last executing test programs: 19m35.140372934s ago: executing program 32 (id=898): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eef76c20c80a01c3650d01"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 19m31.277036871s ago: executing program 33 (id=909): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) write$binfmt_script(r2, 0x0, 0x3c) 17m0.315332985s ago: executing program 34 (id=1329): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000010c0)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040), 0x0) 15m5.965869579s ago: executing program 35 (id=1583): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xfffffee7, 0x1, {0x8, 0x256}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0xd, r8, 0x1, 0x0, 0x6, @remote}, 0x14) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000340)) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, 0x0, 0x0) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 14m1.94915117s ago: executing program 36 (id=1679): mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000008) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x5, 0x3}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 11m50.117435637s ago: executing program 37 (id=1929): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x351a, 0x100, 0x0, 0x0, 0x0) 9m45.385170917s ago: executing program 38 (id=2214): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x4024050, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7ad0, &(0x7f0000000040)={0x0, 0x2faa, 0x20, 0x1, 0x32e}, &(0x7f0000000100), &(0x7f0000000140)) r5 = io_uring_setup(0x669, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x26f}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r9, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) 9m34.662663959s ago: executing program 39 (id=2237): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kcmp(r0, r0, 0x5, 0xffffffffffffffff, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r3, 0x0, 0x417}, 0x18) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) 8m4.705691476s ago: executing program 40 (id=2390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) listen(r3, 0x3) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65dd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffc) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x68, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x68}}, 0x24040084) sendfile(r6, r6, 0x0, 0x800000009) 7m47.162077864s ago: executing program 41 (id=2424): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, 0x0, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"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", 0x567}}, 0xdb5) 7m24.430655367s ago: executing program 42 (id=2450): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) fsopen(0x0, 0x1) socket$packet(0x11, 0x3, 0x300) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="0407ff0cff"], 0x102) 7m14.840150392s ago: executing program 43 (id=2457): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) symlink(0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) kexec_load(0x3, 0x4, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000}], 0x0) 6m33.62163552s ago: executing program 44 (id=2440): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x33, 0xfd, 0x4, 0xb, @dev={0xfe, 0x80, '\x00', 0x44}, @mcast2={0xff, 0x3}, 0x40, 0x7800, 0x0, 0x4}}) getsockopt$bt_hci(r3, 0x84, 0x72, &(0x7f0000000000)=""/4078, &(0x7f0000001080)=0xfee) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x90}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xcf, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) r7 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xc, @mcast2, 0x8f}, 0x1c) writev(r7, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee000000000000000002000000", 0x57}], 0x1) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r9 = accept4(r8, 0x0, 0x0, 0x800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x1) 6m28.752818299s ago: executing program 1 (id=2498): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) socket(0x1e, 0x4, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x259a, 0x0, 0x9, 0x3bd}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) setresuid(0xee01, 0xee00, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 6m22.084612512s ago: executing program 45 (id=2492): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'security.', '/dev/fuse\x00'}) fsopen(0x0, 0x1) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x1, 0x0) 6m12.974737952s ago: executing program 46 (id=2498): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) socket(0x1e, 0x4, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x259a, 0x0, 0x9, 0x3bd}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) setresuid(0xee01, 0xee00, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 6m5.919601639s ago: executing program 0 (id=2511): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002d00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff655e, 0x0, 0x0, 0x1, 0x0, &(0x7f00000009c0)='#', 0x2, 0x0, 0x9}, 0x50) 6m3.427763661s ago: executing program 0 (id=2513): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x4040040) 5m59.49444828s ago: executing program 0 (id=2515): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e", 0x3}], 0x2}, 0x0) 5m58.284791012s ago: executing program 0 (id=2516): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 5m57.281797461s ago: executing program 0 (id=2518): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x650ce4b086bd44cb) socket$nl_route(0x10, 0x3, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r3}) 5m55.240733552s ago: executing program 0 (id=2519): openat$sysfs(0xffffffffffffff9c, 0x0, 0x20400, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r3 = syz_io_uring_setup(0x4062ce, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x0, 0xffffffff}, &(0x7f00000000c0), 0x0) io_uring_enter(r3, 0x567, 0x0, 0x8, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7], 0x18}}, 0x8040) r8 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0xcca43, 0x0) ioctl$TIOCMGET(r8, 0x5415, &(0x7f0000000280)) 5m38.974403513s ago: executing program 47 (id=2519): openat$sysfs(0xffffffffffffff9c, 0x0, 0x20400, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r3 = syz_io_uring_setup(0x4062ce, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x0, 0xffffffff}, &(0x7f00000000c0), 0x0) io_uring_enter(r3, 0x567, 0x0, 0x8, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7], 0x18}}, 0x8040) r8 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0xcca43, 0x0) ioctl$TIOCMGET(r8, 0x5415, &(0x7f0000000280)) 5m24.471731677s ago: executing program 3 (id=2533): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000200)={0x1, 0x80, 0x2}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x3) close(0xffffffffffffffff) 5m17.935574098s ago: executing program 3 (id=2536): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 5m15.394439575s ago: executing program 3 (id=2537): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) close(0x3) 5m13.988312445s ago: executing program 3 (id=2539): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="8d819ed2b09a7b07"}}) 5m11.834530814s ago: executing program 3 (id=2542): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'geneve1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, &(0x7f00000005c0)="bad330fbc9", 0x5, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r1, 0x1, 0xd8, 0x6, @multicast}, 0x14) 5m10.025218004s ago: executing program 3 (id=2544): pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x4}, 0x8) sched_setattr(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r3 = dup(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendfile(r3, r3, 0x0, 0xffffffff) 4m57.208739271s ago: executing program 2 (id=2552): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000019080)="00000ace2f", 0x5}], 0x2) 4m53.759245917s ago: executing program 48 (id=2544): pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x4}, 0x8) sched_setattr(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r3 = dup(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendfile(r3, r3, 0x0, 0xffffffff) 4m52.974209175s ago: executing program 2 (id=2555): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12011b0003005740ed0b0011c3ec0000000109021200010000000009044a"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000c00)=ANY=[@ANYBLOB="400702"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000380)=ANY=[@ANYBLOB="5b1810"], 0x0, 0x0, 0x0, 0x0, 0x0}) 4m49.355298319s ago: executing program 2 (id=2556): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) 4m47.554838277s ago: executing program 2 (id=2558): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x22202, 0x0) pselect6(0x32, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) 4m45.883382026s ago: executing program 2 (id=2559): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ip6erspan0\x00', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 4m43.434167597s ago: executing program 2 (id=2561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x80242, 0x1df2a23c5997fa7b) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 4m41.604867695s ago: executing program 5 (id=2563): syz_emit_ethernet(0x5e, &(0x7f0000000340)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x28, 0x2c, 0x0, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @local}, @mcast2}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002000100000000"], 0x78}, 0x1, 0x7}, 0x0) keyctl$set_timeout(0xf, r1, 0x78f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd", @ANYRES32=0x0, @ANYBLOB="172000002120"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0xc000002) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 4m39.410529487s ago: executing program 5 (id=2565): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) 4m37.779083031s ago: executing program 5 (id=2567): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) syz_clone(0x800211, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x10) 4m35.417907607s ago: executing program 5 (id=2570): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa1) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m33.95680081s ago: executing program 5 (id=2572): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000019080)="00000ace2f", 0x5}], 0x2) 4m32.542104571s ago: executing program 5 (id=2574): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x18) 4m27.184654351s ago: executing program 49 (id=2561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x80242, 0x1df2a23c5997fa7b) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 4m16.911211594s ago: executing program 50 (id=2574): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x18) 1m52.073163771s ago: executing program 7 (id=2799): prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) memfd_create(0x0, 0xc) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@none}}}, 0x9) 1m50.374457961s ago: executing program 7 (id=2803): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 1m48.089890127s ago: executing program 7 (id=2810): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rds(0x15, 0x5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) 1m41.937941312s ago: executing program 7 (id=2820): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m36.809265094s ago: executing program 7 (id=2826): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000040)='./file1\x00', 0xc00, &(0x7f00000007c0)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYRES32, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRES16=0x0, @ANYRESOCT=0x0], 0x21, 0x6207, &(0x7f0000012500)="$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") sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="501fffffffffffffedff8ef9a8dc057520b3172aacb9e10300", 0x19}], 0x2}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @local}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m31.305308774s ago: executing program 7 (id=2839): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x5, 0x5, 0x0, 0x1, 0x7ff, 0xffffffffffffffff, 0x0, 0x0, 0x8000}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/18, @ANYRES32, @ANYBLOB="0800030002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x8) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000001100)={0x11, 0x1b, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = dup2(r4, r4) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) syz_open_procfs(0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r8, 0x0, 0x29, 0x0, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x10, 0x6, 0x37303250, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) 1m15.727638482s ago: executing program 51 (id=2839): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x5, 0x5, 0x0, 0x1, 0x7ff, 0xffffffffffffffff, 0x0, 0x0, 0x8000}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/18, @ANYRES32, @ANYBLOB="0800030002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x8) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000001100)={0x11, 0x1b, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = dup2(r4, r4) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) syz_open_procfs(0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r8, 0x0, 0x29, 0x0, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x10, 0x6, 0x37303250, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) 32.936593076s ago: executing program 8 (id=2924): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}]}]}, 0x24}}, 0x0) 29.149986048s ago: executing program 8 (id=2929): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 27.277987302s ago: executing program 8 (id=2932): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x34}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) open(0x0, 0x0, 0x28) r2 = dup(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 26.156619282s ago: executing program 8 (id=2935): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x0) 22.702290727s ago: executing program 8 (id=2939): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r2, 0x0, 0x0, 0x4112, 0x0, 0x0) 21.130105068s ago: executing program 6 (id=2941): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 20.940895126s ago: executing program 8 (id=2942): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = dup(0xffffffffffffffff) read$FUSE(r5, &(0x7f0000002080)={0x2020}, 0x2020) ioctl$TCSETSF(r5, 0x5404, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'bridge0\x00', 0x100}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000000080)) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000002c0)={@multicast2, @loopback, 0x1}, 0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) 19.028258402s ago: executing program 6 (id=2945): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cdd", 0xc7}], 0x1}}], 0x1, 0x11) 17.063836354s ago: executing program 1 (id=2859): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000019080)="00000ace2f", 0x5}], 0x2) 16.419289032s ago: executing program 6 (id=2948): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b455018"], 0x0}, 0x0) 14.713560534s ago: executing program 4 (id=2950): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x66040, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000140)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.957701072s ago: executing program 9 (id=2951): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x22202, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000100)={0x0, 0x30000, 0x0, 0xfffffffb, 0xffffffff, 0x2, 0x0, 0x20000005, 0x2, 0x3, 0x100, 0x20000009, 0x0, 0x0, 0x0}) 12.649402936s ago: executing program 1 (id=2952): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r0, &(0x7f0000000840)=[{&(0x7f0000000380)}], 0x1, 0x5, 0xb2) 12.133943258s ago: executing program 6 (id=2953): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) mlockall(0x7) 11.264883118s ago: executing program 9 (id=2954): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 10.489204036s ago: executing program 4 (id=2955): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x34}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) open(0x0, 0x0, 0x28) r2 = dup(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 9.278653478s ago: executing program 9 (id=2956): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) 8.957188795s ago: executing program 6 (id=2957): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040f003040040000102030109021b000104000000090400000207010100090501022000000000"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0xffffffffffffff42, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x1, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r2, &(0x7f00000004c0)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1, 