last executing test programs: 19m12.646266543s ago: executing program 5 (id=61): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="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", 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc6220"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002300)={'wlan1\x00', 0x0}) syz_usb_connect(0x6, 0x7e, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 19m8.569414634s ago: executing program 5 (id=67): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10c00, &(0x7f00000001c0)=ANY=[], 0x3, 0x150f, &(0x7f0000000780)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000005000000030000000000000f"], 0x0, 0x3d}, 0x28) pwritev2(r3, &(0x7f0000000100), 0x0, 0x5412, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 19m6.980022587s ago: executing program 5 (id=70): syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="fcdf5883c81a6c1f703ca4d658f2464326cfe486a0970f633f6977"], 0x1, 0x1ca, &(0x7f00000008c0)="$eJzsmb+uEkEUxr+Z3QvcG2NiY2GjiTfxmlyW3UUNjQU+gQn4r5PIStAFDGwBJBbExsbH8BUsqCzs7Gy1UBMTCymt18xw2B35J8QQSTy/hNlvZs7MnDnAVwAYhvlv+frl5+dXt0rVUwBncIwsjX+30hhpxH/Kkfj4+l377PPx/H4CQBxvfr4N4G3ZQkT9OP599TE9q5CJvgOJq6TvQcAh/RASd0kHEHhA+omhO4ckwsB51Anrj5th4KrGU42vmuJ8fpORQB1AjvITxnxvMHxaC8OgOy8O4tk5C1Pbij/Uz56UJW4a9VPv1/2XL0aqP6uNa9TPg4RHugiBCukSsnAcJy2Jcf8Ldrq/tcn990Gcy6+LOd2DDFn8AyGMkUMl1Bc6GTk/Gb9fXPVtl4ld2u2VQZ69MPXh6O92zpAJLI1J/VNZ7hXDn2zYiX8UotazQm8wzDdbtUbQCNq+X7zhXnPd635BG9G0XeN/Oe1PR8b+BytiMyKDfi2Kul4fiLpe0venreG4lTedH3qN1P4ncXJ5uof6qOhrZ5efIegl9VOpE2tl8gzDMAzDMAzDMAzDMAzDMFtxEUL/Ckp/VMUr8G/r6F8BAAD///ckZMc=") llistxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 19m4.826962548s ago: executing program 5 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3ff7fe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x1) fsopen(0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETLINK(r2, 0x400454cd, 0x305) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x12d00, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000280)={@broadcast, @initdev}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000d00)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x2, 0x200) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000001540)='./file1\x00', 0x2002, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x1, 0x1506, &(0x7f0000001580)="$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") r4 = openat(0xffffffffffffff9c, 0x0, 0x143441, 0x98) pwritev2(r4, 0x0, 0x0, 0xe7b, 0x0, 0x0) 19m1.667318663s ago: executing program 5 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000240)=0x3, 0x4) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40), 0x0) pipe(&(0x7f0000000200)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/kexec_crash_loaded', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000780)={0x2, 0x2, @status={[0xffffffffffff3df4, 0x4, 0x7, 0x5, 0x8, 0x4]}, [0x80000, 0x7, 0x9, 0x4, 0x4, 0xffffffffffffffe9, 0x1, 0x96, 0x100000000, 0x1, 0x5, 0x9f82, 0x83c4, 0x9, 0x7, 0x5bc0000000000000, 0x8, 0xffffffffffffffff, 0x1, 0x10000, 0x5, 0x3, 0xd61, 0xb2e3, 0x37c, 0x9, 0x0, 0x9, 0x4, 0x1, 0x8, 0x2bb, 0x7ff, 0x2, 0x8, 0x5, 0x80, 0x2400000000, 0x3ff, 0x3, 0x8, 0xa59b, 0x2, 0x3, 0x80000001, 0x9, 0x1, 0x4d, 0x8000, 0x6, 0x9, 0x0, 0x3, 0xa4ec, 0x3, 0x2, 0x0, 0x8, 0x9, 0xd1, 0x8, 0x8, 0x3ff, 0x7]}) r3 = msgget$private(0x0, 0x3ac) msgsnd(r3, &(0x7f0000000300)=ANY=[], 0xb5, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000240)=""/194, 0x34, 0xc2, 0x1}, 0x28) preadv(r2, &(0x7f0000000040)=[{0x0}], 0x1, 0x80000001, 0x80000000) 19m0.465169549s ago: executing program 5 (id=82): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$setopts(0x4206, r0, 0xef, 0x25) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 18m45.203199879s ago: executing program 32 (id=82): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$setopts(0x4206, r0, 0xef, 0x25) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 13m42.135316754s ago: executing program 0 (id=530): openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0x61f2, 0x13500, 0x0, 0x147}, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) set_mempolicy(0x4005, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x141180, 0x0) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000000000)="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", 0x2000, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', &(0x7f00000021c0)=""/122, 0x7a) 13m30.740821868s ago: executing program 0 (id=549): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000980)="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", 0xdfc}, {&(0x7f0000000500)}, {&(0x7f0000000240)="dc78814908515bca8cdc6e1f617b84cc8886c23a3dbfbe0a0073cdcbfc2915538de1dc0cd28864ab9263adb3b3bae2a584b602248b0131dbcd118fe0d90d2b4a87ac27a72bae91a39bf45e6f7845a52d301e349a0ce72a85944ebd526f5e326b673cb5f5a98d24a2abd0dc79ca88562ca32fbc636e425aa5917d96d00bdc29a53f07392354f87fa85b318efe57224142832aa8067014987ba22f4f563d67e656d60c9d067327af5601c3e5", 0xab}, {&(0x7f0000002980)="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", 0xcc8}, {&(0x7f0000000700)="dd2e50501e61bb30d2040462d691a50dd1456b29b34272f571257a98e9045eb56708995890cc307c9d6533e748c93cec328430d44850d335fffa39854cbb52f321fd5c53c085712ff5b6fdc9cbbdc1de54cf1643502d67e5390e13cdbbd9690d81666701ca1a916ee422743cf99184fb522b29135d02305e33a2f1019972b1a9312eac9475b81a9550be10ff4c0a78196b4b9babeeb6ace4", 0x98}, {&(0x7f00000003c0)="475435e360cd3a1354ef6fac9c803ae71a9efd21f9f67595ccdd925f984fd9b2ec265fb44b354bc1bba65d1e2864b0e0983aaf01dcfc8f4b1201eaf7c8ce6e47ac7cea9a74fec0d994a579bc67475308e7979ce383737aaaac05f29c16d837c5756ace1fc3dadb5aded45a63b733b20a0b", 0x71}, {&(0x7f0000000800)}], 0x7) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r1 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000940)) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 13m30.356183882s ago: executing program 0 (id=550): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x8, 0xf, 0x0, 0x1, 0xff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x300) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x8200, 0x2) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRES16], 0x2c, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x112, 0xe, 0x0, &(0x7f0000000080)) r4 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ffeb000000000001000000009500000000000000e3dad8ae8e45a2a22b65695be6d1bd3d981e52a3d3e8eb50fdb0d0ca3471c4426d01870afe35bc967ae997034d56ecb9d455bcbe7d3c1e9f3909000000fe6f39df6189c05c65d86fa9dcf6ba557c4d05ba6fe0464437a9e84692cbe2708a1de3ef07410ed9ae6904f8d18f4d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0xf}, 0x94) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r6, &(0x7f0000000440)=[{&(0x7f0000000500)="876d42", 0x3}], 0x1, 0x7, 0x2) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r8, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, 0x0) 13m27.369817408s ago: executing program 0 (id=552): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xfd}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1000001}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xc2840) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000680)={0x800100, 0xffffffff, 0x2, 0x2, 0x1101, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read(r0, &(0x7f0000000000)=""/107, 0x6b) 13m26.663615872s ago: executing program 0 (id=555): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000ee0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) lseek(r2, 0x5, 0x3) 13m24.240034495s ago: executing program 0 (id=560): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000700)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x10, 0x401}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file3\x00', 0x404, &(0x7f0000000f00)={[{@nogrpid}, {@jqfmt_vfsv0}, {@grpquota}, {@debug}, {@nodioread_nolock}, {@quota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3ff}}, {}, {@debug}]}, 0x1, 0x43d, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r2, r2, 0x0, 0xe0000000) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x82000001, 0x20000) syz_open_dev$usbmon(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', r2, &(0x7f0000000ac0)='./file3\x00') close_range(r5, r5, 0x0) 13m8.857900991s ago: executing program 33 (id=560): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000700)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x10, 0x401}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file3\x00', 0x404, &(0x7f0000000f00)={[{@nogrpid}, {@jqfmt_vfsv0}, {@grpquota}, {@debug}, {@nodioread_nolock}, {@quota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3ff}}, {}, {@debug}]}, 0x1, 0x43d, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r2, r2, 0x0, 0xe0000000) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x82000001, 0x20000) syz_open_dev$usbmon(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', r2, &(0x7f0000000ac0)='./file3\x00') close_range(r5, r5, 0x0) 11m30.787369459s ago: executing program 6 (id=731): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000980)="c0eb2ccea1fd11a77ccc80f9f9a76efeeceff5b818025db3e01dc19fb48434272bac64db9e16c9f36308b3ce571793d4cbb43cd4f4d00cbc25ad92832938352e0b7394e0b20d4e393d98bf564422bfcdc39c5dbabec6da1b521cc321c5e0cef284484775b024d674a09e03931ec8b7259f627d47ea0fe177b7db4a02a0bfe8aa8865d9f4ae1c552303e5ec01f1868ab94b15bb3d11e0d99df7ff93c160b102fcb9e8f0968edc950d08963f1302ee329af89f15a01a100df7f65074cb6540284adcd4fc400e4953ba9339efd9b656e55dd003c6323c56d9194477d25caddb506d2d6f92c116264b8cec47064adab9dce6e50f227c71d741af4a4d4c0438aeca34be1c130f535698309115fbef1a2892b6ff3c8c29022f494951b7ecb5e52cfcc7cde4f9e1def3e908c1268a7294fe63d4a386662f9fe67cf3f777ffbc46f29352cae71089666dfab7e82bc36d708a13c198e4de54320b74903331718c486b9111e42bc56c1ed5fe6f0c33e0351448ab003d407dfd300f83486b1a0b80dc51097ac916084f7d8bcf5cb8c9fedc230fce26344a7cdac9c861f1d0732d271cd6cf6e3147af016b738407ac4885a4c2b0a6180108a8f1c505fa247452fa5e52413ed9dd1ff59b92c73f041c6eec87ba51d314a1db3e4ddacd13b2b5235c7525e8452e67ae716a4111f219cfaf738cc4e2d76d24f4c4b195936101b1b34aeda7ff349bd6de3257f1f02d688e35ce03a69026da4fafdd2b6a3573ab7d3b81de926236a8549dc5fd72e22d1a579a0c170834fd015a9ab8e768b709cce7eb5a5e0f8cb38f9f308a837c4b7a75ae4ff0381243b36f0045d46aa24a4f5ca66f4d29f9348ed3adc5b37f5143b2f05cb42a6b33b66a7e00d9e4de6e7b88de8ccdd295b94970d6aca11b1c14fa03e6501fe863977026d52f05eafc208a48f4094b4d2815593ed99ac92b2fe818019e8a90c97149dca4920b8f016ec8468fd7246f6a4b8490a32b61487e59169c799bc377e518270967dd3c5a66e0aa743ff6e067718d46a3fc5c797ad0ec692ff01697a1254dfbafa1904423ec824a1aaee9186270d43dc6de9055148a538e2aa06a97f0c64cdbda992d3aeb7f4d67fee723b903003344cfda02af4befeb75bdef06e46c15383577bf06ab1bd001544bfc729229f6b9f258a22a71ec5ccf0db443f513ee363417eb72999fc2acfc5bbefbc5c2fa5328e7dc78718c145527c03b7be072a25f68528beb8d103aeeb5ae9b8d03a848690f98307e3762fabbc3d258844905174067941c1d135d13d1bb0290edfa5d50dc2e562ac3f0bd408f516a1a423020ccb8bdb2281ad6bd781e5d3a5ca835d0fc1c12dddbed89bed1fb1f44c6b59c0b05a47e933091e16bdf46ae6899e4e5b5cff7c26a318430f345aae46b79d1f8c0de43949c14ca31a6f6559ab4cb21c08ac4c94224cb1ed2d7f42457f6cf225a329e073385e4dfdf99fd064f58894f14bc914f188e1ab3774c30871215a6030492a58bbb8518e37bdded99cab8886fa42a41e13a207aa626b51d8511134665cb2105b6ba9bc9c5c61e359ef1626eb5f5a85ddbdd334c864977d2199dec88268afa90fefab80db6c7216940bf5c34e6f81cf480f2ca8934402bd5386098dcb6e49eb45f71449532d8d21be1247adb246b355f764ff347acbd43e7974e067c069c4a4e88ee720a9ac33691aa329bb977e8a06ef6b1f241fcc89c70f86fa0ed4d04e9fb6850c8475aee62a3af6a9bcca54169de9a5dc703073e8387fb5aa96b8035049e328f329006b436de41ca6fb36eda430d0758eddbee64fad1263eb2b66aac505436121ec85e2961d963ed9d85a646c99ce98cc4280f402717561cebd124128ca2aa7622f5f7f0d1b3103287549de36b0332d25e82745df6aeda02f9a89f0746508eddeac20aea4aa19fd02cc12f7d2e92daf381795a1bdba8892d1c03d84de66faab7b7cd79c135f71f819cd3ace08dfac442c9930f65131054b57d4c3bcb64312cb5698990df5bfbd78cac944f480e946d51c9e6c0a3c52feaeed8bed137596b938d3b66e14b7ff0e3f20c0242c8979d766fcbea7b26d78bb86a6d169ae98b00d6493dddce0c038a26a60b2df1f54d520b0081477fbce81d6681c22016aa59aa452f7ae51764515442fdeb9765de85e1cd89baf581c4f4c52fabe4b1e48fa7fbcaba8108b1acdc182f619b5beb3aa86d6614ee0c521cfa5df9a7b35322b24c6e1b7dbc56097b1f6dc6bfb6d0b6dae1836414a7a626eb357b987bac584d5dc2ae97cfe628b31a544c488fcd1b692acb0f92b3a80895e2df6ff9969f4e1b621b35c660d86058f319e2f8e1b66c1795de368739d16b44c6f1bc093528a0d83e8518b5495aad0fed53acda0d3dedf0660c466c4c2f10b045fce10cead31160704ec44f081b8fadded964214c5d8eb47a953549c7d9c1b0581d998ed07a338c3c5995982f7c82b29c8f174b159e540eb7dd0bf2a0d2711ef9e23bebbe83c1128fa9adc44f96b32052d8ca41e05de78b4c09cffa397626a25b4ce8a3497af133af2c0dd03f9354b9b8559ef7ca655c9a84fd9eadbcfb7dd14d1dd488cf4ee860d43510be2f5b48fbb4bfaac7957358948b90e7cce281c3948d021ac76f2a3705bb79141297a5ae5b5cc97746072f1b33906aca0785aad58caeec7a8afb4537c7ba7e0222b17b0731f7bc425c961c4695e5fe05c18b88e8a0800b70ffe4b2db7ea33789ada92fc95c167901ef908ac5844341b8ea14cbce0b069c2dafd4b6ddf436b69b23560f3afbfbe79cb138ac028f8e0329b8d18275ab898762913d4f35db9ae940ec01945383e54f3d1a2aa4261319371ed862c38ce7c5ade4cdc962da1f73e90ac15c2a635179f5b9c89753d20a212417fe8e355657e581c2b81a9f2f1ee5b79d5d35a05871224b30daaf4bbcbaca4da37d9b2a0f7b91440e0965e1ff452584d3e7eb9aca89d4d8437b94fd3fdead2740113f76db05e4d2252b8ab58a02ee36d51646c89828e6e14418b20790158a9c469ecd8c27725021f8232bb813aada8c3584898e5c8169c71bdb255730727027e41610becd232c54b5e90fe93ef8e15419827de19263c0edd22fb5b469b660279c9e545055b49192117d9be8d72347f2d988d13c7fe96052e4bc7def1f07c046484ecc5fa41dda6ae0335187c865abc3ca899131da69c46b804348aa67cbbad07079be6dd91974a2597243ca7c649932ec673310d27a3b7288f10ab652402cb95556f16cdba84d5b01a49ba9b34359e673201a1ee235314aa20e15a953a9b41b016437f750b08ebbd90055e3d7f81460e6d2f91ddcac0ba98f24a8b9f0b623317674ba5cb8c36c10c302ff5610cf885aeb90a7f3962dddae1406897141d60cbe300f8d6c6af474cf848e92a43a4042986d86312246e0c8ee19c388875398a87839f17f065faa9e3e50eb2a0eb704a881e6137258b982e3d61c4a5d687eca88c920fc0441761f65dbb54159ecba252f753a334403abb27d08d818adb71b678e11f95e33a6c92dd6dbdce001b4b7da85c268facad3909bd91cc6774f971cae63b084551279d25a74346a64f624280b02437d19a987c9ef937691e9fc094fbfa6521d0133021cd81668215ca8e8ab89f6c8ddac662b67d690ea0c3a509e384247829f44a290c96cbc93dce05e4b84ee93f50702f98a7a3600ccd604a47bf6f12f323848968605a259ef76588682d8639f2df2d29f1dae32b826d95b55d16031f39f5979c5fd4b7caf9f672fa6b890278ea91b65b0e5de8d40a4a934d94f5e058ee51508b0419dd724d6f87ea488cd781c7c60258c4a903482e2b9e4e969ec652ce892268a4d5e9e550902a700e76b6d005edf67c49c695c01aaf36848ea0244c2761307c06b76fbd4762b04d1c162f6f4c39682ec902833f5f2b70237322727016ad878b898f7bdf08f06d5618e90fe027d330236a5dc924847641f1860da89329fe1d26afe3c5b82a4f32dd2d42c96b17fdaee3eb2ec7c2afb259e4cc7ef6bd03f16aa0b0a484240701d5ec11903e405110c30767cf98dd73cd7248ac5163ebe036ec66fd3a4eed95a3e19cf20e090231c996c5968004114e1e1800fd9c2051df584e33f7ac6fc8dbaca75050915b91867bf7497a8327cc751ae7cd8fa6245428f0e525c00966d4819a4ff17b147726574b80e268deda880b4faa037943ef1aa93f11b82450dfc4446e4b93af93975c017783919207b3b4c6a108b1841be772b306d6cd32f91dd2b8639860d832a44dc2ffc4529064b3eeaed39b48b25590a6f2eb516894c3ac77145dee110ee37cfa8e87e4ad1721bdb930dd9633ee05819c7237a3743adc5426dfe88bd0cd3850afe6cd225d615b1b9635abda1e5ee3bbba7abde0e9507dfc25707db275303a1752d3839e17e9ca6215e06e76df5dec767958a661ea948d76ec241a1ce49b3d019823c1d184d39c337656b443b221ee086e2401dcc6e754117a9363e8969ba62b9cdfba2ea0fa65056e69af51b133e4b5c3cb7ac61046014ef0fa3320cc85ce8f53a4a9208ddd63796391e1e497a0ea277a49ebd4e952c304698f60d802310f8de1f9c6590383078c6221ea23a8a9b2b2c1519903e37649d2bdbb499b644a9684d2146961e51b1bcd182d5ba12d56b88b92af137ad86c6dd7014e26cdd3c599e7587cf5342601980bda92b29c74bfd5463b83b0e0898301170e496b4da4ba94d5977a68a3fd4ad09c7ed6167d1a80e174780117392914c1085308f5f8f6247e4307e3e2ecb9ebe3ad5b40e0a13597a2ba3df06b1f279765a97b064dc49fb86ddc9e5c88d9dc385db20b52661ba2e233c03b8630f87168a9445dc5998160f4fb49105bd2f5c7f5af26c12cfd48b51592533f8e4a6aef557e891c704f8b6341722516e48e722defdeeec2ce7c8bcd2df9ba7f8a91002db82c510f17837ed695a9fc5943e0a17b7956d44287a771c59e51615d3a380a40aff2c0581ed93a743a0554393d58d28e769e0647c893172b0a6eeaadc3099f21ee71f05eb26d4d2c41ddeee2de2005d3a736f5e250f83a4727a4a480878ead587", 0xdfc}, {&(0x7f0000000500)}, {&(0x7f0000000240)="dc78814908515bca8cdc6e1f617b84cc8886c23a3dbfbe0a0073cdcbfc2915538de1dc0cd28864ab9263adb3b3bae2a584b602248b0131dbcd118fe0d90d2b4a87ac27a72bae91a39bf45e6f7845a52d301e349a0ce72a85944ebd526f5e326b673cb5f5a98d24a2abd0dc79ca88562ca32fbc636e425aa5917d96d00bdc29a53f07392354f87fa85b318efe57224142832aa8067014987ba22f4f563d67e656d60c9d067327af5601c3e5", 0xab}, {&(0x7f0000002980)="59c10edef6b4429109b3e01f43ce2e1ba7616ad3abda2ee952086504d91932329a955ada089a7b3488eec2113ba7a9c0910dc3cff05877c8037766eb30a3156041fb09145784b88068754608c3c4a7569c377c3ddaa188c882588905ffbc96d6663ab963cc571395fd3307c7c42b56a6109d8099690976397c5898c5767b4d2270465f25ae63934f07e236c0752dc4f92f1e108495a518b10ba8bf3271a2f175ce656fef1be7dfb4ada281ee7842d174ec684ad5880732125c8751767da2fe31154f4cdc1dcd3ceb4b0f4ee9374c1f52b0c5c8630226619fc877444c9614f36e61bbf48d67b31f8955e043f62e8b237d2e47c0d5e4a7b505ce48286d8b476f544a1c478d632e55248cd484f658034d00bc8faf21677597598c5da27334ae6e4a289e8c5423aac7fcf93dff925f3167234830e0f5280fd420ac197033f3720128abfc616edb2ed89fa258ad022f8355852e368ebda0ad288b647564469570a12f21957e9353b6e91bb3821132cc0f97121b19fb828315d719e496e400b2f750133cf6e1201faec6c56efc784ddc3436d846085b4a4dee8e465b46b44a4d42f621435b6f08844ce3dc32d35de4a907259fe6c30d34f396bcfaccd497987a52e88ec733ba05ce88c5579f9e8b671d1c366883e07cfe45cf790992ef33bfc310286dab35cc63a7f58c41cc9817d0d0f3cd5b61973bf3635cfeb537b28acdf287cf5ec29079c0445555e3fe907e0fe3c209c610460f8f6afd554743bfe9c117de886acb8152bf142584407f5d94a8e2bf642fbfb327df5d68db3ef7ad8030b58f32f0ae94b04ffc1f0a9555dff828bca56435215cf708521e2704f8ca308b66cd28af463d158471e23f313e4495a814c48b48908c68296e82a03c241987eb4cff4231a875f3031cff4a5f08a7a820a85bb8e12100c5d2789776ca3dd5e8a8f1f29577d3501cb3ce066ef7bba14e780ef4999258bf9949a90d156635bcd95ca03fdd8bd9a026da8c062bba2dd49b5bc3d1f9f92c48cc230f44c142b0386402e26b3fa6aee2062b61d81f80ebc9b0a8ed880a578cbbba6109c0a698ea8ccb8873c1699bc0d08657da4310ab57b8a0030fc4fbbbc60d6501c77668b26a4f07fbb1e2f41f165d232c5ca7e9a05691a9200e3630383093e454e676c44db7c4a92bbdd52dc5ebb4408f937df2311e3ba4afbbd90d60376e6a95f6b124d9dd7e4c836f2bfaaf5168e95b37a742b3d87cc1898fb4cde43ef55f7df9083ccc8ee1b7c956820fb3e61de08bd4357f997a23ace61cb3238a62896b1c13f01ff77979da9c93a98463dd826ea10050361922ead7182c4777c3ae620dbd61f691d36c1fe7e4e8af24ba28d652ec009329c9e847eea66b3852f8a4d523aaf06420105112d54e5313e436ef0d68ecd1d509303f29854137184485af0a2c5419ef1e7ac7a013fdeae3a94db3fbc43eaeed9dd96c4771748f9861505ece057aed973ddd7fee501b55f853c3ef8012348a8dce0851f6b62518e84a7700925b69fcd6b07b8f89516d3136a4db6efcf78c4a73b791e6ce947a1f8a318e5c27a7a3eb91322ae4a90896368a37d0f1b02eaeea4c9422695b8d304679f20af661f754588dee8573c13ed867171e986591b574a27e49bc29238a9a88bbb2cf660efc3ef4b0747647fa5461764fa3d11f13d8673b1e8575d671a19742f8dea5c0d58bc1bf27542ee352763ee654f7bd01c3e67fa0a027d01701c8fca874f8b5479000c06fa0cf4de36f333ba6ad69fa6e98d93faa3ac328b7f9337daa0bf40536b5e0e183479f460627d27734cc8f18d6ccbefb5a87e7da1c161921f28376020d4c456d4cc453d29545a312b46d233bf085a8928018516ab11b4a14ec4ff27f0bbba421784bd07e40b6f99990578ff85a06bdbd421b569b443f323ff63b8d3097285e014cf10ba11db157083c8826f15fe37f82e7fc3c8ae285ac185b3246fddd57b2f62553ffff7271573f123a9908681a8e54fb412e45171de24c0e97504e2c49e59bea66cc0180d34e4870b6809e83a79d8fbbe6e292b1eba9103a84b0db3f89a8cf185ff763f423f511c23ca7300eaa31c36801db2daba4db06f2b33836b36140e088dc6cb6b2cecb1e7eb728ded2281cd4f6ee3a4a708f564fefc938cc83d9b5ec30c9313da29195c6272e6fd288a556e032b961c231dd40febeab903d7ae3891ff1eb5a53fa04fa02d0173e9ed860394500758e3c1a84ec0f4a0666c810132f98f6a028a27d866a9d27d185e28d74a875f6827c0fa8c6f730b1d5dd3e03875ad6ad61961e3c573d1c22a089412c5b670deee9ca77e98e25e6a09dd884bf645e6c1924dabc7833a00210aef5357eef8b3d83f35c51f6289670275cb1999ac3848a2aabbdbecf698b1482b273be4b24d5300ea1f8b2d0154d6dd2a145ddc52b4b8920ee10c63bb982e09b7154a18c6d38931cad8261be81533b8ab4479e9105fe895057874fefe97c431d114c9dc768d5e35fd19896d93d6953d931878feccf6610856a648144c4f1cd9e929b57e05b41f00ab63f08ae4328d7be06d330a71366150887e84414a81c2652b6699101606229c019bc7254c200a376c8cc852fd921a8e6d0c271ac4dbf92bdb400d461ea53dad3bac9df9cb00414a91cd7bc976d562bbd96c982367a3e2bfc40edb30ac182b45e943bb234557930a099a2978d72c9b3d142bb60bd8ca0da54c3d8c90a68f6de856a8e8bd7c3488d52032d01f12211038853729c07efc127c7b6550b9f5880c6a5814601fd02a8814f10e30be7a925212119431664271d89f6f993a4c144ad32855d78f34be8d2dd12e16f31f83f645de71cadf4d216c0667523bdafb91f5afacb7e9d9f6dd2368bda6e6078e7ac03bf492bd319692885d90a5acf0a368a5f22f767fd166ceed42c514e6edae1892b5a500119332ba354eb146636e1dad9d6cf16e4b593e9f0ae0fd98aec1df24141eb062ccf6f411fe07f5b9ea79fad4bad1797201b3301029cae5cf68083ae16d784a305f76b7132762b4218ee5f61ed4d89e41e58fa607778fdd78c7e679794e073a0b9e735b72f574947de377bf7c7b7ca285f7ed5e5a99ceae0ba8ce9dd3a01ed7ead0d0c1241606f5ed7e5ba769997088604631a63ff1f73fca5f55893f92f2e273ba083593b1ecb21d9510f664eb7140aec912ca48a0ebd27ce7e52091fb1c6565f19f127ebebe38b0817ee21837ce850436da41d6986e8c227bc58733daa85a5883c6c08f8e6b83d4e2dac9dbcdd126142dea32eb795587b4f38953581138010082d38d0efce6f9da6f0fa48191c4707d263d8b57edfdfa05b05c8e7d96227269e33a47d6633cc202628b386c824a0bc9fc3a9acaa73bab0e22d946e145c3382fca260f8f2d03b41f74e61dfef06e23ae30da6ae9a0a353116499672c8025610cd636da27c9dcbb3411e7fc8fabda08c5c2b3cf7b7d2cd121364675419709e9aebd12b22a53b5a9ee08eedd43014d5a7488da9bc1655098c35937c27cdc5559e4f879a95a12b1cb4ea58001915ae8dc262eed4d8d26cbf64c371df812f028856c64d4eb945646281009788bb00fe3631e5ebf1b46f793de6b80a09103387053cc3e07593df904e9f18335cb0f4034f06ec8a3a6eb07936c920591456c2ddfe2ca55842ca4b418b510ef4fadae3b399dd89fc7821a2cce1510dd8e839ac760363b5c735ef75e454035d0abee841d32ea5c33da076b3f20e3a819f0f608a876ecc8fb82cd131847d1580ed641fce36549a7f120e4ecd1e218ab0d22fea0a4956e45417394a03861e9c68f8236f4997193ac5604d5e518b77569f5f11c10ae5c4cd5ccb6d5cd8372e6cbab211b2023007beb61ed22ebf5498501f643d03abb4b8db9eb3ffdc334298227a95f5697556aa73f74ae7110e9f02a93252f094fa894e47a998a5032f1cb39e9b3e68a739fa2be8d59c32f75630441c0dea74c2bded7de43ff1fe3214dfd714cb7381a3a83b0d0a9fdd4374b3528df39470c656e0222a8ba66fe3768d7b9b0f1b30c0630dd6e8eabdd1fdcdd908685acf61fe198baa09f9f77a24640c8558ea69fbf96cb694c747d159e49e755ea77bc0b57dfb93c678b7e23045995c6b305d672d3ccc3d9ce9b1aa32e6e46789ffcd4e1523e5334e475dc8b8e2fe1d3cbcc87aab1a4806525129472cccb829e22679a131dffcd270bdb76d69ddb3921dac9d7e53e5d9e6aaa26390067817cf93e8109a4f21260f35b303601616c4fefb968f9e80432c0a8def9be9456199e66874ae6b1107bd6bcb6777d665ec63afd95244c7b21aea529a16ab73e68f5dd6fd2ec70202938117d79516b900bfd733b0cf25abfabea5d69295c571e9ad14881e6b0da8479a4f68fdda5d913973e59fd006774c948adb046ee48d7a7b47b6e24de05f80fab2f065952daf370c8b42313b8a68f2571cfe18c2dbefe5e82e94dd4a6b11f5720c2df3bbd08a2746edc42ec4fdbfaf1c6671fee2cd65421d9ff612923551b67b84feaa3bc88e09edfd3225f3db0ec248ef0698cc2bd05a40d984caff8ecaa063e5c7bf0ab606f07c1c429c7de584845f1a21d0011681f40ee090a5a1572d3c8eb36f615576311bbdd8a99c4da969fdfe6eef5d64cf32156f64", 