last executing test programs: 19m18.386880472s ago: executing program 32 (id=134): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x2b8bc000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) 19m11.283519045s ago: executing program 33 (id=158): syz_mount_image$ext4(&(0x7f0000001240)='ext4\x00', &(0x7f00000012c0)='./bus\x00', 0x404, &(0x7f0000001280)={[{@debug}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) pipe(&(0x7f0000000000)) 18m51.820789032s ago: executing program 34 (id=200): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xd) 18m48.143207112s ago: executing program 35 (id=208): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00'}, 0x65) sync() ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "2d5115", 0x8, 0x0, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@routing={0x32, 0x0, 0x1, 0x1, 0x11}]}}}}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) 18m41.738368066s ago: executing program 36 (id=216): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000ec0)=""/218, 0xda}], 0x1}, 0xcf}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0x4}], 0x3, 0x100, 0x0) 17m29.391881622s ago: executing program 37 (id=507): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000500)={0x335, @tick, 0x3, {0x6}, 0x40}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000000c0)={{0x7, 0x7f}, {0x10, 0x9}, 0x7ca, 0x1, 0x83}) 17m25.266526612s ago: executing program 38 (id=520): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x268) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f7000000", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 16m54.820475722s ago: executing program 39 (id=627): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 16m49.435017206s ago: executing program 40 (id=644): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32], 0x4) 16m44.468800767s ago: executing program 41 (id=654): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000003c0)={0x0, 0xfff, 0x3}) 16m28.864393741s ago: executing program 42 (id=679): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='.\x00', 0x0, 0x1b03088, 0x0) 16m21.467520472s ago: executing program 43 (id=686): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.impure\x00') 16m11.065789721s ago: executing program 44 (id=696): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee5, 0x30, 0xffffffffffffffff, 0x15b4f000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000600)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) utime(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000200)={0xffffffffffffffff, 0x5}) 12m28.775780734s ago: executing program 49 (id=1600): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 12m0.782288048s ago: executing program 50 (id=1712): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x1}}, 0x10, 0x0}, 0x40848) 11m54.070450787s ago: executing program 51 (id=1727): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000001000390400"/20, @ANYRES32, @ANYBLOB="08a1040000000000300016802c0001"], 0x58}}, 0x0) 11m49.54379858s ago: executing program 52 (id=1735): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 11m44.303494461s ago: executing program 53 (id=1746): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) 11m39.466684271s ago: executing program 54 (id=1752): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x800000000000002, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000d"], 0x48) socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x28, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESOCT=r0], 0x20) 10m22.543771504s ago: executing program 55 (id=2011): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=r1, @ANYBLOB="ed"], 0x20) 10m4.351911441s ago: executing program 56 (id=2083): syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x100c085, &(0x7f0000000d00)=ANY=[@ANYRES8=0x0, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d"], 0x10, 0x7f4, &(0x7f0000000e40)="$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") rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0\x00') 9m57.457381064s ago: executing program 57 (id=2092): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000600)=0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r3, 0x407, 0x100004) socket$nl_audit(0x10, 0x3, 0x9) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) fcntl$lock(r1, 0x26, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 9m51.354752829s ago: executing program 58 (id=2103): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x7f, 0xfffffffe}}, 0x120) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00'}, 0x10) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xa}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x28}}, 0x40000) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 7m11.118949692s ago: executing program 59 (id=2864): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 6m45.080471848s ago: executing program 60 (id=2942): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) sendfile(r2, r1, &(0x7f00000002c0)=0xb, 0x8) socket$kcm(0x10, 0x2, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b8920000000109029009020000000009"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000040)=""/185) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 6m21.045982982s ago: executing program 61 (id=2980): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KDENABIO(r0, 0x4b36) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x58, 0x1c, 0x29, 0x8, 0xb57, 0x8528, 0x6d39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x1, 0x0, 0xb, [{{0x9, 0x4, 0xc8, 0x2, 0x1, 0x3, 0x1, 0x2, 0x3, [], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x5, 0x0, 0x8}}]}}]}}]}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x21, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) syz_io_uring_setup(0x1f97, &(0x7f0000000380)={0x0, 0xe244, 0x13580}, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') r8 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) lseek(r7, 0x2000, 0x2) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000280)={0x0, @rc={0x1f, @any, 0x1a}, @tipc=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x7}}, @qipcrtr={0x2a, 0x0, 0x1}, 0x200, 0x0, 0x0, 0x0, 0x50b7, 0x0, 0x7, 0x9, 0x7f}) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r4) sync() 6m18.261496265s ago: executing program 62 (id=2983): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), r3, 0x0, 0x1, 0x4}}, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x80000000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x1, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x2, 0x2) ioctl$VHOST_VDPA_GET_CONFIG(r5, 0x8008af73, &(0x7f0000000380)={0x0, 0xb0, ""/176}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000002c0)) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 4m40.834817039s ago: executing program 1 (id=3296): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x17) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 4m40.348709079s ago: executing program 1 (id=3298): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000140), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000002880)="f40fc240", 0x4, 0xfffffffffffffffb) r2 = add_key$user(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x3}, &(0x7f0000001400)="01ececd1e0055f9761df25b51d1e672615765a31eda6580ec368189ca8cca97daf8dff7dd4042a45ed0d4c77262ee203b0520c8778a217e62874d8ebb38ef913de6b1ada2e2a85ae3ea93a81a06a3afdacc1e27a564f02969886ad749f2e2a01e9ddf16f05a9f874e6de177f245b62cca4a9136a32813fedc25d3aaeb37c04d68e2a13df9dbba4729820d13f9c6d9ea9d379127af6a84684aed5bb857b06f0053ad847cc8b7ec92b5098f1675277ab21f83eca69cf48dfacbdc569", 0xbb, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r0, r2, r1}, &(0x7f0000000180)=""/4093, 0xffd, 0x0) 4m39.664010319s ago: executing program 1 (id=3299): r0 = syz_io_uring_setup(0x10c6, &(0x7f0000000b40)={0x0, 0xbdee, 0x800, 0x400001, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r0, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) 4m38.810539904s ago: executing program 1 (id=3300): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x224) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) 4m38.13558172s ago: executing program 1 (id=3307): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000001a40)=""/4103, 0x1007}, {&(0x7f0000002c40)=""/190, 0xbe}], 0x3}, 0x12}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)=""/199, 0xc7}, {&(0x7f0000001940)=""/229, 0xe5}, {&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000002d40)=""/4071, 0xfe7}, {&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000500)=""/237, 0xed}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x827}], 0x5, 0x10102, 0x0) 4m37.517646662s ago: executing program 1 (id=3310): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @remote, 0xd}, 0x1c) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000006902"]) 4m35.681172063s ago: executing program 63 (id=3310): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @remote, 0xd}, 0x1c) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000006902"]) 3m15.625672619s ago: executing program 4 (id=3568): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)={0x20, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x65}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x3139935af5e37c60}, 0x40480d0) 3m15.006112665s ago: executing program 4 (id=3572): mmap(&(0x7f0000702000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ff90000000000000100000850000007b00000095"], &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='io_uring_create\x00', r0, 0x0, 0x39c4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x1fffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000012c0)='io_uring_create\x00', r1}, 0x18) syz_io_uring_setup(0x1113, &(0x7f0000000280)={0x0, 0xb44a, 0x0, 0x0, 0x21e}, &(0x7f0000000000), &(0x7f0000000040)) 3m14.58338083s ago: executing program 4 (id=3574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 3m14.120099076s ago: executing program 4 (id=3577): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x224) r2 = syz_pidfd_open(0x0, 0x0) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) 3m12.947041447s ago: executing program 4 (id=3581): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 3m12.158914298s ago: executing program 4 (id=3584): mmap(&(0x7f0000702000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ff90000000000000100000850000007b00000095"], &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='io_uring_create\x00', r0, 0x0, 0x39c4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x1fffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000012c0)='io_uring_create\x00', r1}, 0x18) syz_io_uring_setup(0x1113, &(0x7f0000000280)={0x0, 0xb44a, 0x0, 0x0, 0x21e}, &(0x7f0000000000), &(0x7f0000000040)) 3m9.499079335s ago: executing program 64 (id=3584): mmap(&(0x7f0000702000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ff90000000000000100000850000007b00000095"], &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='io_uring_create\x00', r0, 0x0, 0x39c4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x1fffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000012c0)='io_uring_create\x00', r1}, 0x18) syz_io_uring_setup(0x1113, &(0x7f0000000280)={0x0, 0xb44a, 0x0, 0x0, 0x21e}, &(0x7f0000000000), &(0x7f0000000040)) 2m44.485724654s ago: executing program 5 (id=3677): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x8301, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) r3 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000cc0)={0x0, 0x0, {0xfffff982, 0x8, 0x300f, 0x3, 0x7, 0x0, 0x2, 0x4}}) socket(0x2b, 0x80801, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000580)=ANY=[@ANYRES8=r2, @ANYRESHEX=r3, @ANYBLOB="43ea1e5826391df797f84a34408f01bbee64c7385f200ce050dbe941e73d360331b04fb4f1826055b0c775d8cce469018a65bff79162ef7a3a0cef0af53a96fa7a97eb116c6a5c25d15a660f0b15fa351f988db114cb3a8ba5b78c342ac7fd63884ea62914284397f7e633c36e021646df2d4ad0c7615ea25a7062f32076e4a763409a1b88d44fc4bb7408286fe0de156d9936e350e9978d38e68409af969dcb91676314991e736ed73dd3b53030b8d28dd88cf347656bc905880696a1b553a05d5298a30b829c1fabe0b7e5737d48", @ANYRESOCT=r0, @ANYRES16, @ANYRESHEX, @ANYRESHEX=r3, @ANYRESOCT=r2, @ANYRES16=r3], 0x48) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0300000000eb"}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @mcast1, 0x5}, {0xa, 0x0, 0x0, @loopback}, r6}}, 0x48) 2m39.493366857s ago: executing program 9 (id=3691): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0200010203010902120001000000400904000000ff"], 0x0) socket$key(0xf, 0x3, 0x2) creat(&(0x7f0000000200)='./bus\x00', 0x84) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="00001100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m37.291480158s ago: executing program 9 (id=3693): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x9}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008840, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="00fd67c6d222406b096cc34801001000647418aaf9b90732f41ec9591b532723e017c8c54d863ecd9b0df09072030025c3a03ce14a48716ba2f4127d38d2129825d9fff7065d51f973ee7ad483b1b28e4aa696cd0d0000b1e1caee2a1ffdbff2b7601618da596d1db25ba3cd0e6c352a27bcb491e01f716712f22f38ce63658951ffe9c3e755a5669dfd0aa44a04dfd4e3df02b0bfd0781bc9607466d4fd536faac836e6252b3119c95587671b", 0xad, r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x4, &(0x7f0000000240)=[{0x3ff, 0x1, 0x9, 0x10}, {0x5, 0x9, 0x71, 0x2c800000}, {0x101, 0x3, 0x40}, {0x6, 0x0, 0x4}]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, 0x0, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x9, 0x15, "810000cc2b000000000000fa25ffff00ffffff"}) r7 = syz_open_pts(r6, 0x141601) fcntl$setstatus(r7, 0x4, 0x102800) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r5, 0xffffffffffffffff, 0x0) 2m36.420884966s ago: executing program 5 (id=3694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 2m35.802782312s ago: executing program 5 (id=3697): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000004300)="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", 0x39a}], 0x1}}], 0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m35.139519657s ago: executing program 5 (id=3701): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x224) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) 2m33.784705526s ago: executing program 5 (id=3706): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010298375720e10655a115b60102036509021b00010410200809040a07010300000409050a0300020d0605198cfdb97d1df053191b63d77f0ccdefe80a09c7339baaf2674919371a03eca2e94ba137f19e2a1d5c2f3847b62ba626a14f8d0916b3e0a5e3c7e4"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 2m32.734822465s ago: executing program 5 (id=3708): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = gettid() r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) write(r3, &(0x7f00000006c0)="240000001e005f0214fffffffffffff80700000001000000040000010500080002000000", 0x24) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000680)={0x6, 0xffffffffffffffff, 'id1\x00'}) sendmsg$key(r7, &(0x7f00000014c0)={0x300, 0x0, 0x0}, 0x4000010) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008840}, 0x4000) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x8, @mcast1, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 2m28.682115122s ago: executing program 65 (id=3708): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = gettid() r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) write(r3, &(0x7f00000006c0)="240000001e005f0214fffffffffffff80700000001000000040000010500080002000000", 0x24) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000680)={0x6, 0xffffffffffffffff, 'id1\x00'}) sendmsg$key(r7, &(0x7f00000014c0)={0x300, 0x0, 0x0}, 0x4000010) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008840}, 0x4000) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x8, @mcast1, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 2m28.55925449s ago: executing program 9 (id=3713): arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f325, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r1, 0x0, 0x40000120) 2m28.070612219s ago: executing program 7 (id=3715): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) recvmmsg(r6, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x1}, 0x3}], 0x1, 0x0, 0x0) 2m27.759840056s ago: executing program 9 (id=3716): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x224) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) 2m26.187106289s ago: executing program 9 (id=3719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 2m24.781950882s ago: executing program 9 (id=3723): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000000000000e010000702d7580792a2efa0e0000001000000000000000100100000e466d722a7f02f6ae5fc44d590fd4c3000000"], 0x20}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020000002d00010026bd7000fcdbdf250400000008000c00d5488ac2", @ANYRES32=r4, @ANYBLOB="0a001680e5e13de83db30000"], 0x28}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r7 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r7, 0xbc4cd000) read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x20000000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000000000005010040"]) socket$kcm(0x10, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x0, 0x2, {0xffffffffffffffff}, {0xee00}, 0x2, 0xcb85}) 2m24.667605278s ago: executing program 7 (id=3724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) 2m21.625823316s ago: executing program 66 (id=3723): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000000000000e010000702d7580792a2efa0e0000001000000000000000100100000e466d722a7f02f6ae5fc44d590fd4c3000000"], 0x20}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020000002d00010026bd7000fcdbdf250400000008000c00d5488ac2", @ANYRES32=r4, @ANYBLOB="0a001680e5e13de83db30000"], 0x28}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r7 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r7, 