0x9) 8.478513936s ago: executing program 1 (id=2958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) wait4(0x0, 0x0, 0x40000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000180), 0x4e, 0x101240) fadvise64(r5, 0x8000000000000000, 0x9, 0x6) quotactl_fd$Q_SYNC(r4, 0xffffffff80000100, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffc, 0x2fd, 0x1, 0x101}}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES32], 0x2, 0x227, &(0x7f0000000580)="$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") open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) 8.138300567s ago: executing program 4 (id=2959): socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2c020400) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) epoll_create(0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) 6.096386391s ago: executing program 9 (id=2960): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x5, 0xb}, {0xfff3, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x40000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xda, 0x6, @multicast}, 0x14) 5.939014828s ago: executing program 4 (id=2961): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x650ce4b086bd44cb) socket$nl_route(0x10, 0x3, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) 5.299462713s ago: executing program 52 (id=2942): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = dup(0xffffffffffffffff) read$FUSE(r5, &(0x7f0000002080)={0x2020}, 0x2020) ioctl$TCSETSF(r5, 0x5404, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'bridge0\x00', 0x100}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000000080)) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000002c0)={@multicast2, @loopback, 0x1}, 0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) 4.707540756s ago: executing program 6 (id=2963): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b455018"], 0x0}, 0x0) 3.725484329s ago: executing program 9 (id=2964): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) 2.294996413s ago: executing program 4 (id=2965): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d", 0xb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e9465", 0xf4}], 0x1}}], 0x3, 0x2090) 2.186614115s ago: executing program 1 (id=2966): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 546.036064ms ago: executing program 4 (id=2967): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000e00000000000000000000000900"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8086) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) tkill(r0, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8010, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syslog(0x2, &(0x7f00000005c0)=""/218, 0xda) creat(&(0x7f0000000040)='./file1\x00', 0xcc) 478.660442ms ago: executing program 9 (id=2968): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r0, &(0x7f0000000840)=[{&(0x7f0000000380)}], 0x1, 0x5, 0xb2) 0s ago: executing program 1 (id=2969): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x34}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) open(0x0, 0x0, 0x28) r2 = dup(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): uous mode [ 1348.598668][T14754] hsr_slave_1: entered promiscuous mode [ 1348.609219][T14754] debugfs: 'hsr0' already exists in 'hsr' [ 1348.615535][T14754] Cannot create hsr debugfs directory [ 1348.654581][ T9302] usb 4-1: USB disconnect, device number 2 [ 1348.731332][ T9302] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1349.887998][T14829] loop4: detected capacity change from 0 to 2048 [ 1350.266064][T14829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1350.282133][T14829] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1350.816128][T14754] team0: Port device netdevsim3 removed [ 1350.849493][T14754] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.174017][T14754] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.404750][T14754] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.481734][T14252] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1351.670055][T14754] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.581619][T14620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.591766][T14620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.935212][T10530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.944431][T10530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1353.014494][T14754] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1353.248372][T14754] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1353.319114][T14851] loop4: detected capacity change from 0 to 2048 [ 1353.444307][T14754] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1353.577716][T14754] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1353.806436][T14851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1353.819402][T14851] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1355.005320][T13279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1355.050011][T13279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1355.088921][T13279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1355.195882][T14252] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1355.202707][T13279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1355.219010][T13279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1355.668046][T14863] lo speed is unknown, defaulting to 1000 [ 1355.796454][T14754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.322531][T14754] 8021q: adding VLAN 0 to HW filter on device team0 [ 1356.522800][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.530486][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1356.806869][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.814622][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1357.130082][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2536'. [ 1357.287799][ T9289] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1357.398542][T13279] Bluetooth: hci4: command tx timeout [ 1357.551037][ T9289] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.562271][ T9289] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1357.571970][ T9289] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1357.593287][ T9289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.952084][ T9289] usb 5-1: config 0 descriptor?? [ 1358.223244][ T50] Bluetooth: hci7: command 0x0406 tx timeout [ 1359.289665][T14863] chnl_net:caif_netlink_parms(): no params data found [ 1359.478836][T13278] Bluetooth: hci4: command tx timeout [ 1360.168855][T14889] smc: net device hsr0 applied user defined pnetid SYZ2 [ 1360.269055][T14889] smc: net device hsr0 erased user defined pnetid SYZ2 [ 1360.532069][ T9289] usb 5-1: USB disconnect, device number 100 [ 1360.934338][T14894] loop3: detected capacity change from 0 to 128 [ 1361.179241][T14894] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1361.291437][T14754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.348740][T14894] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1361.547453][T13278] Bluetooth: hci4: command tx timeout [ 1361.597591][ T5877] usb 5-1: new low-speed USB device number 101 using dummy_hcd [ 1361.853491][ T5877] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1361.862477][ T5877] usb 5-1: config 0 has no interface number 0 [ 1361.870806][ T5877] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1361.893813][ T5877] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1361.908263][ T5877] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1361.920987][ T5877] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1361.932621][ T5877] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1361.943938][ T5877] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1361.959365][ T5877] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1361.969401][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.204964][T14507] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1362.210006][ T5877] usb 5-1: config 0 descriptor?? [ 1362.261005][T14899] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1362.368432][T14899] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1362.539464][ T5877] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1362.619252][T14863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.626914][T14863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.635507][T14863] bridge_slave_0: entered allmulticast mode [ 1362.646272][T14863] bridge_slave_0: entered promiscuous mode [ 1362.672524][T14863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.682524][T14863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.691611][T14863] bridge_slave_1: entered allmulticast mode [ 1362.794997][ T5877] usb 5-1: USB disconnect, device number 101 [ 1362.915118][ T5877] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1362.976520][T14863] bridge_slave_1: entered promiscuous mode [ 1363.356433][T14863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1363.474522][T14863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1363.638144][T13278] Bluetooth: hci4: command tx timeout [ 1363.970279][T14863] team0: Port device team_slave_0 added [ 1364.104247][T14863] team0: Port device team_slave_1 added [ 1364.531246][T14917] loop4: detected capacity change from 0 to 2048 [ 1364.634491][T14863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1364.654991][T14863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.685900][T14863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1364.995534][T14917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1365.008549][T14917] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1365.026029][T14863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1365.033434][T14863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1365.071528][T14863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1365.846036][T14863] hsr_slave_0: entered promiscuous mode [ 1365.858885][T14863] hsr_slave_1: entered promiscuous mode [ 1365.869091][T14863] debugfs: 'hsr0' already exists in 'hsr' [ 1365.889420][T14863] Cannot create hsr debugfs directory [ 1369.607449][T14252] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.745947][T14863] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.915347][T14754] veth0_vlan: entered promiscuous mode [ 1371.041018][T14944] loop4: detected capacity change from 0 to 256 [ 1371.055549][T14863] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.248343][T14754] veth1_vlan: entered promiscuous mode [ 1371.334435][T14863] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.795530][T14863] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.857890][T14944] FAT-fs (loop4): Directory bread(block 64) failed [ 1371.864785][T14944] FAT-fs (loop4): Directory bread(block 65) failed [ 1371.872326][T14944] FAT-fs (loop4): Directory bread(block 66) failed [ 1371.879438][T14944] FAT-fs (loop4): Directory bread(block 67) failed [ 1371.886383][T14944] FAT-fs (loop4): Directory bread(block 68) failed [ 1371.893482][T14944] FAT-fs (loop4): Directory bread(block 69) failed [ 1371.900672][T14944] FAT-fs (loop4): Directory bread(block 70) failed [ 1371.907622][T14944] FAT-fs (loop4): Directory bread(block 71) failed [ 1371.928143][T14944] FAT-fs (loop4): Directory bread(block 72) failed [ 1371.935171][T14944] FAT-fs (loop4): Directory bread(block 73) failed [ 1372.445259][T14754] veth0_macvtap: entered promiscuous mode [ 1372.757746][T14754] veth1_macvtap: entered promiscuous mode [ 1372.958613][T14754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1373.120518][T14754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1373.234045][T14863] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1373.377618][T14863] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1373.548594][T10495] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.648516][T14863] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1373.777843][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.799156][T14934] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.883132][T13361] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.937539][T14863] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1376.765353][T14863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1377.214421][T14863] 8021q: adding VLAN 0 to HW filter on device team0 [ 1377.474899][T14934] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.482817][T14934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1377.715665][T14934] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.723502][T14934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1377.973452][ T9302] usb 3-1: new low-speed USB device number 87 using dummy_hcd [ 1378.204482][ T9302] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1378.213848][ T9302] usb 3-1: config 0 has no interface number 0 [ 1378.220561][ T9302] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1378.232138][ T9302] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1378.243391][ T9302] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1378.255691][ T9302] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1378.279751][ T9302] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1378.294994][ T9302] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1378.308705][ T9302] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1378.318285][ T9302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.261006][ T9302] usb 3-1: config 0 descriptor?? [ 1379.279721][T14970] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1379.413291][T14970] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1379.589997][ T9302] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1379.829808][ T9302] usb 3-1: USB disconnect, device number 87 [ 1379.990430][ T9302] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1381.942684][ T9302] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1382.280281][ T9302] usb 3-1: config 0 has an invalid interface number: 74 but max is 0 [ 1382.289284][ T9302] usb 3-1: config 0 has no interface number 0 [ 1382.295694][ T9302] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1382.305422][ T9302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.432132][ T9302] usb 3-1: config 0 descriptor?? [ 1382.454675][ T9302] cp210x 3-1:0.74: cp210x converter detected [ 1382.704402][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1382.723522][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1382.736960][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1382.836366][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1382.853009][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1382.961659][ T9302] cp210x 3-1:0.74: failed to get vendor val 0x000e size 3: -32 [ 1383.109612][T14863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1383.295957][ T9302] cp210x 3-1:0.74: GPIO initialisation failed: -19 [ 1383.354054][T14992] lo speed is unknown, defaulting to 1000 [ 1383.515316][ T9302] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1383.569982][ T9302] usb 3-1: USB disconnect, device number 88 [ 1383.641191][ T9302] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1383.652172][ T9302] cp210x 3-1:0.74: device disconnected [ 1385.078120][ T50] Bluetooth: hci1: command tx timeout [ 1386.205679][T14992] chnl_net:caif_netlink_parms(): no params data found [ 1387.184946][ T50] Bluetooth: hci1: command tx timeout [ 1389.008971][T14302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.029666][T14302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.303439][ T50] Bluetooth: hci1: command tx timeout [ 1389.365313][T14863] veth0_vlan: entered promiscuous mode [ 1389.496588][T14620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.504872][T14620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.716540][T14863] veth1_vlan: entered promiscuous mode [ 1390.954049][T14992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.981615][T14992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.990090][T14992] bridge_slave_0: entered allmulticast mode [ 1391.000869][T14992] bridge_slave_0: entered promiscuous mode [ 1391.241024][T14992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.249074][T14992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.257791][T14992] bridge_slave_1: entered allmulticast mode [ 1391.289353][T14992] bridge_slave_1: entered promiscuous mode [ 1391.388056][ T50] Bluetooth: hci1: command tx timeout [ 1391.600494][T14992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1391.863366][T14992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1391.898268][T14863] veth0_macvtap: entered promiscuous mode [ 1392.330656][T14863] veth1_macvtap: entered promiscuous mode [ 1392.369979][T14992] team0: Port device team_slave_0 added [ 1392.475622][T14992] team0: Port device team_slave_1 added [ 1393.104632][T14992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1393.129331][T14992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.163097][T14992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1393.262804][T14863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1393.340238][ T30] audit: type=1326 audit(1764050853.035:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.5.