)[c::]:6789 connect error [ 1017.305456][ T1217] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.349322][ T1217] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.382448][T25113] ceph: No mds server is up or the cluster is laggy [ 1017.416965][ T1217] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.467874][ T1217] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.586187][ T1217] bridge_slave_1: left allmulticast mode [ 1017.586302][ T1217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.602131][ T1217] bridge_slave_0: left allmulticast mode [ 1017.602150][ T1217] bridge_slave_0: left promiscuous mode [ 1017.602239][ T1217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.966707][T25131] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1018.966725][T25131] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1018.966781][T25131] vhci_hcd vhci_hcd.0: Device attached [ 1018.982006][ T1217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.011986][ T1217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1019.027055][ T1217] bond0 (unregistering): Released all slaves [ 1019.155277][ T1217] rxrpc: Leaked peer 43e {1} 127.0.0.1:7003 [ 1019.220399][T14277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1019.229541][T14277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1019.237210][T14277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1019.244542][T24841] usb 46-1: SetAddress Request (14) to port 0 [ 1019.244581][T24841] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1019.259935][T14277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1019.272593][T14277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1019.315980][T25133] vhci_hcd: connection reset by peer [ 1019.321565][ T73] vhci_hcd vhci_hcd.6: stop threads [ 1019.321580][ T73] vhci_hcd vhci_hcd.6: release socket [ 1019.321602][ T73] vhci_hcd vhci_hcd.6: disconnect device [ 1019.508275][ T1217] hsr_slave_0: left promiscuous mode [ 1019.516826][ T1217] hsr_slave_1: left promiscuous mode [ 1019.517181][ T1217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.517200][ T1217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.541414][ T1217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.550017][ T1217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.575073][ T1217] veth1_macvtap: left promiscuous mode [ 1019.575099][ T1217] veth0_macvtap: left promiscuous mode [ 1019.575157][ T1217] veth1_vlan: left promiscuous mode [ 1019.575184][ T1217] veth0_vlan: left promiscuous mode [ 1019.931719][ T1217] team0 (unregistering): Port device team_slave_1 removed [ 1019.959090][ T1217] team0 (unregistering): Port device team_slave_0 removed [ 1020.087679][T25154] __nla_validate_parse: 4 callbacks suppressed [ 1020.087706][T25154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6337'. [ 1020.108648][ T5278] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1020.340167][ T5721] libceph: connect (1)[c::]:6789 error -101 [ 1020.340236][ T5721] libceph: mon0 (1)[c::]:6789 connect error [ 1020.429437][T25175] ceph: No mds server is up or the cluster is laggy [ 1020.617064][T25196] netlink: 830 bytes leftover after parsing attributes in process `syz.8.6344'. [ 1020.651037][T25196] netlink: 512 bytes leftover after parsing attributes in process `syz.8.6344'. [ 1020.989714][T25217] input: syz0 as /devices/virtual/input/input42 [ 1021.052659][ T5278] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1021.118199][T25142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.126284][T25142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.126381][T25142] bridge_slave_0: entered allmulticast mode [ 1021.144386][T25142] bridge_slave_0: entered promiscuous mode [ 1021.155753][T25142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.165086][T25142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.173049][T25142] bridge_slave_1: entered allmulticast mode [ 1021.180878][T25142] bridge_slave_1: entered promiscuous mode [ 1021.211193][T25224] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6350'. [ 1021.248247][T25142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.267764][T25142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.319932][T25142] team0: Port device team_slave_0 added [ 1021.333872][T25142] team0: Port device team_slave_1 added [ 1021.344287][T14277] Bluetooth: hci1: command tx timeout [ 1021.392625][T25142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.400807][T25142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.429735][T25142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.442266][T25142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.442276][T25142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.442290][T25142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1021.579092][T25142] hsr_slave_0: entered promiscuous mode [ 1021.593986][T25142] hsr_slave_1: entered promiscuous mode [ 1021.594231][T25142] debugfs: 'hsr0' already exists in 'hsr' [ 1021.594243][T25142] Cannot create hsr debugfs directory [ 1021.769189][T22065] libceph: connect (1)[c::]:6789 error -101 [ 1021.769268][T22065] libceph: mon0 (1)[c::]:6789 connect error [ 1021.856044][T25240] ceph: No mds server is up or the cluster is laggy [ 1021.932583][T25142] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1021.968601][T25142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1021.968989][T25142] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1021.989025][T25142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1022.004248][T25142] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1022.019244][T25142] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1022.034324][T25255] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1022.034341][T25255] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1022.034385][T25255] vhci_hcd vhci_hcd.0: Device attached [ 1022.042611][T25142] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1022.071091][T25142] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1022.257582][T25256] vhci_hcd: connection closed [ 1022.258557][T23456] vhci_hcd vhci_hcd.8: stop threads [ 1022.258583][T23456] vhci_hcd vhci_hcd.8: release socket [ 1022.258604][T23456] vhci_hcd vhci_hcd.8: disconnect device [ 1022.284844][T25142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1022.304134][T14410] usb 50-1: enqueue for inactive port 0 [ 1022.328205][T25142] 8021q: adding VLAN 0 to HW filter on device team0 [ 1022.345649][ T1217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.345695][ T1217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1022.369487][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.369533][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1022.793964][T14410] usb usb50-port1: attempt power cycle [ 1023.114211][ T5278] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1023.424029][T14277] Bluetooth: hci1: command tx timeout [ 1023.483099][T25287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6361'. [ 1023.504828][T14410] usb usb50-port1: unable to enumerate USB device [ 1023.840740][T14410] libceph: connect (1)[c::]:6789 error -101 [ 1023.840813][T14410] libceph: mon0 (1)[c::]:6789 connect error [ 1023.918354][T25306] ceph: No mds server is up or the cluster is laggy [ 1023.956026][T25142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.303597][T24841] usb 46-1: device descriptor read/8, error -110 [ 1024.714966][T24841] usb usb46-port1: attempt power cycle [ 1024.762840][ T5278] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1024.895084][T25339] xt_TCPMSS: Only works on TCP SYN packets [ 1025.428021][T14410] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1025.506171][T14277] Bluetooth: hci1: command tx timeout [ 1025.543462][T25347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6374'. [ 1025.587375][T14410] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1025.598351][T14410] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1025.598378][T14410] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1025.598402][T14410] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.621744][T25327] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1025.647669][T14410] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1025.717798][T24841] usb usb46-port1: unable to enumerate USB device [ 1025.861743][T25142] veth0_vlan: entered promiscuous mode [ 1025.898284][T25142] veth1_vlan: entered promiscuous mode [ 1026.077458][T25142] veth0_macvtap: entered promiscuous mode [ 1026.101472][T25142] veth1_macvtap: entered promiscuous mode [ 1026.159866][T25142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1026.174670][T25142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.182828][T14410] usb 9-1: USB disconnect, device number 10 [ 1026.234194][ T6516] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.234230][ T6516] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.234252][ T6516] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.234270][ T6516] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.315181][T25142] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 1026.349107][T25142] ieee80211 phy38: Selected rate control algorithm 'minstrel_ht' [ 1026.349212][ T6516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.349225][ T6516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.398336][ T6516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.398357][ T6516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.461366][T25360] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1026.461383][T25360] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1026.461423][T25360] vhci_hcd vhci_hcd.0: Device attached [ 1026.540565][T22065] libceph: connect (1)[c::]:6789 error -101 [ 1026.540658][T22065] libceph: mon0 (1)[c::]:6789 connect error [ 1026.637217][T25364] ceph: No mds server is up or the cluster is laggy [ 1026.661174][T25361] vhci_hcd: connection closed [ 1026.661356][ T1217] vhci_hcd vhci_hcd.4: stop threads [ 1026.661378][ T1217] vhci_hcd vhci_hcd.4: release socket [ 1026.661402][ T1217] vhci_hcd vhci_hcd.4: disconnect device [ 1026.773577][T22080] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1026.951396][T22080] usb 10-1: Using ep0 maxpacket: 8 [ 1027.006987][T22080] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1027.199911][T22080] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1027.199949][T22080] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1027.199967][T22080] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1027.199981][T22080] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1027.199995][T22080] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1027.200018][T22080] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.584246][T14277] Bluetooth: hci1: command tx timeout [ 1027.615583][T22080] usb 10-1: usb_control_msg returned -32 [ 1027.615612][T22080] usbtmc 10-1:16.0: can't read capabilities [ 1027.673084][ T5714] usb 10-1: USB disconnect, device number 2 [ 1028.619416][ T31] audit: type=1804 audit(1786063842.379:331): pid=25394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.6385" name="file1" dev="ramfs" ino=114977 res=1 errno=0 [ 1028.763973][T25404] loop4: detected capacity change from 0 to 512 [ 1028.775254][T14277] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 1028.794005][T25404] EXT4-fs (loop4): 1 truncate cleaned up [ 1028.800247][T25404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1028.898282][T24298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.011348][T24841] libceph: connect (1)[c::]:6789 error -101 [ 1029.011428][T24841] libceph: mon0 (1)[c::]:6789 connect error [ 1029.109430][T25410] ceph: No mds server is up or the cluster is laggy [ 1029.880509][T25429] loop6: detected capacity change from 0 to 512 [ 1029.907481][T25429] EXT4-fs (loop6): blocks per group (34) and clusters per group (32768) inconsistent [ 1030.223242][T24841] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1030.792685][T24841] usb 10-1: Using ep0 maxpacket: 8 [ 1030.799663][T24841] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1030.815171][T24841] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1030.815204][T24841] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1030.815222][T24841] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1030.815237][T24841] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1030.815251][T24841] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1030.815272][T24841] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.007751][T25446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.016459][T25446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.088570][T24841] usb 10-1: usb_control_msg returned -32 [ 1031.088600][T24841] usbtmc 10-1:16.0: can't read capabilities [ 1031.111146][T24841] usb 10-1: USB disconnect, device number 3 [ 1031.217082][T25449] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1031.217099][T25449] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1031.217138][T25449] vhci_hcd vhci_hcd.0: Device attached [ 1031.359416][T25450] vhci_hcd: connection closed [ 1031.359605][ T1217] vhci_hcd vhci_hcd.8: stop threads [ 1031.359628][ T1217] vhci_hcd vhci_hcd.8: release socket [ 1031.359652][ T1217] vhci_hcd vhci_hcd.8: disconnect device [ 1031.429714][T24841] libceph: connect (1)[c::]:6789 error -101 [ 1031.429792][T24841] libceph: mon0 (1)[c::]:6789 connect error [ 1031.529295][T25459] ceph: No mds server is up or the cluster is laggy [ 1031.650136][T25467] loop4: detected capacity change from 0 to 512 [ 1031.688753][T25467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1031.704951][T25467] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.730951][T25467] EXT4-fs error (device loop4): ext4_get_inode_usage:884: inode #12: comm syz.4.6409: corrupted xattr block 6: invalid header [ 1031.766968][T25474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.767116][T25474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.808877][T24298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.857161][T25498] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6422'. [ 1032.917548][T25500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6415'. [ 1032.933763][ T5714] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1033.085560][ T5714] usb 10-1: Using ep0 maxpacket: 8 [ 1033.091482][ T5714] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1033.102243][ T5714] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1033.110721][ T5714] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1033.120793][ T5714] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1033.120809][ T5714] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1033.120822][ T5714] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1033.120846][ T5714] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.368177][ T5714] usb 10-1: usb_control_msg returned -32 [ 1033.374034][ T5714] usbtmc 10-1:16.0: can't read capabilities [ 1033.386428][ T5714] usb 10-1: USB disconnect, device number 4 [ 1033.806484][T25507] fuse: Bad value for 'fd' [ 1033.827623][ T5706] Bluetooth: Patch file not found ar3k/AthrBT_0x0b6b634a.dfu [ 1033.827641][ T5706] Bluetooth: Loading patch file failed [ 1033.827661][ T5706] ath3k 5-1:0.0: probe with driver ath3k failed with error -110 [ 1033.901467][ T5706] usb 5-1: USB disconnect, device number 121 [ 1034.203593][ T5706] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 1034.253077][T25530] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1034.253102][T25530] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1034.269409][T25530] vhci_hcd vhci_hcd.0: Device attached [ 1034.333644][ T5706] usb 5-1: device descriptor read/64, error -71 [ 1034.543640][T24841] usb 52-1: SetAddress Request (2) to port 0 [ 1034.549845][T24841] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1034.573544][ T5706] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 1034.623654][T22888] Bluetooth: hci3: command 0x1003 tx timeout [ 1034.629719][T14277] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1034.703571][ T5706] usb 5-1: device descriptor read/64, error -71 [ 1034.798061][T25540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6436'. [ 1034.811956][T25531] vhci_hcd: connection reset by peer [ 1034.812138][ T6503] vhci_hcd vhci_hcd.9: stop threads [ 1034.812151][ T6503] vhci_hcd vhci_hcd.9: release socket [ 1034.812174][ T6503] vhci_hcd vhci_hcd.9: disconnect device [ 1034.820175][ T5706] usb usb5-port1: attempt power cycle [ 1034.890589][T25545] fuse: Bad value for 'fd' [ 1035.057875][ T31] audit: type=1804 audit(1786063848.819:332): pid=25553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.6441" name="file1" dev="ramfs" ino=115635 res=1 errno=0 [ 1035.187480][ T5706] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 1035.207769][T14410] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1035.216002][ T5706] usb 5-1: device descriptor read/8, error -71 [ 1035.563699][T14410] usb 9-1: Using ep0 maxpacket: 8 [ 1035.583790][T14410] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1035.623898][ T5706] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 1035.653957][T14410] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1035.654230][T14410] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1035.654244][T14410] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1035.654256][T14410] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1035.654271][T14410] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1035.654298][T14410] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.688253][ T5706] usb 5-1: device descriptor read/8, error -71 [ 1035.808440][ T5706] usb usb5-port1: unable to enumerate USB device [ 1036.067979][T25557] bridge0: port 3(syz_tun) entered blocking state [ 1036.068019][T25557] bridge0: port 3(syz_tun) entered disabled state [ 1036.068131][T25557] syz_tun: entered allmulticast mode [ 1036.068613][T25557] syz_tun: entered promiscuous mode [ 1036.068837][T25557] bridge0: port 3(syz_tun) entered blocking state [ 1036.068877][T25557] bridge0: port 3(syz_tun) entered forwarding state [ 1036.227832][T14410] usb 9-1: usb_control_msg returned -32 [ 1036.227870][T14410] usbtmc 9-1:16.0: can't read capabilities [ 1036.283326][T14410] usb 9-1: USB disconnect, device number 11 [ 1036.560720][T25589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6451'. [ 1036.705310][T14410] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1036.854374][T14410] usb 10-1: Using ep0 maxpacket: 16 [ 1036.860043][T14410] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1036.870021][T14410] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1036.870043][T14410] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.870058][T14410] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1036.870071][T14410] usb 10-1: config 1 has no interface number 1 [ 1036.870089][T14410] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1036.870108][T14410] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1036.939762][T14410] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.939779][T14410] usb 10-1: Product: syz [ 1036.939786][T14410] usb 10-1: Manufacturer: syz [ 1036.939794][T14410] usb 10-1: SerialNumber: syz [ 1037.896149][T14410] usb 10-1: USB disconnect, device number 5 [ 1037.940083][T13165] udevd[13165]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1038.107980][T25633] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6463'. [ 