0xcc8}, {&(0x7f0000000700)="dd2e50501e61bb30d2040462d691a50dd1456b29b34272f571257a98e9045eb56708995890cc307c9d6533e748c93cec328430d44850d335fffa39854cbb52f321fd5c53c085712ff5b6fdc9cbbdc1de54cf1643502d67e5390e13cdbbd9690d81666701ca1a916ee422743cf99184fb522b29135d02305e33a2f1019972b1a9312eac9475b81a9550be10ff4c0a78196b4b9babeeb6ac", 0x97}, {&(0x7f00000003c0)="475435e360cd3a1354ef6fac9c803ae71a9efd21f9f67595ccdd925f984fd9b2ec265fb44b354bc1bba65d1e2864b0e0983aaf01dcfc8f4b1201eaf7c8ce6e47ac7cea9a74fec0d994a579bc67475308e7979ce383737aaaac05f29c16d837c5756ace1fc3dadb5aded45a63b733b20a0b", 0x71}, {&(0x7f0000000800)}], 0x7) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x7c81, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) setpriority(0x0, 0x0, 0x1ff) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x46, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001514010100100000000000000800030005"], 0x20}}, 0x0) 11m28.349704414s ago: executing program 6 (id=735): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRES16, @ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000140)={0x3a}, 0x8) 11m27.950077601s ago: executing program 6 (id=736): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare(0x28040680) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_io_uring_setup(0xd38, &(0x7f0000000280)={0x0, 0x7732, 0x80, 0x1, 0x350}, &(0x7f00000000c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 11m26.051646042s ago: executing program 6 (id=738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, 0x0, 0x78) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=0x0], 0x30}], 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001540)=ANY=[@ANYBLOB="28000000fddbdf25ac141425000000000000000000000000000004d20200ff0c"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4004010) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x7) r7 = dup2(r6, r4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r7}, 0x4) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x74) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000008f0800000000000000000000850000002a00000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0xd, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e99", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 11m22.695427989s ago: executing program 6 (id=739): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000240)=0x3, 0x4) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0) r1 = msgget$private(0x0, 0x3ac) msgsnd(r1, &(0x7f0000000300)=ANY=[], 0xb5, 0x800) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x80000001, 0x80000000) 11m22.11991845s ago: executing program 6 (id=741): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) socket(0x22, 0x2, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x34}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) 11m6.092090422s ago: executing program 34 (id=741): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) socket(0x22, 0x2, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x34}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) 19.799872205s ago: executing program 2 (id=1705): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) mlock(&(0x7f0000f47000/0x3000)=nil, 0x3000) mkdir(&(0x7f0000000400)='./file1\x00', 0x80) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff66000000ef655a160000001000"/40], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc3100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x14, r5, 0x301, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040), 0x3, 0xa041) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 16.198295331s ago: executing program 2 (id=1711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) mlock(&(0x7f0000f47000/0x3000)=nil, 0x3000) mkdir(&(0x7f0000000400)='./file1\x00', 0x80) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff66000000ef655a160000001000"/40], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x14, r4, 0x301, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040), 0x3, 0xa041) close_range(r0, 0xffffffffffffffff, 0x0) 11.963101467s ago: executing program 4 (id=1718): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x80281, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004000000000000000003000000000000000000000000000002000000000000000000000004"], 0x0, 0x4a}, 0x28) r6 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) 11.8723084s ago: executing program 2 (id=1719): syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) setresgid(0xee00, 0xee01, 0x0) 10.222570426s ago: executing program 1 (id=1720): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 10.205478501s ago: executing program 3 (id=1721): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x0) 10.08027539s ago: executing program 2 (id=1722): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) mlock(&(0x7f0000f47000/0x3000)=nil, 0x3000) mkdir(&(0x7f0000000400)='./file1\x00', 0x80) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff66000000ef655a160000001000"/40], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc3100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x14, r5, 0x301, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040), 0x3, 0xa041) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 9.877744385s ago: executing program 4 (id=1723): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001b00)=ANY=[@ANYBLOB="021070091c00000028bd7000fddbdf2502001000000004d6000004d4005700000005001a00ac1414aa000000000000000000000000e00000010000000000000000000000001800101002001000000004d2000004d4000000001100180010ac7d00f0a98eaac80517f1a57f72b1240b82a10d875aa2195b90abd17fa1cdfe1f588b99fff796db7b227151389b328015862bb9dae18cf15e4c8afd3067df0ab12338ae0f3f4ee324289876e8f63fccf459281d80df4d6594dfc799962003"], 0xe0}}, 0x44040800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000400)={0x8, &(0x7f0000000440)=[{0x5, 0xd0}, {0x0, 0x8fb3}, {0x5, 0x2}, {0x3, 0x9}, {0xfffd, 0x6}, {0x80, 0x1}, {0xc2, 0x9}, {0x2, 0x100}]}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) recvmsg$can_raw(r2, &(0x7f0000000480)={&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/1, 0x1}, {&(0x7f0000000500)=""/222, 0xde}], 0x2, &(0x7f0000000340)=""/53, 0x35}, 0x60) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.675980121s ago: executing program 1 (id=1724): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000980)="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", 0xdfc}, {&(0x7f0000000240)="dc78814908515bca8cdc6e1f617b84cc8886c23a3dbfbe0a0073cdcbfc2915538de1dc0cd28864ab9263adb3b3bae2a584b602248b0131dbcd118fe0d90d2b4a87ac27a72bae91a39bf45e6f7845a52d301e349a0ce72a85944ebd526f5e326b673cb5f5a98d24a2abd0dc79ca88562ca32fbc636e425aa5917d96d00bdc29a53f07392354f87fa85b318efe57224142832aa8067014987ba22f4f563d67e656d60c9d067327af5601c3e5", 0xab}, {&(0x7f0000002980)="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", 0xcc8}, {&(0x7f0000000700)="dd2e50501e61bb30d2040462d691a50dd1456b29b34272f571257a98e9045eb56708995890cc307c9d6533e748c93cec328430d44850d335fffa39854cbb52f321fd5c53c085712ff5b6fdc9cbbdc1de54cf1643502d67e5390e13cdbbd9690d81666701ca1a916ee422743cf99184fb522b29135d02305e33a2f1019972b1a9312eac9475b81a9550be10ff4c0a78196b4b9babeeb6ace4", 0x98}, {&(0x7f00000003c0)="475435e360cd3a1354ef6fac9c803ae71a9efd21f9f67595ccdd925f984fd9b2ec265fb44b354bc1bba65d1e2864b0e0983aaf01dcfc8f4b1201eaf7c8ce6e47ac7cea9a74fec0d994a579bc67475308e7979ce383737aaaac05f29c16d837c5756ace1fc3dadb5aded45a63b733b20a0b", 0x71}, {&(0x7f0000000800)}], 0x6) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x7c81, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) setpriority(0x0, 0x0, 0x1ff) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x46, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001514010100100000000000000800030005"], 0x20}}, 0x0) 8.439139516s ago: executing program 4 (id=1725): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) mlock(&(0x7f0000f47000/0x3000)=nil, 0x3000) mkdir(&(0x7f0000000400)='./file1\x00', 0x80) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff66000000ef655a160000001000"/40], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc3100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x14, r5, 0x301, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040), 0x3, 0xa041) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 8.28787481s ago: executing program 1 (id=1726): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0) 8.248620899s ago: executing program 3 (id=1727): syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @multicast, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 6.562987635s ago: executing program 3 (id=1728): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000140)={0x3a}, 0x8) 5.352798833s ago: executing program 2 (id=1729): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x16}}, &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f0000000040)={0x0, 0x5}) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=ANY=[@ANYBLOB="0301000000000000004a45"], 0xb, 0x1) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x0, 0x202, 0x2, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 5.351655264s ago: executing program 1 (id=1739): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x1c) 2.091248549s ago: executing program 3 (id=1730): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @raw_data="f4ef2063212d83822c26cd591ae9406bcb332bf5fd9fd2d155632f7b0573fbc2d02d7157350475ff10fca5087529e2ca0deeec02a3aa66eb505747443f0976f858f637a0d934bbfed1a4d6cf85fb1d59421ed4d43b4243fd383d0bb64bfa8ba14ee25acb5aded4410ede745bcd1ae52bd1d3f03d7071260fb2822ced517f6656708316a1b98ffb6baf1a3a2b5eff9d199ed28c62fac0382d671db3eb1a672a63709e34af3d69a5363707b03a1506d3ce1c75e98fa8a5030000000000000059af6af64a84fc00c329"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000005e43bb387ffa6532000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0), 0x1, 0x44aa40) 2.090750611s ago: executing program 4 (id=1731): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000003800)={0x2020}, 0x2020) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x28, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000d40)={{0x0, 0x7f, 0xfff, 0x8, 0x7, 0x5, 0x0, 0xfffffff9, 0x7, 0xb14, 0x4, 0x2, 0xebf4, 0x4fc, 0x3ff}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000740)={{r4, 0x4, 0x10, 0x1, 0xa, 0xb8eb, 0x100000001, 0x800, 0x80000000, 0x9, 0x1, 0x9, 0x8, 0xf, 0x68}}) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000001c0)={0x20, 0x14, 0x105, 0x70bc2a, 0x2ddfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x9, 0x1, "053e3e71ed"}]}, 0x20}, 0x1, 0x0, 0x0, 0x8086}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r5 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x3, 0x0, 0xe, 0x60a00, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, r0, 0x4, 0x5, 0x4, 0x7}, 0x50) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x3, 0x12) 1.921036852s ago: executing program 1 (id=1732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 1.649665246s ago: executing program 4 (id=1733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x36, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) 910.744828ms ago: executing program 1 (id=1734): syz_open_dev$tty1(0xc, 0x4, 0x3) lseek(0xffffffffffffffff, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)}) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000440)=""/156, &(0x7f0000000180)=0x9c) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x40000000000000, 0x8}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, &(0x7f0000000480)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={0x0, 0x0, 0x8}, 0x18) r2 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{0x0}, {&(0x7f00000024c0)=""/225, 0xe1}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/139, 0x8b}], 0x4}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0xfffffffc, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008084) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000000)=0x1) 650.707759ms ago: executing program 4 (id=1735): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000240)=@other={'trylock', ' ', 'mem'}, 0xc) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x24}}, 0x20000804) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x9, 0x0) ptrace$cont(0x9, r5, 0x6, 0x1) 649.392859ms ago: executing program 3 (id=1746): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000003800)={0x2020}, 0x2020) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x28, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000d40)={{0x0, 0x7f, 0xfff, 0x8, 0x7, 0x5, 0x0, 0xfffffff9, 0x7, 0xb14, 0x4, 0x2, 0xebf4, 0x4fc, 0x3ff}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000740)={{r4, 0x4, 0x10, 0x1, 0xa, 0xb8eb, 0x100000001, 0x800, 0x80000000, 0x9, 0x1, 0x9, 0x8, 0xf, 0x68}}) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000001c0)={0x20, 0x14, 0x105, 0x70bc2a, 0x2ddfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x9, 0x1, "053e3e71ed"}]}, 0x20}, 0x1, 0x0, 0x0, 0x8086}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r5 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x3, 0x0, 0xe, 0x60a00, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, r0, 0x4, 0x5, 0x4, 0x7}, 0x50) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x3, 0x12) 562.130489ms ago: executing program 2 (id=1736): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 3 (id=1737): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x50) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x80}, {r1, 0x90}, {0xffffffffffffffff, 0x5d}, {0xffffffffffffffff, 0x500}, {}, {r1, 0x60}], 0x6, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0xd]}, 0x8) kernel console output (not intermixed with test programs): command tx timeout [ 955.013640][ T3071] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.850040][ T8940] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 956.010419][ T8940] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 956.010481][ T8940] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 956.010543][ T8940] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 956.010589][ T8940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.022662][T11947] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 956.034289][ T3071] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.058979][ T8940] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 956.320020][ T5877] Bluetooth: hci0: command tx timeout [ 956.327890][T11955] loop3: detected capacity change from 0 to 128 [ 956.375238][T11955] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 956.436277][T11955] ext4 filesystem being mounted at /279/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 956.754638][ T3071] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.804822][ T5877] Bluetooth: hci3: command tx timeout [ 956.806711][ T8886] usb 5-1: USB disconnect, device number 4 [ 956.938048][ T5867] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 958.439912][ T5877] Bluetooth: hci0: command tx timeout [ 958.880284][ T5877] Bluetooth: hci3: command tx timeout [ 959.445432][T11932] chnl_net:caif_netlink_parms(): no params data found [ 959.740239][T10670] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 959.967273][T11991] random: crng reseeded on system resumption [ 960.046498][T11991] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1236'. [ 960.090094][ T3071] bridge_slave_1: left allmulticast mode [ 960.469154][ T3071] bridge_slave_1: left promiscuous mode [ 960.519915][ T5877] Bluetooth: hci0: command tx timeout [ 960.818492][ T3071] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.856799][T10670] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 960.922149][T10670] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 960.933339][ T3071] bridge_slave_0: left allmulticast mode [ 960.960386][ T5877] Bluetooth: hci3: command tx timeout [ 960.961413][ T3071] bridge_slave_0: left promiscuous mode [ 960.985201][T10670] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 961.007454][ T3071] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.018730][T10670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.597549][T11982] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 961.632905][T10670] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 962.569798][ T9021] Bluetooth: hci0: command tx timeout [ 963.410033][T10670] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 963.542757][ T3071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 963.574568][ T3071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 963.595385][ T3071] bond0 (unregistering): Released all slaves [ 963.601998][ T5877] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 963.648199][T10670] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 963.678314][T10670] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 963.745314][T10670] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 963.764836][T10670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.831925][T12006] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 963.851977][T10670] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 964.231182][ T3071] hsr_slave_0: left promiscuous mode [ 964.291049][T10670] usb 5-1: USB disconnect, device number 5 [ 964.312672][ T8940] usb 3-1: USB