last executing test programs: 27.054380482s ago: executing program 3 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc83df03395287fd51a700ea6553f304000000815dcf00c3eebc52267b042d196bde7c382d21ff"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r5, 0xffffffffffffffff, 0x24, 0x7, @val=@kprobe_multi=@addrs={0x0, 0x5, 0x0, &(0x7f0000000500)=[0xffff, 0xfffffffffffffff7, 0x4, 0x518, 0x6]}}, 0x30) sched_setaffinity(r1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r6, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) fcntl$setlease(r8, 0x400, 0x1) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 26.006316136s ago: executing program 3 (id=383): syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe4a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde"}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_io_uring_setup(0x23b, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x12f}, 0x0, 0x0) io_uring_enter(r2, 0x0, 0x8, 0x8, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r3, &(0x7f0000001740)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000010540)={0x2020}, 0x2020) pselect6(0x40, &(0x7f00000045c0)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8012, r1, 0x0) 22.915663596s ago: executing program 0 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvmmsg(r0, &(0x7f0000007d00)=[{{&(0x7f0000000200)=@nfc_llcp, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000500)=""/220, 0xdc}], 0x2, &(0x7f0000000600)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000001600)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002840)=[{&(0x7f0000000280)}, {&(0x7f000000a1c0)=""/240, 0xf0}, {&(0x7f0000000400)=""/49, 0x31}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x4, &(0x7f00000028c0)=""/76, 0x4c}, 0x401}, {{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000002940)=""/1, 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002980)=""/206, 0xce}, {0x0}, {&(0x7f0000002b40)=""/81, 0x51}], 0x3}, 0x101}, {{&(0x7f0000002dc0)=@un=@abs, 0x80, &(0x7f0000006300)=[{&(0x7f0000002e40)}, {&(0x7f0000002e80)=""/170, 0xaa}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/48, 0x30}, {&(0x7f0000003000)=""/7, 0x7}, {&(0x7f0000005300)=""/4096, 0x1000}, {&(0x7f0000003040)=""/211, 0xd3}, {&(0x7f0000003140)=""/146, 0x92}, {&(0x7f0000003200)=""/121, 0x79}], 0x9, &(0x7f0000003280)}, 0x6}, {{&(0x7f00000063c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x100}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000007b40)=""/113, 0x71}, 0x7}], 0x7, 0x40000001, &(0x7f0000007f40)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r2) open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020}, 0x2020) 21.656417503s ago: executing program 0 (id=387): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01080000c582b61bdd04878800080103"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="460400", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 19.898404579s ago: executing program 0 (id=389): r0 = socket(0x2, 0x3, 0xa) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f00000000c0)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x5, 0x4) openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) lseek(r3, 0x6, 0x1) 19.690272976s ago: executing program 0 (id=390): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000000c0)='./bus\x00', 0x50, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="a60b8f2f94f38c9c515f0a49abc35b272f81737b1b8fb0591ebfcd504abdec6006007f2d3331275784d9e3d3e712d86ca48a7445f18ab74b", @ANYRES64], 0x2, 0x62e, &(0x7f0000000cc0)="$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") msgsnd(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="01000000000000403fb8c90e78b873125d77e6b936625fecc2db581dc0eb8ada77543e4e91fee4b13abee14b684147a56f08a22165df40a5edd18847c8aa714e00d35e1bc4e6d5a76d9c0029accefeb6112e3d07121fe26371a9550a44668a1edf4cbece7fab"], 0x7f, 0x800) msgrcv(0x0, &(0x7f0000001500)={0x0, ""/4096}, 0x1008, 0x2, 0x800) msgrcv(0x0, &(0x7f0000002540)={0x0, ""/22}, 0x1e, 0x2, 0x800) msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgrcv(0x0, &(0x7f0000002700)={0x0, ""/206}, 0xd6, 0x3, 0x2000) msgsnd(0x0, 0x0, 0x84, 0x800) r0 = geteuid() syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)={[], [{@uid_gt={'uid>', r0}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, '/dev/input/event#\x00'}}, {@flag='posixacl'}, {@uid_lt}, {@smackfsroot={'smackfsroot', 0x3d, 'audit'}}, {@euid_lt}, {@hash}]}, 0x2, 0x509, &(0x7f0000000500)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() getpriority(0x2, r2) msgsnd(0x0, 0x0, 0x92, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="b2", 0x64}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}], 0x2, 0xc081) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) msgctl$IPC_RMID(0x0, 0x0) fanotify_init(0x8, 0x8000) 19.39593092s ago: executing program 3 (id=393): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1c07, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0x80, 0x3, 0x1, {0x22, 0xc5d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x4, 0x92}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xb6, 0x3}}]}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x140c}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f00000002c0)={0x0, 0x58, 0x2, {0x2, 0x24}}, 0x0, &(0x7f0000000400), 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x2c}}, 0x0) 17.258781634s ago: executing program 0 (id=397): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000010000000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_POST(r1, 0x8004500f, 0x1000000000000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) prctl$PR_CAPBSET_DROP(0x1c, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x38}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x0, 0x3, 0x0) unshare(0x8040080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x159102, 0x0) io_submit(0x0, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) statx(r5, 0x0, 0x4800, 0x4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000c40)={{0x9, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x40000000000000, 0x100000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6bc847c6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff7ffffffc, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xe9c76ae, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffff]}) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x4161, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x4, 0x10080) 15.510657878s ago: executing program 3 (id=401): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0x2, 0x4e33, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010100}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1400000000000000000000000700000009"], 0x18}}], 0x2, 0x0) 15.495291653s ago: executing program 0 (id=402): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44b8874fdf8a"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000008c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) openat$vcs(0xffffff9c, &(0x7f0000000140), 0x183000, 0x0) listen(r5, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000000c0)=0x7, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000240)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) 15.090136166s ago: executing program 3 (id=404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xe93fc6ea26f4008e, &(0x7f00000001c0), 0x1, 0x549, &(0x7f0000002700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad4104c6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGBITSND(r4, 0x80004506, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x26}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 11.452388634s ago: executing program 3 (id=414): syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x8eb82) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000030000006102000002001b0000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(r4, &(0x7f00000023c0)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001440)={r3, 0x0, 0x0}, 0x10) listen(0xffffffffffffffff, 0x4) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12014105000000202505a8a440000102030109021b000101083004090400fc010701020409050102100006020679a208fe4c80ce3f7b60f9ff25010d5c9da0887c4db37707c8d3358e953b7da67590455379cdbcc802c4ce344aeaf466216a7880b73e4d6d19bf"], &(0x7f0000000440)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0xb4, 0x7, 0x0, 0xff}, 0x47, &(0x7f0000000280)=ANY=[@ANYBLOB="050f47000514100405883b172c65fde1057696ddd4d0139fb42518bfd1f8cc881511604adc4c8f03100b031002141004074c5f40589eadee461e56788fb8d2e744000000000000"], 0x1, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x418}}]}) socket$inet_udp(0x2, 0x2, 0x0) 10.379158309s ago: executing program 4 (id=415): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810714, &(0x7f0000000640)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@user_xattr}, {@grpjquota_path}, {@resuid}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@usrjquota}, {@acl}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) lstat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x0, 0x2, 0x0, 0x0, 0x200000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='personality\x00') fanotify_init(0x0, 0x0) read$FUSE(r3, &(0x7f000000b040)={0x2020}, 0x2020) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) 8.563364091s ago: executing program 4 (id=416): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xfffffffffffffff8}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x37) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000040)={0x7, 0x0, 0x4}, &(0x7f0000000500)=[{}, {}, {}, {}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x3, 0x6}}) socket$netlink(0x10, 0x3, 0x8) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfeff}) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000340)='./bus\x00', r5, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r6, 0x0, &(0x7f00000000c0)) r7 = dup3(r1, r0, 0x0) recvmmsg(r7, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0xf0, 0x0) 8.14992662s ago: executing program 1 (id=417): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x2a, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="67b8ed77ab82513664511ea67d1fcaadffba39938d78be1ff85280771cf63d5f423eadaf2193d1e15762b9fe3a3f3c7d8a18f88d43f98558a0422d07ccaab56ad8ab2b9b747b61f26421cc72cc01f6ca35858dbe4b83312410696970ed243f36e1d5630000000000", @ANYRES32, @ANYRES8, @ANYBLOB="4ae1a945aeb21706957dde351ec8ff116a6b3473e0deff096a7a9960f5281511c5c47eb1c5e81a6f4e6b67d2f104c6f6bd75ba564ea271b90918141ca9ae7ec8ff84f65a8e55ef364ed4b7cda365d2935abbeb15bc14f380d8de399a640bca33e95e253b42ccf675343ce2da37825992301874699273f67b3e31955525703878d46297f48914be3520ae0ff1e18afd8bea2ac8070fedf1312f364323304c89f699f1b79fa834ae4a0303d0aed4146c43a4a0e2c3867144adba2514bfa44470568e04b7f7ed242f22faa1335c5f3f9c151a49b9f400492aed270d726951f9808f13465695b4ae78bf1e6a128ed02cc1ad69065b02e40d4707ff5296a387094ab8f508d10647690f9b8af8258ad2f7d91ba4a4ede6620dc8503e8f6a8a41e5c92940956302a6259132839a3bfbe40c86037740c457a4a91663dbe29eb8018d1a64431406b565db6e9edd275be2e1972868165404eb55b61c9e3bb4a6666fabf1872e84582c08c0d252d33cf30815f79effbb8abaa9cdeb2be24ab58bedb8cdd44e337a45f24c647b5fc3277a7061864f2fe3915ff7b909f1391dc295f0f96d719109d57b4a74fd1c8595984a4d7091831164344646ada99ff84618f0efda712d61cbf8c74a7c74e9f02f0c5b7911c2eaed7658b1b7b127b8bd9ab9c02bafdfb6b80b57a8fc33adf94b80c7a0e0a75c52fcc19bc43f28167b7f34def1a65a8a678cddc3469b0e264610f3e6ce4fcc654d3d226eb096af08f661e967f902d578c3dde4e2b163f0d9324b069df875eca253e1b23e79e12ad7ffeef2482abe03a174dc1833d32a8449e7869e33d36bab788d3607eceac192d8962631ee1f347bf885734ac099b29d6dbdb21c19eac52e6ebd5cf262f7380b08c93dcc6d9ce8302a0964c3393b7f91e85b794db2877df27ec391c4eed19494be1d8577d844231ee04e4fb4d9ebee4ca840400dd48f3956cc00cb4cf4eb385f677ef464cf33ae593bc56d6f8a708913a31fd33529f3277234045e7a40625abe72ef2721c56180ea493abf500d4d3bcc705cd86ca9aba1b5ac6ba1e3d45fb7e924de2981c4ebd12c3153ecee793a6d73d6607f83058cc5bbc7cd0b2dbf87cd0c53d4013607a572933dbbdc41da669dbbdf2af1021dc45842728dde269ed7b1ad1ac659587906496f6c31672809d32d8fa3971e5805d6fbeac54edde27336b737cb50e7d934d65a75f631823fd8f3322ba173201f5678f22c5413291837a6fcbf66befc4186a42baaf798fdf256659d5d9c3a4cd7086981f4b62e80a58790e029a84c365beb6b880a0de307a6cba3366f035cfaadd3ba25bb474965a3b8c441a469477bf5b43bffe448532f4fa421f3f832b9523057d848a6f83a80f82a333e743e856988c017abf5468237d8c032aebe39d2b24f9c35c30739791e51b0050744bdaa799b019aa40e273d74775f1ed3b505aa74c1cb125c63b042b82135bfe81712cea79873f56736e8299903f40a0342f543040d9181b6357e2b3135f39117c5739dc5aac2487338f92b9935cf9a0a5ea7654721f859aea6c269f303ed48fb440b23ccfc4aac318652512ca0290e44dd7edc44cda783a2c0c23353f1ef6ea23a21035d8818594e6bf032f70bca9b96d5f2b1c49939fc90cdfed94a3c6c3890755d8b2d9502c66c23699247b478b21529112fea692f5716019743eaf4918c360e06298de9cd07351e41bb94253d6b62af611b6395df7a696ea2a5469247dd2cfcc26f86bfcc400973b05cfdb933aac527d0b8d31b103d092ab8d84626a954c76cdbbf498b93bf54a356882df73d9e51b084fdb84e2a3bf1710ff28a6862977e3b34fa0e44f57a6c97281db14392bed28c36e603d08b9b679c3a46a3d9654fc876311d64c96f126b006f3e7b3f832f5d88224b096f5564fe1fa39a0e6d9586842e3dd0e70c0dca86dffaae586c3e5bbcd2a48aa6d2890f67f9545d7feb28f61b98b27f124c731a17df7c9f752d578d29816512057a4c719cc0f8ce5896e27b49b19b4c093da0836bfdff6502530f99c7330d7be4336cfdb131714775bbea2fe9e07af8081f3f8acc0c321a83c3e7c3b7d7822648e462bf338a316ad4cccc3a2bc96d5d5dea390b246106a0979df7e53bc9370f478e294e35bfa23002854a14d36d740613be869948170ec07e11c9dfc4cac9d66c1c46b97b9cedbb2ce6bc7e42bbf700f26c89291f3ac53e422f8a5690b0f5862a661c3d2164d1a815db77d0331012a06fc4e73790ae1f721f630b140d0248e46c00ff321aa47a8d8f2b448a741b329ce60b09fa72255d18126e8c683c8ad8b192b31e692d3621b3cf8d2b2672cea04b2319c7f1455023ed6174f62b3811dbb68da4cd2a