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 1393.365123][ T30] audit: type=1326 audit(1764050853.035:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.5.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 1393.390101][ T30] audit: type=1326 audit(1764050853.055:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.5.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 1393.413416][ T30] audit: type=1326 audit(1764050853.075:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.5.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 1393.473716][T14863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1393.557777][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2563'. [ 1393.572418][T15047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.582988][T15047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.692149][T14992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1393.700203][T14992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.744679][T14992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1393.881442][T13237] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.884956][T15052] loop4: detected capacity change from 0 to 256 [ 1393.994210][T14682] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.014362][T14682] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.092828][T14933] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.128706][ T30] audit: type=1326 audit(1764050853.215:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.5.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 1394.163621][ T30] audit: type=1326 audit(1764050853.215:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.5.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 1394.190877][ T30] audit: type=1326 audit(1764050853.215:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.5.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 1394.213971][ T30] audit: type=1326 audit(1764050853.215:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.5.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 1394.236789][ T30] audit: type=1326 audit(1764050853.235:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.5.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 1394.280263][ T30] audit: type=1326 audit(1764050853.235:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.5.2563" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 1394.696842][T15052] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 256) [ 1395.097927][T14992] hsr_slave_0: entered promiscuous mode [ 1395.108531][T14992] hsr_slave_1: entered promiscuous mode [ 1395.117569][T14992] debugfs: 'hsr0' already exists in 'hsr' [ 1395.123442][T14992] Cannot create hsr debugfs directory [ 1397.581620][T14992] team0: Port device netdevsim3 removed [ 1397.596441][T14992] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.885439][T14992] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.184541][T14992] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.404071][T14992] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.480730][T14992] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1399.530313][T14992] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1399.783085][T14992] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1399.999770][T14992] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1401.888951][T11218] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1402.176687][T11218] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1402.239338][T11218] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1402.275010][T11218] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1402.353173][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1402.360105][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1402.456354][T11218] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1402.468978][T11218] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1402.477676][T11218] usb 5-1: Product: syz [ 1402.482056][T11218] usb 5-1: Manufacturer: syz [ 1402.486790][T11218] usb 5-1: SerialNumber: syz [ 1402.702456][T11218] usb 5-1: config 0 descriptor?? [ 1402.799840][T11218] usb 5-1: selecting invalid altsetting 0 [ 1403.076080][T14992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1403.268868][T11218] usb 5-1: USB disconnect, device number 102 [ 1403.604827][T14190] udevd[14190]: setting owner of /dev/snd/pcmC3D0p to uid=0, gid=29 failed: No such file or directory [ 1403.630780][T14992] 8021q: adding VLAN 0 to HW filter on device team0 [ 1403.715913][T14056] udevd[14056]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1403.836717][T14682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.844610][T14682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.032158][T14682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.039894][T14682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1408.594464][T14992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1408.709060][T13361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.717369][T13361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.282393][T13278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1409.339938][T13278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1409.353235][T13278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1409.373631][T13278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1409.411769][T13278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1409.479434][T13237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.487743][T13237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.828328][T15136] lo speed is unknown, defaulting to 1000 [ 1410.854813][T15144] loop4: detected capacity change from 0 to 512 [ 1411.192390][T15144] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.2580: corrupted in-inode xattr: e_value size too large [ 1411.349503][T15144] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2580: couldn't read orphan inode 15 (err -117) [ 1411.602775][T15144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1411.667550][T13278] Bluetooth: hci3: command tx timeout [ 1411.988266][T10528] unregister_netdevice: waiting for virt_wifi0 to become free. Usage count = 3 [ 1411.999950][T10528] ref_tracker: netdev@ffff888016efc560 has 1/1 users at [ 1411.999950][T10528] ib_device_set_netdev+0x48f/0xc40 [ 1411.999950][T10528] siw_newlink+0x5ce/0x13b0 [ 1411.999950][T10528] nldev_newlink+0xa0e/0xb60 [ 1411.999950][T10528] rdma_nl_rcv+0xefa/0x11c0 [ 1411.999950][T10528] netlink_unicast+0xf04/0x12b0 [ 1411.999950][T10528] netlink_sendmsg+0x10b3/0x1250 [ 1411.999950][T10528] __sock_sendmsg+0x333/0x3d0 [ 1411.999950][T10528] ____sys_sendmsg+0x7e0/0xd80 [ 1411.999950][T10528] ___sys_sendmsg+0x271/0x3b0 [ 1411.999950][T10528] __sys_sendmsg+0x1aa/0x300 [ 1411.999950][T10528] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1411.999950][T10528] ia32_sys_call+0x3f6c/0x4310 [ 1411.999950][T10528] __do_fast_syscall_32+0xb0/0x150 [ 1411.999950][T10528] do_fast_syscall_32+0x38/0x80 [ 1411.999950][T10528] do_SYSENTER_32+0x1f/0x30 [ 1411.999950][T10528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1411.999950][T10528] [ 1412.091938][ C1] vkms_vblank_simulate: vblank timer overrun [ 1412.960957][T14252] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1412.993644][T15136] chnl_net:caif_netlink_parms(): no params data found [ 1413.715169][T13278] Bluetooth: hci3: command tx timeout [ 1413.881780][T15160] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2581'. [ 1414.701305][T14992] veth0_vlan: entered promiscuous mode [ 1414.996074][T14992] veth1_vlan: entered promiscuous mode [ 1415.789018][T13278] Bluetooth: hci3: command tx timeout [ 1415.832376][T14992] veth0_macvtap: entered promiscuous mode [ 1415.877619][ T5877] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 1416.031849][T14992] veth1_macvtap: entered promiscuous mode [ 1416.087898][ T5877] usb 9-1: device descriptor read/64, error -71 [ 1416.397811][ T5877] usb 9-1: new full-speed USB device number 42 using dummy_hcd [ 1416.659232][ T5877] usb 9-1: device descriptor read/64, error -71 [ 1416.800699][ T5877] usb usb9-port1: attempt power cycle [ 1416.814512][T14992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1416.912587][T15136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.920211][T15136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.928401][T15136] bridge_slave_0: entered allmulticast mode [ 1416.938345][T15136] bridge_slave_0: entered promiscuous mode [ 1417.222016][T14992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1417.305443][ T5877] usb 9-1: new full-speed USB device number 43 using dummy_hcd [ 1417.324727][T15136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.332642][T15136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.341668][T15136] bridge_slave_1: entered allmulticast mode [ 1417.353718][T15136] bridge_slave_1: entered promiscuous mode [ 1417.457718][ T5877] usb 9-1: device descriptor read/8, error -71 [ 1417.477882][ T58] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.818163][ T5877] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 1417.870845][T13278] Bluetooth: hci3: command tx timeout [ 1417.879350][ T5877] usb 9-1: device descriptor read/8, error -71 [ 1418.011855][ T5877] usb usb9-port1: unable to enumerate USB device [ 1418.117938][ T58] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.143745][T15136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.259565][ T58] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.281557][ T58] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.344507][T15136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.288450][T15136] team0: Port device team_slave_0 added [ 1419.422273][T15136] team0: Port device team_slave_1 added [ 1420.178422][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1420.198574][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1420.216389][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1420.240629][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1420.289191][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1420.548846][T15136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1420.572297][T15136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1420.603988][T15136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1420.745746][T15188] lo speed is unknown, defaulting to 1000 [ 1420.995742][T15136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1421.003481][T15136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1421.030175][T15136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1421.426150][T15186] loop4: detected capacity change from 0 to 4096 [ 1421.521693][T15186] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1422.222127][T15136] hsr_slave_0: entered promiscuous mode [ 1422.232793][T15136] hsr_slave_1: entered promiscuous mode [ 1422.242254][T15136] debugfs: 'hsr0' already exists in 'hsr' [ 1422.248680][T15136] Cannot create hsr debugfs directory [ 1422.271437][T15186] ntfs3(loop4): Failed to read $UpCase (-4). [ 1422.428411][T13278] Bluetooth: hci5: command tx timeout [ 1424.090962][T15208] loop4: detected capacity change from 0 to 512 [ 1424.393793][T15208] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.2590: corrupted in-inode xattr: e_value size too large [ 1424.517898][T13278] Bluetooth: hci5: command tx timeout [ 1424.532769][T15188] chnl_net:caif_netlink_parms(): no params data found [ 1424.681089][T15208] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2590: couldn't read orphan inode 15 (err -117) [ 1424.814582][T15208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1425.761007][T14252] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1426.524395][T15136] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.612319][T13278] Bluetooth: hci5: command tx timeout [ 1426.874456][T15136] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.254250][T15136] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.674659][T15136] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.677689][ T50] Bluetooth: hci5: command tx timeout [ 1428.687374][T15236] fuse: Bad value for 'fd' [ 1429.295321][T15188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.303992][T15188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.315312][T15188] bridge_slave_0: entered allmulticast mode [ 1429.326953][T15188] bridge_slave_0: entered promiscuous mode [ 1429.494665][T15136] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1429.658099][T15188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.694970][T15188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.704307][T15188] bridge_slave_1: entered allmulticast mode [ 1429.716159][T15188] bridge_slave_1: entered promiscuous mode [ 1429.759146][T15136] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1429.868746][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 1429.953380][T15136] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1430.719369][T15188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1430.730039][T15136] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1430.944556][T15188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1431.302492][T15188] team0: Port device team_slave_0 added [ 1431.542843][T15188] team0: Port device team_slave_1 added [ 1432.370735][T15188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.378229][T15188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.405127][T15188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1432.770712][T15188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1432.777916][T15188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.805120][T15188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1432.956303][T15259] loop8: detected capacity change from 0 to 512 [ 1433.449472][T15259] EXT4-fs error (device loop8): ext4_iget_extra_inode:5075: inode #15: comm syz.8.2600: corrupted in-inode xattr: e_value size too large [ 1433.639781][T15259] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.2600: couldn't read orphan inode 15 (err -117) [ 1433.901593][T15259] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1434.447944][T15188] hsr_slave_0: entered promiscuous mode [ 1434.460432][T15188] hsr_slave_1: entered promiscuous mode [ 1434.470716][T15188] debugfs: 'hsr0' already exists in 'hsr' [ 1434.476672][T15188] Cannot create hsr debugfs directory [ 1435.165206][T14863] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.389665][T15136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.968223][T13361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1435.976403][T13361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1436.002103][T15136] 8021q: adding VLAN 0 to HW filter on device team0 [ 1436.338595][T14934] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.346287][T14934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1436.523461][T14934] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.531341][T14934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1437.299920][T14620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.309078][T14620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.014995][T15188] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.518146][T15188] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.935909][T15188] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.183935][T15188] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.382098][T15285] loop9: detected capacity change from 0 to 2048 [ 