disconnect, device number 8 [ 964.328244][ T3071] hsr_slave_1: left promiscuous mode [ 964.601598][ T3071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.436994][ T3071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.523539][ T3071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.555377][ T3071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 966.818249][ T3071] veth1_macvtap: left promiscuous mode [ 966.823907][ T3071] veth0_macvtap: left promiscuous mode [ 966.829629][ T3071] veth1_vlan: left promiscuous mode [ 966.835560][ T3071] veth0_vlan: left promiscuous mode [ 966.929406][T12029] loop3: detected capacity change from 0 to 128 [ 967.034250][T12029] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 967.110247][T12029] ext4 filesystem being mounted at /283/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 967.326701][ T9021] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 967.328204][ T5867] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 967.337624][ T9021] CPU: 0 UID: 0 PID: 9021 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 967.337668][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 967.337693][ T9021] Workqueue: hci4 hci_rx_work [ 967.337748][ T9021] Call Trace: [ 967.337759][ T9021] [ 967.337772][ T9021] dump_stack_lvl+0x16c/0x1f0 [ 967.337831][ T9021] sysfs_warn_dup+0x7f/0xa0 [ 967.337873][ T9021] sysfs_create_dir_ns+0x24b/0x2b0 [ 967.337913][ T9021] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 967.337951][ T9021] ? find_held_lock+0x2b/0x80 [ 967.338004][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.338072][ T9021] ? do_raw_spin_unlock+0x172/0x230 [ 967.338116][ T9021] kobject_add_internal+0x2c4/0x9b0 [ 967.338168][ T9021] kobject_add+0x16e/0x240 [ 967.338204][ T9021] ? __pfx_kobject_add+0x10/0x10 [ 967.338244][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.338286][ T9021] ? do_raw_spin_unlock+0x172/0x230 [ 967.338326][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.338368][ T9021] ? kobject_put+0xab/0x5a0 [ 967.338404][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.338457][ T9021] device_add+0x288/0x1aa0 [ 967.338496][ T9021] ? __pfx_dev_set_name+0x10/0x10 [ 967.338541][ T9021] ? __pfx_device_add+0x10/0x10 [ 967.338579][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.338621][ T9021] ? mgmt_send_event_skb+0x2fb/0x460 [ 967.338682][ T9021] hci_conn_add_sysfs+0x17e/0x230 [ 967.338739][ T9021] le_conn_complete_evt+0x1075/0x1d70 [ 967.338786][ T9021] ? preempt_count_sub+0xb0/0x160 [ 967.338838][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.338883][ T9021] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 967.338929][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.338980][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.339030][ T9021] hci_le_conn_complete_evt+0x23c/0x370 [ 967.339089][ T9021] hci_le_meta_evt+0x357/0x5e0 [ 967.339140][ T9021] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 967.339201][ T9021] hci_event_packet+0x685/0x11c0 [ 967.339248][ T9021] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 967.339303][ T9021] ? __pfx_hci_event_packet+0x10/0x10 [ 967.339351][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.339397][ T9021] ? kcov_remote_start+0x3c9/0x6d0 [ 967.339437][ T9021] ? lockdep_hardirqs_on+0x7c/0x110 [ 967.339491][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.339545][ T9021] hci_rx_work+0x2c5/0x16b0 [ 967.339599][ T9021] ? rcu_is_watching+0x12/0xc0 [ 967.339652][ T9021] process_one_work+0x9cf/0x1b70 [ 967.339710][ T9021] ? __pfx_process_one_work+0x10/0x10 [ 967.339754][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.339808][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.339850][ T9021] ? assign_work+0x1a0/0x250 [ 967.339890][ T9021] worker_thread+0x6c8/0xf10 [ 967.339940][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.339985][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.340026][ T9021] ? __kthread_parkme+0x19e/0x250 [ 967.340078][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.340124][ T9021] ? __pfx_worker_thread+0x10/0x10 [ 967.340170][ T9021] kthread+0x3c5/0x780 [ 967.340207][ T9021] ? __pfx_kthread+0x10/0x10 [ 967.340245][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.340288][ T9021] ? rcu_is_watching+0x12/0xc0 [ 967.340333][ T9021] ? __pfx_kthread+0x10/0x10 [ 967.340372][ T9021] ret_from_fork+0x56d/0x730 [ 967.340404][ T9021] ? __pfx_kthread+0x10/0x10 [ 967.340442][ T9021] ret_from_fork_asm+0x1a/0x30 [ 967.340508][ T9021] [ 967.347101][ T9021] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 967.698610][ T9021] Bluetooth: hci4: failed to register connection device [ 968.360087][T10670] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 968.622507][T10670] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 968.709909][T10670] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 968.726454][T10670] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 968.736827][T10670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.763716][T12045] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 968.802513][T10670] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 970.345076][T10670] usb 2-1: USB disconnect, device number 9 [ 970.684829][ T3071] team0 (unregistering): Port device team_slave_1 removed [ 971.449113][ T3071] team0 (unregistering): Port device team_slave_0 removed [ 971.856928][T11913] chnl_net:caif_netlink_parms(): no params data found [ 973.325117][T12066] random: crng reseeded on system resumption [ 973.430448][T12067] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1248'. [ 973.535410][T11932] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.557235][T11932] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.575163][T11932] bridge_slave_0: entered allmulticast mode [ 973.874856][ T5877] Bluetooth: hci4: command 0x0406 tx timeout [ 974.147958][T11932] bridge_slave_0: entered promiscuous mode [ 974.407600][T12073] kernel profiling enabled (shift: 34) [ 974.413385][T12073] profiling shift: 34 too large [ 975.470238][T11932] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.477414][T11932] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.529890][T11932] bridge_slave_1: entered allmulticast mode [ 975.555565][T11932] bridge_slave_1: entered promiscuous mode [ 975.614236][T12087] loop1: detected capacity change from 0 to 128 [ 975.630309][T12087] EXT4-fs (loop1): Test dummy encryption mode enabled [ 975.681737][T12087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0082] [ 975.696347][T12087] System zones: 1-3, 19-19, 35-36 [ 975.821746][T12087] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 975.922647][T12087] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 977.178302][ T5866] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 977.199447][T11932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.199994][ T5936] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 977.419836][ T5936] usb 5-1: Using ep0 maxpacket: 32 [ 977.455575][ T5936] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 977.490450][ T5936] usb 5-1: config 0 has no interface number 0 [ 977.524456][ T5936] usb 5-1: config 0 interface 89 has no altsetting 0 [ 977.563010][T11932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.584683][ T5936] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 977.650963][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.659541][ T5936] usb 5-1: Product: syz [ 977.675054][ T5936] usb 5-1: Manufacturer: syz [ 977.695518][ T5936] usb 5-1: SerialNumber: syz [ 977.716838][ T5936] usb 5-1: config 0 descriptor?? [ 977.768284][ T5936] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 977.778253][T11913] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.804514][T11913] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.812810][ T5936] em28xx 5-1:0.89: Video interface 89 found: bulk [ 977.830235][ T8886] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 977.834467][T11913] bridge_slave_0: entered allmulticast mode [ 977.882991][T11913] bridge_slave_0: entered promiscuous mode [ 978.035342][T11913] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.052536][ T8886] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 978.073641][ T8886] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 978.099962][T11913] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.113768][T11913] bridge_slave_1: entered allmulticast mode [ 978.124604][ T8886] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 978.153016][T11913] bridge_slave_1: entered promiscuous mode [ 978.231532][ T8886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.259486][T11932] team0: Port device team_slave_0 added [ 978.274469][T12109] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 978.285001][T11932] team0: Port device team_slave_1 added [ 978.286623][ T8886] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 978.420946][ T5936] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 978.943797][T11913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.989342][ T8886] usb 2-1: USB disconnect, device number 10 [ 979.019572][T11932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.047041][T11932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.182757][T11932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.288950][ T5936] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 979.303908][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.330527][ T5936] em28xx 5-1:0.89: board has no eeprom [ 979.382561][T11913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.409918][ T5936] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 979.437591][ T5936] em28xx 5-1:0.89: analog set to bulk mode. [ 979.453490][T10670] em28xx 5-1:0.89: Registering V4L2 extension [ 979.538652][ T5936] usb 5-1: USB disconnect, device number 6 [ 979.690863][ T5936] em28xx 5-1:0.89: Disconnecting em28xx [ 979.741439][T11932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.748437][T11932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.807007][T10670] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 979.856196][T10670] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 979.876177][T10670] em28xx 5-1:0.89: No AC97 audio processor [ 979.889410][T10670] usb 5-1: Decoder not found [ 979.895959][T10670] em28xx 5-1:0.89: failed to create media graph [ 979.910744][T10670] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 979.927534][T11932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.931505][T10670] em28xx 5-1:0.89: Registering snapshot button... [ 979.960585][T10670] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input6 [ 979.983071][T10670] em28xx 5-1:0.89: Remote control support is not available for this card. [ 980.001601][ T5936] em28xx 5-1:0.89: Closing input extension [ 980.244253][ T5936] em28xx 5-1:0.89: Deregistering snapshot button [ 981.102269][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.140002][ T5936] em28xx 5-1:0.89: Freeing device [ 981.160719][T11913] team0: Port device team_slave_0 added [ 981.796968][T12137] random: crng reseeded on system resumption [ 981.972592][T12138] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1262'. [ 982.452876][ T5949] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 982.863651][ T5949] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 982.899773][ T5949] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 982.909678][ T5949] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 983.352294][T12150] kernel profiling enabled (shift: 34) [ 983.367090][T12150] profiling shift: 34 too large [ 984.054168][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.163323][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.306439][T12133] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 984.785143][T11913] team0: Port device team_slave_1 added [ 984.785425][ T5949] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 984.992777][T12159] loop3: detected capacity change from 0 to 128 [ 985.060995][T12159] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 985.117862][T12159] ext4 filesystem being mounted at /291/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 985.215118][ T5949] usb 2-1: USB disconnect, device number 11 [ 985.269594][T12159] EXT4-fs (loop3): shut down requested (1) [ 985.357505][ T9616] udevd[9616]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 985.535430][T12170] 9pnet_fd: Insufficient options for proto=fd [ 985.570566][T11932] hsr_slave_0: entered promiscuous mode [ 985.636035][T11932] hsr_slave_1: entered promiscuous mode [ 985.688494][T11932] debugfs: 'hsr0' already exists in 'hsr' [ 985.791582][T11932] Cannot create hsr debugfs directory [ 986.043710][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.267760][ T5867] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 986.461320][T11913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.468295][T11913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.499818][T11913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.950173][T11913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.957182][T11913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.081228][T11913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.233943][T11913] hsr_slave_0: entered promiscuous mode [ 991.242054][T11913] hsr_slave_1: entered promiscuous mode [ 991.248489][T11913] debugfs: 'hsr0' already exists in 'hsr' [ 991.254469][T11913] Cannot create hsr debugfs directory [ 991.347088][T12208] random: crng reseeded on system resumption [ 991.427338][T12208] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1273'. [ 992.026697][ T13] bridge_slave_1: left allmulticast mode [ 992.120051][ T13] bridge_slave_1: left promiscuous mode [ 992.125936][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.456085][ T13] bridge_slave_0: left allmulticast mode [ 992.472352][ T13] bridge_slave_0: left promiscuous mode [ 993.304322][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.814791][T12227] kernel profiling enabled (shift: 34) [ 993.820447][T12227] profiling shift: 34 too large [ 994.401711][ T5956] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 995.163237][ T5956] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 995.176968][ T5956] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 995.252821][ T5956] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 995.302087][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.362862][T12219] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 995.393292][ T5956] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 995.642490][ T5956] usb 4-1: USB disconnect, device number 8 [ 995.903926][ T7783] udevd[7783]: setting mode of /dev/snd/midiC3D0 to 020660 failed: No such file or directory [ 995.938613][ T7783] udevd[7783]: setting owner of /dev/snd/midiC3D0 to uid=0, gid=29 failed: No such file or directory [ 996.072294][ T7853] udevd[7853]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 997.463954][T12247] loop3: detected capacity change from 0 to 128 [ 997.500275][T12247] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 997.549972][T12247] ext4 filesystem being mounted at /296/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 997.718303][ T5867] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 998.916494][T12257] 9pnet_fd: Insufficient options for proto=fd [ 999.080821][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 999.126579][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.204399][ T13] bond0 (unregistering): Released all slaves [ 1000.982387][ T13] hsr_slave_0: left promiscuous mode [ 1001.013540][ T13] hsr_slave_1: left promiscuous mode [ 1001.023413][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.056829][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.130238][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.153044][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.305981][ T13] veth1_macvtap: left promiscuous mode [ 1001.323044][ T13] veth0_macvtap: left promiscuous mode [ 1001.328748][ T13] veth1_vlan: left promiscuous mode [ 1001.354439][ T13] veth0_vlan: left promiscuous mode [ 1002.566151][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.566279][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.550316][T12282] kernel profiling enabled (shift: 34) [ 1003.555921][T12282] profiling shift: 34 too large [ 1004.804610][ T5949] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1004.982067][ T5949] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1005.013082][ T5949] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1005.029599][ T5949] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1005.054645][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.067911][T12284] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1005.099918][ T5949] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1006.669159][ T5949] usb 4-1: USB disconnect, device number 9 [ 1006.854528][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1006.888312][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1007.628513][T12296] loop4: detected capacity change from 0 to 128 [ 1008.051952][T12296] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1008.185382][T12296] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.413566][ T5865] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1011.249659][ T9021] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1011.269894][ T9021] CPU: 0 UID: 0 PID: 9021 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1011.269943][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1011.269967][ T9021] Workqueue: hci1 hci_rx_work [ 1011.270024][ T9021] Call Trace: [ 1011.270036][ T9021] [ 1011.270052][ T9021] dump_stack_lvl+0x16c/0x1f0 [ 1011.270113][ T9021] sysfs_warn_dup+0x7f/0xa0 [ 1011.270155][ T9021] sysfs_create_dir_ns+0x24b/0x2b0 [ 1011.270213][ T9021] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1011.270252][ T9021] ? find_held_lock+0x2b/0x80 [ 1011.270307][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.270351][ T9021] ? do_raw_spin_unlock+0x172/0x230 [ 1011.270395][ T9021] kobject_add_internal+0x2c4/0x9b0 [ 1011.270442][ T9021] kobject_add+0x16e/0x240 [ 1011.270479][ T9021] ? __pfx_kobject_add+0x10/0x10 [ 1011.270519][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.270561][ T9021] ? do_raw_spin_unlock+0x172/0x230 [ 1011.270602][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.270645][ T9021] ? kobject_put+0xab/0x5a0 [ 1011.270682][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.270735][ T9021] device_add+0x288/0x1aa0 [ 1011.270775][ T9021] ? __pfx_dev_set_name+0x10/0x10 [ 1011.270820][ T9021] ? __pfx_device_add+0x10/0x10 [ 1011.270859][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.270903][ T9021] ? mgmt_send_event_skb+0x2fb/0x460 [ 1011.270966][ T9021] hci_conn_add_sysfs+0x17e/0x230 [ 1011.271025][ T9021] le_conn_complete_evt+0x1075/0x1d70 [ 1011.271073][ T9021] ? preempt_count_sub+0xb0/0x160 [ 1011.271127][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.271166][ T9021] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1011.271218][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.271269][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.271319][ T9021] hci_le_conn_complete_evt+0x23c/0x370 [ 1011.271377][ T9021] hci_le_meta_evt+0x357/0x5e0 [ 1011.271429][ T9021] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1011.271485][ T9021] hci_event_packet+0x685/0x11c0 [ 1011.271535][ T9021] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1011.271591][ T9021] ? __pfx_hci_event_packet+0x10/0x10 [ 1011.271640][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.271687][ T9021] ? kcov_remote_start+0x3c9/0x6d0 [ 1011.271727][ T9021] ? lockdep_hardirqs_on+0x7c/0x110 [ 1011.271782][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.271837][ T9021] hci_rx_work+0x2c5/0x16b0 [ 1011.271894][ T9021] ? rcu_is_watching+0x12/0xc0 [ 1011.271949][ T9021] process_one_work+0x9cf/0x1b70 [ 1011.272009][ T9021] ? __pfx_process_one_work+0x10/0x10 [ 1011.272050][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.272105][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.272148][ T9021] ? assign_work+0x1a0/0x250 [ 1011.272199][ T9021] worker_thread+0x6c8/0xf10 [ 1011.272250][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.272296][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.272340][ T9021] ? __kthread_parkme+0x19e/0x250 [ 1011.272393][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.272439][ T9021] ? __pfx_worker_thread+0x10/0x10 [ 1011.272480][ T9021] kthread+0x3c5/0x780 [ 1011.272518][ T9021] ? __pfx_kthread+0x10/0x10 [ 1011.272556][ T9021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1011.272600][ T9021] ? rcu_is_watching+0x12/0xc0 [ 1011.272646][ T9021] ? __pfx_kthread+0x10/0x10 [ 1011.272686][ T9021] ret_from_fork+0x56d/0x730 [ 1011.272720][ T9021] ? __pfx_kthread+0x10/0x10 [ 1011.272758][ T9021] ret_from_fork_asm+0x1a/0x30 [ 1011.272827][ T9021] [ 1011.272992][ T9021] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1011.627777][ T9021] Bluetooth: hci1: failed to register connection device [ 1012.426202][ T13] bridge_slave_1: left allmulticast mode [ 1012.470981][ T13] bridge_slave_1: left promiscuous mode [ 1012.523760][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.601260][ T13] bridge_slave_0: left allmulticast mode [ 1012.623419][ T13] bridge_slave_0: left promiscuous mode [ 1012.654012][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.738290][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1012.749460][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1012.758888][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1012.770027][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1012.783576][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1013.097516][ T9021] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1013.133123][ T9021] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1013.168887][ T9021] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1013.191597][ T9021] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1013.199984][ T9021] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1013.818781][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.760454][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.827354][ T13] bond0 (unregistering): Released all slaves [ 1014.880117][ T5877] Bluetooth: hci3: command tx timeout [ 1015.014592][T12360] 9pnet_fd: Insufficient options for proto=fd [ 1015.231798][T10670] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1015.299810][ T5877] Bluetooth: hci6: command tx timeout [ 1015.450725][T10670] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1015.502954][T10670] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1015.544913][ T13] hsr_slave_0: left promiscuous mode [ 1015.563153][ T13] hsr_slave_1: left promiscuous mode [ 1015.565066][T10670] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1015.608730][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.618016][T10670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.649105][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.664548][T12356] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1015.713286][T10670] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1015.830033][ T6075] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1016.036768][ T6075] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1016.079243][ T6075] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1016.129187][ T6075] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1016.153995][ T6075] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.235922][T12366] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1016.309493][ T6075] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1016.527017][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1016.729263][ T8886] usb 4-1: USB disconnect, device number 10 [ 1016.910623][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1016.968502][ T5877] Bluetooth: hci3: command tx timeout [ 1017.360087][ T5877] Bluetooth: hci6: command tx timeout [ 1017.937830][T12381] loop1: detected capacity change from 0 to 128 [ 1018.280426][T12381] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1018.344976][T12381] ext4 filesystem being mounted at /281/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1018.672026][ T8886] usb 5-1: USB disconnect, device number 7 [ 1018.855267][ T5866] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1019.041276][ T5877] Bluetooth: hci3: command tx timeout [ 1019.446014][ T5877] Bluetooth: hci6: command tx timeout [ 1019.738601][T12398] 9pnet_fd: Insufficient options for proto=fd [ 1021.120590][ T5877] Bluetooth: hci3: command tx timeout [ 1021.528218][ T5877] Bluetooth: hci6: command tx timeout [ 1021.629523][T12415] loop1: detected capacity change from 0 to 128 [ 1021.661981][T12415] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1021.982017][T12415] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0082] [ 1022.925180][T12415] System zones: 1-3, 19-19, 35-36 [ 1023.002831][T12415] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1023.066611][T12337] chnl_net:caif_netlink_parms(): no params data found [ 1023.093711][T12415] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1023.351822][ T13] bridge_slave_1: left allmulticast mode [ 1023.357528][ T13] bridge_slave_1: left promiscuous mode [ 1023.363988][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.557980][ T13] bridge_slave_0: left allmulticast mode [ 1023.577812][ T5866] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1023.619800][ T13] bridge_slave_0: left promiscuous mode [ 1023.625661][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.137874][T10670] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1024.362752][T10670] usb 3-1: Using ep0 maxpacket: 16 [ 1024.420482][T10670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.466812][T10670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.553310][T10670] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1024.629286][T10670] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1024.674282][T10670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.715310][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1024.739096][T10670] usb 3-1: config 0 descriptor?? [ 1025.210735][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.694236][ T13] bond0 (unregistering): Released all slaves [ 1025.823239][T10670] HID 045e:07da: Invalid code 65791 type 1 [ 1025.866553][T10670] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0006/input/input7 [ 1026.870917][T10670] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1026.886582][T12342] chnl_net:caif_netlink_parms(): no params data found [ 1027.080879][T10670] usb 3-1: USB disconnect, device number 9 [ 1027.656169][T12482] loop4: detected capacity change from 0 to 128 [ 1027.757229][T12470] fido_id[12470]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1027.775411][ T13] hsr_slave_0: left promiscuous mode [ 1027.937349][ T13] hsr_slave_1: left promiscuous mode [ 1027.963476][T12482] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1028.016715][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1028.189504][T12482] ext4 filesystem being mounted at /269/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1028.288670][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.360370][T10670] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1028.586594][T10670] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1028.621531][T10670] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1028.626906][ T5865] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1028.678778][T10670] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1028.739769][T10670] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.791028][T12488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1028.838002][T10670] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1029.801919][T10670] usb 4-1: USB disconnect, device number 11 [ 1030.369859][ T8886] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1030.571030][ T8886] usb 5-1: Using ep0 maxpacket: 16 [ 1030.596111][ T8886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.640173][ T8886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.673550][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1030.680417][ T8886] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1030.896540][ T8886] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1030.906855][ T8886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.918005][ T8886] usb 5-1: config 0 descriptor?? [ 1032.037450][ T8886] HID 045e:07da: Invalid code 65791 type 1 [ 1032.482621][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1032.511643][ T8886] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0007/input/input8 [ 1032.602662][ T8886] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1032.721107][ T8886] usb 5-1: USB disconnect, device number 8 [ 1032.913394][T12516] fuse: Bad value for 'fd' [ 1033.461719][T12515] fido_id[12515]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1036.814955][T12537] loop4: detected capacity change from 0 to 128 [ 1036.880843][T12537] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1036.989891][T12537] ext4 filesystem being mounted at /273/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1037.050706][T12337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.090242][T12337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.426112][T12337] bridge_slave_0: entered allmulticast mode [ 1037.556727][T12337] bridge_slave_0: entered promiscuous mode [ 1037.592183][ T5865] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1037.595989][T12337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.640764][T12337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.659491][T12337] bridge_slave_1: entered allmulticast mode [ 1037.717954][T12337] bridge_slave_1: entered promiscuous mode [ 1038.350261][ T5949] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1038.807757][T12337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.817581][ T5949] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1038.856959][ T5949] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1038.860763][T12337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1038.932902][ T5949] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1038.970084][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.007133][T12550] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1039.031796][ T5949] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1039.666489][ T5949] usb 5-1: USB disconnect, device number 9 [ 1039.998300][T12342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.029871][T12342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.037168][T12342] bridge_slave_0: entered allmulticast mode [ 1040.101971][T12342] bridge_slave_0: entered promiscuous mode [ 1040.143401][T12337] team0: Port device team_slave_0 added [ 1040.154934][T12337] team0: Port device team_slave_1 added [ 1040.616591][T12342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.629923][T12342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.637171][T12342] bridge_slave_1: entered allmulticast mode [ 1040.696666][T12342] bridge_slave_1: entered promiscuous mode [ 1041.653373][T12342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.671685][T12337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.685292][T12337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.816330][T12337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.464594][T12337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.476695][T12337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1042.630988][T12337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.782326][T12342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.446791][T12342] team0: Port device team_slave_0 added [ 1046.015593][T12337] hsr_slave_0: entered promiscuous mode [ 1046.046765][T12337] hsr_slave_1: entered promiscuous mode [ 1046.066130][T12337] debugfs: 'hsr0' already exists in 'hsr' [ 1046.105136][T12337] Cannot create hsr debugfs directory [ 1046.112903][T12606] 9pnet_fd: Insufficient options for proto=fd [ 1046.232086][T12342] team0: Port device team_slave_1 added [ 1046.972229][T12342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.100028][T12342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.190832][T12342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.454968][T12342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.454997][T12342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.455046][T12342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.685757][ C1] vkms_vblank_simulate: vblank timer overrun [ 1047.916324][T12342] hsr_slave_0: entered promiscuous mode [ 1047.986616][T12342] hsr_slave_1: entered promiscuous mode [ 1047.997468][T12342] debugfs: 'hsr0' already exists in 'hsr' [ 1048.004324][T12342] Cannot create hsr debugfs directory [ 1048.270027][T12632] loop1: detected capacity change from 0 to 128 [ 1048.332797][T12635] 9pnet_fd: Insufficient options for proto=fd [ 1048.401034][T12632] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1048.526810][T12632] ext4 filesystem being mounted at /294/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1049.271798][ T5866] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1049.645286][T12649] hfsplus: unable to find HFS+ superblock [ 1051.197801][T12656] kernel profiling enabled (shift: 34) [ 1051.203568][T12656] profiling shift: 34 too large [ 1054.543814][T12342] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1055.639137][T12342] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1055.689323][T12342] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1055.837984][T12342] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1056.223734][T12337] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1056.259853][T10670] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1056.317035][T12337] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1056.415563][T12337] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1056.453922][T12337] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1056.460953][T10670] usb 5-1: Using ep0 maxpacket: 32 [ 1056.488890][T10670] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1056.573417][T10670] usb 5-1: config 0 has no interface number 0 [ 1056.601350][T12700] 9pnet_fd: Insufficient options for proto=fd [ 1056.626711][T10670] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1056.659859][T10670] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1056.669491][T10670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.686795][T10670] usb 5-1: Product: syz [ 1056.694665][T10670] usb 5-1: Manufacturer: syz [ 1056.699390][T10670] usb 5-1: SerialNumber: syz [ 1056.710900][T10670] usb 5-1: config 0 descriptor?? [ 1056.729573][T10670] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1056.739369][T10670] em28xx 5-1:0.89: Video interface 89 found: bulk [ 1057.071554][T12342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.339261][T12342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.433152][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.440406][ T6178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.457411][T10670] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1057.574247][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.581503][ T6178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.899358][T12337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.081525][T10670] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1058.113028][T12337] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.131532][T10670] em28xx 5-1:0.89: board has no eeprom [ 1058.172864][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.180126][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.249435][T10670] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1058.280221][T10670] em28xx 5-1:0.89: analog set to bulk mode. [ 1058.286228][ T118] em28xx 5-1:0.89: Registering V4L2 extension [ 1058.296205][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.303575][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.323307][T10670] usb 5-1: USB disconnect, device number 10 [ 1058.331303][T10670] em28xx 5-1:0.89: Disconnecting em28xx [ 1058.673466][ T118] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1058.693860][ T118] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1058.741815][ T118] em28xx 5-1:0.89: No AC97 audio processor [ 1058.832281][ T118] usb 5-1: Decoder not found [ 1058.862585][ T118] em28xx 5-1:0.89: failed to create media graph [ 1058.897705][ T118] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1058.958713][ T118] em28xx 5-1:0.89: Registering snapshot button... [ 1058.999377][ T118] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input9 [ 1059.103939][ T118] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1059.143669][T10670] em28xx 5-1:0.89: Closing input extension [ 1059.177590][T10670] em28xx 5-1:0.89: Deregistering snapshot button [ 1059.924035][T10670] em28xx 5-1:0.89: Freeing device [ 1060.366905][T12738] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1060.366905][T12738] program syz.1.1373 not setting count and/or reply_len properly [ 1060.592669][T12342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1060.753053][T12337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.953231][T12777] fuse: Bad value for 'fd' [ 1064.005442][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.013472][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.336378][T12342] veth0_vlan: entered promiscuous mode [ 1064.946087][T12342] veth1_vlan: entered promiscuous mode [ 1065.232690][T12337] veth0_vlan: entered promiscuous mode [ 1065.257608][T12337] veth1_vlan: entered promiscuous mode [ 1065.334071][T12342] veth0_macvtap: entered promiscuous mode [ 1065.406877][T12342] veth1_macvtap: entered promiscuous mode [ 1065.529000][T12337] veth0_macvtap: entered promiscuous mode [ 1065.566379][T12342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.579569][T12337] veth1_macvtap: entered promiscuous mode [ 1065.839183][T12337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1066.693930][T12342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1066.885762][T12337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1066.928727][T12796] 9pnet_fd: Insufficient options for proto=fd [ 1067.169553][ T3967] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.291456][ T49] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.314008][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.475153][T12802] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1067.475153][T12802] program syz.2.1385 not setting count and/or reply_len properly [ 1068.543007][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.621731][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.778138][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.831631][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.921009][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.182164][ T6178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.216782][ T6178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.362936][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.420023][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.760995][ T6075] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1071.046108][T12813] 9pnet_fd: Insufficient options for proto=fd [ 1071.071523][ T6075] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1071.114398][ T6075] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1071.171653][ T6075] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1071.171695][ T6075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.202919][T12809] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1071.218151][ T6075] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1071.665354][ T6075] usb 2-1: USB disconnect, device number 12 [ 1072.351625][ T5985] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.531176][ T9021] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1072.545763][ T9021] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1072.555949][ T9021] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1072.586566][ T9021] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1072.606138][ T9021] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1072.772179][ T9021] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1072.784625][ T9021] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1072.793142][ T9021] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1072.804511][ T9021] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1072.815073][ T9021] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1073.031784][ T5985] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.671987][ T5985] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.219457][ T5985] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.795741][T12847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'. [ 1075.029921][ T9021] Bluetooth: hci0: command tx timeout [ 1075.037667][ T5877] Bluetooth: hci3: command tx timeout [ 1076.602585][T12857] fuse: Bad value for 'fd' [ 1076.797642][ T5985] bridge_slave_1: left allmulticast mode [ 1076.843354][ T5985] bridge_slave_1: left promiscuous mode [ 1076.894460][T12859] binder: 12858:12859 ioctl c0306201 200000000540 returned -22 [ 1076.955890][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.987084][T12859] binder: 12858:12859 ioctl c0306201 200000000640 returned -22 [ 1077.012776][ T5985] bridge_slave_0: left allmulticast mode [ 1077.046277][ T5985] bridge_slave_0: left promiscuous mode [ 1077.110528][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.308387][T12862] loop1: detected capacity change from 0 to 64 [ 1077.361144][ T5877] Bluetooth: hci3: command tx timeout [ 1077.366602][ T5877] Bluetooth: hci0: command tx timeout [ 1078.269965][ T8886] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1078.518577][ T8886] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1078.530653][ T8886] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1078.551570][ T8886] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1078.580165][ T8886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.616746][T12869] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1078.674769][ T8886] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1078.957396][ T8886] usb 2-1: USB disconnect, device number 13 [ 1080.075536][ T5877] Bluetooth: hci0: command tx timeout [ 1080.090183][ T9021] Bluetooth: hci3: command tx timeout [ 1080.986540][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1081.005614][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1081.033697][ T5985] bond0 (unregistering): Released all slaves [ 1081.309371][T12890] 9pnet_fd: Insufficient options for proto=fd [ 1082.189837][ T5877] Bluetooth: hci0: command tx timeout [ 1082.195376][ T5877] Bluetooth: hci3: command tx timeout [ 1082.292408][ T5985] hsr_slave_0: left promiscuous mode [ 1082.396312][ T5985] hsr_slave_1: left promiscuous mode [ 1082.427943][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.496369][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.590756][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.598187][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.054530][T12910] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1083.054530][T12910] program syz.4.1405 not setting count and/or reply_len properly [ 1083.912759][ T5985] veth1_macvtap: left promiscuous mode [ 1083.947282][ T5985] veth0_macvtap: left promiscuous mode [ 1083.977028][ T5985] veth1_vlan: left promiscuous mode [ 1084.037522][ T5985] veth0_vlan: left promiscuous mode [ 1086.419912][ T9433] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1086.689544][ T9433] usb 5-1: Using ep0 maxpacket: 32 [ 1086.747590][ T9433] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1086.799782][ T9433] usb 5-1: config 0 has no interface number 0 [ 1086.805927][ T9433] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1087.228908][ T9433] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1087.629936][ T9433] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.637983][ T9433] usb 5-1: Product: syz [ 1087.659733][ T9433] usb 5-1: Manufacturer: syz [ 1087.664395][ T9433] usb 5-1: SerialNumber: syz [ 1087.787167][ T9433] usb 5-1: config 0 descriptor?? [ 1087.837720][ T9433] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1087.888896][ T9433] em28xx 5-1:0.89: Video interface 89 found: bulk [ 1089.341524][ T9433] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1089.491651][T12949] loop1: detected capacity change from 0 to 64 [ 1089.938259][T10670] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1089.965732][ T9433] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1090.027542][ T9433] em28xx 5-1:0.89: board has no eeprom [ 1090.268613][T12958] kernel profiling enabled (shift: 34) [ 1090.274266][T12958] profiling shift: 34 too large [ 1090.876695][ T9433] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1090.892399][ T9433] em28xx 5-1:0.89: analog set to bulk mode. [ 1090.900262][ T6075] em28xx 5-1:0.89: Registering V4L2 extension [ 1090.912370][T10670] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1090.959740][T10670] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1090.970516][ T9433] usb 5-1: USB disconnect, device number 11 [ 1090.988223][ T9433] em28xx 5-1:0.89: Disconnecting em28xx [ 1090.997145][T10670] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1091.021869][T10670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.138535][T12951] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1091.201952][ T6075] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1091.208975][ T6075] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1091.253148][T10670] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1091.289582][ T6075] em28xx 5-1:0.89: No AC97 audio processor [ 1091.335873][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 1091.396659][T12967] 9pnet_fd: Insufficient options for proto=fd [ 1091.796111][ T6075] usb 5-1: Decoder not found [ 1091.811647][ T6075] em28xx 5-1:0.89: failed to create media graph [ 1091.832475][ T6075] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1091.936272][ T43] usb 3-1: USB disconnect, device number 10 [ 1092.045873][ T6075] em28xx 5-1:0.89: Registering snapshot button... [ 1092.148385][ T6075] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input10 [ 1092.190074][ T6075] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1092.231144][ T9433] em28xx 5-1:0.89: Closing input extension [ 1092.243549][ T9433] em28xx 5-1:0.89: Deregistering snapshot button [ 1092.296163][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 1092.336566][ T9433] em28xx 5-1:0.89: Freeing device [ 1093.493253][T12981] loop4: detected capacity change from 0 to 64 [ 1094.603723][T12827] chnl_net:caif_netlink_parms(): no params data found [ 1096.719124][T13003] hfsplus: unable to find HFS+ superblock [ 1097.584778][T13013] No source specified [ 1098.681484][T12827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.718196][T12827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.858461][T13027] hfsplus: unable to find HFS+ superblock [ 1099.140451][T12827] bridge_slave_0: entered allmulticast mode [ 1099.159923][T12827] bridge_slave_0: entered promiscuous mode [ 1099.273490][T12832] chnl_net:caif_netlink_parms(): no params data found [ 1099.383103][T12827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.397245][T12827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.487134][T12827] bridge_slave_1: entered allmulticast mode [ 1099.527653][T12827] bridge_slave_1: entered promiscuous mode [ 1100.143747][T12827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.764081][T12827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.505063][T12827] team0: Port device team_slave_0 added [ 1102.507762][T12827] team0: Port device team_slave_1 added [ 1103.689958][ T43] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1103.866191][ T3967] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.782585][ T43] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1104.815419][ T43] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1104.859747][ T43] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1104.889182][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.086019][T13059] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1105.143881][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1105.217474][ T3967] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.537088][T12827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.559844][T12827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.510497][T12827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.596904][T12832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.615526][T12832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.639889][T12832] bridge_slave_0: entered allmulticast mode [ 1106.679869][T12832] bridge_slave_0: entered promiscuous mode [ 1106.745582][T12827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.764662][T12827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.051824][T12827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.964661][ T3967] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.085207][T12832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.099308][T12832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.181871][T12832] bridge_slave_1: entered allmulticast mode [ 1108.208408][T12832] bridge_slave_1: entered promiscuous mode [ 1108.843452][T12832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.152397][T10670] usb 2-1: USB disconnect, device number 14 [ 1110.162929][ T3967] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.186045][T13083] loop4: detected capacity change from 0 to 128 [ 1110.261825][T13083] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1110.720099][T13083] ext4 filesystem being mounted at /302/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1111.308091][T13092] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1111.308091][T13092] program syz.2.1447 not setting count and/or reply_len properly [ 1111.833909][T12832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.899340][ T5865] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1112.168138][T13102] hfsplus: unable to find HFS+ superblock [ 1112.637525][T12827] hsr_slave_0: entered promiscuous mode [ 1112.875661][T12827] hsr_slave_1: entered promiscuous mode [ 1113.077447][T12827] debugfs: 'hsr0' already exists in 'hsr' [ 1113.174772][T12827] Cannot create hsr debugfs directory [ 1113.239196][T13106] 9pnet_fd: Insufficient options for proto=fd [ 1113.342405][T12832] team0: Port device team_slave_0 added [ 1113.529927][ T8886] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1113.556229][T12832] team0: Port device team_slave_1 added [ 1113.849899][ T8886] usb 5-1: Using ep0 maxpacket: 16 [ 1114.630695][ T8886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1114.650998][ T8886] usb 5-1: config 204 has an invalid interface number: 118 but max is 0 [ 1114.680654][ T8886] usb 5-1: config 204 has no interface number 0 [ 1114.689931][ T8886] usb 5-1: config 204 interface 118 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1114.705858][ T8886] usb 5-1: config 204 interface 118 altsetting 3 bulk endpoint 0xD has invalid maxpacket 1023 [ 1114.718455][ T8886] usb 5-1: config 204 interface 118 has no altsetting 0 [ 1114.848369][ T8886] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=c7.0c [ 1114.863474][ T8886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.888875][ T8886] usb 5-1: Product: syz [ 1114.897867][ T8886] usb 5-1: Manufacturer: syz [ 1114.902793][ T8886] usb 5-1: SerialNumber: syz [ 1114.975754][T13109] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1115.009911][ T118] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1115.052823][T12832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.079082][T12832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1115.217943][ T118] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1115.239533][ T118] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1115.256285][T12832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.356973][ T118] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1115.398755][ T118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.430093][ T8886] kvaser_usb 5-1:204.118: error -ENODEV: Cannot get usb endpoint(s) [ 1115.430624][T13117] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1115.490150][ T8886] usb 5-1: USB disconnect, device number 12 [ 1115.587640][ T118] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1115.751537][T12832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.802076][T12832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.098433][T12832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1116.154947][ T8886] usb 2-1: USB disconnect, device number 15 [ 1116.761158][T12832] hsr_slave_0: entered promiscuous mode [ 1116.788605][T12832] hsr_slave_1: entered promiscuous mode [ 1116.828843][T12832] debugfs: 'hsr0' already exists in 'hsr' [ 1116.867244][T12832] Cannot create hsr debugfs directory [ 1118.825817][ T5949] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1119.350166][ T5949] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 1119.358335][ T5949] usb 5-1: config 0 has no interface number 0 [ 1119.466391][T13151] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1119.466391][T13151] program syz.1.1459 not setting count and/or reply_len properly [ 1120.235441][ T5949] usb 5-1: config 0 interface 23 has no altsetting 0 [ 1120.244713][ T3967] bridge_slave_1: left allmulticast mode [ 1120.254459][ T3967] bridge_slave_1: left promiscuous mode [ 1120.270588][ T5949] usb 5-1: string descriptor 0 read error: -71 [ 1120.279372][ T5949] usb 5-1: New USB device found, idVendor=0c45, idProduct=62b0, bcdDevice=70.90 [ 1120.288509][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.304794][ T3967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.308009][ T5949] usb 5-1: config 0 descriptor?? [ 1120.319913][ T5949] usb 5-1: can't set config #0, error -71 [ 1120.361949][ T5949] usb 5-1: USB disconnect, device number 13 [ 1120.476369][ T3967] bridge_slave_0: left allmulticast mode [ 1120.489846][ T3967] bridge_slave_0: left promiscuous mode [ 1120.495669][ T3967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.516143][T13156] loop1: detected capacity change from 0 to 128 [ 1120.584726][T13156] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1120.609103][T13156] ext4 filesystem being mounted at /320/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1121.906167][T13167] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1122.136674][ T5866] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1122.893160][T13173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1464'. [ 1125.480441][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.486838][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1127.572073][ T3967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1127.652744][ T3967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1127.712861][ T3967] bond0 (unregistering): Released all slaves [ 1131.969748][ T3967] hsr_slave_0: left promiscuous mode [ 1131.979712][ T3967] hsr_slave_1: left promiscuous mode [ 1132.000739][ T3967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1132.030018][ T3967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.052805][ T3967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1132.086219][ T3967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.269073][T13228] loop1: detected capacity change from 0 to 128 [ 1132.304266][ T3967] veth1_macvtap: left promiscuous mode [ 1132.348429][ T3967] veth0_macvtap: left promiscuous mode [ 1132.786576][ T3967] veth1_vlan: left promiscuous mode [ 1132.801188][ T3967] veth0_vlan: left promiscuous mode [ 1132.821058][T13228] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1132.882772][T13228] ext4 filesystem being mounted at /324/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1133.126601][ T9021] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1133.151798][ T9021] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1133.168070][ T9021] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1133.180004][ T9021] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1133.189490][ T9021] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1133.384696][ T5866] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1135.279850][ T5877] Bluetooth: hci6: command tx timeout [ 1136.663222][ T9021] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1136.689394][ T9021] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1136.698218][ T9021] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1136.715193][ T9021] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1136.723005][ T9021] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1137.372301][ T5877] Bluetooth: hci6: command tx timeout [ 1138.858828][ T5877] Bluetooth: hci3: command tx timeout [ 1139.439997][ T5877] Bluetooth: hci6: command tx timeout [ 1140.944694][ T5877] Bluetooth: hci3: command tx timeout [ 1141.519912][ T5877] Bluetooth: hci6: command tx timeout [ 1141.561545][ T3967] team0 (unregistering): Port device team_slave_1 removed [ 1142.788539][ T3967] team0 (unregistering): Port device team_slave_0 removed [ 1143.010772][ T5877] Bluetooth: hci3: command tx timeout [ 1143.832599][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1489'. [ 1143.841832][T13292] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1489'. [ 1143.993702][T13294] loop2: detected capacity change from 0 to 128 [ 1144.057908][T13294] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1144.083924][T13294] ext4 filesystem being mounted at /336/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1144.771822][ T5863] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1145.041080][ T5877] Bluetooth: hci3: command tx timeout [ 1145.710596][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1494'. [ 1145.742518][T13313] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1494'. [ 1148.715302][ T5957] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1148.869795][ T5957] usb 3-1: Using ep0 maxpacket: 32 [ 1148.873671][T13238] chnl_net:caif_netlink_parms(): no params data found [ 1148.888444][ T5957] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1148.979833][ T5957] usb 3-1: config 0 has no interface number 0 [ 1149.009912][ T5957] usb 3-1: config 0 interface 89 has no altsetting 0 [ 1149.114643][ T5957] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1149.145084][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.220066][ T5957] usb 3-1: Product: syz [ 1149.232782][ T5957] usb 3-1: Manufacturer: syz [ 1149.335721][ T5957] usb 3-1: SerialNumber: syz [ 1149.374611][ T5957] usb 3-1: config 0 descriptor?? [ 1149.397262][ T5957] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1149.559825][ T5957] em28xx 3-1:0.89: Video interface 89 found: bulk [ 1149.826580][T13260] chnl_net:caif_netlink_parms(): no params data found [ 1149.876663][ T3967] bridge_slave_1: left allmulticast mode [ 1149.919989][ T3967] bridge_slave_1: left promiscuous mode [ 1149.959983][ T3967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.006343][ T5957] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 1150.052344][ T3967] bridge_slave_0: left allmulticast mode [ 1150.058037][ T3967] bridge_slave_0: left promiscuous mode [ 1150.180337][ T3967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.632794][ T5957] em28xx 3-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1150.676991][ T5957] em28xx 3-1:0.89: board has no eeprom [ 1150.769855][ T5957] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 1150.781912][ T3967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1150.800825][ T5957] em28xx 3-1:0.89: analog set to bulk mode. [ 1150.827094][ T5949] em28xx 3-1:0.89: Registering V4L2 extension [ 1150.870295][ T3967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1150.929358][ T5957] usb 3-1: USB disconnect, device number 11 [ 1150.969631][ T5957] em28xx 3-1:0.89: Disconnecting em28xx [ 1150.988719][ T3967] bond0 (unregistering): Released all slaves [ 