0xbc4cd000) read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x20000000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000000000005010040"]) socket$kcm(0x10, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x0, 0x2, {0xffffffffffffffff}, {0xee00}, 0x2, 0xcb85}) 2m21.510218451s ago: executing program 7 (id=3726): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2) 2m20.855874166s ago: executing program 7 (id=3728): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x224) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) 2m19.449764371s ago: executing program 7 (id=3730): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x8301, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) r3 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000cc0)={0x0, 0x0, {0xfffff982, 0x8, 0x300f, 0x3, 0x7, 0x0, 0x2, 0x4}}) socket(0x2b, 0x80801, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000580)=ANY=[@ANYRES8=r2, @ANYRESHEX=r3, @ANYBLOB="43ea1e5826391df797f84a34408f01bbee64c7385f200ce050dbe941e73d360331b04fb4f1826055b0c775d8cce469018a65bff79162ef7a3a0cef0af53a96fa7a97eb116c6a5c25d15a660f0b15fa351f988db114cb3a8ba5b78c342ac7fd63884ea62914284397f7e633c36e021646df2d4ad0c7615ea25a7062f32076e4a763409a1b88d44fc4bb7408286fe0de156d9936e350e9978d38e68409af969dcb91676314991e736ed73dd3b53030b8d28dd88cf347656bc905880696a1b553a05d5298a30b829c1fabe0b7e5737d48", @ANYRESOCT=r0, @ANYRES16, @ANYRESHEX, @ANYRESHEX=r3, @ANYRESOCT=r2, @ANYRES16=r3], 0x48) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0300000000eb"}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @mcast1, 0x5}, {0xa, 0x0, 0x0, @loopback}, r6}}, 0x48) 2m18.863466742s ago: executing program 7 (id=3732): read$usbfs(0xffffffffffffffff, &(0x7f0000000300)=""/113, 0x71) 2m16.294762732s ago: executing program 67 (id=3732): read$usbfs(0xffffffffffffffff, &(0x7f0000000300)=""/113, 0x71) 13.13982676s ago: executing program 8 (id=4065): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x8, 0x80001) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x4, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) 12.480175704s ago: executing program 8 (id=4067): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x80, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) 11.681965334s ago: executing program 8 (id=4069): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 8.966672976s ago: executing program 2 (id=4076): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="34000000020000010040030000000000d96e6c8d5e85"], 0x34}], 0x1}, 0x0) 8.157029304s ago: executing program 2 (id=4078): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000001980)="$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") ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48050}, 0x40004) recvmmsg(r5, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x2}, 0x3}], 0x1, 0x0, 0x0) 7.842810876s ago: executing program 0 (id=4079): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x80, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) 7.004094302s ago: executing program 0 (id=4080): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x224) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) 5.625833984s ago: executing program 2 (id=4082): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="4800000015", 0x5}], 0x1}, 0x0) 5.571063546s ago: executing program 0 (id=4083): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)) 5.110033769s ago: executing program 3 (id=4085): getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 4.940966197s ago: executing program 0 (id=4086): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xfffffffc, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) 4.445364684s ago: executing program 3 (id=4088): r0 = mq_open(0x0, 0x42, 0x0, 0x0) lseek(r0, 0x3, 0x3) 4.154059484s ago: executing program 6 (id=4089): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r2, {0x7, 0x27, 0x4, 0xffffffff913cd9b9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x20140318, 0x627f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x6, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x4000, 0xa000, 0xfffffffe, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3, {0x403, 0x0, 0x80003ff, 0xfff}}, 0x20) getdents64(r1, 0x0, 0x302) syz_fuse_handle_req(r0, &(0x7f0000008380)="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", 0x2000, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="10"], 0x0, 0x0, 0x0, 0x0}) 3.928079555s ago: executing program 3 (id=4090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000040000003b00000008000300", @ANYRES32, @ANYBLOB="43003300800cde00ffffffffffff080211"], 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x0) 3.538431776s ago: executing program 0 (id=4091): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.257621051s ago: executing program 3 (id=4092): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000001980)="$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") ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48050}, 0x40004) recvmmsg(r5, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x2}, 0x3}], 0x1, 0x0, 0x0) 2.774861549s ago: executing program 6 (id=4093): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) 1.928939242s ago: executing program 8 (id=4094): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x32, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp_addr={0x44, 0x4, 0x7f}, @rr={0x7, 0x3, 0xa6}]}}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.785951798s ago: executing program 6 (id=4095): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 1.648907137s ago: executing program 2 (id=4096): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0412"], 0xb) 1.389953644s ago: executing program 8 (id=4097): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYRES64=r0]) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x181083) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000100)={0x0, 0x7c, 0xfffffffffffffffd, 0x1, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x2e07, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x5}, 0x4) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 1.253741533s ago: executing program 6 (id=4098): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@empty, @in6=@remote, 0x0, 0x33, 0x0, 0x0, 0xa, 0x60, 0x30}, {0x0, 0x7f, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x200, 0xfeffffffffffffff}, {0x3, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60, 0x0, 0x0, 0xee01}, {0x0, 0x1000000000000401, 0x0, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x3, 0x0, 0x100000000007fff}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x3}, [@mark={0xc, 0x15, {0x35075b, 0x7}}]}, 0xc4}}, 0x0) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 1.253523229s ago: executing program 2 (id=4099): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 818.135309ms ago: executing program 3 (id=4100): ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000340)={0x0, 0x0, {0x7f, 0xfffe, 0x300f, 0x1, 0x0, 0x4, 0x0, 0x5}}) 788.444403ms ago: executing program 2 (id=4101): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xfffffffc, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) 655.74145ms ago: executing program 8 (id=4102): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x8, 0x3, &(0x7f00000001c0)={0xa, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 608.467445ms ago: executing program 6 (id=4103): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000004000040ac1e0101000000000000000000000000e000000200000000000000000000000004000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000010000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000007000000000000000000000000000000000000000000000000000000000400000000000000010000000000000a00100001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004804}, 0x4c050) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x80, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) 194.24144ms ago: executing program 3 (id=4104): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 82.353074ms ago: executing program 6 (id=4105): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xff) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000440), &(0x7f0000000340)="94c14146f79c29fb4016c9d17e8040b8940ebf9c2db88dbad8af3b5516979a57e80b5f5e73001f8713f6b1c051cb6d08d2d082ac6c01b7e858f2b274a79a870bfa354e6b301c26b9d484ee1c9e28c336d013be7aa5d3edc593293845a375dff3401004440c50360a68b8a16c1f3cfacd9c9b0ee79d30cde69f397089ca03919d41aa483f8891b1c5c038c530f6caf30b1f3c15d4f7c0f7964230aa7199d63b0237f18e5ca8d130516c031f4afacc6576ddacc3ec81898561154adce958145d74", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 0s ago: executing program 0 (id=4106): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) kernel console output (not intermixed with test programs): 0:0:0:syz0:0 is already present [ 1178.291056][T16048] syz_tun: entered allmulticast mode [ 1178.570904][T11295] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1178.609190][T16047] syz_tun: left allmulticast mode [ 1178.777307][T16053] bridge4: entered promiscuous mode [ 1178.811228][T11295] usb 5-1: device descriptor read/64, error -71 [ 1179.070557][T11295] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1179.240522][T11295] usb 5-1: device descriptor read/64, error -71 [ 1179.295030][T16060] loop2: detected capacity change from 0 to 2048 [ 1179.351284][T16060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1179.372149][T11295] usb usb5-port1: attempt power cycle [ 1179.391685][T16060] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1179.511735][T14834] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1179.683634][T14834] usb 10-1: Using ep0 maxpacket: 32 [ 1179.716728][T14834] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 1179.729211][T14834] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1179.750260][T11295] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1179.798609][T11295] usb 5-1: device descriptor read/8, error -71 [ 1179.869411][T16060] syzkaller0: entered promiscuous mode [ 1179.875276][T16060] syzkaller0: entered allmulticast mode [ 1179.895281][T14834] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 1179.904890][T14834] usb 10-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 1179.913644][T14834] usb 10-1: Product: syz [ 1179.918058][T14834] usb 10-1: Manufacturer: syz [ 1179.923057][T14834] usb 10-1: SerialNumber: syz [ 1179.961996][T14834] usb 10-1: config 0 descriptor?? [ 1180.160801][T11295] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1180.186091][T11295] usb 5-1: device descriptor read/8, error -71 [ 1180.193447][T14834] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1180.267388][T12028] usb 10-1: Failed to submit usb control message: -71 [ 1180.274820][T12028] usb 10-1: unable to send the bmi data to the device: -71 [ 1180.282487][T12028] usb 10-1: unable to get target info from device [ 1180.289196][T12028] usb 10-1: could not get target info (-71) [ 1180.295335][T12028] usb 10-1: could not probe fw (-71) [ 1180.302790][ T5862] usb 10-1: USB disconnect, device number 8 [ 1180.312886][T11295] usb usb5-port1: unable to enumerate USB device [ 1180.431373][T15778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1180.460750][T14834] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1180.627795][T14834] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1180.636269][T14834] usb 6-1: config 0 has no interface number 0 [ 1180.642977][T14834] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1180.652330][T14834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.687233][T14834] usb 6-1: config 0 descriptor?? [ 1180.708390][T14834] usb 6-1: selecting invalid altsetting 1 [ 1180.715205][T14834] dvb_ttusb_budget: ttusb_init_controller: error [ 1180.721850][T14834] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1180.964802][T14834] DVB: Unable to find symbol cx22700_attach() [ 1181.199660][T14834] DVB: Unable to find symbol tda10046_attach() [ 1181.206511][T14834] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1181.354770][T14834] usb 6-1: USB disconnect, device number 7 [ 1181.638951][T16085] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1181.961535][T16094] syz_tun: entered allmulticast mode [ 1182.279081][T16093] syz_tun: left allmulticast mode [ 1183.552652][T16109] loop9: detected capacity change from 0 to 2048 [ 1183.691127][T16109] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1183.729571][T16109] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1183.943483][T14834] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1184.010168][T11284] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1184.120682][T14834] usb 6-1: Using ep0 maxpacket: 32 [ 1184.150790][T14834] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 1184.163008][T14834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1184.229665][T16109] syzkaller0: entered promiscuous mode [ 1184.235627][T16109] syzkaller0: entered allmulticast mode [ 1184.279623][T11284] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1184.289581][T11284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.297976][T11284] usb 3-1: Product: syz [ 1184.302528][T11284] usb 3-1: Manufacturer: syz [ 1184.307334][T11284] usb 3-1: SerialNumber: syz [ 1184.353674][T14834] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 1184.363592][T14834] usb 6-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 1184.372169][T14834] usb 6-1: Product: syz [ 1184.376649][T14834] usb 6-1: Manufacturer: syz [ 1184.381583][T14834] usb 6-1: SerialNumber: syz [ 1184.408663][T11284] usb 3-1: config 0 descriptor?? [ 1184.498008][T14834] usb 6-1: config 0 descriptor?? [ 1184.648228][T11284] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1184.714188][T14834] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1184.830125][ T1095] usb 6-1: Failed to submit usb control message: -71 [ 1184.831779][T14834] usb 6-1: USB disconnect, device number 8 [ 1184.837100][ T1095] usb 6-1: unable to send the bmi data to the device: -71 [ 1184.850690][ T1095] usb 6-1: unable to get target info from device [ 1184.857405][ T1095] usb 6-1: could not get target info (-71) [ 1184.866661][ T1095] usb 6-1: could not probe fw (-71) [ 1185.183762][T14810] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.855507][ T5862] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1186.001355][ T5862] usb 10-1: device descriptor read/64, error -71 [ 1186.050097][T11295] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1186.204171][T11295] usb 6-1: device descriptor read/64, error -71 [ 1186.270076][ T5862] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1186.456797][ T5862] usb 10-1: device descriptor read/64, error -71 [ 1186.464388][T11295] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1186.574054][ T5862] usb usb10-port1: attempt power cycle [ 1186.610992][T11295] usb 6-1: device descriptor read/64, error -71 [ 1186.632580][T16136] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1186.724060][T11295] usb usb6-port1: attempt power cycle [ 1186.797114][T11284] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1186.825938][T11284] usb 3-1: USB disconnect, device number 2 [ 1186.945625][ T5862] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1186.978839][ T5862] usb 10-1: device descriptor read/8, error -71 [ 1187.090098][T11295] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1187.130185][T11295] usb 6-1: device descriptor read/8, error -71 [ 1187.230509][ T5862] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1187.270075][ T5862] usb 10-1: device descriptor read/8, error -71 [ 1187.372628][T11295] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1187.393925][ T5862] usb usb10-port1: unable to enumerate USB device [ 1187.442195][T11295] usb 6-1: device descriptor read/8, error -71 [ 1187.565616][T11295] usb usb6-port1: unable to enumerate USB device [ 1188.610362][T11295] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1188.828768][T11295] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1188.837506][T11295] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.848622][T11295] usb 3-1: config 0 has no interface number 0 [ 1188.908241][T16149] syzkaller0: entered promiscuous mode [ 1188.914056][T16149] syzkaller0: entered allmulticast mode [ 1188.971238][T11295] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1188.981135][T11295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.989385][T11295] usb 3-1: Product: syz [ 1188.994009][T11295] usb 3-1: Manufacturer: syz [ 1188.998829][T11295] usb 3-1: SerialNumber: syz [ 1189.117590][T11295] usb 3-1: config 0 descriptor?? [ 1189.179398][T11295] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22 [ 1190.675092][T11295] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1190.727802][T16166] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1190.882434][T14834] usb 3-1: USB disconnect, device number 3 [ 1190.894759][T11295] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1190.907406][T11295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.916690][T11295] usb 6-1: Product: syz [ 1190.921736][T11295] usb 6-1: Manufacturer: syz [ 1190.926532][T11295] usb 6-1: SerialNumber: syz [ 1191.043523][T11295] usb 6-1: config 0 descriptor?? [ 1191.295740][T11295] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1192.352521][T16184] loop2: detected capacity change from 0 to 2048 [ 1192.360545][T14834] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1192.432941][T16184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1192.467525][T16184] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1192.609271][T14834] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1192.621496][T14834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.630150][T14834] usb 5-1: Product: syz [ 1192.634524][T14834] usb 5-1: Manufacturer: syz [ 1192.639336][T14834] usb 5-1: SerialNumber: syz [ 