1440.612798][T15285] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1440.641960][T15285] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1440.703357][T15188] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1440.895778][T15188] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1441.068709][T15188] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1441.397528][T15188] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1442.179065][T14992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1442.666533][T15136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1443.433615][T15303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1443.536678][T15307] bond_slave_0: entered promiscuous mode [ 1443.542931][T15307] bond_slave_1: entered promiscuous mode [ 1443.550705][T15307] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1443.567794][T15307] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1444.299180][T15312] binder: 15310:15312 ioctl c0306201 0 returned -14 [ 1445.276381][T15188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1445.625378][T15188] 8021q: adding VLAN 0 to HW filter on device team0 [ 1445.842890][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.850704][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1446.132159][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.139916][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1446.926370][T15188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1446.937963][T15188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1448.941448][T15338] netlink: 'syz.4.2614': attribute type 10 has an invalid length. [ 1448.968846][T15338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1448.993843][T15338] batadv0: entered promiscuous mode [ 1449.002967][T15338] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1450.640516][T15136] veth0_vlan: entered promiscuous mode [ 1450.751866][T15136] veth1_vlan: entered promiscuous mode [ 1451.530000][T15188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1451.837680][T15352] loop4: detected capacity change from 0 to 512 [ 1451.882802][T15136] veth0_macvtap: entered promiscuous mode [ 1452.070630][T15136] veth1_macvtap: entered promiscuous mode [ 1452.224016][T15352] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #17: comm syz.4.2617: corrupted in-inode xattr: overlapping e_value [ 1452.339025][T15352] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2617: couldn't read orphan inode 17 (err -117) [ 1452.487539][T15352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1452.674904][T15136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1452.981773][T15136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1453.254971][T14682] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.364812][T14682] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.378075][T14252] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1453.509182][T14682] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.556314][T14620] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.203294][T15369] binder: 15368:15369 ioctl c0306201 0 returned -14 [ 1455.300990][T15377] loop4: detected capacity change from 0 to 2048 [ 1455.671284][T15387] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1455.966782][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1455.966876][ T30] audit: type=1800 audit(1764050915.705:36): pid=15377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2621" name="bus" dev="loop4" ino=2097152 res=0 errno=0 [ 1456.566829][T15188] veth0_vlan: entered promiscuous mode [ 1456.859877][T15188] veth1_vlan: entered promiscuous mode [ 1457.469365][T15188] veth0_macvtap: entered promiscuous mode [ 1457.695443][T15188] veth1_macvtap: entered promiscuous mode [ 1458.321584][T15188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1458.574700][T15188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1458.698792][ T3535] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.742238][T13361] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.876338][T14934] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.951156][T10514] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.739665][T15402] loop8: detected capacity change from 0 to 4096 [ 1463.729331][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1463.736230][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1465.321675][ T30] audit: type=1800 audit(1764050925.035:37): pid=15458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2637" name="nullb0" dev="tmpfs" ino=351 res=0 errno=0 [ 1466.358815][T15468] loop8: detected capacity change from 0 to 512 [ 1466.790749][T15468] EXT4-fs error (device loop8): ext4_iget_extra_inode:5075: inode #15: comm syz.8.2639: corrupted in-inode xattr: e_value size too large [ 1466.892831][T14302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.901755][T14302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.010141][T15468] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.2639: couldn't read orphan inode 15 (err -117) [ 1467.019091][T13237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.030704][T13237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.179637][T15468] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1467.576506][ T5877] usb 10-1: new low-speed USB device number 45 using dummy_hcd [ 1467.833354][ T5877] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1467.842306][ T5877] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.853189][ T5877] usb 10-1: config 0 has no interface number 0 [ 1467.859900][ T5877] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1467.885341][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.114991][T14863] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1468.150503][ T5877] usb 10-1: config 0 descriptor?? [ 1468.210493][ T5877] ldusb 10-1:0.55: Interrupt in endpoint not found [ 1468.519603][ T5877] usb 10-1: USB disconnect, device number 45 [ 1470.709259][T13279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1470.778342][T13279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1470.793496][T13279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1470.861035][T13279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1470.890437][T13279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1471.618396][T15496] lo speed is unknown, defaulting to 1000 [ 1473.182609][T13279] Bluetooth: hci0: command tx timeout [ 1473.388646][T14302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.413688][T14302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.993463][T14933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1474.001995][T14933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1474.329527][T15521] loop9: detected capacity change from 0 to 512 [ 1474.697694][T15521] EXT4-fs error (device loop9): ext4_iget_extra_inode:5075: inode #15: comm syz.9.2651: corrupted in-inode xattr: e_value size too large [ 1474.778387][T15521] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2651: couldn't read orphan inode 15 (err -117) [ 1475.053902][T15521] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1475.126751][T15527] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1475.204917][T15496] chnl_net:caif_netlink_parms(): no params data found [ 1475.230242][T13279] Bluetooth: hci0: command tx timeout [ 1475.482470][T15526] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1475.841047][T15531] loop6: detected capacity change from 0 to 24 [ 1475.938225][T15531] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1476.528576][T14992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1476.728078][ T5877] usb 9-1: new low-speed USB device number 45 using dummy_hcd [ 1477.057767][ T5877] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1477.066332][ T5877] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.095561][ T5877] usb 9-1: config 0 has no interface number 0 [ 1477.107339][ T5877] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1477.116682][ T5877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.328757][T13279] Bluetooth: hci0: command tx timeout [ 1477.375090][ T5877] usb 9-1: config 0 descriptor?? [ 1477.442694][ T5877] ldusb 9-1:0.55: Interrupt in endpoint not found [ 1477.924303][ T5877] usb 9-1: USB disconnect, device number 45 [ 1479.408120][T13278] Bluetooth: hci0: command tx timeout [ 1480.389333][T15496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.397023][T15496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.406496][T15496] bridge_slave_0: entered allmulticast mode [ 1480.418906][T15496] bridge_slave_0: entered promiscuous mode [ 1480.510074][ T5877] usb 10-1: new full-speed USB device number 46 using dummy_hcd [ 1480.637540][T15496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.645540][T15496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.654343][T15496] bridge_slave_1: entered allmulticast mode [ 1480.692375][T15496] bridge_slave_1: entered promiscuous mode [ 1480.709763][ T5877] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.720745][ T5877] usb 10-1: config 0 has no interfaces? [ 1480.726778][ T5877] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1480.736438][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.052686][ T5877] usb 10-1: config 0 descriptor?? [ 1481.091692][T13278] Bluetooth: hci4: command 0x0406 tx timeout [ 1481.260707][T15496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1481.345545][T11218] usb 10-1: USB disconnect, device number 46 [ 1481.524610][T15496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1482.192060][T15496] team0: Port device team_slave_0 added [ 1482.272177][T15496] team0: Port device team_slave_1 added [ 1482.854542][T15496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1482.861888][T15496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.889335][T15496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1483.183900][T15496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1483.191391][T15496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1483.219885][T15496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1483.477856][T11218] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1483.887717][T11218] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.898364][T11218] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1483.912498][T11218] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1483.922430][T11218] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.192658][T11218] usb 10-1: config 0 descriptor?? [ 1484.286693][T11218] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1484.642964][T15576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1484.848717][T15578] bond_slave_0: entered promiscuous mode [ 1484.854947][T15578] bond_slave_1: entered promiscuous mode [ 1484.888372][T15578] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1484.914781][T15578] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1485.004234][T15496] hsr_slave_0: entered promiscuous mode [ 1485.017979][T15496] hsr_slave_1: entered promiscuous mode [ 1485.028982][T15496] debugfs: 'hsr0' already exists in 'hsr' [ 1485.035649][T15496] Cannot create hsr debugfs directory [ 1485.058962][ T9289] usb 7-1: new low-speed USB device number 54 using dummy_hcd [ 1485.294862][ T9289] usb 7-1: device descriptor read/64, error -71 [ 1485.558238][ T9289] usb 7-1: new low-speed USB device number 55 using dummy_hcd [ 1485.707810][ T9289] usb 7-1: device descriptor read/64, error -71 [ 1485.848628][ T9289] usb usb7-port1: attempt power cycle [ 1486.257949][ T9289] usb 7-1: new low-speed USB device number 56 using dummy_hcd [ 1486.383729][ T9289] usb 7-1: device descriptor read/8, error -71 [ 1486.497983][T11218] usb 10-1: USB disconnect, device number 47 [ 1486.728142][ T9289] usb 7-1: new low-speed USB device number 57 using dummy_hcd [ 1486.789821][ T9289] usb 7-1: device descriptor read/8, error -71 [ 1486.946589][ T9289] usb usb7-port1: unable to enumerate USB device [ 1487.148656][ T5877] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1487.398030][ T5877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1487.409985][ T5877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1487.436063][ T5877] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1487.454064][ T5877] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1487.463944][ T5877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.495459][T15496] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.646439][T11218] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1487.674763][ T5877] usb 9-1: config 0 descriptor?? [ 1487.960008][T15496] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.000523][T11218] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1488.010784][T11218] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.020076][T11218] usb 10-1: Product: syz [ 1488.025276][T11218] usb 10-1: Manufacturer: syz [ 1488.030819][T11218] usb 10-1: SerialNumber: syz [ 1488.203168][ T5877] usbhid 9-1:0.0: can't add hid device: -71 [ 1488.211527][ T5877] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1488.379379][ T5877] usb 9-1: USB disconnect, device number 46 [ 1488.405154][T15496] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.815144][T15496] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.494769][ T9289] usb 7-1: new low-speed USB device number 58 using dummy_hcd [ 1489.546743][T11218] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1489.560062][T11218] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1489.592350][T11218] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1489.927902][ T9289] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1489.933136][T11218] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1489.936257][ T9289] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.955480][ T9289] usb 7-1: config 0 has no interface number 0 [ 1489.961991][ T9289] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1489.973876][ T9289] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1490.002945][ T9289] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1490.018420][ T9289] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.170146][ T9289] usb 7-1: config 0 descriptor?? [ 1490.180394][T15605] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1490.315995][T11218] usb 10-1: USB disconnect, device number 48 [ 1490.455448][T15496] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1490.483434][ T9289] ldusb 7-1:0.55: Interrupt in endpoint not found [ 1490.692159][T15496] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1490.760292][ T9289] usb 7-1: USB disconnect, device number 58 [ 1491.049802][T15496] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1491.244739][T15496] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1493.148522][T11810] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1493.184312][T11218] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1493.498623][T11810] usb 9-1: Using ep0 maxpacket: 32 [ 1493.541823][T11810] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 1493.550611][T11810] usb 9-1: config 0 has no interface number 0 [ 1493.557352][T11810] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1493.588353][T11218] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.599383][T11218] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1493.613000][T11218] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1493.622805][T11218] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.692757][T15624] loop6: detected capacity change from 0 to 2048 [ 1493.823844][T11810] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1493.834137][T11810] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.843107][T11810] usb 9-1: Product: syz [ 1493.848024][T11810] usb 9-1: Manufacturer: syz [ 1493.852937][T11810] usb 9-1: SerialNumber: syz [ 1493.944535][T11218] usb 10-1: config 0 descriptor?? [ 1493.969487][T15624] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1494.001127][T15624] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1494.011263][T15496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1494.181445][T11810] usb 9-1: config 0 descriptor?? [ 1494.219238][T15620] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1494.221438][T11218] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1494.570195][T15496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1494.736365][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.947654][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.955500][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1494.970104][T15620] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1495.392811][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.400635][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.792307][T15188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1496.168342][T11810] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1496.182551][T11810] asix 