4f950baed469bf6f539d1e2abdc8c3bfaa95eb92032831eddaf016e36d02974e2a2d67f268ef9c0bded357da782edf9d8304839de89ec92f0d67bcbfc6b0a3e24a8e40860c733189fed8dadfae613db02a23bc29759e67630f1d7a31f696e7cad8223b50dc03d5875a995464a4495595719e52e9e57a375f3ee49c5e7043159d9adf5bf9b40f9effeecaf457bf3a247bd7bc5881e16a511f2da4d75b96d2e7f397c2df0cd1890cb652521f7c46f7a625b1d1c1ce6249853cf804c8e5bb7f02f16248866598c8b8d381e9c1916f00c054d6702da885ccca963af918eaea1146fb6c8218e78174050aa47184e7f5872d8a005653d3f6614cfdb3a8b5a41bafb42f8d8097c6c6c7c3bea26a2e407ffdb6382bbed386ed57981df875e82799132dc1df4d30faff99afb51c17c1feef7acd1d2e25dcbf5ea74b58dd825efdac023d4797d76102891095e5c7bfe7cf0b3acabac2c62eb6b363005b0a64ebe05afbd3d97023f215bf581ab114ab69846e971a52c8d8883da4ec9d9dbb68153898104707c7e3e5c7a4cfaa2140b9dda57db0cde2aaccfadebc9bd355d770f13d3b21f9580608272d4daea47ce89a013445d0dd0b559d6277a9c86e477f8961670a7045dce55302c354ad5d59aa6c0adca442184a087109047762a87c9e4bbf2eaeb5b93cf1c32c5a8e424b0c5232fa0b57743b663531c15a160bca95ba9af8ae4d12c54fefd2ff69af6d32800ec548246903e744ddacf2b62ad2dcd0c0ea4f9b407f30d0dda54c62b232e20d382a11cf32a30ea0e73c6642688c02eb3ff4c953b10de4fa5350d8ab4d8acebd267ecd811774f38398bac5c3767f3ccef6a2767573d964194fcd75021f73d354f8298ea9a91eba7d6f5bb6f53ef046f4a12b8ed78605e544802fcaf12d40f77b7012428d6777aecb0b4a80cd666effb788fd78a45520921770ea520651ee24d12eb250a09f79d1247cc3319dcbb512b39a63ccf8cb2c9ab62e90ee3e7a7f50c9e0d4ee06b06005b77b373de73d8b0d9c3e47007b1fbae0b22a636abd141561964792a27f68d33190f949450ec4e06179b1298d90dd3e67d328143e92e323c21de8d9163fa6f4377620b0a161b234aa2b84d6aa04a36bf4498d64128b7fe3a55dba817cbe9b01d306410a4ed12f7cc81d065115fbe1799e7a22ff24e7b66d96a65cc3dcbedadf98e551a623cf0d9a888166dc23e930cba3800330818b8a393dde3824e2f67229118fd82254625ab890ccc9e15028bcd6df9acb9f55b58feda6620c62297d525422146a5def29987898d5fd53c67770cc84de20db55de9ea0066a524a2f351993ab9b725342486ed9f1f5e566265f03e73a8fe57f628eb7ce922a181c0b31f60c8617f867cc9a61ffe2b6e8ac4d551bec492bec9c8a7f24422758e76b390739cfdea1622b3899207692bc695d4a13b25dd360ba4abc718a8ce85b526a41a74a4021afecd01dca2274f50e108e54988fb34f47bcb5fdba976989ed275f43a97ab02b74543ec4ca6d65dd137a891a4f005c6c701ddfd3ace3593bf381035040547229d1a02e87b75010d33c401b9646af008cec1710812df6e6ab5e660afec887bf2375a2faef35258506953cc5c9f6dab183ccca76c6d631e1be4191d8e556d5b6db8b364e766442083db46736bf54cb4f2762832857006830c28a1ac94a69ede53f5d43392a2353a1c07a3ea64358c4c23cc956efc29dfe6417e23bda0852edda6e40752a009258a8fbd222948c1e738373fec6c473161b2f6550b59f354bcdc0426abe030d75d22b93157db999eb57d96f587386a7fccbbe4248ce1df7ade0ab2900fa70794c5fc90667ab1b4b159550f181b4a34c540709b2811cadcc9b630ad209276ee06025547d9f4ebea7d64bfa18fea6e4380e107c29bd75f33a44dd9039abd7f007e8ea753d5eb59feb2a5793191e08164e3858b1c308e76b9f6df1b3a3f7e0619ee63f81668e04c4c48044465a2549a93cf984f7b5835d59cc1a0cd693fc6a4599c5fb19982cd83735a9339491bb241ba01d881116d83ce89c9b77b480f206042b8782f4bafbc8f8026e4ce357696fd3124d77b6fb790b0a7025a9ed7f13a8f0bb62f3b4f304889de66b7c6b2dc26389945d828241746bf8925a2e621318bd0c67e063250d61a47c17a617529f624513e2ac15d995e660acefb27e0275e1abb5cf16d5bcb328aef57cfb951b3b0f805dfe301bf2f41f83b74d41221c67eae9813dad54e9c09a2e6902e888ac36bea5b2ee05a24cad650b87c5e0a62a9b7a29de7d5985a338931bc007eda2b1f1f3f693619274d2d08fc9f646366b784205ef25e071ac4ec0d4963b032f2040fb5faddd1c354fc96e8eee486d3f3070baae630d74aa5e610b300c78a9cd767946b0dc3ef27c1f370c1a3028788a1b5d6531e9abd3f02d5b4e56f3d32f4b9b04a198038831226e2e522106c6c0892e7059fa645e0937d37e4b373fd4014ad62db94a8a6fc7ed44b2f684dd6df4bc2158f66311d9eed766bf36a8aa2a4d5daa55c59740140dd01025b0272aeee5058b56b0e39c7037364dd653d48da305b375bbcbcbd16e53cd7aed9eef03b74769d5045bb03981f057d917c417b30fd5c0c5961a2eae5d9859dcba3a763a64b4d0a8ca16f4c2b227c03036622a1ea4731dba15820f01d1da4817c7eb07b0126de799cbb2ec646fe0c15c7b3a7caa150cdc865dfaf7a93b7ae87a5fcfdc8162d76739f24a23ce8d3e4289cd69bd4c961eb939496e60939b1c8426881f802447bd875eb0241ea1e427dcf25c95c1b91c53cf1e357b6e4738e42ba2f06335c2924121ff3ffb81f9a26e70a3d4bc57e5cb4605d08995a2a4a0588d2f8901a9910bee0d216a29248f2335c206dddecebc13162850b3131a7fb1f677e97d97739147c5c4122a48cc9b6c9c8fc4cb21781f2d5d32e9e3c020b6aebdaeec494f5edefdc8aea0f4ce74bc8cd047826ef2268de922c4d403c6bf3acedf72da1b8b300f466a0423d9afd73a163dfb7fe91bdff3510acc23482c5c08a55f3d9ac61dc2d60d57f11f2ff72dc4d0e8b005cbf09afc2c0d0302d4da324962a0fbb3509bbd33f7572ff8ee47e379e6e8cfd13bf9fd46844a5f1370b1efd5bd93e18e363274451176c5e3d4c4983f11f4a1275f1b3a402b345f394fa31bb202779cafc2eb5fb8ff52be48613a6a9428a9917963c4f971c5c26162fb9fa95f16d7be391262ab9f520a77758a38f9b0184ab7ee3ab90d223bd96586681a0662819f54f912f70ef7359d3285b6e4fdc652a224d237d38a47c09361c8b3c24b54cc8e0abd17ec283ee0b68ba242de247fc0e6912c38808e33df489fdb593e59e3837914f978f3cf9482a6441ccb67d89929a5453111c3365a5ca31459e870efec48e64e212f1146", @ANYRES16], 0x9, 0x2af, &(0x7f00000001c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0x3, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount(0x0, 0x0, &(0x7f00000003c0)='incremental-fs\x00', 0x11, 0x0) epoll_create1(0x0) socket(0x0, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x102) pipe2(0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) 6.852230115s ago: executing program 1 (id=418): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.89684472s ago: executing program 2 (id=421): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x40000) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfeedcafe, 0x3, 0x0, 0x0, 0x4}}) 5.885919698s ago: executing program 4 (id=422): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.762011473s ago: executing program 2 (id=423): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0xa00010, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecompose,decompose\x00nobfrrier,gid=', @ANYRESHEX, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x34008890}, 0x4) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00058639aa6f0bfbe4b28434ef119376977b00fffbcec7a5fc1f5a72d4fe24156a9f971990e4f372b7"], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='erofs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.507931859s ago: executing program 1 (id=424): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000ca40)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000600)="aea2305c", 0x4}], 0x1}}], 0x1, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300)) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x1) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x5}, 0x8) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe6, 0x0) getsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000380)=0xfffffffd, &(0x7f00000003c0)=0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r4, 0x5, 0x0, 0xffffffff, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}]}, 0x40}, 0x1, 0xffffffff00000003}, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket(0x40000000012, 0xa, 0x4ed) r9 = socket(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r9, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @id_tos={0x0, r10}}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xb, 0x1}, {0x6, 0x2}, {0xf, 0x4}}}, 0x24}}, 0x40) 4.795745029s ago: executing program 4 (id=426): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810714, &(0x7f0000000640)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@user_xattr}, {@grpjquota_path}, {@resuid}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@usrjquota}, {@acl}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) lstat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x0, 0x2, 0x0, 0x0, 0x200000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='personality\x00') fanotify_init(0x0, 0x0) read$FUSE(r3, &(0x7f000000b040)={0x2020}, 0x2020) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) 4.232067587s ago: executing program 2 (id=427): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x400, 0x0, 0x0, 0x4, 0x200000000, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x81, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffc], 0x10000}) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaff4ece9055673db38effffffffff08004500004c000000000006907800000000ffffffff00004e22", @ANYRES32=0x41424344, @ANYBLOB="ec000000907800001d1273fe131d4ddcdedb89b0665086c15173131291d785d58954605c802acf9f965fe399"], 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) r4 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000040)={0xa}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000500)="a4", 0x1a000, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.896751001s ago: executing program 1 (id=428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000ff0000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32], 0x77) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000004000000040000000900000000000000261ac0c09d3d6ded080b0e6513be80b91ff2fab5b7e4e5b3d84ab6b9e01c889750a3c8d8dc2e94bb694c3150ab41d9f03d47b27ba26ebdcaf7d00eb3d497e45342444bad8b194f2dc18a3a70043cb45af71dc7290449f30ac8dc3b53c863f07e6aa2d6f1e1b8687355993f33d3a0963b13e88a363f3ebad999e921704a324a78162fc85abbd0bc1a2348c3fe753e489c023c55871be5a54f580b32f18d7ec49dfda3bbec0471fd4b3f07d02b4b14943a7469fb9e74ac", @ANYRES32=r5, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x1e) unshare(0x68040280) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000280)={'raw\x00', 0x0, [0x0, 0x100, 0xb, 0x18000, 0xd]}, &(0x7f0000000380)=0x54) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000008000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000006e0d0000000000000000ea8c1250ec40b579aa268b278da013c9635b3ab91672190a1a6ff316bf050e"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 3.47436347s ago: executing program 4 (id=429): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000380)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa41013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff000000020000000027", 0x59}], 0x1) 3.214379273s ago: executing program 4 (id=430): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1c07, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0x80, 0x3, 0x1, {0x22, 0xc5d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x4, 0x92}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xb6, 0x3}}]}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x140c}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f00000002c0)={0x0, 0x58, 0x2, {0x2, 0x24}}, 0x0, &(0x7f0000000400), 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x2c}}, 0x0) 2.557796623s ago: executing program 2 (id=431): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f00000011c0)) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000100)={0x1, 0x2, 0x3}) sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000040)=0x6) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40305839, &(0x7f0000000240)) 1.503227171s ago: executing program 2 (id=432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000040605000000000000000000030004000900020073797a3200000000090002000100000000000000050001000700000005000100070000000900020073797a310000000005000100070000000900020073797a30"], 0x5c}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e047f2d20"], 0x7) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)) fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) fcntl$lock(r3, 0x24, &(0x7f0000001100)={0x2, 0x0, 0x8}) 1.225090895s ago: executing program 1 (id=433): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x10}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) 1.031062493s ago: executing program 2 (id=435): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44b8874fdf8a"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000008c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) openat$vcs(0xffffff9c, &(0x7f0000000140), 0x183000, 0x0) listen(r5, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000000c0)=0x7, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000240)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=436): prctl$PR_SET_IO_FLUSHER(0x41, 0x3) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000f, 0x12, r2, 0x0) kernel console output (not intermixed with test programs): 57] loop1: detected capacity change from 0 to 256 [ 67.109521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.118830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.222879][ T117] usb 4-1: Using ep0 maxpacket: 16 [ 67.226131][ T5232] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.274113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.282554][ T117] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.293334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 67.302098][ T117] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 67.311672][ T117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.323354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.424176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.432455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.514329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 68.065748][ T5232] Bluetooth: hci1: command 0x0c1a tx timeout [ 68.071895][ T5232] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.078059][ T5232] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.084261][ T5232] Bluetooth: hci4: command 0x0c1a tx timeout [ 68.222467][ T5358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11'. [ 68.240204][ T117] usb 4-1: config 0 descriptor?? [ 68.247298][ T117] usb 4-1: can't set config #0, error -71 [ 68.313184][ T117] usb 4-1: USB disconnect, device number 2 [ 68.580372][ T5368] kvm: emulating exchange as write [ 68.854089][ T5384] warning: `syz.3.