1038.364323][T25648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6465'. [ 1038.525177][T14307] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1038.553813][T25660] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1038.553831][T25660] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1038.553872][T25660] vhci_hcd vhci_hcd.0: Device attached [ 1038.684066][T14307] usb 9-1: Using ep0 maxpacket: 8 [ 1038.689466][T14307] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1038.706053][T14307] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1038.706084][T14307] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1038.706102][T14307] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1038.706116][T14307] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1038.706130][T14307] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1038.706153][T14307] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.781480][T25672] 9p: Bad value for 'wfdno' [ 1038.808021][T25661] vhci_hcd: connection closed [ 1038.811210][ T6516] vhci_hcd vhci_hcd.4: stop threads [ 1038.811235][ T6516] vhci_hcd vhci_hcd.4: release socket [ 1038.811259][ T6516] vhci_hcd vhci_hcd.4: disconnect device [ 1038.837239][T14410] usb 42-1: enqueue for inactive port 0 [ 1039.574873][T14307] usb 9-1: usb_control_msg returned -32 [ 1039.590158][T14307] usbtmc 9-1:16.0: can't read capabilities [ 1039.592598][T24841] usb 52-1: device descriptor read/8, error -110 [ 1039.657566][T14410] usb usb42-port1: attempt power cycle [ 1039.677403][T14307] usb 9-1: USB disconnect, device number 12 [ 1039.707337][T25680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6474'. [ 1039.754533][T25675] bridge0: port 3(syz_tun) entered blocking state [ 1039.754575][T25675] bridge0: port 3(syz_tun) entered disabled state [ 1039.754667][T25675] syz_tun: entered allmulticast mode [ 1039.755155][T25675] syz_tun: entered promiscuous mode [ 1039.755339][T25675] bridge0: port 3(syz_tun) entered blocking state [ 1039.755372][T25675] bridge0: port 3(syz_tun) entered forwarding state [ 1039.855175][T25686] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6475'. [ 1040.010165][T24841] usb usb52-port1: attempt power cycle [ 1040.227739][T14410] usb usb42-port1: unable to enumerate USB device [ 1040.334500][T25711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6481'. [ 1040.571761][T25725] 9p: Bad value for 'wfdno' [ 1040.580064][T24841] usb usb52-port1: unable to enumerate USB device [ 1040.599051][T25723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6486'. [ 1041.023705][T14277] Bluetooth: hci0: command 0x0406 tx timeout [ 1041.380638][T25737] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6489'. [ 1041.737294][T24841] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1041.903656][T24841] usb 5-1: Using ep0 maxpacket: 8 [ 1041.911156][T24841] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1041.922633][T24841] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1041.922672][T24841] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1041.922691][T24841] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1041.922706][T24841] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1041.922720][T24841] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1041.922741][T24841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.033283][T25767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6500'. [ 1042.170300][T25772] loop9: detected capacity change from 0 to 16 [ 1042.180591][T25772] erofs (device loop9): mounted with root inode @ nid 36. [ 1042.189920][T25773] 9p: Bad value for 'wfdno' [ 1042.201897][T24841] usb 5-1: usb_control_msg returned -32 [ 1042.211846][T24841] usbtmc 5-1:16.0: can't read capabilities [ 1042.233113][T24841] usb 5-1: USB disconnect, device number 126 [ 1042.291103][T25774] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1042.291120][T25774] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1042.291159][T25774] vhci_hcd vhci_hcd.0: Device attached [ 1042.543719][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3830 [ 1042.543742][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 25778, name: syz.9.6503 [ 1042.543756][ C0] preempt_count: 101, expected: 0 [ 1042.543764][ C0] RCU nest depth: 1, expected: 0 [ 1042.543786][ C0] INFO: lockdep is turned off. [ 1042.543810][ C0] Preemption disabled at: [ 1042.543815][ C0] [] schedule+0x15d/0x2b0 [ 1042.543924][ C0] CPU: 0 UID: 0 PID: 25778 Comm: syz.9.6503 Not tainted syzkaller #0 PREEMPT(full) [ 1042.543937][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1042.543949][ C0] Call Trace: [ 1042.543956][ C0] [ 1042.543986][ C0] dump_stack_lvl+0xe8/0x150 [ 1042.544067][ C0] __might_resched+0x378/0x4d0 [ 1042.544097][ C0] ? schedule+0x15d/0x2b0 [ 1042.544134][ C0] lock_sock_nested+0x56/0x100 [ 1042.544210][ C0] x25_kill_by_neigh+0x10d/0x250 [ 1042.544280][ C0] x25_lapb_receive_frame+0x1b0/0xfb0 [ 1042.544294][ C0] ? rcu_is_watching+0x15/0xb0 [ 1042.544309][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 1042.544341][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 1042.544351][ C0] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 1042.544366][ C0] netif_receive_skb_core+0x2a6/0x2b0 [ 1042.544378][ C0] lapbeth_napi_poll+0x42/0x90 [ 1042.544425][ C0] __napi_poll+0xaa/0x330 [ 1042.544458][ C0] net_rx_action+0x61d/0xf50 [ 1042.544472][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1042.544488][ C0] ? lapic_next_event+0x11/0x20 [ 1042.544509][ C0] ? rcu_is_watching+0x15/0xb0 [ 1042.544520][ C0] handle_softirqs+0x225/0x840 [ 1042.544540][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1042.544553][ C0] __irq_exit_rcu+0xca/0x220 [ 1042.544565][ C0] irq_exit_rcu+0x9/0x30 [ 1042.544576][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1042.544587][ C0] [ 1042.544615][ C0] [ 1042.544640][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1042.544688][ C0] RIP: 0010:finish_task_switch+0x417/0xc60 [ 1042.544702][ C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 93 ce 46 0a e8 4e de 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 1042.544712][ C0] RSP: 0018:ffffc90004bb76c0 EFLAGS: 00000246 [ 1042.544744][ C0] RAX: 0000000000000001 RBX: ffff8880b863c820 RCX: 0000000080000002 [ 1042.544752][ C0] RDX: 0000000000000000 RSI: ffffffff8c4c7660 RDI: ffffffff8195de62 [ 1042.544760][ C0] RBP: ffffc90004bb7710 R08: ffffffff9058947f R09: 1ffffffff20b128f [ 1042.544767][ C0] R10: dffffc0000000000 R11: fffffbfff20b1290 R12: ffff88801dba9f40 [ 1042.544776][ C0] R13: ffff88801dba9f40 R14: dffffc0000000000 R15: 1ffff110170c7904 [ 1042.544786][ C0] ? finish_task_switch+0x412/0xc60 [ 1042.544801][ C0] __schedule+0x1b32/0x59a0 [ 1042.544815][ C0] ? rcu_is_watching+0x15/0xb0 [ 1042.544826][ C0] ? __pfx___schedule+0x10/0x10 [ 1042.544836][ C0] ? rcu_is_watching+0x15/0xb0 [ 1042.544846][ C0] ? lock_release+0x4b/0x3c0 [ 1042.544861][ C0] schedule+0x164/0x2b0 [ 1042.544871][ C0] schedule_timeout+0x152/0x2c0 [ 1042.544906][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1042.544920][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1042.544940][ C0] ? snd_rawmidi_write+0x360/0xbc0 [ 1042.544984][ C0] ? rcu_is_watching+0x15/0xb0 [ 1042.544994][ C0] ? snd_rawmidi_write+0x360/0xbc0 [ 1042.545006][ C0] ? trace_irq_enable+0x3b/0x140 [ 1042.545031][ C0] ? snd_rawmidi_write+0x360/0xbc0 [ 1042.545043][ C0] snd_rawmidi_write+0x3b4/0xbc0 [ 1042.545058][ C0] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1042.545070][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 1042.545083][ C0] ? apparmor_file_permission+0x1f4/0x300 [ 1042.545135][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 1042.545157][ C0] ? security_file_permission+0x75/0x260 [ 1042.545207][ C0] ? rw_verify_area+0x203/0x4c0 [ 1042.545237][ C0] vfs_writev+0x4bb/0x990 [ 1042.545256][ C0] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1042.545269][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 1042.545284][ C0] ? lock_release+0x4b/0x3c0 [ 1042.545294][ C0] ? __fget_files+0x3a2/0x420 [ 1042.545312][ C0] ? __fget_files+0x2a/0x420 [ 1042.545328][ C0] do_writev+0x154/0x2e0 [ 1042.545340][ C0] ? __pfx_do_writev+0x10/0x10 [ 1042.545353][ C0] ? rcu_is_watching+0x15/0xb0 [ 1042.545365][ C0] do_syscall_64+0x166/0x510 [ 1042.545397][ C0] ? trace_irq_disable+0x3b/0x140 [ 1042.545406][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.545417][ C0] ? clear_bhb_loop+0x40/0x90 [ 1042.545428][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.545438][ C0] RIP: 0033:0x7fcf7f19e0d9 [ 1042.545448][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.545457][ C0] RSP: 002b:00007fcf800b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1042.545468][ C0] RAX: ffffffffffffffda RBX: 00007fcf7f425fa0 RCX: 00007fcf7f19e0d9 [ 1042.545476][ C0] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000005 [ 1042.545483][ C0] RBP: 00007fcf7f235024 R08: 0000000000000000 R09: 0000000000000000 [ 1042.545489][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1042.545496][ C0] R13: 00007fcf7f426038 R14: 00007fcf7f425fa0 R15: 00007ffe63d14e08 [ 1042.545507][ C0] [ 1042.726401][T14410] usb 50-1: SetAddress Request (11) to port 0 [ 1042.726432][T14410] usb 50-1: new SuperSpeed USB device number 11 using vhci_hcd [ 1043.646104][T25775] vhci_hcd: connection reset by peer [ 1043.652933][ T4581] vhci_hcd vhci_hcd.8: stop threads [ 1043.652959][ T4581] vhci_hcd vhci_hcd.8: release socket [ 1043.652984][ T4581] vhci_hcd vhci_hcd.8: disconnect device [ 1047.823846][T14410] usb 50-1: device descriptor read/8, error -110 [ 1048.215174][T14410] usb usb50-port1: attempt power cycle [ 1048.774273][T14410] usb usb50-port1: unable to enumerate USB device