1192.734103][T14834] usb 5-1: config 0 descriptor?? [ 1193.027199][T14834] hso 5-1:0.0: Failed to find BULK IN ep [ 1193.231262][T16184] syzkaller0: entered promiscuous mode [ 1193.236981][T16184] syzkaller0: entered allmulticast mode [ 1193.286004][T11284] usb 5-1: USB disconnect, device number 18 [ 1193.614695][T11295] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1193.630002][T11295] usb 6-1: USB disconnect, device number 13 [ 1193.751560][T15778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.224424][T16214] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1195.494482][T16218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3455'. [ 1196.008048][T16222] loop5: detected capacity change from 0 to 2048 [ 1196.151304][T16222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1196.202946][T11295] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1196.241271][T16222] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1196.341549][ T5862] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1196.391304][T11295] usb 3-1: Using ep0 maxpacket: 16 [ 1196.434728][T11295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.446605][T11295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1196.456734][T11295] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1196.470233][T11295] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1196.479522][T11295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.530734][T11295] usb 3-1: config 0 descriptor?? [ 1196.633291][ T5862] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1196.645665][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.655162][ T5862] usb 5-1: Product: syz [ 1196.659683][ T5862] usb 5-1: Manufacturer: syz [ 1196.664725][ T5862] usb 5-1: SerialNumber: syz [ 1196.745820][ T5862] usb 5-1: config 0 descriptor?? [ 1197.040676][T16222] syzkaller0: entered promiscuous mode [ 1197.050583][T16222] syzkaller0: entered allmulticast mode [ 1197.085653][ T5862] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1197.153424][T11295] HID 045e:07da: Invalid code 65791 type 1 [ 1197.232621][T11295] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0012/input/input6 [ 1197.538007][T11295] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1197.594818][T11295] usb 3-1: USB disconnect, device number 4 [ 1198.007520][T14705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1199.414384][ T5862] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1199.461560][ T5862] usb 5-1: USB disconnect, device number 19 [ 1199.664509][T16253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3468'. [ 1199.991654][T16258] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1201.854058][T16283] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3480'. [ 1202.279623][T16293] fuse: Bad value for 'fd' [ 1202.630569][ T5862] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1202.810007][ T5862] usb 10-1: Using ep0 maxpacket: 32 [ 1202.844541][ T5862] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1202.852846][ T5862] usb 10-1: too many configurations: 101, using maximum allowed: 8 [ 1202.933297][ T5862] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1202.941987][ T5862] usb 10-1: config 4 has no interface number 0 [ 1202.948497][ T5862] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1203.014756][ T5862] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1203.023810][ T5862] usb 10-1: config 4 has no interface number 0 [ 1203.031072][ T5862] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1203.095503][ T5862] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1203.104765][ T5862] usb 10-1: config 4 has no interface number 0 [ 1203.111355][ T5862] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1203.144050][ T5862] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1203.152913][ T5862] usb 10-1: config 4 has no interface number 0 [ 1203.159443][ T5862] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1203.183927][ T5862] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1203.195486][ T5862] usb 10-1: config 4 has no interface number 0 [ 1203.203068][ T5862] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1203.216531][ T5862] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1203.225522][ T5862] usb 10-1: config 4 has no interface number 0 [ 1203.232120][ T5862] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1203.253988][ T5862] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1203.262898][ T5862] usb 10-1: config 4 has no interface number 0 [ 1203.269322][ T5862] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1203.315954][ T5862] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1203.325086][ T5862] usb 10-1: config 4 has no interface number 0 [ 1203.331770][ T5862] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1203.370879][ T5862] usb 10-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=b6.15 [ 1203.380655][ T5862] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.388976][ T5862] usb 10-1: Product: syz [ 1203.393782][ T5862] usb 10-1: Manufacturer: syz [ 1203.401521][ T5862] usb 10-1: SerialNumber: syz [ 1203.419553][T14952] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1203.590135][T14952] usb 5-1: Using ep0 maxpacket: 16 [ 1203.611713][T14952] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1203.625562][T14952] usb 5-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 1203.635400][T14952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.694199][T14952] usb 5-1: config 0 descriptor?? [ 1203.767071][ T5862] radio-si470x 10-1:4.10: could not find interrupt in endpoint [ 1203.777056][ T5862] radio-si470x 10-1:4.10: probe with driver radio-si470x failed with error -5 [ 1203.787259][ T5862] usbhid 10-1:4.10: couldn't find an input interrupt endpoint [ 1203.809183][ T5862] usb 10-1: USB disconnect, device number 13 [ 1204.139528][T14952] usbhid 5-1:0.0: can't add hid device: -71 [ 1204.146562][T14952] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1204.185879][T14952] usb 5-1: USB disconnect, device number 20 [ 1204.570552][T16315] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3495'. [ 1205.252205][T16327] fuse: Bad value for 'fd' [ 1205.380505][ T30] audit: type=1800 audit(1754048732.595:1662): pid=16328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3497" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1206.094047][T16337] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1206.843848][T16340] sctp: failed to load transform for md5: -2 [ 1207.770107][ T5894] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1207.960187][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 1207.989296][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1207.997577][ T5894] usb 3-1: too many configurations: 101, using maximum allowed: 8 [ 1208.117589][ T5894] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1208.126334][ T5894] usb 3-1: config 4 has no interface number 0 [ 1208.132803][ T5894] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1208.252777][ T5894] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1208.261323][ T5894] usb 3-1: config 4 has no interface number 0 [ 1208.267655][ T5894] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1208.306042][ T5894] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1208.316326][ T5894] usb 3-1: config 4 has no interface number 0 [ 1208.323153][ T5894] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1208.333544][ T5894] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1208.341938][ T5894] usb 3-1: config 4 has no interface number 0 [ 1208.348284][ T5894] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1208.366953][ T5894] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1208.375559][ T5894] usb 3-1: config 4 has no interface number 0 [ 1208.381926][ T5894] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1208.427895][ T5894] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1208.436251][ T5894] usb 3-1: config 4 has no interface number 0 [ 1208.442935][ T5894] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1208.481052][ T5894] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1208.489469][ T5894] usb 3-1: config 4 has no interface number 0 [ 1208.495990][ T5894] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1208.547345][ T5894] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1208.555873][ T5894] usb 3-1: config 4 has no interface number 0 [ 1208.562264][ T5894] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1208.607888][ T5894] usb 3-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=b6.15 [ 1208.619960][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.628169][ T5894] usb 3-1: Product: syz [ 1208.633257][ T5894] usb 3-1: Manufacturer: syz [ 1208.638075][ T5894] usb 3-1: SerialNumber: syz [ 1209.114562][ T5894] radio-si470x 3-1:4.10: could not find interrupt in endpoint [ 1209.122728][ T5894] radio-si470x 3-1:4.10: probe with driver radio-si470x failed with error -5 [ 1209.135204][ T5894] usbhid 3-1:4.10: couldn't find an input interrupt endpoint [ 1209.206805][ T5894] usb 3-1: USB disconnect, device number 5 [ 1210.526395][T16357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3507'. [ 1210.970073][T14952] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1211.170592][T14952] usb 3-1: Using ep0 maxpacket: 16 [ 1211.226680][T14952] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1211.240640][T14952] usb 3-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 1211.249980][T14952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.379107][T14952] usb 3-1: config 0 descriptor?? [ 1211.842597][T14952] usbhid 3-1:0.0: can't add hid device: -71 [ 1211.849364][T14952] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1211.939238][T14952] usb 3-1: USB disconnect, device number 6 [ 1212.430149][T14952] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1212.677817][T14952] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1212.687300][T14952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.695609][T14952] usb 5-1: Product: syz [ 1212.699992][T14952] usb 5-1: Manufacturer: syz [ 1212.704731][T14952] usb 5-1: SerialNumber: syz [ 1212.814605][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.892486][T14952] usb 5-1: config 0 descriptor?? [ 1213.150158][T16363] fuse: Bad value for 'fd' [ 1213.166856][T14952] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1215.333300][T16380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3519'. [ 1215.384744][ T5894] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1215.437505][T14952] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1215.534963][T14952] usb 5-1: USB disconnect, device number 21 [ 1215.600441][ T5894] usb 10-1: Using ep0 maxpacket: 32 [ 1215.630206][ T5894] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1215.638313][ T5894] usb 10-1: too many configurations: 101, using maximum allowed: 8 [ 1215.702051][ T5894] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1215.711102][ T5894] usb 10-1: config 4 has no interface number 0 [ 1215.717501][ T5894] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1215.734334][T16382] fuse: Bad value for 'fd' [ 1215.770533][ T5894] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1215.778990][ T5894] usb 10-1: config 4 has no interface number 0 [ 1215.788303][ T5894] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1215.856880][ T5894] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1215.865633][ T5894] usb 10-1: config 4 has no interface number 0 [ 1215.872278][ T5894] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1215.945965][ T5894] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1215.954643][ T5894] usb 10-1: config 4 has no interface number 0 [ 1215.961172][ T5894] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1215.987833][ T5894] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1215.998365][ T5894] usb 10-1: config 4 has no interface number 0 [ 1216.005549][ T5894] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1216.030130][T11284] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1216.067494][ T5894] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1216.076178][ T5894] usb 10-1: config 4 has no interface number 0 [ 1216.082850][ T5894] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1216.109435][ T5894] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1216.117988][ T5894] usb 10-1: config 4 has no interface number 0 [ 1216.128513][ T5894] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1216.182122][ T5894] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1216.190725][ T5894] usb 10-1: config 4 has no interface number 0 [ 1216.199101][ T5894] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1216.220153][T11284] usb 3-1: Using ep0 maxpacket: 16 [ 1216.281749][T11284] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1216.295001][T11284] usb 3-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 1216.306155][T11284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.341360][ T5894] usb 10-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=b6.15 [ 1216.350934][ T5894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.359252][ T5894] usb 10-1: Product: syz [ 1216.363890][ T5894] usb 10-1: Manufacturer: syz [ 1216.368753][ T5894] usb 10-1: SerialNumber: syz [ 1216.382685][T11284] usb 3-1: config 0 descriptor?? [ 1216.749942][ T5894] radio-si470x 10-1:4.10: could not find interrupt in endpoint [ 1216.758430][ T5894] radio-si470x 10-1:4.10: probe with driver radio-si470x failed with error -5 [ 1216.769536][ T5894] usbhid 10-1:4.10: couldn't find an input interrupt endpoint [ 1216.879389][T11284] usbhid 3-1:0.0: can't add hid device: -71 [ 1216.886222][T11284] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1216.901900][ T5894] usb 10-1: USB disconnect, device number 14 [ 1216.971063][T11284] usb 3-1: USB disconnect, device number 7 [ 1218.523034][T16413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3533'. [ 1219.482894][T16418] loop4: detected capacity change from 0 to 2048 [ 1219.660111][T11284] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1219.666088][T16418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1219.768789][T16418] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1219.852006][T11284] usb 3-1: Using ep0 maxpacket: 32 [ 1219.895991][T11284] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1219.904341][T11284] usb 3-1: too many configurations: 101, using maximum allowed: 8 [ 1219.968580][T11284] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1219.977028][T11284] usb 3-1: config 4 has no interface number 0 [ 1219.986196][T11284] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1220.100539][T11284] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1220.108849][T11284] usb 3-1: config 4 has no interface number 0 [ 1220.115589][T11284] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1220.217587][T11284] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1220.226351][T11284] usb 3-1: config 4 has no interface number 0 [ 1220.232930][T11284] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1220.323178][T11284] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1220.331622][T11284] usb 3-1: config 4 has no interface number 0 [ 1220.338027][T11284] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1220.387483][T11284] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1220.397972][T11284] usb 3-1: config 4 has no interface number 0 [ 1220.404889][T11284] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1220.457727][T11284] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1220.466822][T11284] usb 3-1: config 4 has no interface number 0 [ 1220.473286][T11284] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1220.491585][T11284] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1220.502930][T11284] usb 3-1: config 4 has no interface number 0 [ 1220.509256][T11284] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1220.583597][T11284] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1220.592329][T11284] usb 3-1: config 4 has no interface number 0 [ 1220.601292][T11284] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1220.653159][T11284] usb 3-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=b6.15 [ 1220.663007][T11284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.671809][T11284] usb 3-1: Product: syz [ 1220.676186][T11284] usb 3-1: Manufacturer: syz [ 1220.684076][T11284] usb 3-1: SerialNumber: syz [ 1220.868629][T16418] syzkaller0: entered promiscuous mode [ 1220.874490][T16418] syzkaller0: entered allmulticast mode [ 1221.357178][T11284] radio-si470x 3-1:4.10: could not find interrupt in endpoint [ 1221.365431][T11284] radio-si470x 3-1:4.10: probe with driver radio-si470x failed with error -5 [ 1221.375074][T11284] usbhid 3-1:4.10: couldn't find an input interrupt endpoint [ 1221.399975][ T5894] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1221.455686][T11284] usb 3-1: USB disconnect, device number 8 [ 1221.586305][ T5894] usb 6-1: Using ep0 maxpacket: 16 [ 1221.616946][ T5894] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1221.632018][ T5894] usb 6-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 1221.642011][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.714785][ T5894] usb 6-1: config 0 descriptor?? [ 1221.746601][T12358] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1222.358701][T16437] fuse: Unknown parameter 'grou00000000000000000000' [ 1222.451762][ T5894] usbhid 6-1:0.0: can't add hid device: -71 [ 1222.458314][ T5894] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1222.516134][ T5894] usb 6-1: USB disconnect, device number 14 [ 1223.236103][T16446] loop2: detected capacity change from 0 to 164 [ 1223.348293][T16446] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1223.496455][T16446] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1223.815679][T14952] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1224.040748][T14952] usb 