9-1:0.188: probe with driver asix failed with error -32 [ 1496.567931][T11218] usb 10-1: USB disconnect, device number 49 [ 1497.657605][ T9302] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1497.744876][T11218] usb 9-1: USB disconnect, device number 47 [ 1498.004412][ T9302] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1498.016491][ T9302] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1498.027739][ T9302] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1498.042111][ T9302] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1498.051914][ T9302] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.364651][ T9302] usb 10-1: config 0 descriptor?? [ 1498.915166][ T9302] usbhid 10-1:0.0: can't add hid device: -71 [ 1498.919214][T11218] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 1498.929803][ T9302] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1499.068797][ T9302] usb 10-1: USB disconnect, device number 50 [ 1499.139619][T15657] loop8: detected capacity change from 0 to 2048 [ 1499.266661][T11218] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.281111][T11218] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1499.291129][T11218] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1499.318320][T11218] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.659055][T11218] usb 7-1: config 0 descriptor?? [ 1499.909981][T15657] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1499.942220][T15657] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1500.060346][T11218] usb 7-1: USB disconnect, device number 59 [ 1500.770848][T15496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1500.991874][T14863] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1504.708947][T11218] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1504.807960][T11810] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1505.023280][T11218] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1505.051311][T11218] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.064863][T11218] usb 9-1: Product: syz [ 1505.067473][T11810] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.069456][T11218] usb 9-1: Manufacturer: syz [ 1505.080982][T11810] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.085422][T11218] usb 9-1: SerialNumber: syz [ 1505.095623][T11810] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1505.095868][T11810] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1505.096022][T11810] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.311662][T11810] usb 10-1: config 0 descriptor?? [ 1505.909049][T11218] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1505.923006][T11218] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1505.936596][T11218] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1506.013232][T11810] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1506.021239][T11810] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1506.029885][T11810] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1506.038136][T11810] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1506.045880][T11810] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1506.053800][T11810] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1506.088686][T11810] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1506.105200][T11810] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1506.113183][T11810] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1506.342268][T11218] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1506.647894][T11810] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1506.669066][T13278] Bluetooth: hci1: command 0x0406 tx timeout [ 1506.697468][T11810] usb 10-1: USB disconnect, device number 51 [ 1506.772407][T15496] veth0_vlan: entered promiscuous mode [ 1507.118047][T15496] veth1_vlan: entered promiscuous mode [ 1508.057826][T11810] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 1508.142562][T15496] veth0_macvtap: entered promiscuous mode [ 1508.168976][T11218] usb 9-1: USB disconnect, device number 48 [ 1508.350951][T15496] veth1_macvtap: entered promiscuous mode [ 1508.387918][T11810] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.398798][T11810] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1508.411359][T11810] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1508.439487][T11810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.492844][T15711] fido_id[15711]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1508.711466][T11810] usb 7-1: config 0 descriptor?? [ 1508.891776][T15496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1509.190403][T15496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1509.226638][T11810] usb 7-1: USB disconnect, device number 60 [ 1509.484949][T14934] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.603726][T14934] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.835116][T14302] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.925648][T14302] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.097945][ T5877] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1511.333341][ T5877] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1511.347382][ T5877] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1511.358007][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.635392][ T5877] usb 10-1: config 0 descriptor?? [ 1511.684362][ T5877] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1512.164709][T15738] syzkaller0: entered promiscuous mode [ 1512.170793][T15738] syzkaller0: entered allmulticast mode [ 1512.321177][T15735] loop6: detected capacity change from 0 to 2048 [ 1512.770658][T15735] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1512.783689][T15735] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1513.800759][T15188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1514.369852][ T5877] usb 10-1: USB disconnect, device number 52 [ 1515.873997][T11810] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1516.248151][T11810] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1516.258085][T11810] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.266480][T11810] usb 9-1: Product: syz [ 1516.275031][T11810] usb 9-1: Manufacturer: syz [ 1516.280753][T11810] usb 9-1: SerialNumber: syz [ 1516.290695][T15773] loop9: detected capacity change from 0 to 2048 [ 1516.848394][T15773] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1516.856885][T11810] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1516.861576][T15773] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1516.872966][T11810] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1516.895840][T11810] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1517.160035][T11810] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1517.246759][ T9302] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 1517.495565][ T9302] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.507252][ T9302] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1517.516745][ T9302] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1517.543568][ T9302] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.718165][ T9302] usb 7-1: config 0 descriptor?? [ 1517.963542][T14992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1518.031429][ T5877] usb 7-1: USB disconnect, device number 61 [ 1519.017923][ T9302] usb 9-1: USB disconnect, device number 49 [ 1520.253965][T15801] syzkaller0: entered promiscuous mode [ 1520.260936][T15801] syzkaller0: entered allmulticast mode [ 1520.792453][T15803] loop6: detected capacity change from 0 to 2048 [ 1520.823355][ T5877] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1521.073971][ T5877] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1521.088367][ T5877] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1521.098103][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.239366][ T5877] usb 10-1: config 0 descriptor?? [ 1521.261165][ T5877] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1521.261615][T15803] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1521.281890][T15803] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1522.128639][ T9302] usb 9-1: new low-speed USB device number 50 using dummy_hcd [ 1522.269917][T15188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1522.399258][ T9302] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1522.407959][ T9302] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.419415][ T9302] usb 9-1: config 0 has no interface number 0 [ 1522.425880][ T9302] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1522.439424][ T9302] usb 9-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1522.469440][ T9302] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1522.484405][ T9302] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.726306][ T9302] usb 9-1: config 0 descriptor?? [ 1522.805361][ T9302] ldusb 9-1:0.55: Interrupt in endpoint not found [ 1523.031020][ T9302] usb 9-1: USB disconnect, device number 50 [ 1523.856988][ T5877] usb 10-1: USB disconnect, device number 53 [ 1524.364874][T10495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1524.373349][T10495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.190678][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1525.197688][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1525.232820][ T5877] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 1525.464535][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.474071][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.545998][ T5877] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.557303][ T5877] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1525.566658][ T5877] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1525.576552][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.842147][ T5877] usb 7-1: config 0 descriptor?? [ 1526.177665][ T9302] usb 7-1: USB disconnect, device number 62 [ 1527.394036][T15853] fuse: Bad value for 'fd' [ 1528.261105][T15857] syzkaller0: entered promiscuous mode [ 1528.266983][T15857] syzkaller0: entered allmulticast mode [ 1528.888295][ T9302] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1528.936285][ T5877] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1529.179557][ T5877] usb 9-1: Using ep0 maxpacket: 32 [ 1529.249912][ T9302] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1529.260460][ T9302] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1529.274344][ T9302] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1529.278840][ T5877] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 1529.283827][ T9302] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.292141][ T5877] usb 9-1: config 0 has no interface number 0 [ 1529.327260][ T5877] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1529.480344][ T5877] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1529.491041][ T5877] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.499716][ T5877] usb 9-1: Product: syz [ 1529.505262][ T5877] usb 9-1: Manufacturer: syz [ 1529.526785][ T5877] usb 9-1: SerialNumber: syz [ 1529.550083][T11218] usb 10-1: new low-speed USB device number 54 using dummy_hcd [ 1529.658736][ T9302] usb 8-1: config 0 descriptor?? [ 1529.681279][ T9302] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1529.833331][ T5877] usb 9-1: config 0 descriptor?? [ 1529.851169][T15862] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1529.875508][T11218] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1529.884299][T11218] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.895282][T11218] usb 10-1: config 0 has no interface number 0 [ 1529.902182][T11218] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1529.913872][T11218] usb 10-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1529.943155][T11218] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1529.959968][T11218] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.293681][T15862] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1530.564068][T11218] usb 10-1: config 0 descriptor?? [ 1530.624127][T11218] ldusb 10-1:0.55: Interrupt in endpoint not found [ 1531.000447][T11218] usb 10-1: USB disconnect, device number 54 [ 1531.449047][ T5877] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1531.482795][ T5877] asix 9-1:0.188: probe with driver asix failed with error -61 [ 1532.120526][ T5877] usb 8-1: USB disconnect, device number 15 [ 1533.230288][ T9302] usb 9-1: USB disconnect, device number 51 [ 1534.309627][T15884] loop9: detected capacity change from 0 to 4096 [ 1534.506872][T15894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1534.601028][T15896] bond_slave_0: entered promiscuous mode [ 1534.607510][T15896] bond_slave_1: entered promiscuous mode [ 1534.616158][T15896] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1534.664577][T15896] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1535.693840][T15905] fuse: Bad value for 'fd' [ 1535.792698][T15884] ntfs3(loop9): Failed to read $UpCase (-4). [ 1535.903742][T15903] syzkaller0: entered promiscuous mode [ 1535.909855][T15903] syzkaller0: entered allmulticast mode [ 1537.272846][T15908] loop6: detected capacity change from 0 to 2048 [ 1537.798404][T15908] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1537.828606][T15908] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1538.148040][ T5877] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1538.466259][ T5877] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1538.476854][ T5877] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1538.490611][ T5877] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1538.500258][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.714303][T15919] loop8: detected capacity change from 0 to 2048 [ 1538.861012][ T5877] usb 10-1: config 0 descriptor?? [ 1538.991657][T15188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1539.014409][ T5877] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1539.227709][T11218] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1539.262883][T15919] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1539.276013][T15919] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1539.428029][T11218] usb 8-1: Using ep0 maxpacket: 32 [ 1539.527655][T11218] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 1539.536633][T11218] usb 8-1: config 0 has no interface number 0 [ 1539.559625][T11218] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1539.878872][T11218] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1539.888990][T11218] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.897800][T11218] usb 8-1: Product: syz [ 1539.902442][T11218] usb 8-1: Manufacturer: syz [ 1539.907530][T11218] usb 8-1: SerialNumber: syz [ 1540.126594][T11218] usb 8-1: config 0 descriptor?? [ 1540.148770][T15924] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1540.614338][T15924] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1540.721567][T14863] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1541.128101][ T5877] usb 10-1: USB disconnect, device number 55 [ 1541.758768][T11218] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1541.770801][T11218] asix 8-1:0.188: probe with driver asix failed with error -61 [ 1542.526202][T13278] Bluetooth: hci5: command 0x0406 tx timeout [ 1542.695604][T15949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1542.879743][T15954] bond_slave_0: entered promiscuous mode [ 1542.885947][T15954] bond_slave_1: entered promiscuous mode [ 1542.895029][T15954] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1542.952723][T15954] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1542.962525][T11218] usb 9-1: new full-speed USB device number 52 using dummy_hcd [ 1543.173299][T11218] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.184908][T11218] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1543.199777][T11218] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1543.209923][T11218] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.473736][T11218] usb 9-1: config 0 descriptor?? [ 1543.497910][T15959] fuse: Bad value for 'fd' [ 1543.578671][ T9302] usb 8-1: USB disconnect, device number 16 [ 1543.979155][T11810] usb 9-1: USB disconnect, device number 52 [ 1545.319299][T15967] syzkaller0: entered promiscuous mode [ 1545.325193][T15967] syzkaller0: entered allmulticast mode [ 1546.257500][ T9302] usb 9-1: new low-speed USB device number 53 using dummy_hcd [ 1546.357934][T15971] loop6: detected capacity change from 0 to 2048 [ 1546.543453][ T9302] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1546.552340][ T9302] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.563230][ T9302] usb 9-1: config 0 has no interface number 0 [ 1546.570216][ T9302] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1546.581464][ T9302] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1546.592686][ T9302] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1546.603239][ T9302] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.886988][T15974] loop7: detected capacity change from 0 to 2048 [ 1546.911555][T15971] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1546.942243][T15971] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1547.174811][ T9302] usb 9-1: config 0 descriptor?? [ 1547.186001][T15972] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1547.244366][T15974] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1547.263657][T15974] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1547.361893][ T9302] ldusb 9-1:0.55: Interrupt in endpoint not found [ 1547.458241][ T9302] usb 9-1: USB disconnect, device number 53 [ 1548.390540][T15188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1548.544950][T15496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1550.386705][T16002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1550.887918][ T9302] usb 9-1: new full-speed USB device number 54 using dummy_hcd [ 1551.175628][ T9302] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.186518][ T9302] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1551.196609][ T9302] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1551.206805][ T9302] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.578685][ T9302] usb 9-1: config 0 descriptor?? [ 1551.763115][ T9302] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1551.770589][ T9302] dvb-usb: bulk message failed: -22 (3/0) [ 1551.996267][ T9302] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1552.105207][ T9302] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1552.112983][ T9302] usb 9-1: media controller created [ 1552.276510][ T9302] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1552.465458][T10528] unregister_netdevice: waiting for virt_wifi0 to become free. Usage count = 3 [ 1552.476610][T10528] ref_tracker: netdev@ffff888016efc560 has 1/1 users at [ 1552.476610][T10528] ib_device_set_netdev+0x48f/0xc40 [ 1552.476610][T10528] siw_newlink+0x5ce/0x13b0 [ 1552.476610][T10528] nldev_newlink+0xa0e/0xb60 [ 1552.476610][T10528] rdma_nl_rcv+0xefa/0x11c0 [ 1552.476610][T10528] netlink_unicast+0xf04/0x12b0 [ 1552.476610][T10528] netlink_sendmsg+0x10b3/0x1250 [ 1552.476610][T10528] __sock_sendmsg+0x333/0x3d0 [ 1552.476610][T10528] ____sys_sendmsg+0x7e0/0xd80 [ 1552.476610][T10528] ___sys_sendmsg+0x271/0x3b0 [ 1552.476610][T10528] __sys_sendmsg+0x1aa/0x300 [ 1552.476610][T10528] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1552.476610][T10528] ia32_sys_call+0x3f6c/0x4310 [ 1552.476610][T10528] __do_fast_syscall_32+0xb0/0x150 [ 1552.476610][T10528] do_fast_syscall_32+0x38/0x80 [ 1552.476610][T10528] do_SYSENTER_32+0x1f/0x30 [ 1552.476610][T10528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1552.476610][T10528] [ 1552.525283][ T9302] dvb-usb: bulk message failed: -22 (6/0) [ 1552.616111][ T9302] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1552.709393][ T9302] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input115 [ 1552.728868][ T9302] dvb-usb: schedule remote query interval to 150 msecs. [ 1552.736194][ T9302] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1552.784341][ T9302] usb 9-1: USB disconnect, device number 54 [ 1553.353738][ T9302] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1553.959260][T16020] syzkaller0: entered promiscuous mode [ 1553.965012][T16020] syzkaller0: entered allmulticast mode [ 1555.082583][T16026] loop8: detected capacity change from 0 to 2048 [ 1555.405846][T16030] loop7: detected capacity change from 0 to 2048 [ 1555.445390][T16026] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1555.458331][T16026] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1555.913024][T16030] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1555.944352][T16030] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1556.838521][T14863] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1557.033474][T15496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1558.664335][T16058] bond1: option mode: unable to set because the bond device is up [ 1558.737746][ T5877] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 1559.038636][ T5877] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.049433][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1559.058947][ T5877] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1559.070395][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.190793][ T5877] usb 7-1: config 0 descriptor?? [ 1559.275031][ T5877] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1559.283060][ T5877] dvb-usb: bulk message failed: -22 (3/0) [ 1559.572121][ T5877] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1559.658764][ T5877] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1559.666128][ T5877] usb 7-1: media controller created [ 1559.802042][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1560.050515][ T5877] dvb-usb: bulk message failed: -22 (6/0) [ 1560.056777][ T5877] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1560.179500][ T5877] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input116 [ 1560.376356][ T5877] dvb-usb: schedule remote query interval to 150 msecs. [ 1560.383912][ T5877] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1560.553433][T11218] dvb-usb: bulk message failed: -22 (1/0) [ 1560.559780][T11218] dvb-usb: error while querying for an remote control event. [ 1560.624916][ T5877] usb 7-1: USB disconnect, device number 63 [ 1560.982870][ T5877] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1561.101768][ T30] audit: type=1804 audit(1764051020.805:38): pid=16073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2794" name="/newroot/12/file0" dev="tmpfs" ino=80 res=1 errno=0 [ 1562.354905][T16080] loop8: detected capacity change from 0 to 2048 [ 1562.754337][T16080] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1562.767673][T16080] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1564.076083][T14863] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1564.628097][T16103] bond1: option mode: unable to set because the bond device has slaves [ 1566.533831][T16115] syzkaller0: entered promiscuous mode [ 1566.539854][T16115] syzkaller0: entered allmulticast mode [ 1567.127894][ T9302] usb 9-1: new low-speed USB device number 55 using dummy_hcd [ 1567.441625][ T9302] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1567.450360][ T9302] usb 9-1: config 0 has no interface number 0 [ 1567.456694][ T9302] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1567.468439][ T9302] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1567.479721][ T9302] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1567.491154][ T9302] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1567.522585][ T9302] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1567.538088][ T9302] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.992582][ T9302] usb 9-1: config 0 descriptor?? [ 1568.001786][T16122] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1568.065444][ T9302] ldusb 9-1:0.55: Interrupt in endpoint not found [ 1568.413523][ T9302] usb 9-1: USB disconnect, device number 55 [ 1568.959596][T13279] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 1574.437398][T11810] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1574.650066][T11810] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.661489][T11810] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1574.690489][T11810] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1574.709794][T11810] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1574.719400][T11810] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.025227][T11810] usb 8-1: config 0 descriptor?? [ 1575.117344][ T9302] usb 7-1: new full-speed USB device number 64 using dummy_hcd [ 1575.371816][ T9302] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.401303][ T9302] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1575.416882][ T9302] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1575.426636][ T9302] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.569986][ T9302] usb 7-1: config 0 descriptor?? [ 1575.579091][T11810] usbhid 8-1:0.0: can't add hid device: -71 [ 1575.613370][T11810] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1575.659263][T11810] usb 8-1: USB disconnect, device number 17 [ 1575.767454][ T9302] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1575.774412][ T9302] dvb-usb: bulk message failed: -22 (3/0) [ 1576.059302][ T9302] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1576.199504][ T9302] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1576.243784][ T9302] usb 7-1: media controller created [ 1576.254440][ T9302] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1576.339305][T16161] syzkaller0: entered promiscuous mode [ 1576.345127][T16161] syzkaller0: entered allmulticast mode [ 1576.483313][ T9302] dvb-usb: bulk message failed: -22 (6/0) [ 1576.490975][ T9302] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1576.742092][ T9302] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input117 [ 1577.013454][ T9302] dvb-usb: schedule remote query interval to 150 msecs. [ 1577.054421][ T9302] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1577.210171][T11810] dvb-usb: bulk message failed: -22 (1/0) [ 1577.216196][T11810] dvb-usb: error while querying for an remote control event. [ 1577.279167][ T9302] usb 7-1: USB disconnect, device number 64 [ 1577.874577][ T9302] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1580.363273][T16185] loop6: detected capacity change from 0 to 2048 [ 1580.476850][T16192] loop8: detected capacity change from 0 to 512 [ 1580.558864][T16191] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1580.705042][T16192] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1580.908348][T16185] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1580.952053][T16185] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1581.139460][T16192] EXT4-fs error (device loop8): __ext4_fill_super:5512: inode #2: comm syz.8.2833: inode has both inline data and extents flags [ 1581.340454][T16192] EXT4-fs (loop8): Remounting filesystem read-only [ 1581.347883][T16192] EXT4-fs (loop8): get root inode failed [ 1581.353744][T16192] EXT4-fs (loop8): mount failed [ 1582.330253][T15188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1583.522838][ T5877] usb 10-1: new full-speed USB device number 56 using dummy_hcd [ 1583.848936][ T5877] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.859592][ T5877] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1583.870880][ T5877] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1583.895828][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.026497][T16215] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2839'. [ 1584.348588][ T5877] usb 10-1: config 0 descriptor?? [ 1584.489398][ T5877] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1584.519253][ T5877] dvb-usb: bulk message failed: -22 (3/0) [ 1585.042465][ T5877] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1585.159802][ T5877] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1585.167491][ T5877] usb 10-1: media controller created [ 1585.252698][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1585.501856][ T5877] dvb-usb: bulk message failed: -22 (6/0) [ 1585.509386][ T5877] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1585.681978][ T5877] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input118 [ 1585.888126][ T5877] dvb-usb: schedule remote query interval to 150 msecs. [ 1585.895327][ T5877] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1586.050335][T11218] dvb-usb: bulk message failed: -22 (1/0) [ 1586.056358][T11218] dvb-usb: error while querying for an remote control event. [ 1586.173644][ T5877] usb 10-1: USB disconnect, device number 56 [ 1586.584488][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1586.595524][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1586.619130][ T5877] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1588.898419][ T5877] usb 7-1: new low-speed USB device number 65 using dummy_hcd [ 1589.193339][ T5877] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1589.202322][ T5877] usb 7-1: config 0 has no interface number 0 [ 1589.225991][ T5877] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1589.243604][ T5877] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1589.255165][ T5877] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1589.266806][ T5877] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1589.280736][ T5877] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1589.290358][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.911990][ T5877] usb 7-1: config 0 descriptor?? [ 1589.937798][T16240] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1589.958544][ T5877] ldusb 7-1:0.55: Interrupt in endpoint not found [ 1590.059256][T16242] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1590.326071][ T9302] usb 7-1: USB disconnect, device number 65 [ 1590.881849][T16248] loop9: detected capacity change from 0 to 2048 [ 1591.430352][T16248] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1591.443551][T16248] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1592.676504][T14992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1592.737634][ T5877] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1592.977625][ T5877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1592.989307][ T5877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1593.014440][ T5877] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1593.032439][ T5877] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1593.041996][ T5877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.250519][ T5877] usb 9-1: config 0 descriptor?? [ 1593.802029][T13279] Bluetooth: hci0: command 0x0406 tx timeout [ 1593.897689][ T5877] usbhid 9-1:0.0: can't add hid device: -71 [ 1593.904713][ T5877] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1594.150046][ T5877] usb 9-1: USB disconnect, device number 56 [ 1594.478172][ T9302] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 1594.821853][ T9302] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.834420][ T9302] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1594.862144][ T9302] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1594.878650][ T9302] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.104981][ T9302] usb 7-1: config 0 descriptor?? [ 1595.216006][ T9302] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1595.223316][ T9302] dvb-usb: bulk message failed: -22 (3/0) [ 1595.542978][ T9302] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1595.702354][ T9302] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1595.713391][ T9302] usb 7-1: media controller created [ 1595.724105][ T9302] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1596.041395][ T9302] dvb-usb: bulk message failed: -22 (6/0) [ 1596.047800][ T9302] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1596.128886][ T9302] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input119 [ 1596.159916][T16279] syzkaller0: entered promiscuous mode [ 1596.165883][T16279] syzkaller0: entered allmulticast mode [ 1596.329991][ T9302] dvb-usb: schedule remote query interval to 150 msecs. [ 1596.337541][ T9302] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1596.498608][T11810] dvb-usb: bulk message failed: -22 (1/0) [ 1596.504640][T11810] dvb-usb: error while querying for an remote control event. [ 1596.592397][ T9302] usb 7-1: USB disconnect, device number 66 [ 1597.016018][ T9302] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1599.033026][T16291] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1599.442988][T16291] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1600.316610][T16296] loop9: detected capacity change from 0 to 2048 [ 1600.347765][ T9302] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1600.358813][ T30] audit: type=1326 audit(1764051060.095:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16299 comm="syz.8.2863" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x0 [ 1600.760474][T16296] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1600.773537][T16296] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1600.860135][ T9302] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1600.870330][ T9302] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.895784][ T9302] usb 7-1: Product: syz [ 1600.904569][ T9302] usb 7-1: Manufacturer: syz [ 1600.910818][ T9302] usb 7-1: SerialNumber: syz [ 1601.058466][T13278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1601.118403][T13278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1601.159801][T13278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1601.267654][T13278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1601.282129][T13278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1601.528518][ T9302] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1601.541180][ T9302] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1601.557951][ T9302] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1601.681458][ T9302] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 1601.863541][T16306] lo speed is unknown, defaulting to 1000 [ 1602.710637][T14992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1603.368445][ T9302] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1603.398172][T13279] Bluetooth: hci2: command tx timeout [ 1603.788402][ T9302] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1603.801839][ T9302] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1603.812286][ T9302] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1603.825875][ T9302] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1603.835407][ T9302] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.100211][ T5877] usb 7-1: USB disconnect, device number 67 [ 1604.585743][ T9302] usb 9-1: config 0 descriptor?? [ 1605.128571][ T9302] usbhid 9-1:0.0: can't add hid device: -71 [ 1605.135232][ T9302] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1605.374770][ T9302] usb 9-1: USB disconnect, device number 57 [ 1605.478083][T13279] Bluetooth: hci2: command tx timeout [ 1606.055763][T16336] syzkaller0: entered promiscuous mode [ 1606.061880][T16336] syzkaller0: entered allmulticast mode [ 1606.229192][T16306] chnl_net:caif_netlink_parms(): no params data found [ 1607.577432][T13279] Bluetooth: hci2: command tx timeout [ 1609.063406][T16352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1609.368435][T16352] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1609.628460][T13279] Bluetooth: hci2: command tx timeout [ 1610.054431][T16357] loop8: detected capacity change from 0 to 2048 [ 1610.384211][T16306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.392856][T16306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.423692][T16306] bridge_slave_0: entered allmulticast mode [ 1610.440697][T16306] bridge_slave_0: entered promiscuous mode [ 1610.496713][T16306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.533907][T16306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.542940][T16306] bridge_slave_1: entered allmulticast mode [ 1610.554402][T16306] bridge_slave_1: entered promiscuous mode [ 1610.800789][T16357] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1610.835441][T16357] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1611.070272][T13279] Bluetooth: hci7: command 0x0406 tx timeout [ 1611.205454][T16306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1611.515278][T16306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1612.400104][T14863] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1612.447350][T16367] netlink: 'syz.9.2878': attribute type 5 has an invalid length. [ 1612.500492][T16306] team0: Port device team_slave_0 added [ 1612.646574][T16306] team0: Port device team_slave_1 added [ 1612.682714][ T5877] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 1612.922079][ T5877] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.932844][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1612.942408][ T5877] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1612.952065][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.369869][ T5877] usb 7-1: config 0 descriptor?? [ 1613.471121][ T5877] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1613.500110][ T5877] dvb-usb: bulk message failed: -22 (3/0) [ 1613.522488][ T5877] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1613.540724][ T5877] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1613.548693][ T5877] usb 7-1: media controller created [ 1613.558872][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1613.811581][ T5877] dvb-usb: bulk message failed: -22 (6/0) [ 1613.818091][ T5877] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1613.881729][T16306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1613.911447][T16306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1613.945732][T16306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1614.033247][ T5877] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input120 [ 1614.260604][ T5877] dvb-usb: schedule remote query interval to 150 msecs. [ 1614.269341][ T5877] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1614.430129][T11218] dvb-usb: bulk message failed: -22 (1/0) [ 1614.436139][T11218] dvb-usb: error while querying for an remote control event. [ 1614.463779][T16306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1614.471792][T16306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1614.473226][ T5877] usb 7-1: USB disconnect, device number 68 [ 1614.521167][T16306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1615.112807][ T5877] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1615.782503][T16306] hsr_slave_0: entered promiscuous mode [ 1615.795289][T16306] hsr_slave_1: entered promiscuous mode [ 1615.805921][T16306] debugfs: 'hsr0' already exists in 'hsr' [ 1615.813949][T16306] Cannot create hsr debugfs directory [ 1619.354357][T16306] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.597771][T16406] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1619.769579][T16407] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 1620.182648][T16306] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.505707][T16306] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.823079][T16306] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.940942][T16416] loop9: detected capacity change from 0 to 2048 [ 1621.151095][T16415] netlink: 'syz.4.2891': attribute type 5 has an invalid length. [ 1621.391027][T16416] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1621.404564][T16416] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1622.271678][T16306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1622.510769][ T9302] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1622.583371][T16306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1622.618053][T14992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1622.672575][T16306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1622.753981][ T9302] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1622.765751][ T9302] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1622.776387][ T9302] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1622.790412][ T9302] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1622.819846][ T9302] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.845004][T16306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1623.181075][ T9302] usb 7-1: config 0 descriptor?? [ 1623.958606][ T9302] usbhid 7-1:0.0: can't add hid device: -71 [ 1623.965432][ T9302] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1624.174903][ T9302] usb 7-1: USB disconnect, device number 69 [ 1624.392795][T16436] syzkaller0: entered promiscuous mode [ 1624.399126][T16436] syzkaller0: entered allmulticast mode [ 1625.929273][T16306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1626.408088][T16306] 8021q: adding VLAN 0 to HW filter on device team0 [ 1626.560800][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.568579][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1626.909685][ T5877] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1626.918388][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1626.927299][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1627.218731][ T5877] usb 10-1: Using ep0 maxpacket: 8 [ 1627.312022][ T5877] usb 10-1: config 162 has an invalid interface number: 97 but max is 0 [ 1627.325395][ T5877] usb 10-1: config 162 has no interface number 0 [ 1627.332605][ T5877] usb 10-1: config 162 interface 97 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1627.344418][ T5877] usb 10-1: config 162 interface 97 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1627.355358][ T5877] usb 10-1: config 162 interface 97 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1627.369378][ T5877] usb 10-1: config 162 interface 97 has no altsetting 0 [ 1627.578451][T16306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1627.589433][T16306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1627.848350][ T5877] usb 10-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 1627.859265][ T5877] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.870051][ T5877] usb 10-1: Product: syz [ 1627.874546][ T5877] usb 10-1: Manufacturer: syz [ 1627.880139][ T5877] usb 10-1: SerialNumber: syz [ 1627.993258][T16454] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1628.068366][T16456] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1628.583511][ T5877] metro_usb 10-1:162.97: interrupt-out endpoint missing [ 1628.819280][ T5877] usb 10-1: USB disconnect, device number 57 [ 1630.977905][ T9289] usb 10-1: new full-speed USB device number 58 using dummy_hcd [ 1631.441361][ T9289] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1631.452526][ T9289] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1631.462075][ T9289] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1631.472787][ T9289] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.773520][ T9289] usb 10-1: config 0 descriptor?? [ 1631.889828][ T9289] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1631.896794][ T9289] dvb-usb: bulk message failed: -22 (3/0) [ 1632.000392][T16306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1632.053741][ T9289] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1632.181152][ T9289] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1632.192895][ T9289] usb 10-1: media controller created [ 1632.203969][ T9289] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1632.256956][T16159] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1632.513219][ T9289] dvb-usb: bulk message failed: -22 (6/0) [ 1632.550992][ T9289] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1632.651352][T16159] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1632.662738][T16159] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1632.674857][T16159] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1632.690113][T16159] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1632.699682][T16159] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.870408][ T9289] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input121 [ 1633.009944][ T9289] dvb-usb: schedule remote query interval to 150 msecs. [ 1633.018072][ T9289] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1633.181380][T16159] usb 7-1: config 0 descriptor?? [ 1633.213262][T11810] dvb-usb: bulk message failed: -22 (1/0) [ 1633.220107][T11810] dvb-usb: error while querying for an remote control event. [ 1633.337786][ T9289] usb 10-1: USB disconnect, device number 58 [ 1633.617505][T16306] veth0_vlan: entered promiscuous mode [ 1633.988921][T16306] veth1_vlan: entered promiscuous mode [ 1634.088784][T16159] usbhid 7-1:0.0: can't add hid device: -71 [ 1634.095482][T16159] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1634.133588][ T9289] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1634.288845][T16159] usb 7-1: USB disconnect, device number 70 [ 1635.142729][T16306] veth0_macvtap: entered promiscuous mode [ 1635.413460][T16306] veth1_macvtap: entered promiscuous mode [ 1635.894888][T16306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1636.250580][T16306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1636.601854][T16501] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1636.710462][T16237] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.860954][T16503] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1637.161415][T16237] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.226039][T16237] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.332250][T16237] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.478272][T16517] loop8: detected capacity change from 0 to 2048 [ 1639.839533][T16517] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1639.852543][T16517] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1640.648644][ T5877] usb 7-1: new full-speed USB device number 71 using dummy_hcd [ 1640.674556][T16535] syzkaller0: entered promiscuous mode [ 1640.684082][T16535] syzkaller0: entered allmulticast mode [ 1640.962954][ T5877] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1640.974558][ T5877] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1640.992894][ T5877] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1641.004105][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.166291][T14863] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1641.185647][ T5877] usb 7-1: config 0 descriptor?? [ 1641.268674][ T5877] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1641.276541][ T5877] dvb-usb: bulk message failed: -22 (3/0) [ 1641.367412][ T5877] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1641.389673][ T5877] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1641.397785][ T5877] usb 7-1: media controller created [ 1641.409508][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1641.866149][ T5877] dvb-usb: bulk message failed: -22 (6/0) [ 1641.873052][ T5877] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1642.013150][ T5877] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input122 [ 1642.210559][ T5877] dvb-usb: schedule remote query interval to 150 msecs. [ 1642.218670][ T5877] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1642.377547][T15599] dvb-usb: bulk message failed: -22 (1/0) [ 1642.383747][T15599] dvb-usb: error while querying for an remote control event. [ 1642.441274][ T5877] usb 7-1: USB disconnect, device number 71 [ 1642.985944][ T5877] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1643.097645][ T42] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1643.108794][T16549] tipc: Failed to obtain node identity [ 1643.114830][T16549] tipc: Enabling of bearer rejected, failed to enable media [ 1643.427353][ T42] usb 10-1: config index 0 descriptor too short (expected 126, got 72) [ 1643.530443][ T42] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1643.540440][ T42] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.550804][ T42] usb 10-1: Product: syz [ 1643.555302][ T42] usb 10-1: Manufacturer: syz [ 1643.561216][ T42] usb 10-1: SerialNumber: syz [ 1643.916067][ T42] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1644.270346][ T9289] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1644.907333][ T5877] usb 10-1: USB disconnect, device number 59 [ 1644.957830][ C1] dummy_hcd dummy_hcd.9: timer fired with no URBs pending? [ 1645.409400][T16562] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1645.453223][ T9289] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1645.461360][ T9289] ath9k_htc: Failed to initialize the device [ 1645.510855][ T5877] usb 10-1: ath9k_htc: USB layer deinitialized [ 1645.765532][T16562] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1647.526478][T16576] loop9: detected capacity change from 0 to 1024 [ 1647.970114][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1647.977226][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1648.346034][T16581] loop6: detected capacity change from 0 to 2048 [ 1648.722878][ T9289] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1648.959921][T16581] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1648.973065][T16581] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1648.991357][ T58] hfsplus: b-tree write err: -5, ino 4 [ 1649.045239][ T9289] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1649.056900][ T9289] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1649.067488][ T9289] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1649.081012][ T9289] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1649.090702][ T9289] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.313153][ T9289] usb 9-1: config 0 descriptor?? [ 1650.023139][ T9289] usbhid 9-1:0.0: can't add hid device: -71 [ 1650.032136][ T9289] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1650.288709][ T9289] usb 9-1: USB disconnect, device number 58 [ 1650.484223][T15188] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1650.771551][ T42] usb 10-1: new full-speed USB device number 60 using dummy_hcd [ 1651.034927][ T42] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1651.045683][ T42] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1651.075211][ T42] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1651.094873][ T42] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.391875][ T42] usb 10-1: config 0 descriptor?? [ 1651.449861][ T42] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1651.457816][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 1651.742351][ T42] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1651.912810][ T42] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1651.920528][ T42] usb 10-1: media controller created [ 1652.024908][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1652.250162][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 1652.256436][ T42] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1652.414961][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input123 [ 1652.570114][ T42] dvb-usb: schedule remote query interval to 150 msecs. [ 1652.577895][ T42] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1652.736385][ T42] usb 10-1: USB disconnect, device number 60 [ 1653.242315][ T42] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1654.362635][T16238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1654.370966][T16238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1654.586366][T16623] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 1655.753149][T10514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1655.761439][T10514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1657.764998][T16641] loop9: detected capacity change from 0 to 2048 [ 1658.037897][ T5877] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 1658.305456][ T5877] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1658.314415][ T5877] usb 2-1: config 0 has no interface number 0 [ 1658.322679][ T5877] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1658.351080][ T5877] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1658.367760][ T5877] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1658.380106][ T5877] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1658.391978][ T5877] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1658.402333][ T5877] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1658.415906][ T5877] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1658.425499][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.599554][T16641] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1658.613049][T16641] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1659.032341][T15599] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1659.284360][ T5877] usb 2-1: config 0 descriptor?? [ 1659.295269][T16645] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1659.408751][T15599] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1659.420737][T15599] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1659.430971][T15599] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1659.444544][T15599] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1659.470916][T15599] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.532992][ T5877] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1659.586213][T15599] usb 7-1: config 0 descriptor?? [ 1659.800235][ T42] usb 2-1: USB disconnect, device number 52 [ 1659.933614][ T42] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1660.145503][T14992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1660.313488][T15599] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1660.322056][T15599] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1660.330250][T15599] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1660.338136][T15599] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1660.345880][T15599] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1660.354093][T15599] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1660.361982][T15599] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1660.369975][T15599] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1660.404841][T15599] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1661.170259][T15599] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1661.450530][T15599] usb 7-1: USB disconnect, device number 72 [ 1662.718071][ T42] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1663.076536][T16661] fido_id[16661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1663.126198][ T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1663.136760][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1663.164379][ T42] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1663.180119][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.232996][ T42] usb 2-1: config 0 descriptor?? [ 1663.495151][ T42] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1663.502513][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 1663.805211][ T42] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1663.990052][ T42] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1663.998131][ T42] usb 2-1: media controller created [ 1664.008685][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1664.412491][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 1664.419130][ T42] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1664.545038][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input124 [ 1664.804057][ T42] dvb-usb: schedule remote query interval to 150 msecs. [ 1664.811653][ T42] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1664.967868][ T42] usb 2-1: USB disconnect, device number 53 [ 1665.358188][ T42] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1666.052696][T16680] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 1666.648472][ T42] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1666.891644][ T42] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 1666.902066][ T42] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1667.121599][ T42] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1667.150720][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.166093][ T42] usb 7-1: Product: syz [ 1667.171570][ T42] usb 7-1: Manufacturer: syz [ 1667.176444][ T42] usb 7-1: SerialNumber: syz [ 1667.384261][T16682] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1667.475413][ T42] usblp0: Disabling reads from problematic bidirectional printer [ 1667.798298][ T42] usblp 7-1:4.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1668.043980][ T42] usb 7-1: USB disconnect, device number 73 [ 1668.229538][ T42] usblp0: removed [ 1670.708874][ T42] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1671.110318][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1671.121767][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1671.150619][ T42] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1671.172840][ T42] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1671.182907][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.520213][T13278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1671.574719][T13278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1671.585574][T13278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1671.782781][T13278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1671.802722][T13278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1671.981308][T16708] lo speed is unknown, defaulting to 1000 [ 1672.215456][ T42] usb 7-1: config 0 descriptor?? [ 1672.334916][T16714] binder: 16707:16714 ioctl c0306201 80000640 returned -22 [ 1673.022160][ T42] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1673.030115][ T42] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1673.038039][ T42] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1673.045776][ T42] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1673.054308][ T42] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1673.062346][ T42] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1673.100221][ T42] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1673.115451][ T42] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1673.123753][ T42] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1673.920554][T13278] Bluetooth: hci0: command tx timeout [ 1673.972126][ T42] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1674.169402][ T5455] ===================================================== [ 1674.176825][ T5455] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0 [ 1674.185724][ T5455] _copy_to_iter+0xef3/0x33f0 [ 1674.191461][ T5455] __skb_datagram_iter+0x196/0x12c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1674.216516][ T5455] skb_copy_datagram_iter+0x5b/0x1e0 [ 1674.227804][ T5455] netlink_recvmsg+0x4bb/0xfe0 [ 1674.233976][ T5455] sock_recvmsg+0x2df/0x390 [ 1674.239042][ T5455] ____sys_recvmsg+0x193/0x610 [ 1674.244063][ T5455] ___sys_recvmsg+0x20b/0x850 [ 1674.249242][ T5455] __x64_sys_recvmsg+0x20e/0x3d0 [ 1674.254437][ T5455] x64_sys_call+0x35f0/0x3e30 [ 1674.259555][ T5455] do_syscall_64+0xd9/0xfa0 [ 1674.264303][ T5455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.272821][ T5455] [ 1674.275787][ T5455] Uninit was stored to memory at: [ 1674.282924][ T5455] pskb_expand_head+0x310/0x1610 [ 1674.288805][ T5455] netlink_trim+0x496/0x500 [ 1674.293558][ T5455] netlink_broadcast_filtered+0x80/0x28f0 [ 1674.320266][ T5455] nlmsg_notify+0x15b/0x2f0 [ 1674.331168][ T5455] rtnl_notify+0xba/0x100 [ 1674.335818][ T5455] wireless_nlevent_process+0xfe/0x290 [ 1674.341857][ T5455] process_scheduled_works+0xb91/0x1d80 [ 1674.347827][ T5455] worker_thread+0xedf/0x1590 [ 1674.352718][ T42] usb 7-1: USB disconnect, device number 74 [ 1674.352741][ T5455] kthread+0xd5c/0xf00 [ 1674.352849][ T5455] ret_from_fork+0x1f5/0x4c0 [ 1674.368084][ T5455] ret_from_fork_asm+0x1a/0x30 [ 1674.373094][ T5455] [ 1674.375540][ T5455] Uninit was stored to memory at: [ 1674.381169][ T5455] wireless_send_event+0x67f/0x1530 [ 1674.386835][ T5455] ioctl_standard_iw_point+0x12b0/0x13f0 [ 1674.393172][ T5455] compat_standard_call+0x188/0x4c0 [ 1674.398740][ T5455] wext_ioctl_dispatch+0x192/0x7a0 [ 1674.427121][ T5455] compat_wext_handle_ioctl+0x1a1/0x300 [ 1674.433083][ T5455] compat_sock_ioctl+0x20c/0xff0 [ 1674.443695][ T5455] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1674.450194][ T5455] ia32_sys_call+0x2d5f/0x4310 [ 1674.455310][ T5455] __do_fast_syscall_32+0xb0/0x150 [ 1674.460836][ T5455] do_fast_syscall_32+0x38/0x80 [ 1674.465941][ T5455] do_SYSENTER_32+0x1f/0x30 [ 1674.470941][ T5455] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1674.478105][ T5455] [ 1674.480565][ T5455] Local variable iwp created at: [ 1674.485633][ T5455] compat_standard_call+0x4a/0x4c0 [ 1674.491199][ T5455] wext_ioctl_dispatch+0x192/0x7a0 [ 1674.496521][ T5455] [ 1674.499109][ T5455] Bytes 60-63 of 64 are uninitialized [ 1674.523653][ T5455] Memory access of size 64 starts at ffff88803ad1db80 [ 1674.538133][ T5455] Data copied to user address 00007ffed539c790 [ 1674.544546][ T5455] [ 1674.547753][ T5455] CPU: 0 UID: 101 PID: 5455 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(none) [ 1674.557222][ T5455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1674.567860][ T5455] ===================================================== [ 1674.574937][ T5455] Disabling lock debugging due to kernel taint [ 1674.581551][ T5455] Kernel panic - not syncing: kmsan.panic set ... [ 1674.588152][ T5455] CPU: 0 UID: 101 PID: 5455 Comm: dhcpcd Tainted: G B syzkaller #0 PREEMPT(none) [ 1674.599197][ T5455] Tainted: [B]=BAD_PAGE [ 1674.603474][ T5455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1674.613965][ T5455] Call Trace: [ 1674.617385][ T5455] [ 1674.620435][ T5455] __dump_stack+0x26/0x30 [ 1674.624984][ T5455] dump_stack_lvl+0x53/0x270 [ 1674.629789][ T5455] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1674.635817][ T5455] dump_stack+0x1e/0x25 [ 1674.640258][ T5455] vpanic+0x435/0xd30 [ 1674.644575][ T5455] panic+0x15d/0x160 [ 1674.648786][ T5455] kmsan_report+0x31c/0x320 [ 1674.653565][ T5455] ? kmsan_internal_check_memory+0x1e1/0x230 [ 1674.659786][ T5455] ? kmsan_copy_to_user+0xf1/0x190 [ 1674.665058][ T5455] ? _copy_to_iter+0xef3/0x33f0 [ 1674.670165][ T5455] ? __skb_datagram_iter+0x196/0x12c0 [ 1674.675781][ T5455] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 1674.681443][ T5455] ? netlink_recvmsg+0x4bb/0xfe0 [ 1674.686599][ T5455] ? sock_recvmsg+0x2df/0x390 [ 1674.691463][ T5455] ? ____sys_recvmsg+0x193/0x610 [ 1674.696708][ T5455] ? ___sys_recvmsg+0x20b/0x850 [ 1674.701769][ T5455] ? __x64_sys_recvmsg+0x20e/0x3d0 [ 1674.707104][ T5455] ? x64_sys_call+0x35f0/0x3e30 [ 1674.712172][ T5455] ? do_syscall_64+0xd9/0xfa0 [ 1674.717081][ T5455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.723384][ T5455] ? tracing_record_taskinfo_sched_switch+0xc4/0x6f0 [ 1674.730444][ T5455] ? kmsan_get_metadata+0xfb/0x160 [ 1674.735788][ T5455] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1674.742454][ T5455] ? kmsan_get_metadata+0xfb/0x160 [ 1674.747800][ T5455] ? kmsan_get_metadata+0xfb/0x160 [ 1674.753119][ T5455] ? kmsan_get_metadata+0xfb/0x160 [ 1674.758404][ T5455] ? kmsan_get_metadata+0xfb/0x160 [ 1674.763705][ T5455] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1674.769808][ T5455] kmsan_internal_check_memory+0x1e1/0x230 [ 1674.775873][ T5455] kmsan_copy_to_user+0xf1/0x190 [ 1674.780984][ T5455] _copy_to_iter+0xef3/0x33f0 [ 1674.785841][ T5455] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1674.792431][ T5455] ? kmsan_get_metadata+0xfb/0x160 [ 1674.797733][ T5455] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1674.803876][ T5455] ? kmsan_get_metadata+0xfb/0x160 [ 1674.809198][ T5455] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1674.815989][ T5455] __skb_datagram_iter+0x196/0x12c0 [ 1674.821444][ T5455] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1674.827445][ T5455] skb_copy_datagram_iter+0x5b/0x1e0 [ 1674.833031][ T5455] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1674.839076][ T5455] netlink_recvmsg+0x4bb/0xfe0 [ 1674.844111][ T5455] ? aa_sock_msg_perm+0x29c/0x2f0 [ 1674.849380][ T5455] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1674.854994][ T5455] sock_recvmsg+0x2df/0x390 [ 1674.859773][ T5455] ____sys_recvmsg+0x193/0x610 [ 1674.864836][ T5455] ? setup_fault_attr+0x2e0/0x300 [ 1674.870047][ T5455] ? stack_depot_save_flags+0x35/0x7b0 [ 1674.875740][ T5455] ___sys_recvmsg+0x20b/0x850 [ 1674.880675][ T5455] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1674.887020][ T5455] ? kmsan_get_metadata+0xfb/0x160 [ 1674.892426][ T5455] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1674.898429][ T5455] __x64_sys_recvmsg+0x20e/0x3d0 [ 1674.903610][ T5455] ? kmsan_get_metadata+0xfb/0x160 [ 1674.908928][ T5455] x64_sys_call+0x35f0/0x3e30 [ 1674.913856][ T5455] do_syscall_64+0xd9/0xfa0 [ 1674.918588][ T5455] ? clear_bhb_loop+0x40/0x90 [ 1674.923484][ T5455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.929600][ T5455] RIP: 0033:0x7f4d5116a407 [ 1674.934188][ T5455] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1674.954091][ T5455] RSP: 002b:00007ffed539c680 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 1674.962715][ T5455] RAX: ffffffffffffffda RBX: 00007f4d510e0740 RCX: 00007f4d5116a407 [ 1674.970842][ T5455] RDX: 0000000000000040 RSI: 00007ffed539c700 RDI: 0000000000000009 [ 1674.979031][ T5455] RBP: 000055e94eb68aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.987144][ T5455] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000009 [ 1674.995244][ T5455] R13: 00007ffed53a0860 R14: 0000000000000001 R15: 00007ffed53a0850 [ 1675.003398][ T5455] [ 1675.006857][ T5455] Kernel Offset: disabled [ 1675.011302][ T5455] Rebooting in 86400 seconds..