1151.089871][T10670] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1151.108377][ T5949] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 1151.164086][ T5949] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 1151.199893][ T5949] em28xx 3-1:0.89: No AC97 audio processor [ 1151.220053][ T5949] usb 3-1: Decoder not found [ 1151.239984][ T5949] em28xx 3-1:0.89: failed to create media graph [ 1151.260175][ T5949] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 1151.278134][ T5949] em28xx 3-1:0.89: Registering snapshot button... [ 1151.294849][ T5949] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input11 [ 1151.323112][T10670] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.350770][ T5949] em28xx 3-1:0.89: Remote control support is not available for this card. [ 1151.361334][ T5957] em28xx 3-1:0.89: Closing input extension [ 1151.367198][ T5957] em28xx 3-1:0.89: Deregistering snapshot button [ 1151.413466][T10670] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1151.478994][T10670] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1151.499708][T10670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.677997][T10670] usb 2-1: config 0 descriptor?? [ 1152.005593][T10670] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1152.053975][ T3967] hsr_slave_0: left promiscuous mode [ 1152.132877][ T3967] hsr_slave_1: left promiscuous mode [ 1152.373702][ T3967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1152.374108][ T5957] em28xx 3-1:0.89: Freeing device [ 1153.215918][ T3967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.324394][T13372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1503'. [ 1153.365901][T13372] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1503'. [ 1153.472060][T13374] loop2: detected capacity change from 0 to 128 [ 1153.523782][T13374] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1153.561091][T13374] ext4 filesystem being mounted at /341/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1153.811609][ T5863] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1154.353444][T13383] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1506'. [ 1154.402473][ T3967] team0 (unregistering): Port device team_slave_1 removed [ 1154.534272][ T3967] team0 (unregistering): Port device team_slave_0 removed [ 1154.535748][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1507'. [ 1154.556771][T13385] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1507'. [ 1155.131188][ T6075] usb 2-1: USB disconnect, device number 16 [ 1155.897586][T13238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.959973][T13238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.967268][T13238] bridge_slave_0: entered allmulticast mode [ 1156.102608][T13238] bridge_slave_0: entered promiscuous mode [ 1156.171104][T13238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.178287][T13238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.210754][T13238] bridge_slave_1: entered allmulticast mode [ 1156.218957][T13238] bridge_slave_1: entered promiscuous mode [ 1156.314342][T13260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.350614][T13260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.399422][T13260] bridge_slave_0: entered allmulticast mode [ 1156.532762][T13260] bridge_slave_0: entered promiscuous mode [ 1156.843149][T13260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.917404][T13260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.040344][T13260] bridge_slave_1: entered allmulticast mode [ 1157.048959][T13260] bridge_slave_1: entered promiscuous mode [ 1157.821138][T13238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.962649][T13238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1160.725166][T13429] loop3: detected capacity change from 0 to 128 [ 1160.988966][T13429] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1160.990789][T13260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.020920][T13429] ext4 filesystem being mounted at /353/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1162.090873][T13260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1162.165432][T13238] team0: Port device team_slave_0 added [ 1162.227931][T13238] team0: Port device team_slave_1 added [ 1162.504210][ T5867] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1163.031333][ T3967] bridge_slave_1: left allmulticast mode [ 1163.037001][ T3967] bridge_slave_1: left promiscuous mode [ 1163.073329][ T3967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.594073][ T3967] bridge_slave_0: left allmulticast mode [ 1163.611359][ T3967] bridge_slave_0: left promiscuous mode [ 1163.645433][ T3967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.287386][ T3967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1164.491407][ T3967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1164.586382][ T3967] bond0 (unregistering): Released all slaves [ 1165.461411][T13260] team0: Port device team_slave_0 added [ 1165.493921][T13238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.581291][T13238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.649224][T13238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.689509][T13238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.731988][T13238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.798197][T13238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.825126][T13260] team0: Port device team_slave_1 added [ 1166.174775][ T3967] hsr_slave_0: left promiscuous mode [ 1166.212899][ T3967] hsr_slave_1: left promiscuous mode [ 1166.237749][ T3967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1166.260684][ T3967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.505595][ T3967] team0 (unregistering): Port device team_slave_1 removed [ 1169.622278][ T3967] team0 (unregistering): Port device team_slave_0 removed [ 1170.892503][T13496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1530'. [ 1171.561366][T13260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1171.608276][T13260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1171.760439][T13260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1171.798343][T13260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1171.806566][T13260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1171.878054][T13260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1171.906833][T13238] hsr_slave_0: entered promiscuous mode [ 1172.011098][T13238] hsr_slave_1: entered promiscuous mode [ 1172.017504][T13238] debugfs: 'hsr0' already exists in 'hsr' [ 1172.039689][T13238] Cannot create hsr debugfs directory [ 1173.645551][T13260] hsr_slave_0: entered promiscuous mode [ 1173.692023][T13260] hsr_slave_1: entered promiscuous mode [ 1173.711013][T13260] debugfs: 'hsr0' already exists in 'hsr' [ 1173.745210][T13260] Cannot create hsr debugfs directory [ 1175.566741][T13523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1537'. [ 1176.393080][ T5957] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1176.979849][ T5957] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1177.009700][ T5957] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1177.019611][ T5957] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1177.040253][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.102309][T13517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1177.148283][ T5957] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1177.431595][ T5957] usb 2-1: USB disconnect, device number 17 [ 1179.000558][T13238] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1179.107672][T13238] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1179.211031][T13238] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1179.519538][T13555] loop4: detected capacity change from 0 to 128 [ 1179.602537][T13238] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1179.806966][T13555] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1179.900745][T13555] ext4 filesystem being mounted at /327/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1180.189144][ T5865] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1182.171316][T13238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.525493][T13238] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.570628][T13260] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1182.686947][ T6322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.694479][ T6322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.736119][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.743365][ T6322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1183.580222][T13260] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1183.693655][T13260] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1183.747230][T13260] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1184.222414][T13238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1184.569728][T13602] hfsplus: unable to find HFS+ superblock [ 1185.289230][T13260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1185.344327][T13260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1185.371827][ T6322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.379056][ T6322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1185.717517][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.724756][ T6322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1186.139927][ T5957] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1186.885809][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1186.892220][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1186.894841][ T5957] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1187.080356][ T5957] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1187.109879][ T5957] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1187.118985][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.411630][T13614] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1187.473730][ T5957] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1188.048513][ T5957] usb 3-1: USB disconnect, device number 12 [ 1188.088078][T13238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.143400][ T9615] udevd[9615]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1189.416100][T13643] loop2: detected capacity change from 0 to 128 [ 1189.417363][T13260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1189.544031][T13643] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1189.707684][T13643] ext4 filesystem being mounted at /357/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1190.044105][ T5863] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1190.506231][T13238] veth0_vlan: entered promiscuous mode [ 1190.582814][T13238] veth1_vlan: entered promiscuous mode [ 1190.769716][T13665] hfsplus: unable to find HFS+ superblock [ 1190.890589][ T118] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1191.219329][T13238] veth0_macvtap: entered promiscuous mode [ 1191.296776][T13238] veth1_macvtap: entered promiscuous mode [ 1191.376387][ T118] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1191.429745][ T118] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1191.470998][T13238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1191.476206][ T118] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1191.515301][ T118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.544768][T13664] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1191.585561][ T118] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1191.978458][ T118] usb 3-1: USB disconnect, device number 13 [ 1192.373895][T13260] veth0_vlan: entered promiscuous mode [ 1192.427313][T13260] veth1_vlan: entered promiscuous mode [ 1192.684781][T13260] veth0_macvtap: entered promiscuous mode [ 1194.675927][T13696] 9pnet_fd: Insufficient options for proto=fd [ 1198.031015][ T9021] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1198.044423][ T9021] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1198.052506][ T9021] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1198.076963][ T9021] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1198.088296][ T9021] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1198.212946][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1198.252897][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1198.275314][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1198.323193][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1198.331660][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1200.170063][ T5877] Bluetooth: hci0: command tx timeout [ 1200.401824][ T5877] Bluetooth: hci3: command tx timeout [ 1200.840250][T13737] loop4: detected capacity change from 0 to 8 [ 1200.852800][T13737] SQUASHFS error: Unable to read inode 0x11f [ 1202.245417][ T5877] Bluetooth: hci0: command tx timeout [ 1202.511961][ T5877] Bluetooth: hci3: command tx timeout [ 1202.735630][T13760] hfsplus: unable to find HFS+ superblock [ 1203.014660][T10670] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1203.450952][T10670] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1203.548125][T10670] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1203.694845][T13767] hfsplus: unable to find HFS+ superblock [ 1203.728512][T10670] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1204.139932][T10670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.183942][T13759] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1204.202074][T10670] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1204.341665][ T5877] Bluetooth: hci0: command tx timeout [ 1204.571035][ T5877] Bluetooth: hci3: command tx timeout [ 1205.118362][ T9433] usb 2-1: USB disconnect, device number 18 [ 1206.401391][ T5877] Bluetooth: hci0: command tx timeout [ 1206.423816][ T5985] bridge_slave_1: left allmulticast mode [ 1206.441731][ T5985] bridge_slave_1: left promiscuous mode [ 1206.448735][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.602945][ T5985] bridge_slave_0: left allmulticast mode [ 1206.631776][ T5985] bridge_slave_0: left promiscuous mode [ 1206.640081][ T5877] Bluetooth: hci3: command tx timeout [ 1206.656880][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.705037][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1582'. [ 1206.999224][T13793] delete_channel: no stack [ 1207.489803][ T9433] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1207.655294][ T9433] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1207.682166][ T9433] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1207.708420][ T9433] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1207.739786][ T9433] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.803930][T13807] loop4: detected capacity change from 0 to 128 [ 1207.810956][T13795] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1207.822982][ T9433] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1207.880810][T13807] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1207.938048][T13807] ext4 filesystem being mounted at /338/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1208.484351][ T5992] usb 4-1: USB disconnect, device number 12 [ 1208.623075][ T5865] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1209.887218][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1209.917191][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1209.987424][ T5985] bond0 (unregistering): Released all slaves [ 1210.426871][T13720] chnl_net:caif_netlink_parms(): no params data found [ 1211.277179][ T5985] hsr_slave_0: left promiscuous mode [ 1211.334142][ T5985] hsr_slave_1: left promiscuous mode [ 1211.350298][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1211.377104][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1211.427734][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1211.552687][ T5985] veth1_macvtap: left promiscuous mode [ 1211.579950][ T5985] veth0_macvtap: left promiscuous mode [ 1211.585735][ T5985] veth1_vlan: left promiscuous mode [ 1211.615982][ T5985] veth0_vlan: left promiscuous mode [ 1211.739774][T13843] hfsplus: unable to find HFS+ superblock [ 1213.576315][T13857] hfsplus: unable to find HFS+ superblock [ 1215.413861][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1595'. [ 1217.023726][T13884] delete_channel: no stack [ 1217.435316][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 1217.595766][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 1218.379762][ T9433] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1218.568939][ T9433] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1218.598859][ T9433] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1218.630381][ T9433] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1218.651707][ T9433] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.692579][T13895] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1218.718394][ T9433] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1219.070200][ T9433] usb 5-1: USB disconnect, device number 14 [ 1220.356990][T13724] chnl_net:caif_netlink_parms(): no params data found [ 1223.689966][T13720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.753925][T13720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.855266][T13720] bridge_slave_0: entered allmulticast mode [ 1223.891887][T13952] hfsplus: unable to find HFS+ superblock [ 1224.311462][T13720] bridge_slave_0: entered promiscuous mode [ 1224.556441][T13956] loop1: detected capacity change from 0 to 128 [ 1224.590366][T13720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.597552][T13720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.670765][T13720] bridge_slave_1: entered allmulticast mode [ 1224.679112][T13720] bridge_slave_1: entered promiscuous mode [ 1224.716816][T13956] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1224.844376][T13956] ext4 filesystem being mounted at /352/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1226.331348][ T5866] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1226.458684][T13977] delete_channel: no stack [ 1226.476199][T13724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.497446][T13724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.539987][T13724] bridge_slave_0: entered allmulticast mode [ 1226.597907][T13724] bridge_slave_0: entered promiscuous mode [ 1226.656297][T13720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1227.158883][T13720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1227.321122][T13724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.422700][T13724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.462957][T13724] bridge_slave_1: entered allmulticast mode [ 1227.509746][T13724] bridge_slave_1: entered promiscuous mode [ 1228.021908][T13720] team0: Port device team_slave_0 added [ 1228.053648][T13720] team0: Port device team_slave_1 added [ 1228.123729][T13724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.584114][T13724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.751313][T13720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1228.758308][T13720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1228.899066][T13720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1228.960299][T13720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1228.967288][T13720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.352439][T13720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.502965][T13994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1615'. [ 1230.303546][T13724] team0: Port device team_slave_0 added [ 1232.754083][T13724] team0: Port device team_slave_1 added [ 1237.692795][T13720] hsr_slave_0: entered promiscuous mode [ 1237.724990][T13720] hsr_slave_1: entered promiscuous mode [ 1237.759121][T14048] delete_channel: no stack [ 1237.764147][T13720] debugfs: 'hsr0' already exists in 'hsr' [ 1237.764179][T13720] Cannot create hsr debugfs directory [ 1237.790388][T13724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.808841][T13724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.861044][T13724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1238.580363][T13724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1238.587362][T13724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1238.929685][T13724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.637991][T14071] 