6-1: Using ep0 maxpacket: 16 [ 1224.101811][T14952] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1224.115120][T14952] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1224.124612][T14952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.232437][T14952] usb 6-1: config 0 descriptor?? [ 1224.322116][T14952] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input7 [ 1224.508638][ T5151] bcm5974 6-1:0.0: could not read from device [ 1224.535373][ T5151] bcm5974 6-1:0.0: could not read from device [ 1224.580321][ T5151] bcm5974 6-1:0.0: could not read from device [ 1224.619561][ T5151] bcm5974 6-1:0.0: could not read from device [ 1224.623334][T14952] usb 6-1: USB disconnect, device number 15 [ 1224.782133][T16456] loop4: detected capacity change from 0 to 2048 [ 1224.884920][T16456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1224.990372][T16456] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1226.553427][T12358] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1226.950218][T14952] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1227.026492][T16473] fuse: Unknown parameter 'grou00000000000000000000' [ 1227.141192][T14952] usb 6-1: Using ep0 maxpacket: 32 [ 1227.178479][T14952] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1227.186810][T14952] usb 6-1: too many configurations: 101, using maximum allowed: 8 [ 1227.244809][T14952] usb 6-1: config 4 has an invalid interface number: 10 but max is 0 [ 1227.256523][T14952] usb 6-1: config 4 has no interface number 0 [ 1227.263989][T14952] usb 6-1: config 4 interface 10 has no altsetting 0 [ 1227.392373][T14952] usb 6-1: config 4 has an invalid interface number: 10 but max is 0 [ 1227.401550][T14952] usb 6-1: config 4 has no interface number 0 [ 1227.407853][T14952] usb 6-1: config 4 interface 10 has no altsetting 0 [ 1227.493467][T14952] usb 6-1: config 4 has an invalid interface number: 10 but max is 0 [ 1227.502288][T14952] usb 6-1: config 4 has no interface number 0 [ 1227.508658][T14952] usb 6-1: config 4 interface 10 has no altsetting 0 [ 1227.573399][T14952] usb 6-1: config 4 has an invalid interface number: 10 but max is 0 [ 1227.582088][T14952] usb 6-1: config 4 has no interface number 0 [ 1227.588430][T14952] usb 6-1: config 4 interface 10 has no altsetting 0 [ 1227.654287][T14952] usb 6-1: config 4 has an invalid interface number: 10 but max is 0 [ 1227.666072][T14952] usb 6-1: config 4 has no interface number 0 [ 1227.673596][T14952] usb 6-1: config 4 interface 10 has no altsetting 0 [ 1227.718301][T14952] usb 6-1: config 4 has an invalid interface number: 10 but max is 0 [ 1227.726947][T14952] usb 6-1: config 4 has no interface number 0 [ 1227.733484][T14952] usb 6-1: config 4 interface 10 has no altsetting 0 [ 1227.800790][T14952] usb 6-1: config 4 has an invalid interface number: 10 but max is 0 [ 1227.809383][T14952] usb 6-1: config 4 has no interface number 0 [ 1227.815961][T14952] usb 6-1: config 4 interface 10 has no altsetting 0 [ 1227.822875][T16481] loop9: detected capacity change from 0 to 164 [ 1227.831833][ T5862] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1227.853947][T16481] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1227.916546][T14952] usb 6-1: config 4 has an invalid interface number: 10 but max is 0 [ 1227.925335][T14952] usb 6-1: config 4 has no interface number 0 [ 1227.931878][T14952] usb 6-1: config 4 interface 10 has no altsetting 0 [ 1227.962198][T16481] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1227.989142][T14952] usb 6-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=b6.15 [ 1227.998749][T14952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.007104][T14952] usb 6-1: Product: syz [ 1228.011689][T14952] usb 6-1: Manufacturer: syz [ 1228.016500][T14952] usb 6-1: SerialNumber: syz [ 1228.041733][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 1228.097047][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1228.110591][ T5862] usb 5-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 1228.125752][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.265802][ T5862] usb 5-1: config 0 descriptor?? [ 1228.477969][T14952] radio-si470x 6-1:4.10: could not find interrupt in endpoint [ 1228.491336][T14952] radio-si470x 6-1:4.10: probe with driver radio-si470x failed with error -5 [ 1228.501537][T14952] usbhid 6-1:4.10: couldn't find an input interrupt endpoint [ 1228.671720][T14952] usb 6-1: USB disconnect, device number 16 [ 1228.959637][ T5862] usbhid 5-1:0.0: can't add hid device: -71 [ 1228.966435][ T5862] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1229.030616][ T5862] usb 5-1: USB disconnect, device number 22 [ 1229.198018][T16491] loop9: detected capacity change from 0 to 2048 [ 1229.342364][T16491] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1229.420558][T16491] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1229.823214][T16505] fuse: Unknown parameter 'grou00000000000000000000' [ 1230.417652][T14810] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1230.654939][T16516] loop5: detected capacity change from 0 to 164 [ 1230.765086][T16516] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1230.893018][T16516] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1231.560393][ T5894] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1231.740871][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 1231.789322][ T5894] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1231.797505][ T5894] usb 6-1: too many configurations: 101, using maximum allowed: 8 [ 1231.840396][ T5894] usb 6-1: config 4 has an invalid interface number: 10 but max is 0 [ 1231.848762][ T5894] usb 6-1: config 4 has no interface number 0 [ 1231.855447][ T5894] usb 6-1: config 4 interface 10 has no altsetting 0 [ 1231.896366][ T5894] usb 6-1: config 4 has an invalid interface number: 10 but max is 0 [ 1231.905025][ T5894] usb 6-1: config 4 has no interface number 0 [ 1231.911516][ T5894] usb 6-1: config 4 interface 10 has no altsetting 0 [ 1232.002860][ T5894] usb 6-1: config 4 has an invalid interface number: 10 but max is 0 [ 1232.011843][ T5894] usb 6-1: config 4 has no interface number 0 [ 1232.018169][ T5894] usb 6-1: config 4 interface 10 has no altsetting 0 [ 1232.063719][ T5894] usb 6-1: config 4 has an invalid interface number: 10 but max is 0 [ 1232.074990][ T5894] usb 6-1: config 4 has no interface number 0 [ 1232.082391][ T5894] usb 6-1: config 4 interface 10 has no altsetting 0 [ 1232.110220][ T5894] usb 6-1: config 4 has an invalid interface number: 10 but max is 0 [ 1232.118661][ T5894] usb 6-1: config 4 has no interface number 0 [ 1232.125189][ T5894] usb 6-1: config 4 interface 10 has no altsetting 0 [ 1232.203671][ T5894] usb 6-1: config 4 has an invalid interface number: 10 but max is 0 [ 1232.212317][ T5894] usb 6-1: config 4 has no interface number 0 [ 1232.218653][ T5894] usb 6-1: config 4 interface 10 has no altsetting 0 [ 1232.295019][ T5894] usb 6-1: config 4 has an invalid interface number: 10 but max is 0 [ 1232.303745][ T5894] usb 6-1: config 4 has no interface number 0 [ 1232.310352][ T5894] usb 6-1: config 4 interface 10 has no altsetting 0 [ 1232.370720][ T5894] usb 6-1: config 4 has an invalid interface number: 10 but max is 0 [ 1232.381922][ T5894] usb 6-1: config 4 has no interface number 0 [ 1232.388337][ T5894] usb 6-1: config 4 interface 10 has no altsetting 0 [ 1232.427568][T16533] fuse: Unknown parameter 'group_i00000000000000000000' [ 1232.503747][ T5894] usb 6-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=b6.15 [ 1232.513358][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.521807][ T5894] usb 6-1: Product: syz [ 1232.526205][ T5894] usb 6-1: Manufacturer: syz [ 1232.531172][ T5894] usb 6-1: SerialNumber: syz [ 1232.892418][ T5894] radio-si470x 6-1:4.10: could not find interrupt in endpoint [ 1232.900716][ T5894] radio-si470x 6-1:4.10: probe with driver radio-si470x failed with error -5 [ 1232.910431][ T5894] usbhid 6-1:4.10: couldn't find an input interrupt endpoint [ 1232.976141][ T5894] usb 6-1: USB disconnect, device number 17 [ 1233.014214][T12026] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.025988][T12026] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1233.248730][T16541] loop2: detected capacity change from 0 to 2048 [ 1233.267139][T12026] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.278094][T12026] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1233.433323][T16541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1233.436956][T12026] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.458031][T12026] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1233.478002][T16541] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1233.575848][T12026] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.587584][T12026] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1234.105280][T12026] bridge_slave_1: left allmulticast mode [ 1234.111504][T12026] bridge_slave_1: left promiscuous mode [ 1234.122924][T12026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.228748][T12026] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1236.288386][T12026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1236.348372][T12026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1236.405591][T12026] bond0 (unregistering): Released all slaves [ 1236.430790][T12026] bond1 (unregistering): Released all slaves [ 1236.637600][T12026] bond2 (unregistering): Released all slaves [ 1236.688241][T12026] bond3 (unregistering): Released all slaves [ 1236.712535][T12026] bond4 (unregistering): Released all slaves [ 1236.737653][T12026] bond5 (unregistering): Released all slaves [ 1236.883238][ T5894] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1237.135715][ T5894] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1237.144531][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.154984][ T5894] usb 6-1: config 0 has no interface number 0 [ 1237.266133][T15778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.318894][ T5894] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1237.328875][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.337417][ T5894] usb 6-1: Product: syz [ 1237.341918][ T5894] usb 6-1: Manufacturer: syz [ 1237.346722][ T5894] usb 6-1: SerialNumber: syz [ 1237.387358][ T5894] usb 6-1: config 0 descriptor?? [ 1237.406953][T15996] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1237.427212][T15996] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1237.437937][T15996] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1237.461317][T15996] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1237.479367][ T5894] uvcvideo 6-1:0.64: probe with driver uvcvideo failed with error -22 [ 1237.520789][T15996] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1237.610943][ T5894] usb 6-1: USB disconnect, device number 18 [ 1237.684978][T12026] hsr_slave_0: left promiscuous mode [ 1237.715671][T12026] hsr_slave_1: left promiscuous mode [ 1237.725373][T12026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1237.738684][T12026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1237.751682][T12026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1237.759279][T12026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1237.777408][T12026] veth1_macvtap: left promiscuous mode [ 1237.783741][T12026] veth0_macvtap: left promiscuous mode [ 1237.789670][T12026] veth1_vlan: left promiscuous mode [ 1237.795356][T12026] veth0_vlan: left promiscuous mode [ 1238.447781][T12026] team0 (unregistering): Port device team_slave_1 removed [ 1238.570612][T12026] team0 (unregistering): Port device team_slave_0 removed [ 1238.671428][T16576] fuse: Unknown parameter 'group_i00000000000000000000' [ 1238.865064][T12026] lo (unregistering): left allmulticast mode [ 1239.564163][ T5809] Bluetooth: hci2: command tx timeout [ 1240.044001][T11284] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1240.240711][T11284] usb 3-1: Using ep0 maxpacket: 32 [ 1240.279470][T11284] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1240.288481][T11284] usb 3-1: too many configurations: 101, using maximum allowed: 8 [ 1240.334396][T11284] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1240.343492][T11284] usb 3-1: config 4 has no interface number 0 [ 1240.349988][T11284] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1240.470826][T11284] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1240.479270][T11284] usb 3-1: config 4 has no interface number 0 [ 1240.485800][T11284] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1240.630192][T11284] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1240.638574][T11284] usb 3-1: config 4 has no interface number 0 [ 1240.645058][T11284] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1240.742909][T11284] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1240.751449][T11284] usb 3-1: config 4 has no interface number 0 [ 1240.757813][T11284] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1240.801280][T16567] chnl_net:caif_netlink_parms(): no params data found [ 1240.846000][T11284] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1240.854627][T11284] usb 3-1: config 4 has no interface number 0 [ 1240.864297][T11284] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1240.932011][T11284] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1240.940516][T11284] usb 3-1: config 4 has no interface number 0 [ 1240.946862][T11284] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1241.026197][T11284] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1241.034792][T11284] usb 3-1: config 4 has no interface number 0 [ 1241.041381][T11284] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1241.066137][T11284] usb 3-1: config 4 has an invalid interface number: 10 but max is 0 [ 1241.075342][T11284] usb 3-1: config 4 has no interface number 0 [ 1241.084377][T11284] usb 3-1: config 4 interface 10 has no altsetting 0 [ 1241.165730][T11284] usb 3-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=b6.15 [ 1241.175236][T11284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.186285][T11284] usb 3-1: Product: syz [ 1241.191715][T11284] usb 3-1: Manufacturer: syz [ 1241.196535][T11284] usb 3-1: SerialNumber: syz [ 1241.279297][T16595] loop5: detected capacity change from 0 to 2048 [ 1241.425351][T16595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1241.468992][T16595] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1241.560804][T11284] radio-si470x 3-1:4.10: could not find interrupt in endpoint [ 1241.568956][T11284] radio-si470x 3-1:4.10: probe with driver radio-si470x failed with error -5 [ 1241.579187][T11284] usbhid 3-1:4.10: couldn't find an input interrupt endpoint [ 1241.640142][ T5809] Bluetooth: hci2: command tx timeout [ 1241.658540][T11284] usb 3-1: USB disconnect, device number 9 [ 1242.713310][T14705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1242.720448][T16616] fuse: Unknown parameter 'group_i00000000000000000000' [ 1242.768958][T16567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.777526][T16567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.785435][T16567] bridge_slave_0: entered allmulticast mode [ 1242.795321][T16567] bridge_slave_0: entered promiscuous mode [ 1242.840971][T16567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.848563][T16567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.856544][T16567] bridge_slave_1: entered allmulticast mode [ 1242.866568][T16567] bridge_slave_1: entered promiscuous mode [ 1242.978014][ T5862] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1243.168068][ T5862] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 1243.176832][ T5862] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.184555][T16567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1243.187469][ T5862] usb 10-1: config 0 has no interface number 0 [ 1243.268044][ T5862] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1243.278491][ T5862] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.287126][ T5862] usb 10-1: Product: syz [ 1243.291721][ T5862] usb 10-1: Manufacturer: syz [ 1243.296626][ T5862] usb 10-1: SerialNumber: syz [ 1243.321877][T16567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1243.376897][ T5862] usb 10-1: config 0 descriptor?? [ 1243.397084][ T5862] uvcvideo 10-1:0.64: probe with driver uvcvideo failed with error -22 [ 1243.583647][T16567] team0: Port device team_slave_0 added [ 1243.610538][ T5862] usb 10-1: USB disconnect, device number 15 [ 1243.666034][T16567] team0: Port device team_slave_1 added [ 1243.720359][ T5809] Bluetooth: hci2: command tx timeout [ 1243.905818][T16567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1243.913494][T16567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1243.941465][T16567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1244.058897][T16567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1244.067214][T16567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1244.094955][T16567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1244.437354][T16567] hsr_slave_0: entered promiscuous mode [ 1244.454346][T16567] hsr_slave_1: entered promiscuous mode [ 1244.468075][T16567] debugfs: 'hsr0' already exists in 'hsr' [ 1244.474213][T16567] Cannot create hsr debugfs directory [ 1244.796319][T16640] loop9: detected capacity change from 0 to 2048 [ 1244.871689][T16640] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1244.892075][T16640] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1245.085119][T16647] fuse: Unknown parameter 'group_id00000000000000000000' [ 1245.802079][ T5809] Bluetooth: hci2: command tx timeout [ 1246.074755][T14810] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.190151][T11284] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1246.292305][T16567] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1246.327491][T16567] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1246.355687][T16567] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1246.388024][T16567] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1246.420607][T11284] usb 