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.267594][ T5232] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.838368][ T5232] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.844500][ T5232] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.850548][ T5232] Bluetooth: hci1: command 0x0c1a tx timeout [ 70.854041][ T5237] Bluetooth: hci4: command 0x0c1a tx timeout [ 70.955021][ T5441] loop1: detected capacity change from 0 to 512 [ 71.214294][ T5316] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.393957][ T5316] usb 5-1: Using ep0 maxpacket: 16 [ 71.401197][ T5316] usb 5-1: config 0 has no interfaces? [ 71.415908][ T5316] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 71.432663][ T5316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.461655][ T5316] usb 5-1: Product: syz [ 71.473109][ T5316] usb 5-1: Manufacturer: syz [ 71.483231][ T5316] usb 5-1: SerialNumber: syz [ 71.524788][ T5316] usb 5-1: config 0 descriptor?? [ 71.672617][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.679264][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.787559][ T5316] usb 5-1: USB disconnect, device number 2 [ 71.886618][ T5447] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 71.892788][ T5447] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 71.912862][ T5447] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 71.943027][ T5447] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 71.963262][ T5447] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 73.645211][ T5454] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.724222][ T5237] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.918512][ T5237] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.984774][ T5246] Bluetooth: hci3: command 0x0c1a tx timeout [ 73.984808][ T5232] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.990838][ T5237] Bluetooth: hci4: command 0x0c1a tx timeout [ 74.064146][ T5277] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 74.234577][ T5277] usb 5-1: not running at top speed; connect to a high speed hub [ 74.250224][ T5277] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 74.266643][ T5277] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.295414][ T5277] usb 5-1: config 1 interface 0 has no altsetting 0 [ 74.312628][ T5277] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.40 [ 74.340129][ T5277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.349571][ T5277] usb 5-1: Product: syz [ 74.368708][ T5277] usb 5-1: Manufacturer: syz [ 74.396766][ T5277] usb 5-1: SerialNumber: syz [ 74.449482][ T5459] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 74.852509][ T5470] netlink: 'syz.0.29': attribute type 11 has an invalid length. [ 74.904350][ T5470] netlink: 134672 bytes leftover after parsing attributes in process `syz.0.29'. [ 74.971182][ T5459] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.044814][ T5277] usbhid 5-1:1.0: can't add hid device: -71 [ 75.051255][ T5277] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 75.159032][ T5277] usb 5-1: USB disconnect, device number 3 [ 75.892899][ T5474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'. [ 75.961873][ T5482] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 76.076954][ T5488] netlink: 44 bytes leftover after parsing attributes in process `syz.1.32'. [ 76.154018][ T5488] netlink: 43 bytes leftover after parsing attributes in process `syz.1.32'. [ 76.187807][ T5487] loop2: detected capacity change from 0 to 1024 [ 76.198217][ T5488] netlink: 'syz.1.32': attribute type 6 has an invalid length. [ 76.218638][ T5487] ======================================================= [ 76.218638][ T5487] WARNING: The mand mount option has been deprecated and [ 76.218638][ T5487] and is ignored by this kernel. Remove the mand [ 76.218638][ T5487] option from the mount to silence this warning. [ 76.218638][ T5487] ======================================================= [ 76.253530][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.299258][ T5488] netlink: 43 bytes leftover after parsing attributes in process `syz.1.32'. [ 76.955265][ T940] cfg80211: failed to load regulatory.db [ 77.544309][ T5523] netlink: 60 bytes leftover after parsing attributes in process `syz.2.36'. [ 77.559937][ T5523] netlink: 'syz.2.36': attribute type 3 has an invalid length. [ 77.567687][ T5523] netlink: 'syz.2.36': attribute type 1 has an invalid length. [ 77.575270][ T5523] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.36'. [ 78.028835][ T5532] fuse: Bad value for 'fd' [ 79.821784][ T5551] loop0: detected capacity change from 0 to 8 [ 79.912457][ T5551] SQUASHFS error: Unable to read inode 0xa7 [ 80.897528][ T5555] netlink: 'syz.1.46': attribute type 11 has an invalid length. [ 80.897560][ T5555] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.46'. [ 80.975450][ T5557] tty tty26: ldisc open failed (-12), clearing slot 25 [ 81.032676][ T5564] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 81.516139][ T5316] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.659821][ T5573] netlink: 44 bytes leftover after parsing attributes in process `syz.3.48'. [ 81.684039][ T5573] netlink: 43 bytes leftover after parsing attributes in process `syz.3.48'. [ 81.709922][ T5566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 81.729249][ T5573] netlink: 'syz.3.48': attribute type 6 has an invalid length. [ 81.761813][ T5573] netlink: 43 bytes leftover after parsing attributes in process `syz.3.48'. [ 81.788232][ T5316] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 81.811577][ T5316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.881320][ T5316] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 81.912945][ T5316] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 81.953559][ T5316] usb 1-1: Manufacturer: syz [ 81.977801][ T5316] usb 1-1: config 0 descriptor?? [ 82.223985][ T5316] rc_core: IR keymap rc-hauppauge not found [ 82.262574][ T5316] Registered IR keymap rc-empty [ 82.340674][ T5316] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 82.379440][ T5316] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 82.479985][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 82.487503][ T5562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.47'. [ 83.009057][ T5316] usb 1-1: USB disconnect, device number 2 [ 83.731846][ T5618] loop4: detected capacity change from 0 to 1024 [ 85.049842][ T5627] loop0: detected capacity change from 0 to 8 [ 85.070968][ T5627] SQUASHFS error: Unable to read inode 0xa7 [ 86.154653][ T5637] loop1: detected capacity change from 0 to 512 [ 86.206124][ T5637] EXT4-fs (loop1): Test dummy encryption mode enabled [ 86.246135][ T5637] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #12: comm syz.1.60: corrupted in-inode xattr: invalid ea_ino [ 86.286531][ T5637] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.60: couldn't read orphan inode 12 (err -117) [ 86.351828][ T5637] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.774058][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.944073][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 86.992191][ T25] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.007951][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.032858][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.066859][ T25] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.112250][ T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.143471][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.315849][ T5656] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 87.368990][ T5656] EXT4-fs error (device loop1): ext4_add_entry:2437: inode #2: comm syz.1.60: Directory hole found for htree leaf block 0 [ 87.409118][ T25] usb 4-1: GET_CAPABILITIES returned 0 [ 87.414794][ T25] usbtmc 4-1:16.0: can't read capabilities [ 87.490763][ T5658] EXT4-fs error (device loop1): ext4_add_entry:2437: inode #2: comm syz.1.60: Directory hole found for htree leaf block 0 [ 87.561410][ T5666] usb usb1: usbfs: process 5666 (syz.0.65) did not claim interface 0 before use [ 87.613037][ T5316] usb 4-1: USB disconnect, device number 3 [ 89.247887][ T5683] loop3: detected capacity change from 0 to 8 [ 89.392053][ T5683] SQUASHFS error: Unable to read inode 0xa7 [ 90.573442][ T5234] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 91.377247][ T5702] loop1: detected capacity change from 0 to 256 [ 91.476063][ T5702] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.009443][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.019076][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.031265][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.039604][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.047110][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 95.057959][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.019689][ T5440] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.133038][ T5762] loop0: detected capacity change from 0 to 2048 [ 97.143637][ T5440] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.184030][ T5232] Bluetooth: hci4: command tx timeout [ 97.245721][ T5762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.589648][ T5440] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.400412][ T5759] loop3: detected capacity change from 0 to 8 [ 98.472908][ T5440] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.636005][ T5759] SQUASHFS error: Unable to read inode 0xa7 [ 98.983548][ T5777] loop3: detected capacity change from 0 to 1024 [ 99.094534][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 99.103620][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 99.128156][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 99.180720][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 99.189544][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 99.216988][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 99.267522][ T5232] Bluetooth: hci4: command tx timeout [ 99.742177][ T5236] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.771361][ T5440] bridge_slave_1: left allmulticast mode [ 99.788452][ T5440] bridge_slave_1: left promiscuous mode [ 99.832915][ T5440] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.870248][ T5440] bridge_slave_0: left allmulticast mode [ 99.876449][ T5440] bridge_slave_0: left promiscuous mode [ 99.882783][ T5440] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.233408][ T5788] usb usb1: usbfs: process 5788 (syz.0.95) did not claim interface 0 before use [ 100.330512][ T5440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.341815][ T5440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.352641][ T5440] bond0 (unregistering): Released all slaves [ 100.423161][ T5741] chnl_net:caif_netlink_parms(): no params data found [ 101.299830][ T5232] Bluetooth: hci5: command tx timeout [ 101.344867][ T5237] Bluetooth: hci4: command tx timeout [ 101.857682][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.997617][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.019336][ T5741] bridge_slave_0: entered allmulticast mode [ 102.039812][ T5741] bridge_slave_0: entered promiscuous mode [ 102.270165][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.289330][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.312484][ T5741] bridge_slave_1: entered allmulticast mode [ 102.326282][ T5741] bridge_slave_1: entered promiscuous mode [ 103.103619][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 103.148108][ T5830] loop3: detected capacity change from 0 to 1024 [ 103.167283][ T5832] netlink: 'syz.0.102': attribute type 11 has an invalid length. [ 103.198495][ T5834] loop1: detected capacity change from 0 to 2048 [ 103.344100][ T5237] Bluetooth: hci5: command tx timeout [ 103.365508][ T5440] hsr_slave_0: left promiscuous mode [ 103.438396][ T5843] /dev/loop3: Can't open blockdev [ 103.461598][ T5237] Bluetooth: hci4: command tx timeout [ 103.487688][ T5834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.499958][ T5832] netlink: 134672 bytes leftover after parsing attributes in process `syz.0.102'. [ 103.579457][ T5440] hsr_slave_1: left promiscuous mode [ 103.590367][ T5440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.095573][ T5440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.162438][ T5440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.276219][ T5440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.879789][ T5440] veth1_macvtap: left promiscuous mode [ 104.908126][ T5440] veth0_macvtap: left promiscuous mode [ 104.924402][ T5440] veth1_vlan: left promiscuous mode [ 104.945822][ T5440] veth0_vlan: left promiscuous mode [ 105.424682][ T5237] Bluetooth: hci5: command tx timeout [ 105.545454][ T5879] loop3: detected capacity change from 0 to 256 [ 105.631647][ T5879] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.109144][ T5440] team0 (unregistering): Port device team_slave_1 removed [ 106.167832][ T5440] team0 (unregistering): Port device team_slave_0 removed [ 106.828483][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.347148][ T5877] netlink: 'syz.0.105': attribute type 1 has an invalid length. [ 107.357315][ T5877] netlink: 'syz.0.105': attribute type 4 has an invalid length. [ 107.368876][ T5877] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.105'. [ 107.387923][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.501701][ T5897] loop0: detected capacity change from 0 to 1024 [ 107.508560][ T5237] Bluetooth: hci5: command tx timeout [ 107.553579][ T5898] loop3: detected capacity change from 0 to 1024 [ 107.580376][ T5741] team0: Port device team_slave_0 added [ 107.589844][ T5741] team0: Port device team_slave_1 added [ 108.142754][ T5903] /dev/loop3: Can't open blockdev [ 108.446733][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.453720][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.625716][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.644986][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.652098][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.714531][ T5779] bridge_slave_0: entered allmulticast mode [ 108.730657][ T5779] bridge_slave_0: entered promiscuous mode [ 108.769935][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.799296][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.816717][ T5779] bridge_slave_1: entered allmulticast mode [ 108.825405][ T5779] bridge_slave_1: entered promiscuous mode [ 108.852442][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.862740][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.892240][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.987068][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.033029][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.250830][ T5779] team0: Port device team_slave_0 added [ 109.279864][ T5779] team0: Port device team_slave_1 added [ 109.319150][ T5741] hsr_slave_0: entered promiscuous mode [ 109.414678][ T5741] hsr_slave_1: entered promiscuous mode [ 109.427032][ T5741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.438585][ T5234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.439916][ T5741] Cannot create hsr debugfs directory [ 109.732324][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.754228][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.803946][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.846171][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.854012][ T940] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.866858][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.915395][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.025869][ T940] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 110.034967][ T940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.084751][ T940] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 110.104040][ T940] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 110.104472][ T5440] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.122506][ T940] usb 2-1: Manufacturer: syz [ 110.130230][ T940] usb 2-1: config 0 descriptor?? [ 110.204123][ T940] rc_core: IR keymap rc-hauppauge not found [ 110.210077][ T940] Registered IR keymap rc-empty [ 110.216314][ T5934] loop3: detected capacity change from 0 to 2048 [ 110.246812][ T940] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 110.263736][ T940] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 110.381004][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 110.406255][ T5927] netlink: 28 bytes leftover after parsing attributes in process `syz.1.114'. [ 110.474189][ T5934] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 110.494792][ T5934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.709646][ T5440] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.331220][ T5284] usb 2-1: USB disconnect, device number 2 [ 111.898334][ T5779] hsr_slave_0: entered promiscuous mode [ 111.952430][ T5779] hsr_slave_1: entered promiscuous mode [ 112.026957][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.040241][ T5779] Cannot create hsr debugfs directory [ 112.143217][ T5961] loop0: detected capacity change from 0 to 512 [ 112.424515][ T5961] EXT4-fs (loop0): Test dummy encryption mode enabled [ 112.439094][ T5239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.452183][ T5237] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 112.501542][ T5961] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm syz.0.119: corrupted in-inode xattr: invalid ea_ino [ 112.518629][ T5961] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.119: couldn't read orphan inode 12 (err -117) [ 112.520514][ T5440] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.665676][ T5961] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.778124][ T5972] loop3: detected capacity change from 0 to 1024 [ 113.069870][ T5974] /dev/loop3: Can't open blockdev [ 113.988025][ T5440] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.174323][ T5981] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.119: Directory hole found for htree leaf block 0 [ 114.195296][ T5982] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.119: Directory hole found for htree leaf block 0 [ 114.549405][ T5236] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 114.731714][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.123'. [ 114.835626][ T5440] bridge_slave_1: left allmulticast mode [ 114.841351][ T5440] bridge_slave_1: left promiscuous mode [ 114.864214][ T5440] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.886904][ T5440] bridge_slave_0: left allmulticast mode [ 114.892774][ T5440] bridge_slave_0: left promiscuous mode [ 114.900811][ T5440] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.589098][ T5440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.607937][ T5440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.622586][ T5440] bond0 (unregistering): Released all slaves [ 115.679643][ T5741] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.912869][ T5741] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.993477][ T5741] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 116.019811][ T5741] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 116.026715][ T5284] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 116.069560][ T5996] bridge0: port 3(vlan2) entered blocking state [ 116.076424][ T5996] bridge0: port 3(vlan2) entered disabled state [ 116.083255][ T5996] vlan2: entered allmulticast mode [ 116.091849][ T5996] vlan2: left allmulticast mode [ 116.198732][ T5284] usb 1-1: not running at top speed; connect to a high speed hub [ 116.224493][ T5284] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 116.236376][ T5277] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.276775][ T5284] usb 1-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.312254][ T5284] usb 1-1: config 1 interface 0 has no altsetting 0 [ 116.336620][ T5284] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.40 [ 116.374460][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.382550][ T5284] usb 1-1: Product: syz [ 116.392493][ T5440] hsr_slave_0: left promiscuous mode [ 116.392514][ T5284] usb 1-1: Manufacturer: syz [ 116.403467][ T5440] hsr_slave_1: left promiscuous mode [ 116.403875][ T5284] usb 1-1: SerialNumber: syz [ 116.411602][ T5277] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 116.472971][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 116.473227][ T5237] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 116.485050][ T5277] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.493501][ T5237] Bluetooth: hci1: Injecting HCI hardware error event [ 116.514772][ T5232] Bluetooth: hci1: hardware error 0x00 [ 116.526244][ T5440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.533812][ T5440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.537214][ T5992] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 116.564069][ T5277] usb 4-1: string descriptor 0 read error: -22 [ 116.564771][ T5440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.571362][ T5277] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 116.586294][ T5440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.600005][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.632833][ T5277] usb 4-1: config 0 descriptor?? [ 116.638975][ T5440] veth1_macvtap: left promiscuous mode [ 116.644787][ T5440] veth0_macvtap: left promiscuous mode [ 116.650455][ T5440] veth1_vlan: left promiscuous mode [ 116.657412][ T5440] veth0_vlan: left promiscuous mode [ 116.701705][ T5277] em28xx 4-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 116.725361][ T5277] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 116.894091][ T5315] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.942966][ T5994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.057684][ T5315] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 117.073525][ T5315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.087091][ T5315] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 117.096377][ T5315] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 117.146133][ T5315] usb 2-1: Manufacturer: syz [ 117.172133][ T5315] usb 2-1: config 0 descriptor?? [ 117.327307][ T5315] rc_core: IR keymap rc-hauppauge not found [ 117.333274][ T5315] Registered IR keymap rc-empty [ 117.340538][ T5277] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 117.347559][ T5277] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 117.360429][ T5315] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 117.383224][ T5277] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 117.404032][ T5315] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 117.424012][ T5277] em28xx 4-1:0.0: No AC97 audio processor [ 117.435921][ T5440] team0 (unregistering): Port device team_slave_1 removed [ 117.473596][ T5277] usb 4-1: USB disconnect, device number 4 [ 117.487071][ T5277] em28xx 4-1:0.0: Disconnecting em28xx [ 117.507976][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 117.551376][ T5277] em28xx 4-1:0.0: Freeing device [ 117.557643][ T5440] team0 (unregistering): Port device team_slave_0 removed [ 118.175796][ T6004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.127'. [ 118.188958][ T5279] usb 2-1: USB disconnect, device number 3 [ 118.216982][ T5315] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.231471][ T5284] usbhid 1-1:1.0: can't add hid device: -71 [ 118.268420][ T5284] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 118.312506][ T5284] usb 1-1: USB disconnect, device number 3 [ 118.315905][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.406296][ T5315] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 118.421744][ T5315] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.448140][ T5315] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 118.459224][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.506624][ T5315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.518173][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 118.538619][ T5315] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 118.551844][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.554291][ T5232] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 118.558998][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.606063][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 118.618812][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 118.645549][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.652778][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.668962][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 119.165910][ T8] usb 4-1: USB disconnect, device number 5 [ 120.256433][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.369206][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.441066][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.445279][ T6049] input: syz0 as /devices/virtual/input/input9 [ 120.448260][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.530108][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.537333][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.601780][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.784022][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.083949][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 121.095715][ T8] usb 1-1: descriptor type invalid, skip [ 121.110521][ T8] usb 1-1: config 1 interface 0 altsetting 252 bulk endpoint 0x1 has invalid maxpacket 16 [ 121.121305][ T8] usb 1-1: config 1 interface 0 has no altsetting 0 [ 121.133578][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 121.143878][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.152014][ T8] usb 1-1: Product: syz [ 121.172384][ T6074] loop1: detected capacity change from 0 to 1024 [ 121.188775][ T8] usb 1-1: Manufacturer: syz [ 121.198093][ T8] usb 1-1: SerialNumber: syz [ 121.296402][ T6054] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 121.412275][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.707200][ T5779] veth0_vlan: entered promiscuous mode [ 121.763368][ T5779] veth1_vlan: entered promiscuous mode [ 121.863038][ T5741] veth0_vlan: entered promiscuous mode [ 121.934961][ T5741] veth1_vlan: entered promiscuous mode [ 122.023963][ T5779] veth0_macvtap: entered promiscuous mode [ 122.071836][ T5779] veth1_macvtap: entered promiscuous mode [ 122.142096][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.169657][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.180923][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.194403][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.222337][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.275957][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.296963][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.322978][ T5741] veth0_macvtap: entered promiscuous mode [ 122.368272][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.407723][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.439959][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.472807][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.505182][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.821891][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.862162][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.874629][ T5741] veth1_macvtap: entered promiscuous mode [ 122.920272][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.929600][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.938794][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.947937][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.992483][ T5741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.003427][ T5741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.013724][ T5741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.030864][ T5741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.051589][ T5741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.062148][ T5741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.072175][ T5741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.082786][ T5741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.095193][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.129499][ T5741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.140161][ T5741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.150066][ T5741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.160603][ T5741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.170574][ T5741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.181099][ T5741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.191319][ T5741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.202020][ T5741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.214569][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.279313][ T5741] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.296622][ T5741] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.305453][ T5741] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.314285][ T5741] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.456162][ T5429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.466097][ T5429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.589819][ T5443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.630807][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.640283][ T5443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.662279][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.718231][ T5315] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.735679][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.752070][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.883359][ T6115] loop2: detected capacity change from 0 to 256 [ 124.046726][ T5315] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 124.055430][ T5315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.079189][ T6117] overlayfs: failed to resolve './file0': -2 [ 124.084186][ T5315] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 124.114813][ T5315] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 124.242367][ T5315] usb 4-1: Manufacturer: syz [ 124.589137][ T5315] usb 4-1: config 0 descriptor?? [ 125.114037][ T5315] rc_core: IR keymap rc-hauppauge not found [ 125.137654][ T5315] Registered IR keymap rc-empty [ 125.169125][ T5315] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 125.212697][ T5315] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 126.185176][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.137'. [ 126.375663][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 127.120805][ T6149] loop4: detected capacity change from 0 to 1024 [ 127.348715][ T6150] loop2: detected capacity change from 0 to 256 [ 127.463978][ T6152] /dev/loop4: Can't open blockdev [ 127.648453][ T6150] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.673069][ T8] usb 4-1: USB disconnect, device number 6 [ 129.054144][ T5277] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 129.214009][ T5277] usb 3-1: Using ep0 maxpacket: 32 [ 129.222210][ T5277] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 129.247028][ T5277] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 129.270640][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 129.310481][ T5277] usb 3-1: Product: syz [ 129.321288][ T5277] usb 3-1: Manufacturer: syz [ 129.336911][ T5277] usb 3-1: SerialNumber: syz [ 129.358870][ T5279] usb 1-1: USB disconnect, device number 4 [ 129.365602][ T5277] usb 3-1: config 0 descriptor?? [ 129.379859][ T6169] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 129.428730][ T6174] overlayfs: failed to resolve './file0': -2 [ 130.664161][ T5237] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 130.674646][ T5237] Bluetooth: hci4: Injecting HCI hardware error event [ 130.683463][ T5237] Bluetooth: hci4: hardware error 0x00 [ 130.759324][ T5232] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 130.999778][ T6192] loop1: detected capacity change from 0 to 2048 [ 131.023234][ T6193] bridge0: port 3(vlan2) entered blocking state [ 131.036685][ T6193] bridge0: port 3(vlan2) entered disabled state [ 131.043452][ T6193] vlan2: entered allmulticast mode [ 131.103436][ T6193] vlan2: left allmulticast mode [ 131.110305][ T6192] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 131.123540][ T6200] overlayfs: missing 'workdir' [ 131.167704][ T6192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.188907][ T5232] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.344013][ T5307] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.844551][ T5307] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.903917][ T5307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 131.964317][ T5307] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.026780][ T5307] usb 5-1: string descriptor 0 read error: -22 [ 132.035487][ T5307] usb 5-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 132.047693][ T5307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.092162][ T5307] usb 5-1: config 0 descriptor?? [ 132.137671][ T5307] em28xx 5-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 132.164358][ T5307] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 132.262887][ T5234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.364209][ T6189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.432690][ T8] usb 3-1: USB disconnect, device number 2 [ 132.480510][ T5307] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 132.523562][ T5307] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 132.562152][ T5307] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 132.570015][ T5307] em28xx 5-1:0.0: No AC97 audio processor [ 132.626638][ T5307] usb 5-1: USB disconnect, device number 4 [ 132.660500][ T5307] em28xx 5-1:0.0: Disconnecting em28xx [ 132.681140][ T5307] em28xx 5-1:0.0: Freeing device [ 132.871018][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.924140][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 133.024236][ T5237] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 133.045243][ T8] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 133.068705][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.088945][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 133.105460][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.111811][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.140588][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.158666][ T8] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 133.176139][ T9] usb 2-1: config 0 has no interfaces? [ 133.184534][ T8] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 133.195198][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 133.210924][ T8] usb 3-1: Manufacturer: syz [ 133.219356][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.237386][ T8] usb 3-1: config 0 descriptor?? [ 133.254758][ T9] usb 2-1: config 0 descriptor?? [ 133.354375][ T8] rc_core: IR keymap rc-hauppauge not found [ 133.364335][ T8] Registered IR keymap rc-empty [ 133.375968][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 133.404098][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 133.534954][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 133.542772][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.158'. [ 133.665114][ T5279] usb 2-1: USB disconnect, device number 4 [ 133.902059][ T5279] usb 3-1: USB disconnect, device number 3 [ 133.996993][ T6236] loop4: detected capacity change from 0 to 256 [ 134.070289][ T6236] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.784968][ T5237] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 134.794072][ T5237] Bluetooth: hci2: Injecting HCI hardware error event [ 134.809384][ T5232] Bluetooth: hci2: hardware error 0x00 [ 135.809982][ T6250] loop1: detected capacity change from 0 to 1024 [ 136.995942][ T6255] /dev/loop1: Can't open blockdev [ 137.250005][ T5232] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 138.533972][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 138.601802][ T6269] netlink: 'syz.1.169': attribute type 1 has an invalid length. [ 138.609735][ T6269] netlink: 'syz.1.169': attribute type 4 has an invalid length. [ 138.617646][ T6269] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.169'. [ 138.705165][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 138.720472][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.744134][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 138.767469][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.812055][ T25] usb 3-1: config 0 descriptor?? [ 138.887567][ T25] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 139.052926][ T6262] input: syz0 as /devices/virtual/input/input13 [ 139.116611][ T4672] bcm5974 3-1:0.0: could not read from device [ 139.138894][ T4672] bcm5974 3-1:0.0: could not read from device [ 139.145388][ T25] usb 3-1: USB disconnect, device number 4 [ 139.172521][ T4672] bcm5974 3-1:0.0: could not read from device [ 139.234224][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 139.556969][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.316170][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 140.327944][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 140.339744][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.366043][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.375891][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.397782][ T9] usb 4-1: config 0 descriptor?? [ 140.561156][ T6273] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 140.662374][ T6295] netlink: 44 bytes leftover after parsing attributes in process `syz.0.178'. [ 140.679977][ T6295] netlink: 43 bytes leftover after parsing attributes in process `syz.0.178'. [ 140.710601][ T6295] netlink: 'syz.0.178': attribute type 6 has an invalid length. [ 140.738757][ T6295] netlink: 43 bytes leftover after parsing attributes in process `syz.0.178'. [ 140.963974][ T5307] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 141.064401][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 141.075533][ T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 141.134117][ T5307] usb 5-1: Using ep0 maxpacket: 16 [ 141.143914][ T5307] usb 5-1: config 0 has no interfaces? [ 141.151848][ T5307] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 141.171371][ T5307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.177662][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 141.205923][ T5307] usb 5-1: Product: syz [ 141.217437][ T5307] usb 5-1: Manufacturer: syz [ 141.228528][ T5307] usb 5-1: SerialNumber: syz [ 141.325147][ T5307] usb 5-1: config 0 descriptor?? [ 141.367688][ T9] usb 4-1: USB disconnect, device number 7 [ 142.056684][ T6304] loop0: detected capacity change from 0 to 8 [ 142.751053][ T6303] SQUASHFS error: Unable to read inode 0xa7 [ 142.898489][ T5284] usb 5-1: USB disconnect, device number 5 [ 143.128661][ T6308] loop3: detected capacity change from 0 to 2048 [ 143.542550][ T6308] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 143.774789][ T6308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.859524][ T6319] loop0: detected capacity change from 0 to 1024 [ 144.154694][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 144.233728][ T6325] /dev/loop0: Can't open blockdev [ 145.000021][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 145.000055][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 145.000082][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.023561][ T25] usb 3-1: string descriptor 0 read error: -22 [ 145.023943][ T25] usb 3-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 145.023970][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.074825][ T25] usb 3-1: config 0 descriptor?? [ 145.112733][ T25] em28xx 3-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 145.297456][ T25] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 145.362155][ T6315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.853104][ T25] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 147.859607][ T25] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 147.868674][ T25] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 147.876053][ T25] em28xx 3-1:0.0: No AC97 audio processor [ 147.907100][ T5239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.018913][ T5277] usb 3-1: USB disconnect, device number 5 [ 148.025681][ T5277] em28xx 3-1:0.0: Disconnecting em28xx [ 148.055807][ T5277] em28xx 3-1:0.0: Freeing device [ 148.464570][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 148.604020][ T5277] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 148.673959][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 148.745708][ T6362] loop4: detected capacity change from 0 to 8 [ 149.287070][ T6361] SQUASHFS error: Unable to read inode 0xa7 [ 149.377550][ T5277] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 149.390668][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.391005][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.434078][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 149.475863][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 149.480348][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 149.491125][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 149.491430][ T5277] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 149.517507][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.543935][ T5277] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 149.633928][ T5277] usb 3-1: Manufacturer: syz [ 149.650447][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.661501][ T5277] usb 3-1: config 0 descriptor?? [ 149.705671][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.730299][ T9] usb 1-1: config 0 descriptor?? [ 149.744653][ T6345] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 149.764901][ T6365] loop4: detected capacity change from 0 to 1024 [ 150.058117][ T5277] rc_core: IR keymap rc-hauppauge not found [ 150.065011][ T5277] Registered IR keymap rc-empty [ 150.075585][ T5277] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 150.087021][ T6367] /dev/loop4: Can't open blockdev [ 150.097724][ T5277] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 150.221932][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 150.233247][ T25] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 150.250014][ T25] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 150.270077][ T25] usb 4-1: Product: syz [ 150.274994][ T6370] netlink: 'syz.1.197': attribute type 11 has an invalid length. [ 150.277449][ T25] usb 4-1: Manufacturer: syz [ 150.282945][ T6370] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.197'. [ 150.287636][ T25] usb 4-1: SerialNumber: syz [ 150.303209][ T25] usb 4-1: config 0 descriptor?? [ 150.328758][ T6354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.194'. [ 150.348124][ T6357] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 150.495536][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.197'. [ 150.566801][ T25] usb 3-1: USB disconnect, device number 6 [ 150.581736][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 150.591485][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 150.668751][ T9] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 150.807376][ T9] usb 1-1: USB disconnect, device number 5 [ 151.084801][ T6383] loop4: detected capacity change from 0 to 1024 [ 151.648863][ T6390] loop0: detected capacity change from 0 to 2048 [ 151.694520][ T6390] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 151.869053][ T6390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.851421][ T5315] usb 4-1: USB disconnect, device number 8 [ 153.844367][ T6420] loop4: detected capacity change from 0 to 8 [ 153.963380][ T6420] SQUASHFS error: Unable to read inode 0xa7 [ 154.024232][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 154.231379][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 154.515985][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 154.528155][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.545481][ T25] usb 2-1: string descriptor 0 read error: -22 [ 154.551899][ T25] usb 2-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 154.602235][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.654003][ T25] usb 2-1: config 0 descriptor?? [ 154.801634][ T25] em28xx 2-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 154.811328][ T25] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 155.060363][ T6405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 155.208951][ T5236] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.224350][ T25] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 155.231058][ T25] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 155.238608][ T25] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 155.245814][ T25] em28xx 2-1:0.0: No AC97 audio processor [ 155.316980][ T25] usb 2-1: USB disconnect, device number 5 [ 155.334728][ T25] em28xx 2-1:0.0: Disconnecting em28xx [ 155.385907][ T25] em28xx 2-1:0.0: Freeing device [ 156.372270][ T6437] loop4: detected capacity change from 0 to 256 [ 156.792613][ T5315] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 157.118002][ T5315] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 157.238902][ T5315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.573244][ T5315] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 157.582655][ T5315] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 157.591053][ T5315] usb 1-1: Manufacturer: syz [ 157.606082][ T5315] usb 1-1: config 0 descriptor?? [ 158.761041][ T5315] rc_core: IR keymap rc-hauppauge not found [ 158.761059][ T5315] Registered IR keymap rc-empty [ 158.761453][ T5315] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 158.762100][ T5315] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input17 [ 158.818621][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 158.821085][ T6439] netlink: 28 bytes leftover after parsing attributes in process `syz.0.211'. [ 158.982134][ T5315] usb 1-1: USB disconnect, device number 6 [ 159.245752][ T6454] tty tty28: ldisc open failed (-12), clearing slot 27 [ 159.504022][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 159.803931][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 159.811989][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.822310][ T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 159.831525][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.568530][ T25] usb 2-1: config 0 descriptor?? [ 160.577954][ T25] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 160.676547][ T6481] loop0: detected capacity change from 0 to 2048 [ 160.812193][ T6459] input: syz0 as /devices/virtual/input/input19 [ 160.827380][ T5279] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 160.875087][ T6481] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 160.943929][ T6485] fuse: Bad value for 'group_id' [ 160.948967][ T6485] fuse: Bad value for 'group_id' [ 161.608038][ T4672] bcm5974 2-1:0.0: could not read from device [ 161.618032][ T4672] bcm5974 2-1:0.0: could not read from device [ 161.618134][ T6481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.639301][ T4672] bcm5974 2-1:0.0: could not read from device [ 161.665043][ T5279] usb 5-1: Using ep0 maxpacket: 16 [ 161.667328][ T4672] bcm5974 2-1:0.0: could not read from device [ 161.680170][ T4672] bcm5974 2-1:0.0: could not read from device [ 161.684256][ T25] usb 2-1: USB disconnect, device number 6 [ 161.746749][ T5279] usb 5-1: config 0 has no interfaces? [ 161.762593][ T5279] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 161.771990][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.780145][ T5279] usb 5-1: Product: syz [ 161.784544][ T5279] usb 5-1: Manufacturer: syz [ 161.789170][ T5279] usb 5-1: SerialNumber: syz [ 161.941731][ T5236] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.166396][ T5279] usb 5-1: config 0 descriptor?? [ 162.463502][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.478903][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.487912][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.498295][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.506622][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 162.523103][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.558905][ T5315] usb 5-1: USB disconnect, device number 6 [ 162.622501][ T6497] loop0: detected capacity change from 0 to 1024 [ 163.353189][ T6502] /dev/loop0: Can't open blockdev [ 165.123980][ T5232] Bluetooth: hci0: command tx timeout [ 165.482676][ T6523] loop0: detected capacity change from 0 to 1024 [ 165.638015][ T5279] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 165.758550][ T6527] /dev/loop0: Can't open blockdev [ 166.515806][ T5279] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 166.564893][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.654351][ T5279] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 166.692074][ T5279] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 166.716866][ T6533] loop0: detected capacity change from 0 to 1024 [ 166.730920][ T5279] usb 5-1: Manufacturer: syz [ 166.775118][ T5279] usb 5-1: config 0 descriptor?? [ 166.951436][ T6493] chnl_net:caif_netlink_parms(): no params data found [ 166.978230][ T5279] rc_core: IR keymap rc-hauppauge not found [ 167.185201][ T5237] Bluetooth: hci0: command tx timeout [ 167.741640][ T5279] Registered IR keymap rc-empty [ 167.754757][ T5279] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 167.785030][ T5279] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20 [ 167.864999][ T2956] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.181112][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 168.304818][ T2956] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.320814][ T6514] netlink: 28 bytes leftover after parsing attributes in process `syz.4.228'. [ 168.334842][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 168.356170][ T5277] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 168.470901][ T2956] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.493480][ T8] usb 5-1: USB disconnect, device number 7 [ 168.499603][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 168.510970][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.524622][ T5277] usb 1-1: Using ep0 maxpacket: 16 [ 168.536287][ T5277] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.555772][ T9] usb 4-1: config 0 has no interfaces? [ 168.581131][ T6493] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.593200][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 168.603060][ T5277] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 168.618268][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.628526][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.641012][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.649929][ T6493] bridge_slave_0: entered allmulticast mode [ 168.661633][ T9] usb 4-1: config 0 descriptor?? [ 168.679553][ T5277] usb 1-1: config 0 descriptor?? [ 168.692953][ T6493] bridge_slave_0: entered promiscuous mode [ 168.725408][ T5277] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input21 [ 168.750302][ T6493] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.777397][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.823267][ T6493] bridge_slave_1: entered allmulticast mode [ 168.836212][ T6493] bridge_slave_1: entered promiscuous mode [ 168.843190][ T6554] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.235'. [ 168.878920][ T2956] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.922561][ T6542] input: syz0 as /devices/virtual/input/input22 [ 168.989621][ T4672] bcm5974 1-1:0.0: could not read from device [ 169.053598][ T5316] usb 4-1: USB disconnect, device number 9 [ 169.074315][ T6556] loop4: detected capacity change from 0 to 1024 [ 169.094948][ T6493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.222300][ T6493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.239017][ T4672] bcm5974 1-1:0.0: could not read from device [ 169.256440][ T5277] usb 1-1: USB disconnect, device number 7 [ 169.264495][ T5237] Bluetooth: hci0: command tx timeout [ 169.326680][ T6558] /dev/loop4: Can't open blockdev [ 169.513394][ T5565] bcm5974 1-1:0.0: could not read from device [ 169.531416][ T4672] bcm5974 1-1:0.0: could not read from device [ 169.599714][ T4672] bcm5974 1-1:0.0: could not read from device [ 169.676335][ T4672] bcm5974 1-1:0.0: could not read from device [ 169.710388][ T6493] team0: Port device team_slave_0 added [ 169.732913][ T4672] bcm5974 1-1:0.0: could not read from device [ 169.960238][ T6493] team0: Port device team_slave_1 added [ 170.144040][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 170.225441][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.483972][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.961401][ T6493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.966049][ T6566] loop0: detected capacity change from 0 to 512 [ 170.996167][ T6566] EXT4-fs (loop0): Test dummy encryption mode enabled [ 171.005203][ T2956] bridge_slave_1: left allmulticast mode [ 171.010905][ T2956] bridge_slave_1: left promiscuous mode [ 171.044202][ T6571] loop4: detected capacity change from 0 to 1024 [ 171.051579][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 171.058887][ T25] usb 2-1: config 0 has no interfaces? [ 171.078033][ T25] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 171.082552][ T6566] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm syz.0.239: corrupted in-inode xattr: invalid ea_ino [ 171.102167][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.111169][ T25] usb 2-1: Product: syz [ 171.114175][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.116120][ T25] usb 2-1: Manufacturer: syz [ 171.127600][ T25] usb 2-1: SerialNumber: syz [ 171.163555][ T6566] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.239: couldn't read orphan inode 12 (err -117) [ 171.294747][ T6566] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.328859][ T2956] bridge_slave_0: left allmulticast mode [ 171.354652][ T5237] Bluetooth: hci0: command tx timeout [ 171.394890][ T6581] /dev/loop4: Can't open blockdev [ 171.430369][ T2956] bridge_slave_0: left promiscuous mode [ 171.479033][ T25] usb 2-1: config 0 descriptor?? [ 171.513851][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.047204][ T6583] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.239: Directory hole found for htree leaf block 0 [ 172.083508][ T6584] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.239: Directory hole found for htree leaf block 0 [ 172.352126][ T9] usb 2-1: USB disconnect, device number 7 [ 172.390727][ T5236] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 173.429633][ T6597] loop0: detected capacity change from 0 to 512 [ 173.554160][ T6602] loop1: detected capacity change from 0 to 1024 [ 173.677503][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 173.816524][ T6606] /dev/loop1: Can't open blockdev [ 174.690879][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 