9pnet_fd: Insufficient options for proto=fd [ 1240.560314][T14076] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1240.560314][T14076] program syz.1.1636 not setting count and/or reply_len properly [ 1240.566278][T13724] hsr_slave_0: entered promiscuous mode [ 1240.641167][T13724] hsr_slave_1: entered promiscuous mode [ 1240.710712][T13724] debugfs: 'hsr0' already exists in 'hsr' [ 1240.946081][T13724] Cannot create hsr debugfs directory [ 1243.937243][ T5985] bridge_slave_1: left allmulticast mode [ 1243.969731][ T5985] bridge_slave_1: left promiscuous mode [ 1243.975585][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.060923][ T5985] bridge_slave_0: left allmulticast mode [ 1245.066614][ T5985] bridge_slave_0: left promiscuous mode [ 1245.131098][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.292416][T14103] hfsplus: unable to find HFS+ superblock [ 1248.450622][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.466607][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.505637][T14133] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1249.505637][T14133] program syz.1.1648 not setting count and/or reply_len properly [ 1249.746033][T14136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1649'. [ 1252.130515][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1252.155403][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.172705][ T5985] bond0 (unregistering): Released all slaves [ 1252.948499][ T5985] hsr_slave_0: left promiscuous mode [ 1252.990269][ T5985] hsr_slave_1: left promiscuous mode [ 1253.035933][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.093294][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.213279][ T5985] veth0_macvtap: left promiscuous mode [ 1253.218999][ T5985] veth1_vlan: left promiscuous mode [ 1253.247100][ T5985] veth0_vlan: left promiscuous mode [ 1253.667563][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 1253.707184][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 1254.820008][T14159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1654'. [ 1255.470723][T14160] Bluetooth: MGMT ver 1.23 [ 1255.730382][ T8886] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1256.357185][ T8886] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1256.482836][ T8886] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1256.535798][ T8886] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1256.590326][ T8886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.740347][T14157] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1256.777386][ T8886] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1257.802058][T14174] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1257.802058][T14174] program syz.2.1659 not setting count and/or reply_len properly [ 1258.820172][ T8886] usb 5-1: USB disconnect, device number 15 [ 1260.782379][ T9021] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1260.793049][ T9021] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1261.461681][ T9021] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1261.535872][ T9021] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1261.550069][ T9021] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1262.106325][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1262.120177][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1262.130755][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1262.139045][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1262.153534][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1263.522655][T14211] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1263.522655][T14211] program syz.3.1665 not setting count and/or reply_len properly [ 1264.282937][ T5877] Bluetooth: hci6: command tx timeout [ 1264.282946][ T9021] Bluetooth: hci0: command tx timeout [ 1264.902412][ T13] bridge_slave_1: left allmulticast mode [ 1264.913746][ T13] bridge_slave_1: left promiscuous mode [ 1264.955030][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.037206][ T13] bridge_slave_0: left allmulticast mode [ 1265.085434][ T13] bridge_slave_0: left promiscuous mode [ 1265.201303][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.133759][T14227] fuse: Bad value for 'fd' [ 1266.222009][T14235] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1266.222009][T14235] program syz.3.1672 not setting count and/or reply_len properly [ 1266.352256][ T5877] Bluetooth: hci0: command tx timeout [ 1266.358949][ T5877] Bluetooth: hci6: command tx timeout [ 1267.029743][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1267.123328][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1267.225493][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1267.510095][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1267.535648][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1267.542092][ T13] bond0 (unregistering): Released all slaves [ 1268.410834][ T9021] Bluetooth: hci0: command tx timeout [ 1268.426917][ T5877] Bluetooth: hci6: command tx timeout [ 1268.440904][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1268.503648][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.648912][T14233] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1268.727730][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1269.094144][ T24] usb 2-1: USB disconnect, device number 19 [ 1269.193040][ T13] hsr_slave_0: left promiscuous mode [ 1269.225748][ T13] hsr_slave_1: left promiscuous mode [ 1269.243086][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.265985][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1270.619842][ T5877] Bluetooth: hci0: command tx timeout [ 1270.648733][ T5877] Bluetooth: hci6: command tx timeout [ 1271.540842][ T9021] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1272.624772][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1272.761118][T14271] 9pnet_fd: Insufficient options for proto=fd [ 1273.227328][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1274.551954][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1274.669279][T14284] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1274.669279][T14284] program syz.3.1685 not setting count and/or reply_len properly [ 1274.723514][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1274.757780][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1274.779518][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1274.800204][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.830299][T14278] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1274.877950][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1275.351950][T10670] usb 2-1: USB disconnect, device number 20 [ 1278.390004][ T118] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1279.530811][T14319] Bluetooth: MGMT ver 1.23 [ 1279.679712][ T118] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1279.734170][ T118] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1279.779855][ T118] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1279.837308][ T118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.878021][T14305] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1279.907689][ T118] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1279.946011][T14187] chnl_net:caif_netlink_parms(): no params data found [ 1280.007254][ T5877] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1280.017102][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 1280.017148][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1280.017173][ T5877] Workqueue: hci2 hci_rx_work [ 1280.017230][ T5877] Call Trace: [ 1280.017241][ T5877] [ 1280.017254][ T5877] dump_stack_lvl+0x16c/0x1f0 [ 1280.017315][ T5877] sysfs_warn_dup+0x7f/0xa0 [ 1280.017358][ T5877] sysfs_create_dir_ns+0x24b/0x2b0 [ 1280.017400][ T5877] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1280.017440][ T5877] ? find_held_lock+0x2b/0x80 [ 1280.017494][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.017539][ T5877] ? do_raw_spin_unlock+0x172/0x230 [ 1280.017583][ T5877] kobject_add_internal+0x2c4/0x9b0 [ 1280.017631][ T5877] kobject_add+0x16e/0x240 [ 1280.017674][ T5877] ? __pfx_kobject_add+0x10/0x10 [ 1280.017714][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.017757][ T5877] ? do_raw_spin_unlock+0x172/0x230 [ 1280.017798][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.017842][ T5877] ? kobject_put+0xab/0x5a0 [ 1280.017878][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.017932][ T5877] device_add+0x288/0x1aa0 [ 1280.017972][ T5877] ? __pfx_dev_set_name+0x10/0x10 [ 1280.018017][ T5877] ? __pfx_device_add+0x10/0x10 [ 1280.018055][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.018099][ T5877] ? mgmt_send_event_skb+0x2fb/0x460 [ 1280.018163][ T5877] hci_conn_add_sysfs+0x17e/0x230 [ 1280.018221][ T5877] le_conn_complete_evt+0x1075/0x1d70 [ 1280.018299][ T5877] ? preempt_count_sub+0xb0/0x160 [ 1280.018353][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.018399][ T5877] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1280.018445][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.018496][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.018548][ T5877] hci_le_conn_complete_evt+0x23c/0x370 [ 1280.018608][ T5877] hci_le_meta_evt+0x357/0x5e0 [ 1280.018668][ T5877] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1280.018729][ T5877] hci_event_packet+0x685/0x11c0 [ 1280.018784][ T5877] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1280.018841][ T5877] ? __pfx_hci_event_packet+0x10/0x10 [ 1280.018890][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.018938][ T5877] ? kcov_remote_start+0x3c9/0x6d0 [ 1280.018979][ T5877] ? lockdep_hardirqs_on+0x7c/0x110 [ 1280.019035][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.019091][ T5877] hci_rx_work+0x2c5/0x16b0 [ 1280.019146][ T5877] ? rcu_is_watching+0x12/0xc0 [ 1280.019201][ T5877] process_one_work+0x9cf/0x1b70 [ 1280.019261][ T5877] ? __pfx_process_one_work+0x10/0x10 [ 1280.019303][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.019357][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.019401][ T5877] ? assign_work+0x1a0/0x250 [ 1280.019441][ T5877] worker_thread+0x6c8/0xf10 [ 1280.019503][ T5877] ? __pfx_worker_thread+0x10/0x10 [ 1280.019544][ T5877] kthread+0x3c5/0x780 [ 1280.019585][ T5877] ? __pfx_kthread+0x10/0x10 [ 1280.019625][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.019675][ T5877] ? rcu_is_watching+0x12/0xc0 [ 1280.019721][ T5877] ? __pfx_kthread+0x10/0x10 [ 1280.019759][ T5877] ret_from_fork+0x56d/0x730 [ 1280.019793][ T5877] ? __pfx_kthread+0x10/0x10 [ 1280.019831][ T5877] ret_from_fork_asm+0x1a/0x30 [ 1280.019899][ T5877] [ 1280.330792][ T5877] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1280.345248][ T5877] Bluetooth: hci2: failed to register connection device [ 1280.672238][T14330] fuse: Bad value for 'fd' [ 1280.738998][T14196] chnl_net:caif_netlink_parms(): no params data found [ 1280.874396][ T8886] usb 4-1: USB disconnect, device number 13 [ 1282.960294][T14187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.969410][T14187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.048943][T14187] bridge_slave_0: entered allmulticast mode [ 1283.078656][T14187] bridge_slave_0: entered promiscuous mode [ 1283.370463][T14187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.433345][T14187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.480536][T14187] bridge_slave_1: entered allmulticast mode [ 1283.515468][T14187] bridge_slave_1: entered promiscuous mode [ 1285.072363][T14187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1285.145242][T14187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1285.219851][ T118] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1285.711944][ T118] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1285.750562][ T118] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1285.801812][ T13] bridge_slave_1: left allmulticast mode [ 1285.815239][ T13] bridge_slave_1: left promiscuous mode [ 1285.823910][ T118] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1285.828465][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.847779][ T13] bridge_slave_0: left allmulticast mode [ 1285.856069][ T13] bridge_slave_0: left promiscuous mode [ 1285.886391][ T118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.886510][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.909550][T14369] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1285.962332][ T118] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1286.056040][T14379] 9pnet_fd: Insufficient options for proto=fd [ 1286.707161][ T5949] usb 3-1: USB disconnect, device number 14 [ 1286.725079][ T5877] Bluetooth: hci2: command 0x0406 tx timeout [ 1286.877005][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1286.954581][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1287.074840][ T13] bond0 (unregistering): Released all slaves [ 1287.796676][ T13] hsr_slave_0: left promiscuous mode [ 1287.835532][ T13] hsr_slave_1: left promiscuous mode [ 1287.855021][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.867963][T14386] loop1: detected capacity change from 0 to 128 [ 1287.879542][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1287.958615][T14386] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1287.976566][T14386] ext4 filesystem being mounted at /378/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1288.209968][ T5866] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1289.180578][ T5877] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1289.262864][ T118] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1289.312785][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1289.391945][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1289.491818][ T118] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1289.512358][ T118] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1289.528719][ T118] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1289.555741][ T118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.590137][T14395] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1289.599704][ T5949] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1289.621632][ T118] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1289.783805][ T5949] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1289.807172][ T5949] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1289.824729][ T5949] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1289.853884][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.876497][T14399] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1289.916952][ T5949] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1289.991961][ T8886] usb 3-1: USB disconnect, device number 15 [ 1290.213722][T14187] team0: Port device team_slave_0 added [ 1290.253489][T14196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.297670][T14196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.710142][T14196] bridge_slave_0: entered allmulticast mode [ 1290.742877][T14196] bridge_slave_0: entered promiscuous mode [ 1290.780739][T14196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.817251][T14196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.906535][T14196] bridge_slave_1: entered allmulticast mode [ 1291.288605][ T6075] usb 4-1: USB disconnect, device number 14 [ 1291.301216][T14196] bridge_slave_1: entered promiscuous mode [ 1291.318637][T14187] team0: Port device team_slave_1 added [ 1294.224451][T14187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.234910][T14187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.429707][T14187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1294.473042][T14196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.562585][T14430] loop3: detected capacity change from 0 to 128 [ 1294.677297][T14196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1294.727330][T14187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.739811][T14187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.771617][T14430] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1294.799668][T14187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.896856][T14430] ext4 filesystem being mounted at /399/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1295.142961][ T8886] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1295.471647][ T8886] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1295.597004][ T8886] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1296.142870][ T8886] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1296.152457][ T8886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.177304][T14432] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1296.190300][ T8886] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1296.307091][T14196] team0: Port device team_slave_0 added [ 1296.365073][ T5867] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1296.556891][T14196] team0: Port device team_slave_1 added [ 1296.690144][ T5936] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1297.688038][T14459] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1297.688038][T14459] program syz.3.1727 not setting count and/or reply_len properly [ 1297.726565][ T8886] usb 3-1: USB disconnect, device number 16 [ 1297.791769][ T5936] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1297.813153][ T5936] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1297.957830][ T5936] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1297.967580][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.982154][T14454] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1298.038558][ T5936] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1298.102951][T14187] hsr_slave_0: entered promiscuous mode [ 1298.135725][T14187] hsr_slave_1: entered promiscuous mode [ 1298.183991][T14187] debugfs: 'hsr0' already exists in 'hsr' [ 1298.199112][T14187] Cannot create hsr debugfs directory [ 1298.353393][T14196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1298.369782][T14196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1298.786341][T14196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.794562][ T8886] usb 5-1: USB disconnect, device number 16 [ 1298.923859][T14196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.957128][T14196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1299.027207][T14196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1300.081368][T14196] hsr_slave_0: entered promiscuous mode [ 1300.092088][T14196] hsr_slave_1: entered promiscuous mode [ 1300.125948][T14196] debugfs: 'hsr0' already exists in 'hsr' [ 1300.139928][T14196] Cannot create hsr debugfs directory [ 1302.524679][T14187] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1302.609407][T14187] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1302.766464][T14187] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1303.725532][T14187] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1304.016102][T14196] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1304.098624][T14196] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1304.235851][T14196] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1304.255307][T14196] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1304.384880][ T6075] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1304.604339][ T6075] usb 3-1: Using ep0 maxpacket: 32 [ 1304.626427][ T6075] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1304.690162][ T6075] usb 3-1: config 0 has no interface number 0 [ 1304.735281][ T6075] usb 3-1: config 0 interface 89 has no altsetting 0 [ 1304.788027][ T5877] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1304.798073][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 1304.798123][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1304.798151][ T5877] Workqueue: hci5 hci_rx_work [ 1304.798212][ T5877] Call Trace: [ 1304.798224][ T5877] [ 1304.798239][ T5877] dump_stack_lvl+0x16c/0x1f0 [ 1304.798333][ T5877] sysfs_warn_dup+0x7f/0xa0 [ 1304.798380][ T5877] sysfs_create_dir_ns+0x24b/0x2b0 [ 1304.798426][ T5877] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1304.798470][ T5877] ? find_held_lock+0x2b/0x80 [ 1304.798538][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1304.798587][ T5877] ? do_raw_spin_unlock+0x172/0x230 [ 1304.798638][ T5877] kobject_add_internal+0x2c4/0x9b0 [ 1304.798689][ T5877] kobject_add+0x16e/0x240 [ 1304.798730][ T5877] ? __pfx_kobject_add+0x10/0x10 [ 1304.798774][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1304.798826][ T5877] ? do_raw_spin_unlock+0x172/0x230 [ 1304.798869][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1304.798920][ T5877] ? kobject_put+0xab/0x5a0 [ 1304.798960][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1304.799013][ T5877] device_add+0x288/0x1aa0 [ 1304.799052][ T5877] ? __pfx_dev_set_name+0x10/0x10 [ 1304.799096][ T5877] ? __pfx_device_add+0x10/0x10 [ 1304.799135][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1304.799177][ T5877] ? mgmt_send_event_skb+0x2fb/0x460 [ 1304.799239][ T5877] hci_conn_add_sysfs+0x17e/0x230 [ 1304.799297][ T5877] le_conn_complete_evt+0x1075/0x1d70 [ 1304.799345][ T5877] ? preempt_count_sub+0xb0/0x160 [ 1304.799397][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1304.799443][ T5877] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1304.799497][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1304.799549][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1304.799601][ T5877] hci_le_conn_complete_evt+0x23c/0x370 [ 1304.799660][ T5877] hci_le_meta_evt+0x357/0x5e0 [ 1304.799713][ T5877] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1304.799769][ T5877] hci_event_packet+0x685/0x11c0 [ 1304.799818][ T5877] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1304.799872][ T5877] ? __pfx_hci_event_packet+0x10/0x10 [ 1304.799925][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1304.799967][ T5877] ? kcov_remote_start+0x3c9/0x6d0 [ 1304.799998][ T5877] ? lockdep_hardirqs_on+0x7c/0x110 [ 1304.800041][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1304.800083][ T5877] hci_rx_work+0x2c5/0x16b0 [ 1304.800125][ T5877] ? rcu_is_watching+0x12/0xc0 [ 1304.800166][ T5877] process_one_work+0x9cf/0x1b70 [ 1304.800212][ T5877] ? __pfx_process_one_work+0x10/0x10 [ 1304.800244][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1304.800286][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1304.800318][ T5877] ? assign_work+0x1a0/0x250 [ 1304.800349][ T5877] worker_thread+0x6c8/0xf10 [ 1304.800396][ T5877] ? __pfx_worker_thread+0x10/0x10 [ 1304.800427][ T5877] kthread+0x3c5/0x780 [ 1304.800456][ T5877] ? __pfx_kthread+0x10/0x10 [ 1304.800490][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1304.800523][ T5877] ? rcu_is_watching+0x12/0xc0 [ 1304.800560][ T5877] ? __pfx_kthread+0x10/0x10 [ 1304.800590][ T5877] ret_from_fork+0x56d/0x730 [ 1304.800615][ T5877] ? __pfx_kthread+0x10/0x10 [ 1304.800643][ T5877] ret_from_fork_asm+0x1a/0x30 [ 1304.800695][ T5877] [ 1305.108992][ C1] vkms_vblank_simulate: vblank timer overrun [ 1305.119247][ T5877] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1305.148486][ T5877] Bluetooth: hci5: failed to register connection device [ 1305.165715][T14187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1305.192561][T14187] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.194449][ T5877] ================================================================== [ 1305.194470][ T5877] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xdb9/0xf80 [ 1305.194526][ T5877] Read of size 8 at addr ffff88807f351480 by task kworker/u9:4/5877 [ 1305.194556][ T5877] [ 1305.194572][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 1305.194616][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1305.194642][ T5877] Workqueue: hci5 hci_rx_work [ 1305.194696][ T5877] Call Trace: [ 1305.194707][ T5877] [ 1305.194721][ T5877] dump_stack_lvl+0x116/0x1f0 [ 1305.194780][ T5877] print_report+0xcd/0x630 [ 1305.194813][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1305.194858][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1305.194903][ T5877] ? __phys_addr+0xe8/0x180 [ 1305.194954][ T5877] ? l2cap_connect_cfm+0xdb9/0xf80 [ 1305.195001][ T5877] kasan_report+0xe0/0x110 [ 1305.195036][ T5877] ? l2cap_connect_cfm+0xdb9/0xf80 [ 1305.195088][ T5877] l2cap_connect_cfm+0xdb9/0xf80 [ 1305.195140][ T5877] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1305.195192][ T5877] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1305.195239][ T5877] le_conn_complete_evt+0x1665/0x1d70 [ 1305.195294][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1305.195339][ T5877] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1305.195386][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1305.195443][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1305.195492][ T5877] hci_le_conn_complete_evt+0x23c/0x370 [ 1305.195545][ T5877] hci_le_meta_evt+0x357/0x5e0 [ 1305.195599][ T5877] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1305.195651][ T5877] hci_event_packet+0x685/0x11c0 [ 1305.195698][ T5877] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1305.195752][ T5877] ? __pfx_hci_event_packet+0x10/0x10 [ 1305.195801][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1305.195846][ T5877] ? kcov_remote_start+0x3c9/0x6d0 [ 1305.195889][ T5877] ? lockdep_hardirqs_on+0x7c/0x110 [ 1305.195944][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1305.195995][ T5877] hci_rx_work+0x2c5/0x16b0 [ 1305.196050][ T5877] ? rcu_is_watching+0x12/0xc0 [ 1305.196102][ T5877] process_one_work+0x9cf/0x1b70 [ 1305.196151][ T5877] ? __pfx_process_one_work+0x10/0x10 [ 1305.196193][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1305.196244][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1305.196287][ T5877] ? assign_work+0x1a0/0x250 [ 1305.196325][ T5877] worker_thread+0x6c8/0xf10 [ 1305.196375][ T5877] ? __pfx_worker_thread+0x10/0x10 [ 1305.196415][ T5877] kthread+0x3c5/0x780 [ 1305.196460][ T5877] ? __pfx_kthread+0x10/0x10 [ 1305.196497][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1305.196542][ T5877] ? rcu_is_watching+0x12/0xc0 [ 1305.196588][ T5877] ? __pfx_kthread+0x10/0x10 [ 1305.196625][ T5877] ret_from_fork+0x56d/0x730 [ 1305.196659][ T5877] ? __pfx_kthread+0x10/0x10 [ 1305.196695][ T5877] ret_from_fork_asm+0x1a/0x30 [ 1305.196752][ T5877] [ 1305.196765][ T5877] [ 1305.196773][ T5877] Allocated by task 5877: [ 1305.196790][ T5877] kasan_save_stack+0x33/0x60 [ 1305.196842][ T5877] kasan_save_track+0x14/0x30 [ 1305.196894][ T5877] __kasan_kmalloc+0xaa/0xb0 [ 1305.196945][ T5877] l2cap_chan_create+0x44/0x920 [ 1305.196975][ T5877] l2cap_sock_alloc.constprop.0+0xf5/0x1d0 [ 1305.197030][ T5877] l2cap_sock_new_connection_cb+0x101/0x240 [ 1305.197086][ T5877] l2cap_connect_cfm+0x4c7/0xf80 [ 1305.197129][ T5877] le_conn_complete_evt+0x1665/0x1d70 [ 1305.197173][ T5877] hci_le_conn_complete_evt+0x23c/0x370 [ 1305.197218][ T5877] hci_le_meta_evt+0x357/0x5e0 [ 1305.197268][ T5877] hci_event_packet+0x685/0x11c0 [ 1305.197310][ T5877] hci_rx_work+0x2c5/0x16b0 [ 1305.197360][ T5877] process_one_work+0x9cf/0x1b70 [ 1305.197397][ T5877] worker_thread+0x6c8/0xf10 [ 1305.197445][ T5877] kthread+0x3c5/0x780 [ 1305.197476][ T5877] ret_from_fork+0x56d/0x730 [ 1305.197508][ T5877] ret_from_fork_asm+0x1a/0x30 [ 1305.197550][ T5877] [ 1305.197558][ T5877] Freed by task 14534: [ 1305.197574][ T5877] kasan_save_stack+0x33/0x60 [ 1305.197625][ T5877] kasan_save_track+0x14/0x30 [ 1305.197677][ T5877] kasan_save_free_info+0x3b/0x60 [ 1305.197720][ T5877] __kasan_slab_free+0x60/0x70 [ 1305.197775][ T5877] kfree+0x2b4/0x4d0 [ 1305.197818][ T5877] l2cap_chan_put+0x216/0x2c0 [ 1305.197848][ T5877] l2cap_sock_cleanup_listen+0x4d/0x2a0 [ 1305.197903][ T5877] l2cap_sock_release+0x69/0x250 [ 1305.197957][ T5877] __sock_release+0xb3/0x270 [ 1305.198013][ T5877] sock_close+0x1c/0x30 [ 1305.198040][ T5877] __fput+0x402/0xb70 [ 1305.198078][ T5877] task_work_run+0x150/0x240 [ 1305.198115][ T5877] exit_to_user_mode_loop+0xeb/0x110 [ 1305.198151][ T5877] do_syscall_64+0x41c/0x4e0 [ 1305.198182][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.198216][ T5877] [ 1305.198225][ T5877] The buggy address belongs to the object at ffff88807f351000 [ 1305.198225][ T5877] which belongs to the cache kmalloc-2k of size 2048 [ 1305.198255][ T5877] The buggy address is located 1152 bytes inside of [ 1305.198255][ T5877] freed 2048-byte region [ffff88807f351000, ffff88807f351800) [ 1305.198321][ T5877] [ 1305.198330][ T5877] The buggy address belongs to the physical page: [ 1305.198345][ T5877] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f350 [ 1305.198378][ T5877] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1305.198409][ T5877] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1305.198448][ T5877] page_type: f5(slab) [ 1305.198478][ T5877] raw: 00fff00000000040 ffff88801b842000 dead000000000100 dead000000000122 [ 1305.198514][ T5877] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1305.198547][ T5877] head: 00fff00000000040 ffff88801b842000 dead000000000100 dead000000000122 [ 1305.198581][ T5877] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1305.198616][ T5877] head: 00fff00000000003 ffffea0001fcd401 00000000ffffffff 00000000ffffffff [ 1305.198650][ T5877] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1305.198672][ T5877] page dumped because: kasan: bad access detected [ 1305.198689][ T5877] page_owner tracks the page as allocated [ 1305.198701][ T5877] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5867, tgid 5867 (syz-executor), ts 108903912877, free_ts 108893283333 [ 1305.198766][ T5877] post_alloc_hook+0x1c0/0x230 [ 1305.198815][ T5877] get_page_from_freelist+0x132b/0x38e0 [ 1305.198868][ T5877] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1305.198924][ T5877] alloc_pages_mpol+0x1fb/0x550 [ 1305.198955][ T5877] new_slab+0x247/0x330 [ 1305.198997][ T5877] ___slab_alloc+0xcf2/0x1750 [ 1305.199041][ T5877] __slab_alloc.constprop.0+0x56/0xb0 [ 1305.199088][ T5877] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 1305.199146][ T5877] kmalloc_reserve+0xef/0x2c0 [ 1305.199182][ T5877] pskb_expand_head+0x238/0x1030 [ 1305.199235][ T5877] netlink_trim+0x22d/0x310 [ 1305.199279][ T5877] netlink_broadcast_filtered+0xf1/0xf90 [ 1305.199333][ T5877] nlmsg_notify+0x9e/0x220 [ 1305.199362][ T5877] rtmsg_ifinfo+0x174/0x1a0 [ 1305.199397][ T5877] __dev_notify_flags+0x24c/0x2e0 [ 1305.199455][ T5877] rtnl_configure_link+0x1b5/0x280 [ 1305.199502][ T5877] page last free pid 5867 tgid 5867 stack trace: [ 1305.199522][ T5877] __free_frozen_pages+0x7d5/0x10f0 [ 1305.199570][ T5877] __put_partials+0x165/0x1c0 [ 1305.199615][ T5877] qlist_free_all+0x4d/0x120 [ 1305.199662][ T5877] kasan_quarantine_reduce+0x195/0x1e0 [ 1305.199713][ T5877] __kasan_slab_alloc+0x69/0x90 [ 1305.920160][ T5877] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 1305.925575][ T5877] ref_tracker_alloc+0x18e/0x5b0 [ 1305.930513][ T5877] netdev_queue_update_kobjects+0x2db/0x720 [ 1305.936414][ T5877] netdev_register_kobject+0x2b3/0x3d0 [ 1305.941881][ T5877] register_netdevice+0x13dc/0x2270 [ 1305.947083][ T5877] veth_newlink+0x30f/0xa00 [ 1305.951605][ T5877] rtnl_newlink+0xc45/0x2000 [ 1305.956218][ T5877] rtnetlink_rcv_msg+0x95e/0xe90 [ 1305.961176][ T5877] netlink_rcv_skb+0x158/0x420 [ 1305.965941][ T5877] netlink_unicast+0x5aa/0x870 [ 1305.970700][ T5877] netlink_sendmsg+0x8d1/0xdd0 [ 1305.975464][ T5877] [ 1305.977773][ T5877] Memory state around the buggy address: [ 1305.983393][ T5877] ffff88807f351380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1305.991455][ T5877] ffff88807f351400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1305.999512][ T5877] >ffff88807f351480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1306.007563][ T5877] ^ [ 1306.011621][ T5877] ffff88807f351500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1306.019678][ T5877] ffff88807f351580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1306.027732][ T5877] ================================================================== [ 1306.035886][ C1] vkms_vblank_simulate: vblank timer overrun [ 1306.044070][ T5877] Disabling lock debugging due to kernel taint [ 1306.050481][ T5877] ================================================================== [ 1306.058546][ T5877] BUG: KASAN: wild-memory-access in l2cap_connect_cfm+0x7e6/0xf80 [ 1306.066384][ T5877] Read of size 4 at addr deacfffffffffc8c by task kworker/u9:4/5877 [ 1306.074373][ T5877] [ 1306.076700][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: kworker/u9:4 Tainted: G B syzkaller #0 PREEMPT(full) [ 1306.076750][ T5877] Tainted: [B]=BAD_PAGE [ 1306.076762][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1306.076786][ T5877] Workqueue: hci5 hci_rx_work [ 1306.076839][ T5877] Call Trace: [ 1306.076850][ T5877] [ 1306.076862][ T5877] dump_stack_lvl+0x116/0x1f0 [ 1306.076915][ T5877] kasan_report+0xe0/0x110 [ 1306.076949][ T5877] ? l2cap_connect_cfm+0x7e6/0xf80 [ 1306.076998][ T5877] kasan_check_range+0x100/0x1b0 [ 1306.077037][ T5877] l2cap_connect_cfm+0x7e6/0xf80 [ 1306.077083][ T5877] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1306.077131][ T5877] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1306.077175][ T5877] le_conn_complete_evt+0x1665/0x1d70 [ 1306.077223][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1306.077266][ T5877] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1306.077309][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1306.077352][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1306.077398][ T5877] hci_le_conn_complete_evt+0x23c/0x370 [ 1306.077457][ T5877] hci_le_meta_evt+0x357/0x5e0 [ 1306.077505][ T5877] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1306.077553][ T5877] hci_event_packet+0x685/0x11c0 [ 1306.077596][ T5877] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1306.077645][ T5877] ? __pfx_hci_event_packet+0x10/0x10 [ 1306.077689][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1306.077731][ T5877] ? kcov_remote_start+0x3c9/0x6d0 [ 1306.077768][ T5877] ? lockdep_hardirqs_on+0x7c/0x110 [ 1306.077820][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1306.077865][ T5877] hci_rx_work+0x2c5/0x16b0 [ 1306.077914][ T5877] ? rcu_is_watching+0x12/0xc0 [ 1306.077960][ T5877] process_one_work+0x9cf/0x1b70 [ 1306.078005][ T5877] ? __pfx_process_one_work+0x10/0x10 [ 1306.078041][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1306.078088][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1306.078128][ T5877] ? assign_work+0x1a0/0x250 [ 1306.078162][ T5877] worker_thread+0x6c8/0xf10 [ 1306.078208][ T5877] ? __pfx_worker_thread+0x10/0x10 [ 1306.078245][ T5877] kthread+0x3c5/0x780 [ 1306.078277][ T5877] ? __pfx_kthread+0x10/0x10 [ 1306.078331][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1306.078372][ T5877] ? rcu_is_watching+0x12/0xc0 [ 1306.078414][ T5877] ? __pfx_kthread+0x10/0x10 [ 1306.078453][ T5877] ret_from_fork+0x56d/0x730 [ 1306.078484][ T5877] ? __pfx_kthread+0x10/0x10 [ 1306.078518][ T5877] ret_from_fork_asm+0x1a/0x30 [ 1306.078567][ T5877] [ 1306.078578][ T5877] ================================================================== [ 1306.327009][ T5877] Oops: general protection fault, probably for non-canonical address 0xfbd59bffffffff91: 0000 [#1] SMP KASAN NOPTI [ 1306.339187][ T5877] KASAN: maybe wild-memory-access in range [0xdeacfffffffffc88-0xdeacfffffffffc8f] [ 1306.348512][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: kworker/u9:4 Tainted: G B syzkaller #0 PREEMPT(full) [ 1306.359557][ T5877] Tainted: [B]=BAD_PAGE [ 1306.363702][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1306.373759][ T5877] Workqueue: hci5 hci_rx_work [ 1306.378471][ T5877] RIP: 0010:l2cap_connect_cfm+0x7ed/0xf80 [ 1306.384214][ T5877] Code: 80 fb ff ff 49 39 c5 0f 84 29 01 00 00 e8 9b 7f 25 f7 49 8d 6f 0c be 04 00 00 00 48 89 ef e8 5a f1 8a f7 48 89 e8 48 c1 e8 03 <0f> b6 14 18 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 c5 [ 1306.403829][ T5877] RSP: 0018:ffffc9000404f818 EFLAGS: 00010213 [ 1306.409905][ T5877] RAX: 1bd59fffffffff91 RBX: dffffc0000000000 RCX: ffffc9001b800000 [ 1306.417882][ T5877] RDX: 0000000000100000 RSI: ffffffff8220de67 RDI: 0000000000000007 [ 1306.425857][ T5877] RBP: deacfffffffffc8c R08: 0000000000000007 R09: 0000000000000000 [ 1306.433830][ T5877] R10: 0000000000000000 R11: 3d3d3d3d3d3d3d3d R12: ffff8880766f003d [ 1306.441804][ T5877] R13: ffff888053382ac0 R14: 0000000000000080 R15: deacfffffffffc80 [ 1306.449779][ T5877] FS: 0000000000000000(0000) GS:ffff8881247b3000(0000) knlGS:0000000000000000 [ 1306.458712][ T5877] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1306.465298][ T5877] CR2: 0000001b3351bff8 CR3: 000000005a503000 CR4: 0000000000350ef0 [ 1306.473285][ T5877] Call Trace: [ 1306.476563][ T5877] [ 1306.479493][ T5877] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1306.484978][ T5877] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1306.490459][ T5877] le_conn_complete_evt+0x1665/0x1d70 [ 1306.495859][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1306.501513][ T5877] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1306.507270][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1306.512957][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1306.518615][ T5877] hci_le_conn_complete_evt+0x23c/0x370 [ 1306.524192][ T5877] hci_le_meta_evt+0x357/0x5e0 [ 1306.528981][ T5877] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1306.535070][ T5877] hci_event_packet+0x685/0x11c0 [ 1306.540030][ T5877] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1306.545337][ T5877] ? __pfx_hci_event_packet+0x10/0x10 [ 1306.550725][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1306.556372][ T5877] ? kcov_remote_start+0x3c9/0x6d0 [ 1306.561494][ T5877] ? lockdep_hardirqs_on+0x7c/0x110 [ 1306.566717][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1306.572368][ T5877] hci_rx_work+0x2c5/0x16b0 [ 1306.576904][ T5877] ? rcu_is_watching+0x12/0xc0 [ 1306.581691][ T5877] process_one_work+0x9cf/0x1b70 [ 1306.586647][ T5877] ? __pfx_process_one_work+0x10/0x10 [ 1306.592114][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1306.597764][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1306.603411][ T5877] ? assign_work+0x1a0/0x250 [ 1306.608015][ T5877] worker_thread+0x6c8/0xf10 [ 1306.612623][ T5877] ? __pfx_worker_thread+0x10/0x10 [ 1306.617745][ T5877] kthread+0x3c5/0x780 [ 1306.621816][ T5877] ? __pfx_kthread+0x10/0x10 [ 1306.626415][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1306.632065][ T5877] ? rcu_is_watching+0x12/0xc0 [ 1306.636842][ T5877] ? __pfx_kthread+0x10/0x10 [ 1306.641444][ T5877] ret_from_fork+0x56d/0x730 [ 1306.646035][ T5877] ? __pfx_kthread+0x10/0x10 [ 1306.650630][ T5877] ret_from_fork_asm+0x1a/0x30 [ 1306.655417][ T5877] [ 1306.658432][ T5877] Modules linked in: [ 1306.662816][ T5877] ---[ end trace 0000000000000000 ]--- [ 1306.668698][ T5877] RIP: 0010:l2cap_connect_cfm+0x7ed/0xf80 [ 1306.674508][ T5877] Code: 80 fb ff ff 49 39 c5 0f 84 29 01 00 00 e8 9b 7f 25 f7 49 8d 6f 0c be 04 00 00 00 48 89 ef e8 5a f1 8a f7 48 89 e8 48 c1 e8 03 <0f> b6 14 18 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 c5 [ 1306.675263][T14196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.694463][ T5877] RSP: 0018:ffffc9000404f818 EFLAGS: 00010213 [ 1306.707023][ T5877] RAX: 1bd59fffffffff91 RBX: dffffc0000000000 RCX: ffffc9001b800000 [ 1306.715154][ T5877] RDX: 0000000000100000 RSI: ffffffff8220de67 RDI: 0000000000000007 [ 1306.723375][ T5877] RBP: deacfffffffffc8c R08: 0000000000000007 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1306.727668][T14196] 8021q: adding VLAN 0 to HW filter on device team0 [ 1306.731505][ T5877] R10: 0000000000000000 R11: 3d3d3d3d3d3d3d3d R12: ffff8880766f003d [ 1306.746215][ T5877] R13: ffff888053382ac0 R14: 0000000000000080 R15: deacfffffffffc80 [ 1306.754742][ T5877] FS: 0000000000000000(0000) GS:ffff8881247b3000(0000) knlGS:0000000000000000 [ 1306.764058][ T5877] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1306.770998][ T5877] CR2: 0000001b3351bff8 CR3: 000000005a4db000 CR4: 0000000000350ef0 [ 1306.779112][ T5877] Kernel panic - not syncing: Fatal exception [ 1306.785393][ T5877] Kernel Offset: disabled [ 1306.789709][ T5877] Rebooting in 86400 seconds..