3-1: Using ep0 maxpacket: 16 [ 1246.470292][T11284] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1246.483725][T11284] usb 3-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 1246.493215][T11284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.572598][T11284] usb 3-1: config 0 descriptor?? [ 1247.219177][T11284] usbhid 3-1:0.0: can't add hid device: -71 [ 1247.230885][T11284] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1247.272871][T11284] usb 3-1: USB disconnect, device number 10 [ 1247.321461][T16567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1247.456141][T16567] 8021q: adding VLAN 0 to HW filter on device team0 [ 1247.520413][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.527972][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1247.637998][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.645721][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1248.500245][ T5862] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1248.725504][ T5862] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1248.734844][ T5862] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.745511][ T5862] usb 3-1: config 0 has no interface number 0 [ 1248.853188][ T5862] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1248.865784][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.875144][ T5862] usb 3-1: Product: syz [ 1248.879519][ T5862] usb 3-1: Manufacturer: syz [ 1248.884594][ T5862] usb 3-1: SerialNumber: syz [ 1248.995997][ T5862] usb 3-1: config 0 descriptor?? [ 1249.029199][ T5862] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22 [ 1249.049512][T16681] fuse: Unknown parameter 'group_id00000000000000000000' [ 1249.281681][T14952] usb 3-1: USB disconnect, device number 11 [ 1249.415965][T16683] loop5: detected capacity change from 0 to 2048 [ 1249.592477][T16683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1249.627672][T16683] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1249.927048][T16567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.350509][T11284] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1250.564363][T11284] usb 10-1: Using ep0 maxpacket: 16 [ 1250.662206][T11284] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1250.675868][T11284] usb 10-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 1250.687648][T11284] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.795968][T11284] usb 10-1: config 0 descriptor?? [ 1250.864315][T14705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.508424][T11284] usbhid 10-1:0.0: can't add hid device: -71 [ 1251.515484][T11284] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1251.577888][T11284] usb 10-1: USB disconnect, device number 16 [ 1251.787661][T16719] fuse: Unknown parameter 'group_id00000000000000000000' [ 1252.361706][T16567] veth0_vlan: entered promiscuous mode [ 1252.470487][T16567] veth1_vlan: entered promiscuous mode [ 1252.817918][T16567] veth0_macvtap: entered promiscuous mode [ 1252.938995][T16567] veth1_macvtap: entered promiscuous mode [ 1253.198625][T16567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1253.295900][T16567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1253.392491][T12026] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.455664][T12026] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.504445][T12026] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.537499][T12026] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.367015][T16733] syzkaller0: entered promiscuous mode [ 1254.372902][T16733] syzkaller0: entered allmulticast mode [ 1254.662364][T16745] fuse: Bad value for 'user_id' [ 1254.667630][T16745] fuse: Bad value for 'user_id' [ 1255.420220][ T5862] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1255.610415][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 1255.663826][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1255.677217][ T5862] usb 3-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 1255.686884][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.766935][ T5862] usb 3-1: config 0 descriptor?? [ 1255.920329][T16759] syz_tun: entered allmulticast mode [ 1256.494721][ T5862] usbhid 3-1:0.0: can't add hid device: -71 [ 1256.501734][ T5862] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1256.514379][ T5862] usb 3-1: USB disconnect, device number 12 [ 1257.427245][T16779] fuse: Bad value for 'user_id' [ 1257.432817][T16779] fuse: Bad value for 'user_id' [ 1257.660704][ T5862] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1257.904933][ T5862] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1257.914822][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.923169][ T5862] usb 6-1: Product: syz [ 1257.927537][ T5862] usb 6-1: Manufacturer: syz [ 1257.932501][ T5862] usb 6-1: SerialNumber: syz [ 1258.004358][ T5862] usb 6-1: config 0 descriptor?? [ 1258.311863][ T5862] hso 6-1:0.0: Failed to find BULK IN ep [ 1258.528440][ T5862] usb 6-1: USB disconnect, device number 19 [ 1258.825878][T12024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1258.834263][T12024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1258.950209][T12024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1258.958445][T12024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1259.576629][T16808] fuse: Bad value for 'fd' [ 1260.108374][T16813] fuse: Bad value for 'user_id' [ 1260.113846][T16813] fuse: Bad value for 'user_id' [ 1261.152823][ T5862] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1261.358392][ T5862] usb 10-1: Using ep0 maxpacket: 32 [ 1261.388021][ T5862] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1261.396471][ T5862] usb 10-1: too many configurations: 101, using maximum allowed: 8 [ 1261.470742][T14952] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1261.500593][ T5862] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1261.509154][ T5862] usb 10-1: config 4 has no interface number 0 [ 1261.515667][ T5862] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1261.554200][ T5862] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1261.566088][ T5862] usb 10-1: config 4 has no interface number 0 [ 1261.573795][ T5862] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1261.611541][ T5862] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1261.620233][ T5862] usb 10-1: config 4 has no interface number 0 [ 1261.626627][ T5862] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1261.667635][ T5862] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1261.676418][ T5862] usb 10-1: config 4 has no interface number 0 [ 1261.682817][ T5862] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1261.711568][T14952] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1261.720942][T14952] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.729189][T14952] usb 8-1: Product: syz [ 1261.733693][T14952] usb 8-1: Manufacturer: syz [ 1261.738412][T14952] usb 8-1: SerialNumber: syz [ 1261.770520][ T5862] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1261.778946][ T5862] usb 10-1: config 4 has no interface number 0 [ 1261.785348][ T5862] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1261.806087][T14952] usb 8-1: config 0 descriptor?? [ 1261.832602][ T5862] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1261.841234][ T5862] usb 10-1: config 4 has no interface number 0 [ 1261.847665][ T5862] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1261.917035][ T5862] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1261.925773][ T5862] usb 10-1: config 4 has no interface number 0 [ 1261.932598][ T5862] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1261.966164][ T5862] usb 10-1: config 4 has an invalid interface number: 10 but max is 0 [ 1261.977529][ T5862] usb 10-1: config 4 has no interface number 0 [ 1261.984847][ T5862] usb 10-1: config 4 interface 10 has no altsetting 0 [ 1262.011235][ T5862] usb 10-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=b6.15 [ 1262.020836][ T5862] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.029158][ T5862] usb 10-1: Product: syz [ 1262.033732][ T5862] usb 10-1: Manufacturer: syz [ 1262.038630][ T5862] usb 10-1: SerialNumber: syz [ 1262.112234][T14952] hso 8-1:0.0: Failed to find BULK IN ep [ 1262.325666][ T5894] usb 8-1: USB disconnect, device number 2 [ 1262.375280][ T5862] radio-si470x 10-1:4.10: could not find interrupt in endpoint [ 1262.388511][ T5862] radio-si470x 10-1:4.10: probe with driver radio-si470x failed with error -5 [ 1262.399070][ T5862] usbhid 10-1:4.10: couldn't find an input interrupt endpoint [ 1262.509932][ T5862] usb 10-1: USB disconnect, device number 17 [ 1262.935973][T16829] warning: `syz.5.3677' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1263.459403][T16840] fuse: Bad value for 'fd' [ 1263.769332][T16842] syz_tun: entered allmulticast mode [ 1264.224466][T16845] loop7: detected capacity change from 0 to 2048 [ 1264.339656][T16845] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1264.400291][T16845] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1264.959540][T16854] syzkaller0: entered promiscuous mode [ 1264.965407][T16854] syzkaller0: entered allmulticast mode [ 1265.717149][T16567] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.211934][T16865] fuse: Bad value for 'fd' [ 1266.320769][ T5894] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1266.562744][ T5894] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1266.572465][ T5894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.585136][ T5894] usb 10-1: Product: syz [ 1266.589599][ T5894] usb 10-1: Manufacturer: syz [ 1266.595669][ T5894] usb 10-1: SerialNumber: syz [ 1266.684757][ T5894] usb 10-1: config 0 descriptor?? [ 1266.953936][ T5894] hso 10-1:0.0: Failed to find BULK IN ep [ 1266.980090][ T5862] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1267.160927][ T5862] usb 8-1: Using ep0 maxpacket: 32 [ 1267.167370][T14952] usb 10-1: USB disconnect, device number 18 [ 1267.218452][ T5862] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1267.226862][ T5862] usb 8-1: too many configurations: 101, using maximum allowed: 8 [ 1267.277067][ T5862] usb 8-1: config 4 has an invalid interface number: 10 but max is 0 [ 1267.285875][ T5862] usb 8-1: config 4 has no interface number 0 [ 1267.296232][ T5862] usb 8-1: config 4 interface 10 has no altsetting 0 [ 1267.351424][ T5862] usb 8-1: config 4 has an invalid interface number: 10 but max is 0 [ 1267.360167][ T5862] usb 8-1: config 4 has no interface number 0 [ 1267.366481][ T5862] usb 8-1: config 4 interface 10 has no altsetting 0 [ 1267.422519][ T5862] usb 8-1: config 4 has an invalid interface number: 10 but max is 0 [ 1267.431057][ T5862] usb 8-1: config 4 has no interface number 0 [ 1267.437363][ T5862] usb 8-1: config 4 interface 10 has no altsetting 0 [ 1267.482644][ T5862] usb 8-1: config 4 has an invalid interface number: 10 but max is 0 [ 1267.491316][ T5862] usb 8-1: config 4 has no interface number 0 [ 1267.501471][ T5862] usb 8-1: config 4 interface 10 has no altsetting 0 [ 1267.539604][ T5862] usb 8-1: config 4 has an invalid interface number: 10 but max is 0 [ 1267.548450][ T5862] usb 8-1: config 4 has no interface number 0 [ 1267.554865][ T5862] usb 8-1: config 4 interface 10 has no altsetting 0 [ 1267.607382][ T5862] usb 8-1: config 4 has an invalid interface number: 10 but max is 0 [ 1267.616129][ T5862] usb 8-1: config 4 has no interface number 0 [ 1267.622680][ T5862] usb 8-1: config 4 interface 10 has no altsetting 0 [ 1267.695535][ T5862] usb 8-1: config 4 has an invalid interface number: 10 but max is 0 [ 1267.707619][ T5862] usb 8-1: config 4 has no interface number 0 [ 1267.715567][ T5862] usb 8-1: config 4 interface 10 has no altsetting 0 [ 1267.783216][ T5862] usb 8-1: config 4 has an invalid interface number: 10 but max is 0 [ 1267.791881][ T5862] usb 8-1: config 4 has no interface number 0 [ 1267.798192][ T5862] usb 8-1: config 4 interface 10 has no altsetting 0 [ 1267.866669][ T5862] usb 8-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=b6.15 [ 1267.876491][ T5862] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.885464][ T5862] usb 8-1: Product: syz [ 1267.889932][ T5862] usb 8-1: Manufacturer: syz [ 1267.894734][ T5862] usb 8-1: SerialNumber: syz [ 1268.251496][ T5862] radio-si470x 8-1:4.10: could not find interrupt in endpoint [ 1268.259519][ T5862] radio-si470x 8-1:4.10: probe with driver radio-si470x failed with error -5 [ 1268.271157][ T5862] usbhid 8-1:4.10: couldn't find an input interrupt endpoint [ 1268.375622][ T5862] usb 8-1: USB disconnect, device number 3 [ 1270.431330][T16891] fuse: Bad value for 'fd' [ 1270.883911][ T5862] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1270.954869][T16888] syzkaller0: entered promiscuous mode [ 1270.960635][T16888] syzkaller0: entered allmulticast mode [ 1271.307023][ T5862] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1271.316676][ T5862] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.325898][ T5862] usb 8-1: Product: syz [ 1271.330410][ T5862] usb 8-1: Manufacturer: syz [ 1271.335228][ T5862] usb 8-1: SerialNumber: syz [ 1271.481981][ T5862] usb 8-1: config 0 descriptor?? [ 1272.022828][ T5862] hso 8-1:0.0: Failed to find BULK IN ep [ 1272.240477][ T5862] usb 8-1: USB disconnect, device number 4 [ 1272.469286][T12028] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.480188][T12028] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1272.743632][T12028] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.754536][T12028] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1272.997111][T12028] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.008327][T12028] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1273.185404][T12028] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.196074][T12028] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1274.019297][T12028] bridge_slave_1: left allmulticast mode [ 1274.025511][T12028] bridge_slave_1: left promiscuous mode [ 1274.032324][T12028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.079125][T12028] bridge_slave_0: left allmulticast mode [ 1274.085185][T12028] bridge_slave_0: left promiscuous mode [ 1274.091617][T12028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.235440][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1275.271294][T12028] team0: Port device geneve2 removed [ 1275.463085][T12028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1275.541706][T12028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1275.582520][T12028] bond0 (unregistering): Released all slaves [ 1275.609089][T12028] bond1 (unregistering): Released all slaves [ 1276.280742][T15996] Bluetooth: hci1: command 0x0406 tx timeout [ 1277.043402][T16915] netlink: 'syz.9.3713': attribute type 29 has an invalid length. [ 1277.364257][T16918] fuse: Bad value for 'fd' [ 1277.660194][T12028] hsr_slave_0: left promiscuous mode [ 1277.686927][T12028] hsr_slave_1: left promiscuous mode [ 1277.695297][T12028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1277.703553][T12028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1277.801509][T12028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1277.809118][T12028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1277.968984][T12028] veth1_macvtap: left promiscuous mode [ 1277.975008][T12028] veth0_macvtap: left promiscuous mode [ 1277.982890][T12028] veth1_vlan: left promiscuous mode [ 1277.988461][T12028] veth0_vlan: left promiscuous mode [ 1277.991442][T16920] loop7: detected capacity change from 0 to 2048 [ 1278.367163][T15996] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1278.427001][T15996] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1278.442420][T15996] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1278.475179][T16920] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1278.503847][T15996] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1278.526166][T15996] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1278.529176][T16920] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1279.136641][T12028] team0 (unregistering): Port device team_slave_1 removed [ 1279.168728][T12028] team0 (unregistering): Port device team_slave_0 removed [ 1280.168879][T14810] syz_tun (unregistering): left allmulticast mode [ 1280.602796][T15996] Bluetooth: hci3: command tx timeout [ 1280.628907][ T1095] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.650267][T16567] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1280.745162][ T1095] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.925587][ T1095] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.166981][ T1095] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.665175][ T1095] bridge_slave_1: left allmulticast mode [ 1281.671451][ T1095] bridge_slave_1: left promiscuous mode [ 1281.678118][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.706217][ T1095] bridge_slave_0: left allmulticast mode [ 1281.712593][ T1095] bridge_slave_0: left promiscuous mode [ 1281.718970][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.331215][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1282.392882][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1282.439188][ T1095] bond0 (unregistering): Released all slaves [ 1282.612247][T16927] chnl_net:caif_netlink_parms(): no params data found [ 1282.680411][T15996] Bluetooth: hci3: command tx timeout [ 1283.227155][ T1095] hsr_slave_0: left promiscuous mode [ 1283.241745][ T1095] hsr_slave_1: left promiscuous mode [ 1283.251411][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1283.258975][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1283.326745][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1283.334615][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1283.431973][ T1095] veth1_macvtap: left promiscuous mode [ 1283.437783][ T1095] veth0_macvtap: left promiscuous mode [ 1283.443795][ T1095] veth1_vlan: left promiscuous mode [ 1283.449410][ T1095] veth0_vlan: left promiscuous mode [ 1284.402250][ T1095] team0 (unregistering): Port device team_slave_1 removed [ 1284.532243][ T1095] team0 (unregistering): Port device team_slave_0 removed [ 1284.830461][T15996] Bluetooth: hci3: command tx timeout [ 1285.299602][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1285.325026][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1285.341617][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1285.363920][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1285.377491][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1286.252876][T16927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.261545][T16927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.269084][T16927] bridge_slave_0: entered allmulticast mode [ 1286.277603][T16927] bridge_slave_0: entered promiscuous mode [ 1286.387205][T12022] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.506165][T16927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.513980][T16927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.521759][T16927] bridge_slave_1: entered allmulticast mode [ 1286.531159][T16927] bridge_slave_1: entered promiscuous mode [ 1286.650819][T12022] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.848503][ T5809] Bluetooth: hci3: command tx timeout [ 1286.898416][T12022] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.948118][T16969] chnl_net:caif_netlink_parms(): no params data found [ 1287.125625][T12022] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.219032][T16927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.430876][T16927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1287.520392][ T5809] Bluetooth: hci4: command tx timeout [ 1287.541282][T12022] bridge_slave_1: left allmulticast mode [ 1287.547146][T12022] bridge_slave_1: left promiscuous mode [ 1287.553972][T12022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.575029][T12022] bridge_slave_0: left allmulticast mode [ 1287.581248][T12022] bridge_slave_0: left promiscuous mode [ 1287.587901][T12022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.281332][T12022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1288.371658][T12022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1288.413616][T12022] bond0 (unregistering): Released all slaves [ 1288.824391][T16927] team0: Port device team_slave_0 added [ 1288.858643][T16927] team0: Port device team_slave_1 added [ 1289.354574][T16927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1289.362389][T16927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1289.388909][T16927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1289.448263][T12022] hsr_slave_0: left promiscuous mode [ 1289.500974][T12022] hsr_slave_1: left promiscuous mode [ 1289.509355][T12022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1289.518284][T12022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1289.544047][T12022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1289.552167][T12022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1289.575858][ T5809] Bluetooth: hci4: command tx timeout [ 1289.652291][T12022] veth1_macvtap: left promiscuous mode [ 1289.658068][T12022] veth0_macvtap: left promiscuous mode [ 1289.664445][T12022] veth1_vlan: left promiscuous mode [ 1289.672647][T12022] veth0_vlan: left promiscuous mode [ 1290.196562][T15996] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1290.287117][T15996] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1290.296846][T15996] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1290.327244][T15996] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1290.351420][T15996] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1290.748198][T12022] team0 (unregistering): Port device team_slave_1 removed [ 1290.819283][T12022] team0 (unregistering): Port device team_slave_0 removed [ 1291.440332][T16969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.448044][T16969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.455883][T16969] bridge_slave_0: entered allmulticast mode [ 1291.465669][T16969] bridge_slave_0: entered promiscuous mode [ 1291.483023][T16927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.491347][T16927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.517689][T16927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1291.645908][ T5809] Bluetooth: hci4: command tx timeout [ 1291.774819][T16969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.782651][T16969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.790336][T16969] bridge_slave_1: entered allmulticast mode [ 1291.798789][T16969] bridge_slave_1: entered promiscuous mode [ 1292.259835][T16969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.369648][T16969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.422743][T16927] hsr_slave_0: entered promiscuous mode [ 1292.432076][T16927] hsr_slave_1: entered promiscuous mode [ 1292.440568][T16927] debugfs: 'hsr0' already exists in 'hsr' [ 1292.446418][T16927] Cannot create hsr debugfs directory [ 1292.600009][ T5809] Bluetooth: hci2: command tx timeout [ 1292.738725][T16969] team0: Port device team_slave_0 added [ 1292.932565][T16969] team0: Port device team_slave_1 added [ 1293.285668][T16969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.293282][T16969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.320414][T16969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.423703][T16969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.430991][T16969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.457211][T16969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.735514][ T5809] Bluetooth: hci4: command tx timeout [ 1293.954742][T16969] hsr_slave_0: entered promiscuous mode [ 1293.964324][T16969] hsr_slave_1: entered promiscuous mode [ 1293.972655][T16969] debugfs: 'hsr0' already exists in 'hsr' [ 1293.978542][T16969] Cannot create hsr debugfs directory [ 1294.110969][T16991] chnl_net:caif_netlink_parms(): no params data found [ 1294.687833][ T5809] Bluetooth: hci2: command tx timeout [ 1294.773027][T16927] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1294.882144][T16927] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1295.025861][T16927] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1295.121868][T16927] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1296.098191][T16991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.105827][T16991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.113496][T16991] bridge_slave_0: entered allmulticast mode [ 1296.122433][T16991] bridge_slave_0: entered promiscuous mode [ 1296.350445][T16991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.358025][T16991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.366010][T16991] bridge_slave_1: entered allmulticast mode [ 1296.377324][T16991] bridge_slave_1: entered promiscuous mode [ 1296.696772][T16991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1296.820427][ T5809] Bluetooth: hci2: command tx timeout [ 1296.927942][T16991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1296.989292][T16969] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1297.075043][T16991] team0: Port device team_slave_0 added [ 1297.088911][T16969] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1297.144775][T16991] team0: Port device team_slave_1 added [ 1297.313479][T16969] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1297.354903][T16991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1297.362427][T16991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1297.388683][T16991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1297.420724][T16969] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1297.608164][T16991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1297.615641][T16991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1297.642255][T16991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1297.780714][T16927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1298.103995][T16991] hsr_slave_0: entered promiscuous mode [ 1298.113264][T16991] hsr_slave_1: entered promiscuous mode [ 1298.122652][T16991] debugfs: 'hsr0' already exists in 'hsr' [ 1298.128514][T16991] Cannot create hsr debugfs directory [ 1298.551532][T16927] 8021q: adding VLAN 0 to HW filter on device team0 [ 1298.795943][T12037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.803416][T12037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1298.852093][ T5809] Bluetooth: hci2: command tx timeout [ 1298.926696][T12037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.934307][T12037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.988687][T16969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1299.238833][T16969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.406988][T12031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.414563][T12031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.630459][T12031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.637837][T12031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1300.125016][T16927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1301.143069][T16991] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1301.255181][T16991] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1301.298118][T16991] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1301.374710][T16991] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1302.553601][T16927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1302.732893][T16991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1302.797421][T16969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1302.966119][T16991] 8021q: adding VLAN 0 to HW filter on device team0 [ 1303.096776][T12031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.104497][T12031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1303.271603][T12031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.279194][T12031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.349547][T16927] veth0_vlan: entered promiscuous mode [ 1303.488313][T16927] veth1_vlan: entered promiscuous mode [ 1304.035138][T16927] veth0_macvtap: entered promiscuous mode [ 1304.115474][T16927] veth1_macvtap: entered promiscuous mode [ 1304.346963][T16927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1304.525253][T16927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1304.737065][ T4345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.793037][T12024] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.858435][T12024] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.913897][T12024] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.106449][T16991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.430485][T16969] veth0_vlan: entered promiscuous mode [ 1306.577789][T16969] veth1_vlan: entered promiscuous mode [ 1307.093765][T16969] veth0_macvtap: entered promiscuous mode [ 1307.148774][T16969] veth1_macvtap: entered promiscuous mode [ 1307.404923][T16969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1307.558666][T16969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1307.720541][T12024] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.732884][T12022] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.801886][T12028] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.885534][T12028] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.427374][T16991] veth0_vlan: entered promiscuous mode [ 1309.624630][T16991] veth1_vlan: entered promiscuous mode [ 1310.074222][T16991] veth0_macvtap: entered promiscuous mode [ 1310.162140][T16991] veth1_macvtap: entered promiscuous mode [ 1310.441683][T16991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1310.545663][T16991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1310.703442][T12031] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.775806][T12031] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.837347][T12031] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.896822][T12022] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.626377][T12022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.634700][T12022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.643986][T17132] fuse: Bad value for 'fd' [ 1312.704300][T12024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.713907][T12024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.426151][T12031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.434743][T12031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.702379][T12028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.714629][T12028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.371015][T17168] netlink: 'syz.8.3725': attribute type 29 has an invalid length. [ 1315.447358][T17171] fuse: Bad value for 'fd' [ 1317.692970][ T5894] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1317.884057][ T5894] usb 9-1: device descriptor read/64, error -71 [ 1317.965854][T12031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.974401][T12031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.080395][T12028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.094387][T12028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.172126][ T5894] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1318.330159][ T5894] usb 9-1: device descriptor read/64, error -71 [ 1318.454179][ T5894] usb usb9-port1: attempt power cycle [ 1318.792701][T17196] loop6: detected capacity change from 0 to 2048 [ 1318.838864][ T5894] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1318.909910][ T5894] usb 9-1: device descriptor read/8, error -71 [ 1318.958135][T17196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1319.061063][T17196] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1319.180290][ T5894] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1319.292257][ T5894] usb 9-1: device descriptor read/8, error -71 [ 1319.409215][ T5894] usb usb9-port1: unable to enumerate USB device [ 1319.582111][T17202] syzkaller0: entered promiscuous mode [ 1319.587743][T17202] syzkaller0: entered allmulticast mode [ 1321.063446][T17213] fuse: Bad value for 'fd' [ 1321.117988][T16991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1323.120927][ T5862] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1323.299593][ T5862] usb 4-1: device descriptor read/64, error -71 [ 1323.338148][T17240] loop2: detected capacity change from 0 to 2048 [ 1323.449238][T17240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1323.465026][T17240] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1323.559613][T17246] fuse: Bad value for 'fd' [ 1323.565325][ T5862] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1323.720314][ T5862] usb 4-1: device descriptor read/64, error -71 [ 1323.841352][T17248] syzkaller0: entered promiscuous mode [ 1323.847075][T17248] syzkaller0: entered allmulticast mode [ 1323.870205][ T5862] usb usb4-port1: attempt power cycle [ 1324.338802][ T5862] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1324.362370][ T5862] usb 4-1: device descriptor read/8, error -71 [ 1324.612066][ T5862] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1324.668872][ T5862] usb 4-1: device descriptor read/8, error -71 [ 1324.786301][ T5862] usb usb4-port1: unable to enumerate USB device [ 1324.826170][T15778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1326.432671][T17291] loop6: detected capacity change from 0 to 2048 [ 1326.510577][T17291] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1326.543732][T17291] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1326.801467][T17296] syzkaller0: entered promiscuous mode [ 1326.807191][T17296] syzkaller0: entered allmulticast mode [ 1327.633734][T17308] batadv_slave_0: entered promiscuous mode [ 1327.657470][T17308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3818'. [ 1327.667503][T17308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1327.736086][T17310] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3818'. [ 1327.784241][T17308] batadv_slave_0 (unregistering): left promiscuous mode [ 1327.791917][T17308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1327.851047][T16991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1328.468412][ T5862] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1328.632115][ T5862] usb 9-1: device descriptor read/64, error -71 [ 1328.730375][T17318] loop3: detected capacity change from 0 to 2048 [ 1328.850734][T17318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1328.915786][ T5862] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1328.951346][T17318] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1329.070620][ T5862] usb 9-1: device descriptor read/64, error -71 [ 1329.205762][ T5862] usb usb9-port1: attempt power cycle [ 1329.526381][T17318] syzkaller0: entered promiscuous mode [ 1329.532254][T17318] syzkaller0: entered allmulticast mode [ 1329.650506][ T5862] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1329.686669][ T5862] usb 9-1: device descriptor read/8, error -71 [ 1330.036990][ T5862] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1330.067761][ T5862] usb 9-1: device descriptor read/8, error -71 [ 1330.254798][ T5862] usb usb9-port1: unable to enumerate USB device [ 1330.513975][T16927] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1331.440101][ T5894] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1331.685307][ T5894] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1331.695023][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.710708][ T5894] usb 4-1: Product: syz [ 1331.715114][ T5894] usb 4-1: Manufacturer: syz [ 1331.722994][ T5894] usb 4-1: SerialNumber: syz [ 1331.785191][ T5894] usb 4-1: config 0 descriptor?? [ 1331.888990][T17340] syzkaller0: entered promiscuous mode [ 1331.894963][T17340] syzkaller0: entered allmulticast mode [ 1332.173246][ T5862] usb 4-1: USB disconnect, device number 7 [ 1333.984400][T17361] loop3: detected capacity change from 0 to 2048 [ 1334.147921][T17361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1334.225928][T17361] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1334.650747][T11295] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1334.661673][ T5862] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1334.790673][T17361] syzkaller0: entered promiscuous mode [ 1334.796291][T17361] syzkaller0: entered allmulticast mode [ 1334.891601][T11295] usb 9-1: device descriptor read/64, error -71 [ 1334.939287][ T5862] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1334.951380][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1334.962947][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1334.973012][ T5862] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1334.988115][ T5862] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1334.997874][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.048574][ T5862] usb 7-1: config 0 descriptor?? [ 1335.170427][T11295] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1335.387418][T11295] usb 9-1: device descriptor read/64, error -71 [ 1335.474644][ T5862] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1335.482813][ T5862] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1335.493979][ T5862] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1335.502312][ T5862] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1335.510245][ T5862] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1335.518006][ T5862] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1335.525746][ T5862] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1335.533411][ T5862] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1335.541201][ T5862] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1335.548770][ T5862] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1335.603639][T11295] usb usb9-port1: attempt power cycle [ 1335.671260][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.727894][ T5862] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1335.839804][T17378] syzkaller0: entered promiscuous mode [ 1335.845424][T17378] syzkaller0: entered allmulticast mode [ 1335.898695][T14834] usb 7-1: USB disconnect, device number 3 [ 1336.056824][T11295] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1336.121072][T11295] usb 9-1: device descriptor read/8, error -71 [ 1336.241675][T16927] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.380277][T11295] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1336.416822][T11295] usb 9-1: device descriptor read/8, error -71 [ 1336.534893][T11295] usb usb9-port1: unable to enumerate USB device [ 1337.073201][T17389] fuse: Bad value for 'fd' [ 1337.087491][T14834] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1337.301538][T14834] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1337.311268][T14834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.319499][T14834] usb 7-1: Product: syz [ 1337.330938][T14834] usb 7-1: Manufacturer: syz [ 1337.343138][T14834] usb 7-1: SerialNumber: syz [ 1337.403942][T14834] usb 7-1: config 0 descriptor?? [ 1337.694534][T11295] usb 7-1: USB disconnect, device number 4 [ 1338.876864][T17407] loop2: detected capacity change from 0 to 2048 [ 1338.938894][T17407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1339.004729][T17407] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1339.021565][T11295] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1339.203196][T17405] syzkaller0: entered promiscuous mode [ 1339.208916][T17405] syzkaller0: entered allmulticast mode [ 1339.272582][T11295] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1339.287075][T11295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1339.299180][T11295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1339.309351][T11295] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1339.322812][T11295] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1339.332294][T11295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.575175][T11295] usb 4-1: config 0 descriptor?? [ 1339.757156][T17415] syzkaller0: entered promiscuous mode [ 1339.763128][T17415] syzkaller0: entered allmulticast mode [ 1340.105195][T11295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1340.116636][T11295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1340.129455][T11295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1340.141263][T11295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1340.149003][T11295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1340.159119][T11295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1340.169157][T11295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1340.179184][T11295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1340.189158][T11295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1340.199124][T11295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1340.241415][T11295] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1340.280031][ T5862] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1340.338067][T14834] usb 4-1: USB disconnect, device number 8 [ 1340.378472][T15778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.450677][ T5862] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 1340.459253][ T5862] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.470831][ T5862] usb 9-1: config 0 has no interface number 0 [ 1340.478734][T14952] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1340.504361][ T5862] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1340.516653][ T5862] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.525692][ T5862] usb 9-1: Product: syz [ 1340.530228][ T5862] usb 9-1: Manufacturer: syz [ 1340.535048][ T5862] usb 9-1: SerialNumber: syz [ 1340.553880][ T5862] usb 9-1: config 0 descriptor?? [ 1340.581723][ T5862] usb 9-1: Found UVC 0.00 device syz (046d:0823) [ 1340.588497][ T5862] usb 9-1: No valid video chain found. [ 1340.630171][T14952] usb 7-1: device descriptor read/64, error -71 [ 1340.784635][T14834] usb 9-1: USB disconnect, device number 17 [ 1340.870171][T14952] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1341.010495][T14952] usb 7-1: device descriptor read/64, error -71 [ 1341.126233][T14952] usb usb7-port1: attempt power cycle [ 1341.450975][ T5862] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1341.520199][T14952] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1341.593836][T14952] usb 7-1: device descriptor read/8, error -71 [ 1341.653123][ T5862] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1341.698734][ T5862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1341.708230][ T5862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1341.719813][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1341.791942][ T5862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1341.801488][ T5862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1341.812748][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1341.826455][T14834] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1341.851330][ T5862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1341.864077][ T5862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1341.875501][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1341.900636][T14952] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1341.930704][ T5862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1341.940593][ T5862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1341.953790][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1341.966900][T14952] usb 7-1: device descriptor read/8, error -71 [ 1341.984074][ T5862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1341.993791][ T5862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1342.005076][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1342.025360][ T5862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1342.034731][ T5862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1342.047937][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1342.085690][T14834] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1342.085792][T14952] usb usb7-port1: unable to enumerate USB device [ 1342.096093][ T5862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1342.102954][T14834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.111199][ T5862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1342.111391][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1342.117216][ T5862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1342.119575][T14834] usb 3-1: Product: syz [ 1342.130755][ T5862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1342.130939][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1342.142501][ T5862] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1342.154820][T14834] usb 3-1: Manufacturer: syz [ 1342.165223][ T5862] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1342.165393][ T5862] usb 4-1: Product: syz [ 1342.165515][ T5862] usb 4-1: Manufacturer: syz [ 1342.165627][ T5862] usb 4-1: SerialNumber: syz [ 1342.210102][T14834] usb 3-1: SerialNumber: syz [ 1342.212919][ T5862] usb 4-1: config 0 descriptor?? [ 1342.281405][ T5862] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1342.288323][T14834] usb 3-1: config 0 descriptor?? [ 1342.610045][T14834] usb 3-1: USB disconnect, device number 13 [ 1343.025162][T17446] syzkaller0: entered promiscuous mode [ 1343.031002][T17446] syzkaller0: entered allmulticast mode [ 1344.436436][T14834] usb 4-1: USB disconnect, device number 9 [ 1344.465718][T14834] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1344.842336][T17468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3883'. [ 1345.776535][T17479] fuse: Unknown parameter '0x0000000000000003' [ 1346.548696][T17487] loop2: detected capacity change from 0 to 2048 [ 1346.590755][ T5862] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1346.648578][T17487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1346.720090][T17487] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1346.875585][ T5862] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1346.885217][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.893723][ T5862] usb 4-1: Product: syz [ 1346.898092][ T5862] usb 4-1: Manufacturer: syz [ 1346.903166][ T5862] usb 4-1: SerialNumber: syz [ 1347.066321][ T5862] usb 4-1: config 0 descriptor?? [ 1347.217642][T17487] syzkaller0: entered promiscuous mode [ 1347.223507][T17487] syzkaller0: entered allmulticast mode [ 1347.560077][ T5862] usb 4-1: USB disconnect, device number 10 [ 1347.925726][T15778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1349.571141][T17512] fuse: Unknown parameter 'fd0x0000000000000003' [ 1350.411525][T17522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3902'. [ 1350.467803][T17522] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3902'. [ 1352.200488][T14834] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1352.512615][T14834] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1352.522699][T14834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.531045][T14834] usb 4-1: Product: syz [ 1352.535343][T14834] usb 4-1: Manufacturer: syz [ 1352.540174][T14834] usb 4-1: SerialNumber: syz [ 1352.660113][T14834] usb 4-1: config 0 descriptor?? [ 1353.078509][T14834] usb 4-1: USB disconnect, device number 11 [ 1355.208204][T17545] fuse: Unknown parameter 'fd0x0000000000000003' [ 1355.650294][T17551] IPv6: addrconf: prefix option has invalid lifetime [ 1355.697861][ T30] audit: type=1326 audit(1754048882.915:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.8.3914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ae558 code=0x7ffc0000 [ 1355.721084][ T30] audit: type=1326 audit(1754048882.915:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.8.3914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ae558 code=0x7ffc0000 [ 1355.743789][ T30] audit: type=1326 audit(1754048882.915:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.8.3914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1356.153483][ T30] audit: type=1326 audit(1754048882.995:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.8.3914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ae558 code=0x7ffc0000 [ 1356.179160][ T30] audit: type=1326 audit(1754048882.995:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.8.3914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ae558 code=0x7ffc0000 [ 1356.203119][ T30] audit: type=1326 audit(1754048882.995:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.8.3914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ae558 code=0x7ffc0000 [ 1356.226177][ T30] audit: type=1326 audit(1754048882.995:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.8.3914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1356.249915][ T30] audit: type=1326 audit(1754048882.995:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.8.3914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ae558 code=0x7ffc0000 [ 1356.273449][ T30] audit: type=1326 audit(1754048883.005:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.8.3914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1356.298513][ T30] audit: type=1326 audit(1754048883.005:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.8.3914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ae558 code=0x7ffc0000 [ 1357.411157][ T5862] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1357.647460][ T5862] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1357.656911][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.665180][ T5862] usb 7-1: Product: syz [ 1357.669472][ T5862] usb 7-1: Manufacturer: syz [ 1357.674353][ T5862] usb 7-1: SerialNumber: syz [ 1357.774616][ T5862] usb 7-1: config 0 descriptor?? [ 1357.884101][T17565] fuse: Bad value for 'group_id' [ 1357.889413][T17565] fuse: Bad value for 'group_id' [ 1358.003166][T14834] usb 7-1: USB disconnect, device number 9 [ 1359.576231][T17576] fuse: Unknown parameter 'fd0x0000000000000003' [ 1361.187307][T17592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3931'. [ 1361.363334][T17598] fuse: Bad value for 'group_id' [ 1361.368774][T17598] fuse: Bad value for 'group_id' [ 1361.510589][T14834] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1361.772936][T14834] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1361.782582][T14834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.790891][T14834] usb 7-1: Product: syz [ 1361.795179][T14834] usb 7-1: Manufacturer: syz [ 1361.800093][T14834] usb 7-1: SerialNumber: syz [ 1361.879170][T14834] usb 7-1: config 0 descriptor?? [ 1362.179123][ T5862] usb 7-1: USB disconnect, device number 10 [ 1363.771465][T17628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3942'. [ 1363.825519][T17628] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3942'. [ 1364.411910][T17633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3945'. [ 1365.230351][T14834] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1365.502730][T14834] usb 4-1: Using ep0 maxpacket: 32 [ 1365.590329][T14834] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1365.603818][T14834] usb 4-1: config 0 has no interface number 0 [ 1365.611806][T14834] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1365.622951][T14834] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1365.799246][T14834] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1365.814028][T14834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.824007][T14834] usb 4-1: Product: syz [ 1365.828348][T14834] usb 4-1: Manufacturer: syz [ 1365.833376][T14834] usb 4-1: SerialNumber: syz [ 1365.853574][T14834] usb 4-1: config 0 descriptor?? [ 1365.957008][T17642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3946'. [ 1366.090904][T14834] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1366.176337][T14834] cx231xx 4-1:0.1: Failed to read PCB config [ 1366.183401][T14834] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 1366.236649][T14834] usb 4-1: USB disconnect, device number 12 [ 1366.628924][T14834] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1366.835624][T14834] usb 4-1: Using ep0 maxpacket: 32 [ 1366.853737][T14834] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1366.862170][T14834] usb 4-1: config 0 has no interface number 0 [ 1366.873915][T14834] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1366.885345][T14834] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1367.060229][T14834] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1367.069477][T14834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.078206][T14834] usb 4-1: Product: syz [ 1367.083027][T14834] usb 4-1: Manufacturer: syz [ 1367.087770][T14834] usb 4-1: SerialNumber: syz [ 1367.208823][T14834] usb 4-1: config 0 descriptor?? [ 1367.456041][T14834] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1367.514695][T14834] cx231xx 4-1:0.1: bad config in buspower!!!! [ 1367.514695][T14834] config_info=40 [ 1367.524574][T14834] cx231xx 4-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 1367.660195][T14834] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 1367.700490][T14834] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1367.721377][T14834] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1367.769555][T14834] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1367.805087][T14834] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1367.813315][T14834] cx231xx 4-1:0.1: Failed to set devmode to analog: error: -71 [ 1367.932016][T17654] xfrm0: entered promiscuous mode [ 1367.937292][T17654] xfrm0: entered allmulticast mode [ 1367.999494][T14834] i2c i2c-2: Added multiplexed i2c bus 4 [ 1368.021648][T14834] i2c i2c-2: Added multiplexed i2c bus 5 [ 1368.048164][T14834] cx231xx 4-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 1368.066248][T14834] cx231xx 4-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 1368.327648][T14834] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 1368.428168][T14834] usb 4-1: USB disconnect, device number 13 [ 1369.941204][T17672] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3956'. [ 1370.467976][T17675] syz_tun: entered allmulticast mode [ 1370.550753][T17674] syz_tun: left allmulticast mode [ 1371.500058][T14834] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1371.692522][T14834] usb 9-1: Using ep0 maxpacket: 16 [ 1371.726054][T14834] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1371.740345][T14834] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1371.754937][T14834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.875227][T14834] usb 9-1: config 0 descriptor?? [ 1371.914301][T14834] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input8 [ 1372.144658][ T5151] bcm5974 9-1:0.0: could not read from device [ 1372.227906][ T5151] bcm5974 9-1:0.0: could not read from device [ 1372.246779][T14834] usb 9-1: USB disconnect, device number 18 [ 1372.290976][ T5151] bcm5974 9-1:0.0: could not read from device [ 1372.345380][T17687] xfrm0: entered promiscuous mode [ 1372.350848][T17687] xfrm0: entered allmulticast mode [ 1373.487987][T14834] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1373.958777][T14834] usb 4-1: config 0 has no interfaces? [ 1374.208804][T14834] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1374.218256][T14834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.226549][T14834] usb 4-1: Product: syz [ 1374.230943][T14834] usb 4-1: Manufacturer: syz [ 1374.235662][T14834] usb 4-1: SerialNumber: syz [ 1374.414576][T14834] usb 4-1: config 0 descriptor?? [ 1375.473968][T17707] fuse: Bad value for 'group_id' [ 1375.479299][T17707] fuse: Bad value for 'group_id' [ 1375.644780][T17711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3970'. [ 1376.857081][T17720] xfrm0: entered promiscuous mode [ 1376.874621][T17720] xfrm0: entered allmulticast mode [ 1377.707150][ T5862] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1377.930481][ T5862] usb 7-1: Using ep0 maxpacket: 16 [ 1377.952046][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.963648][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1377.973617][ T5862] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1377.982963][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.111361][ T5862] usb 7-1: config 0 descriptor?? [ 1378.701380][T17740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3981'. [ 1378.913406][ T5862] usb 7-1: string descriptor 0 read error: -71 [ 1378.982146][ T5862] usb 7-1: Max retries (5) exceeded reading string descriptor 200 [ 1378.992322][ T5862] letsketch 0003:6161:4D15.0015: probe with driver letsketch failed with error -32 [ 1379.055766][T17747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3982'. [ 1379.075203][T17744] batadv_slave_0: entered promiscuous mode [ 1379.110736][ T5862] usb 7-1: USB disconnect, device number 11 [ 1379.140117][T17747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1379.184661][T17747] batadv_slave_0 (unregistering): left promiscuous mode [ 1379.192154][T17747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1379.346414][T17744] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3982'. [ 1380.500417][T17760] xfrm0: entered promiscuous mode [ 1380.505811][T17760] xfrm0: entered allmulticast mode [ 1383.331068][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3994'. [ 1384.931431][T11284] usb 4-1: USB disconnect, device number 14 [ 1385.424266][T17795] fuse: Unknown parameter './file0/file0' [ 1387.794765][T17812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4006'. [ 1388.920802][ T5862] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1389.125798][ T5862] usb 9-1: Using ep0 maxpacket: 16 [ 1389.165307][ T5862] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.176551][ T5862] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1389.186570][ T5862] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1389.199874][ T5862] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1389.209178][ T5862] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.326639][ T5862] usb 9-1: config 0 descriptor?? [ 1389.827556][ T5862] HID 045e:07da: Invalid code 65791 type 1 [ 1389.886018][ T5862] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0016/input/input9 [ 1390.200564][ T5862] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1390.257797][ T5862] usb 9-1: USB disconnect, device number 19 [ 1394.404446][T17847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4016'. [ 1394.458850][T17847] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4016'. [ 1396.298451][T17862] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4019'. [ 1397.102973][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1397.329995][ T5862] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1397.579910][ T5862] usb 7-1: Using ep0 maxpacket: 16 [ 1397.641410][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1397.654712][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1397.665168][ T5862] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1397.678307][ T5862] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1397.687587][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.934814][ T5862] usb 7-1: config 0 descriptor?? [ 1398.480246][ T5862] usbhid 7-1:0.0: can't add hid device: -71 [ 1398.486924][ T5862] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1398.659474][ T5862] usb 7-1: USB disconnect, device number 12 [ 1400.830120][ T5862] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1401.044067][ T5862] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1401.053474][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.061799][ T5862] usb 7-1: Product: syz [ 1401.066184][ T5862] usb 7-1: Manufacturer: syz [ 1401.071215][ T5862] usb 7-1: SerialNumber: syz [ 1401.147642][ T5862] usb 7-1: config 0 descriptor?? [ 1401.516021][ T5862] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1404.032946][ T5862] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1404.089148][ T5862] usb 7-1: USB disconnect, device number 13 [ 1404.280083][T15996] Bluetooth: hci3: command 0x0406 tx timeout [ 1407.510579][T11284] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 1407.738932][T11284] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1407.748495][T11284] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.756974][T11284] usb 9-1: Product: syz [ 1407.761473][T11284] usb 9-1: Manufacturer: syz [ 1407.766280][T11284] usb 9-1: SerialNumber: syz [ 1407.812625][T11284] usb 9-1: config 0 descriptor?? [ 1408.058139][T11284] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1409.019042][T17959] batadv_slave_0: entered promiscuous mode [ 1409.084265][T17959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4054'. [ 1409.093993][T17959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1409.139196][T17959] batadv_slave_0 (unregistering): left promiscuous mode [ 1409.147199][T17959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1409.181447][T17960] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4054'. [ 1409.450974][T15996] Bluetooth: hci4: command 0x0406 tx timeout [ 1409.454958][T17963] syz_tun: entered allmulticast mode [ 1410.718422][T11284] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1410.822434][T11284] usb 9-1: USB disconnect, device number 20 [ 1412.345933][T11284] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1412.596819][T11284] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1412.616419][T11284] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1412.630208][T11284] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1412.640398][T11284] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1412.653892][T11284] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1412.663565][T11284] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.044255][T11284] usb 7-1: config 0 descriptor?? [ 1413.546076][T11284] plantronics 0003:047F:FFFF.0017: ignoring exceeding usage max [ 1413.741938][T11284] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1413.803422][T11284] usb 7-1: USB disconnect, device number 14 [ 1414.520954][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 1414.731741][T18003] fuse: Bad value for 'fd' [ 1415.267550][T11284] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1415.484744][T11284] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1415.494528][T11284] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.502909][T11284] usb 7-1: Product: syz [ 1415.507297][T11284] usb 7-1: Manufacturer: syz [ 1415.512193][T11284] usb 7-1: SerialNumber: syz [ 1415.604432][T11284] usb 7-1: config 0 descriptor?? [ 1415.831074][T11284] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1416.726409][T18017] fuse: Bad value for 'group_id' [ 1416.732070][T18017] fuse: Bad value for 'group_id' [ 1417.707989][T18020] loop2: detected capacity change from 0 to 2048 [ 1417.917687][T18020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1417.957251][T18020] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1418.214940][T11284] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1418.285689][T11284] usb 7-1: USB disconnect, device number 15 [ 1418.737769][T18020] syzkaller0: entered promiscuous mode [ 1418.746467][T18020] syzkaller0: entered allmulticast mode [ 1419.629059][T15778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1420.147912][T18037] fuse: Bad value for 'fd' [ 1420.370116][ T5862] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1420.605196][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1420.618557][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1420.630518][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1420.640777][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1420.654225][ T5862] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1420.664016][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.980155][ T5862] usb 3-1: config 0 descriptor?? [ 1421.468497][ T5862] plantronics 0003:047F:FFFF.0018: ignoring exceeding usage max [ 1421.632245][T18053] fuse: Bad value for 'group_id' [ 1421.637546][T18053] fuse: Bad value for 'group_id' [ 1421.667827][ T5862] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1422.457985][T18059] loop3: detected capacity change from 0 to 2048 [ 1422.631467][T18059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1422.664197][T18059] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1422.890135][T18064] netlink: 'syz.6.4093': attribute type 1 has an invalid length. [ 1423.028439][T18064] bond1: (slave ip6gretap1): making interface the new active one [ 1423.038334][T18064] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1423.584698][T18059] syzkaller0: entered promiscuous mode [ 1423.584817][T18059] syzkaller0: entered allmulticast mode [ 1423.596822][T18069] syz_tun: entered allmulticast mode [ 1423.634713][ T5862] usb 3-1: USB disconnect, device number 14 [ 1424.148972][T18079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4098'. [ 1424.190417][T18079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4098'. [ 1424.215508][T18077] fuse: Bad value for 'fd' [ 1424.447123][T16927] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1424.890724][T18090] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4103'. [ 1425.105230][T11284] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1425.290760][T11284] usb 9-1: Using ep0 maxpacket: 32 [ 1425.351715][T11284] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1425.361841][T11284] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.394342][T11284] usb 9-1: config 0 descriptor?? [ 1425.541678][T18099] netlink: 'syz.0.4106': attribute type 1 has an invalid length. [ 1425.644915][T11284] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1425.729153][T18103] bond1: (slave ip6gretap1): making interface the new active one [ 1425.738923][T18103] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1425.780755][T11284] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1425.872863][T18087] ===================================================== [ 1425.880387][T18087] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 1425.887707][T18087] _copy_to_user+0xcc/0x120 [ 1425.892508][T18087] i2cdev_ioctl_smbus+0x586/0x660 [ 1425.897672][T18087] compat_i2cdev_ioctl+0x48f/0xb40 [ 1425.903125][T18087] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 1425.908795][T18087] ia32_sys_call+0x2d5f/0x4310 [ 1425.916119][T18087] __do_fast_syscall_32+0xb0/0x150 [ 1425.922042][T18087] do_fast_syscall_32+0x38/0x80 [ 1425.927153][T18087] do_SYSENTER_32+0x1f/0x30 [ 1425.931939][T18087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1425.938409][T18087] [ 1425.940900][T18087] Uninit was stored to memory at: [ 1425.946051][T18087] __i2c_smbus_xfer+0x254d/0x2f60 [ 1425.951360][T18087] i2c_smbus_xfer+0x31d/0x4d0 [ 1425.956145][T18087] i2cdev_ioctl_smbus+0x4a1/0x660 [ 1425.962749][T18087] compat_i2cdev_ioctl+0x48f/0xb40 [ 1425.968006][T18087] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 1425.974991][T18087] ia32_sys_call+0x2d5f/0x4310 [ 1425.980227][T18087] __do_fast_syscall_32+0xb0/0x150 [ 1425.985509][T18087] do_fast_syscall_32+0x38/0x80 [ 1425.990733][T18087] do_SYSENTER_32+0x1f/0x30 [ 1425.995448][T18087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1426.002062][T18087] [ 1426.004438][T18087] Local variable msgbuf1.i created at: [ 1426.010150][T18087] __i2c_smbus_xfer+0x86a/0x2f60 [ 1426.017535][T18087] i2c_smbus_xfer+0x31d/0x4d0 [ 1426.022976][T18087] [ 1426.025359][T18087] Bytes 0-1 of 2 are uninitialized [ 1426.030852][T18087] Memory access of size 2 starts at ffff888102887c86 [ 1426.037638][T18087] Data copied to user address 00000000800001c0 [ 1426.044062][T18087] [ 1426.046482][T18087] CPU: 1 UID: 0 PID: 18087 Comm: syz.8.4102 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(none) [ 1426.058451][T18087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1426.068718][T18087] ===================================================== [ 1426.075884][T18087] Disabling lock debugging due to kernel taint [ 1426.082619][T18087] Kernel panic - not syncing: kmsan.panic set ... [ 1426.089224][T18087] CPU: 1 UID: 0 PID: 18087 Comm: syz.8.4102 Tainted: G B 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(none) [ 1426.102656][T18087] Tainted: [B]=BAD_PAGE [ 1426.106867][T18087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1426.117020][T18087] Call Trace: [ 1426.120446][T18087] [ 1426.123504][T18087] __dump_stack+0x26/0x30 [ 1426.128050][T18087] dump_stack_lvl+0x53/0x270 [ 1426.132818][T18087] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1426.138761][T18087] dump_stack+0x1e/0x25 [ 1426.143064][T18087] vpanic+0x361/0xbc0 [ 1426.147187][T18087] panic+0x15d/0x160 [ 1426.151238][T18087] kmsan_report+0x31c/0x320 [ 1426.155969][T18087] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1426.162472][T18087] ? kmsan_internal_check_memory+0x1e1/0x230 [ 1426.168579][T18087] ? kmsan_copy_to_user+0xf1/0x190 [ 1426.173800][T18087] ? _copy_to_user+0xcc/0x120 [ 1426.178599][T18087] ? i2cdev_ioctl_smbus+0x586/0x660 [ 1426.183951][T18087] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 1426.189371][T18087] ? __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 1426.195205][T18087] ? ia32_sys_call+0x2d5f/0x4310 [ 1426.200245][T18087] ? __do_fast_syscall_32+0xb0/0x150 [ 1426.205673][T18087] ? do_fast_syscall_32+0x38/0x80 [ 1426.210830][T18087] ? do_SYSENTER_32+0x1f/0x30 [ 1426.215650][T18087] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1426.222309][T18087] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 1426.227856][T18087] ? __i2c_transfer+0x11cd/0x3110 [ 1426.233043][T18087] ? kmsan_get_metadata+0xfb/0x160 [ 1426.238286][T18087] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1426.244778][T18087] ? kmsan_get_metadata+0xfb/0x160 [ 1426.250008][T18087] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1426.255954][T18087] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 1426.261283][T18087] ? kmsan_get_metadata+0xfb/0x160 [ 1426.266530][T18087] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1426.272470][T18087] kmsan_internal_check_memory+0x1e1/0x230 [ 1426.278406][T18087] kmsan_copy_to_user+0xf1/0x190 [ 1426.283463][T18087] _copy_to_user+0xcc/0x120 [ 1426.288102][T18087] i2cdev_ioctl_smbus+0x586/0x660 [ 1426.293285][T18087] compat_i2cdev_ioctl+0x48f/0xb40 [ 1426.298553][T18087] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1426.304317][T18087] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 1426.310006][T18087] ? kmsan_get_metadata+0xfb/0x160 [ 1426.315241][T18087] ? kmsan_get_metadata+0xfb/0x160 [ 1426.320506][T18087] ia32_sys_call+0x2d5f/0x4310 [ 1426.325458][T18087] __do_fast_syscall_32+0xb0/0x150 [ 1426.330806][T18087] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1426.336694][T18087] do_fast_syscall_32+0x38/0x80 [ 1426.341701][T18087] do_SYSENTER_32+0x1f/0x30 [ 1426.346345][T18087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1426.352822][T18087] RIP: 0023:0xf70ae539 [ 1426.356972][T18087] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1426.376694][T18087] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1426.385216][T18087] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 1426.393272][T18087] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1426.401318][T18087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1426.409359][T18087] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1426.417404][T18087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1426.425505][T18087] [ 1426.429079][T18087] Kernel Offset: disabled [ 1426.433518][T18087] Rebooting in 86400 seconds..