174.700008][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.712924][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 174.724089][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 174.732337][ T9] usb 5-1: Manufacturer: syz [ 174.804128][ T9] usb 5-1: config 0 descriptor?? [ 174.863712][ T6616] loop1: detected capacity change from 0 to 1024 [ 174.883980][ T9] rc_core: IR keymap rc-hauppauge not found [ 174.889938][ T9] Registered IR keymap rc-empty [ 174.895253][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 174.917120][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 174.953597][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input23 [ 175.344525][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 175.426722][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.437101][ T8] usb 4-1: config 0 has no interfaces? [ 175.461617][ T8] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 175.471116][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.483481][ T8] usb 4-1: config 0 descriptor?? [ 175.834725][ T25] usb 4-1: USB disconnect, device number 10 [ 176.859844][ T6628] loop0: detected capacity change from 0 to 512 [ 176.872432][ T6628] EXT4-fs (loop0): Test dummy encryption mode enabled [ 176.901832][ T6628] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm syz.0.252: corrupted in-inode xattr: invalid ea_ino [ 176.925575][ T6628] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.252: couldn't read orphan inode 12 (err -117) [ 176.969794][ T6628] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.986932][ T2956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.999255][ T2956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.166843][ T2956] bond0 (unregistering): Released all slaves [ 177.192727][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.200282][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.227821][ T6493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.242622][ T6631] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.252: Directory hole found for htree leaf block 0 [ 177.336217][ T6632] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.252: Directory hole found for htree leaf block 0 [ 177.547865][ T6493] hsr_slave_0: entered promiscuous mode [ 178.024494][ T6493] hsr_slave_1: entered promiscuous mode [ 178.076394][ T5236] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 178.224902][ T6639] netlink: 'syz.1.254': attribute type 11 has an invalid length. [ 178.377374][ T6639] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.254'. [ 179.164077][ T5277] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 179.301796][ T6651] loop0: detected capacity change from 0 to 1024 [ 179.314512][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.254'. [ 179.434078][ T5277] usb 4-1: Using ep0 maxpacket: 16 [ 179.453536][ T5277] usb 4-1: config 0 has no interfaces? [ 179.466332][ T5277] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 179.493589][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.528030][ T2956] hsr_slave_0: left promiscuous mode [ 179.538881][ T5277] usb 4-1: Product: syz [ 179.543259][ T5277] usb 4-1: Manufacturer: syz [ 179.562612][ T5277] usb 4-1: SerialNumber: syz [ 179.567425][ T2956] hsr_slave_1: left promiscuous mode [ 179.591738][ T5277] usb 4-1: config 0 descriptor?? [ 179.654964][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.722440][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.781657][ T6661] loop0: detected capacity change from 0 to 1024 [ 179.795049][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.802671][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.861585][ T5316] usb 4-1: USB disconnect, device number 11 [ 180.033183][ T2956] veth1_macvtap: left promiscuous mode [ 180.136375][ T6666] /dev/loop0: Can't open blockdev [ 180.767900][ T2956] veth0_macvtap: left promiscuous mode [ 180.774662][ T2956] veth1_vlan: left promiscuous mode [ 180.780472][ T2956] veth0_vlan: left promiscuous mode [ 182.024061][ T5316] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 182.080253][ T6678] loop3: detected capacity change from 0 to 512 [ 182.224052][ T5316] usb 1-1: Using ep0 maxpacket: 32 [ 182.233296][ T5316] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 182.253771][ T5316] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 182.275174][ T5316] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 182.294110][ T5316] usb 1-1: Product: syz [ 182.300882][ T5316] usb 1-1: Manufacturer: syz [ 182.306783][ T5316] usb 1-1: SerialNumber: syz [ 182.317610][ T5316] usb 1-1: config 0 descriptor?? [ 182.332332][ T6668] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 182.689368][ T25] usb 5-1: USB disconnect, device number 8 [ 183.187539][ T2956] team0 (unregistering): Port device team_slave_1 removed [ 183.275918][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 183.291532][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 183.300525][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 183.310581][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 183.320162][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 183.327998][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 183.351224][ T2956] team0 (unregistering): Port device team_slave_0 removed [ 184.053158][ T6692] loop3: detected capacity change from 0 to 512 [ 184.079697][ T6692] EXT4-fs (loop3): Test dummy encryption mode enabled [ 184.167529][ T6692] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.264: corrupted in-inode xattr: invalid ea_ino [ 184.200160][ T6692] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.264: couldn't read orphan inode 12 (err -117) [ 184.232419][ T6692] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.445605][ T5279] usb 1-1: USB disconnect, device number 8 [ 184.473338][ T6695] EXT4-fs error (device loop3): ext4_add_entry:2437: inode #2: comm syz.3.264: Directory hole found for htree leaf block 0 [ 184.509743][ T6695] EXT4-fs error (device loop3): ext4_add_entry:2437: inode #2: comm syz.3.264: Directory hole found for htree leaf block 0 [ 185.476429][ T5232] Bluetooth: hci4: command tx timeout [ 185.516042][ T5239] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 185.577864][ T6705] loop0: detected capacity change from 0 to 256 [ 186.222108][ T5315] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 187.237610][ T6686] chnl_net:caif_netlink_parms(): no params data found [ 187.343953][ T5315] usb 4-1: Using ep0 maxpacket: 16 [ 187.350930][ T5315] usb 4-1: config 0 has no interfaces? [ 187.359492][ T5315] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 187.370286][ T5315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.378711][ T5315] usb 4-1: Product: syz [ 187.383169][ T5315] usb 4-1: Manufacturer: syz [ 187.393974][ T5315] usb 4-1: SerialNumber: syz [ 187.402308][ T5315] usb 4-1: config 0 descriptor?? [ 187.544068][ T5232] Bluetooth: hci4: command tx timeout [ 187.672416][ T5315] usb 4-1: USB disconnect, device number 12 [ 187.800781][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.814142][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.832008][ T6686] bridge_slave_0: entered allmulticast mode [ 187.853697][ T6686] bridge_slave_0: entered promiscuous mode [ 187.879345][ T6686] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.904564][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.913190][ T6686] bridge_slave_1: entered allmulticast mode [ 187.929525][ T6686] bridge_slave_1: entered promiscuous mode [ 188.052942][ T6686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.076502][ T6686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.178139][ T2956] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.507481][ T2956] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.581863][ T6749] bridge0: port 3(vlan2) entered blocking state [ 188.613633][ T6749] bridge0: port 3(vlan2) entered disabled state [ 188.624114][ T6749] vlan2: entered allmulticast mode [ 188.628849][ T6753] loop0: detected capacity change from 0 to 2048 [ 188.637827][ T6749] vlan2: left allmulticast mode [ 188.667174][ T6753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.692885][ T6686] team0: Port device team_slave_0 added [ 188.827930][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 188.858746][ T2956] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.994608][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 189.183344][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 189.413942][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.434383][ T6686] team0: Port device team_slave_1 added [ 189.528912][ T2956] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.559435][ T8] usb 4-1: string descriptor 0 read error: -22 [ 189.568100][ T8] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 189.568899][ T6493] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 189.583535][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.592536][ T5232] Bluetooth: hci4: command tx timeout [ 189.624155][ T8] usb 4-1: config 0 descriptor?? [ 189.637115][ T8] em28xx 4-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 189.647117][ T8] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 189.726497][ T6493] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 189.790601][ T6493] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 189.822216][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.839693][ T6747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.860037][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.887753][ T6686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.901082][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.908197][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.940015][ T6686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.998306][ T6493] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 190.074163][ T6686] hsr_slave_0: entered promiscuous mode [ 190.100873][ T6686] hsr_slave_1: entered promiscuous mode [ 190.112755][ T6686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.122155][ T6686] Cannot create hsr debugfs directory [ 190.162786][ T8] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 190.182612][ T8] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 190.241055][ T8] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 190.258084][ T8] em28xx 4-1:0.0: No AC97 audio processor [ 190.268023][ T5236] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.283565][ T8] usb 4-1: USB disconnect, device number 13 [ 190.295103][ T8] em28xx 4-1:0.0: Disconnecting em28xx [ 190.359515][ T8] em28xx 4-1:0.0: Freeing device [ 190.443675][ T2956] bridge_slave_1: left allmulticast mode [ 190.462473][ T2956] bridge_slave_1: left promiscuous mode [ 190.470427][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.652230][ T2956] bridge_slave_0: left allmulticast mode [ 190.658489][ T2956] bridge_slave_0: left promiscuous mode [ 190.668787][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.664735][ T5232] Bluetooth: hci4: command tx timeout [ 193.809468][ T2956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.821328][ T2956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.835532][ T2956] bond0 (unregistering): Released all slaves [ 193.891365][ T6789] usb usb1: usbfs: process 6789 (syz.1.279) did not claim interface 0 before use [ 193.980216][ T6792] loop3: detected capacity change from 0 to 256 [ 194.209039][ T6794] bridge0: port 3(vlan2) entered blocking state [ 194.224658][ T6794] bridge0: port 3(vlan2) entered disabled state [ 194.231471][ T6794] vlan2: entered allmulticast mode [ 194.262767][ T6794] vlan2: left allmulticast mode [ 194.502967][ T6493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.534088][ T25] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 194.586504][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.610096][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.671739][ T2956] hsr_slave_0: left promiscuous mode [ 194.709573][ T25] usb 2-1: not running at top speed; connect to a high speed hub [ 194.760523][ T25] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 194.862374][ T2956] hsr_slave_1: left promiscuous mode [ 194.882535][ T25] usb 2-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.954429][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.961905][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.976853][ T25] usb 2-1: config 1 interface 0 has no altsetting 0 [ 195.003180][ T25] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.40 [ 195.020097][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.030585][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.043894][ T25] usb 2-1: Product: syz [ 195.048110][ T25] usb 2-1: Manufacturer: syz [ 195.059463][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.068294][ T25] usb 2-1: SerialNumber: syz [ 195.093191][ T6800] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 195.134148][ T5316] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 195.171597][ T2956] veth1_macvtap: left promiscuous mode [ 195.194616][ T2956] veth0_macvtap: left promiscuous mode [ 195.201431][ T2956] veth1_vlan: left promiscuous mode [ 195.215637][ T2956] veth0_vlan: left promiscuous mode [ 195.225484][ T6809] loop3: detected capacity change from 0 to 1024 [ 195.435816][ T5316] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 195.462804][ T5316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 195.506055][ T5316] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.547241][ T6811] /dev/loop3: Can't open blockdev [ 195.615338][ T5316] usb 1-1: string descriptor 0 read error: -22 [ 195.642825][ T5316] usb 1-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 195.690752][ T5316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.333731][ T5316] usb 1-1: config 0 descriptor?? [ 196.342889][ T5316] em28xx 1-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 196.364257][ T5316] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 196.547174][ T6814] loop3: detected capacity change from 0 to 1024 [ 196.797702][ T6794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.892665][ T6816] /dev/loop3: Can't open blockdev [ 197.755180][ T5316] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 197.781645][ T5316] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 197.932655][ T5316] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 197.953602][ T5316] em28xx 1-1:0.0: No AC97 audio processor [ 197.987579][ T5316] usb 1-1: USB disconnect, device number 9 [ 198.011679][ T5316] em28xx 1-1:0.0: Disconnecting em28xx [ 198.029602][ T5316] em28xx 1-1:0.0: Freeing device [ 198.442782][ T2956] team0 (unregistering): Port device team_slave_1 removed [ 198.526162][ T2956] team0 (unregistering): Port device team_slave_0 removed [ 198.784005][ T6823] loop0: detected capacity change from 0 to 8 [ 198.807273][ T6823] SQUASHFS error: Unable to read inode 0xa7 [ 199.571946][ T6827] loop0: detected capacity change from 0 to 1024 [ 201.124007][ T25] usbhid 2-1:1.0: can't add hid device: -32 [ 201.141133][ T25] usbhid 2-1:1.0: probe with driver usbhid failed with error -32 [ 201.286314][ T6836] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 201.302339][ T6836] overlayfs: failed to set xattr on upper [ 201.309137][ T6836] overlayfs: ...falling back to redirect_dir=nofollow. [ 201.321777][ T6836] overlayfs: ...falling back to index=off. [ 201.330073][ T6836] overlayfs: ...falling back to uuid=null. [ 201.395922][ T6836] netlink: 44 bytes leftover after parsing attributes in process `syz.3.291'. [ 201.427094][ T6836] netlink: 43 bytes leftover after parsing attributes in process `syz.3.291'. [ 201.447878][ T6836] netlink: 'syz.3.291': attribute type 6 has an invalid length. [ 201.464065][ T6836] netlink: 43 bytes leftover after parsing attributes in process `syz.3.291'. [ 201.716600][ T6493] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.758803][ T9] usb 2-1: USB disconnect, device number 8 [ 201.817082][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.824257][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.891265][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.898494][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.473318][ T6493] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.504545][ T6493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.524448][ T6849] loop3: detected capacity change from 0 to 1024 [ 202.766776][ T6853] /dev/loop3: Can't open blockdev [ 203.819092][ T6686] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 203.841218][ T6863] loop3: detected capacity change from 0 to 1024 [ 204.082473][ T6867] /dev/loop3: Can't open blockdev [ 204.822433][ T6686] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 205.008404][ T6686] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 205.042985][ T6686] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 205.190336][ T6493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.329529][ T6493] veth0_vlan: entered promiscuous mode [ 205.350179][ T6686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.369449][ T6493] veth1_vlan: entered promiscuous mode [ 205.390619][ T6877] loop1: detected capacity change from 0 to 256 [ 205.401841][ T6686] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.525515][ T6877] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.560771][ T5429] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.569060][ T5429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.634576][ T5429] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.641735][ T5429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.816270][ T6493] veth0_macvtap: entered promiscuous mode [ 205.875990][ T6493] veth1_macvtap: entered promiscuous mode [ 206.025933][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.102725][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.152603][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.195636][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.239387][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.284047][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.305266][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.356877][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.408340][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.453233][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.491759][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.513016][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.553877][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.586861][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.636417][ T6686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.677645][ T6493] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.705293][ T6493] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.726447][ T6493] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.759965][ T6493] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.769022][ T5316] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 206.879629][ T1287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.935279][ T5316] usb 1-1: Using ep0 maxpacket: 16 [ 206.941709][ T1287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.972498][ T5316] usb 1-1: config 0 has no interfaces? [ 206.990246][ T5316] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 207.019927][ T5316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.045070][ T1287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.052937][ T1287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.054745][ T5316] usb 1-1: Product: syz [ 207.112870][ T5316] usb 1-1: Manufacturer: syz [ 207.139605][ T5316] usb 1-1: SerialNumber: syz [ 207.184444][ T5316] usb 1-1: config 0 descriptor?? [ 207.524173][ T6686] veth0_vlan: entered promiscuous mode [ 207.538758][ T9] usb 1-1: USB disconnect, device number 10 [ 207.580398][ T6686] veth1_vlan: entered promiscuous mode [ 207.710577][ T6686] veth0_macvtap: entered promiscuous mode [ 208.507521][ T6686] veth1_macvtap: entered promiscuous mode [ 208.522570][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.550610][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.573862][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.614745][ T6936] loop2: detected capacity change from 0 to 1024 [ 208.630380][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.749168][ T8] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 208.761696][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.772344][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.788122][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.804009][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.835265][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.868447][ T6942] /dev/loop2: Can't open blockdev [ 208.946889][ T8] usb 2-1: not running at top speed; connect to a high speed hub [ 208.957672][ T8] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 209.154739][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.662844][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.339937][ T8] usb 2-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 210.353048][ T8] usb 2-1: config 1 interface 0 has no altsetting 0 [ 210.366359][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.377167][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.387402][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.398047][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.408087][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.418745][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.430430][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.525837][ T6686] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.534725][ T6686] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.543452][ T6686] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.552293][ T6686] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.121162][ T6953] loop3: detected capacity change from 0 to 2048 [ 211.208175][ T6953] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 211.222908][ T8] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.40 [ 211.250416][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.331674][ T8] usb 2-1: Product: syz [ 211.354738][ T5439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.385799][ T6953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.423765][ T5439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.455003][ T8] usb 2-1: can't set config #1, error -71 [ 212.190061][ T5439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.204874][ T8] usb 2-1: USB disconnect, device number 9 [ 212.242156][ T5439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.622158][ T5239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.834403][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 213.194626][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 213.207784][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.219919][ T9] usb 5-1: config 0 has no interfaces? [ 213.225764][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 213.243593][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.260601][ T6989] loop3: detected capacity change from 0 to 1024 [ 213.289449][ T9] usb 5-1: config 0 descriptor?? [ 213.811062][ T9] usb 5-1: USB disconnect, device number 9 [ 214.134614][ T7006] input: syz0 as /devices/virtual/input/input24 [ 215.694784][ T5232] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 215.892554][ T5315] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 216.066130][ T5315] usb 5-1: not running at top speed; connect to a high speed hub [ 216.147106][ T5315] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 216.935484][ T5315] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.949362][ T5315] usb 5-1: config 1 interface 0 has no altsetting 0 [ 216.959453][ T5315] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.40 [ 217.006325][ T5315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.015398][ T5315] usb 5-1: Product: syz [ 217.019705][ T5315] usb 5-1: Manufacturer: syz [ 217.034071][ T5315] usb 5-1: SerialNumber: syz [ 217.065046][ T7019] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 217.560194][ T5315] usbhid 5-1:1.0: can't add hid device: -71 [ 217.567232][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'. [ 217.596563][ T5315] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 217.658686][ T5315] usb 5-1: USB disconnect, device number 10 [ 218.291843][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 219.328094][ T7048] loop2: detected capacity change from 0 to 1024 [ 219.708457][ T7058] loop3: detected capacity change from 0 to 256 [ 220.103311][ T5232] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 220.113365][ T5232] Bluetooth: hci3: Injecting HCI hardware error event [ 220.122501][ T5232] Bluetooth: hci3: hardware error 0x00 [ 221.904133][ T5237] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 222.708219][ T5232] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 222.787867][ T7083] loop3: detected capacity change from 0 to 1024 [ 223.060442][ T7085] /dev/loop3: Can't open blockdev [ 223.725156][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.735690][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.744854][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 223.752794][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 223.767180][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 223.774538][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.944809][ T5237] Bluetooth: hci1: command tx timeout [ 226.362540][ T5443] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.363328][ T7112] loop3: detected capacity change from 0 to 256 [ 227.383766][ T5277] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 227.514817][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 227.545924][ T5277] usb 1-1: not running at top speed; connect to a high speed hub [ 227.554997][ T5277] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 227.568525][ T5277] usb 1-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.593227][ T5443] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.621037][ T5277] usb 1-1: config 1 interface 0 has no altsetting 0 [ 227.635908][ T5277] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.40 [ 227.648232][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.666669][ T5277] usb 1-1: Product: syz [ 227.670847][ T5277] usb 1-1: Manufacturer: syz [ 228.085412][ T5237] Bluetooth: hci1: command tx timeout [ 228.955923][ T5277] usb 1-1: SerialNumber: syz [ 229.001030][ T5443] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.087897][ T5277] usb 1-1: can't set config #1, error -71 [ 229.145592][ T5277] usb 1-1: USB disconnect, device number 11 [ 229.176118][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'. [ 229.354876][ T5443] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.186243][ T5237] Bluetooth: hci1: command tx timeout [ 230.537957][ T7088] chnl_net:caif_netlink_parms(): no params data found [ 230.728509][ T5443] bridge_slave_1: left allmulticast mode [ 230.755473][ T5443] bridge_slave_1: left promiscuous mode [ 230.784381][ T5443] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.843302][ T5443] bridge_slave_0: left allmulticast mode [ 230.861609][ T5443] bridge_slave_0: left promiscuous mode [ 230.880095][ T5443] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.443593][ T7156] usb usb1: usbfs: process 7156 (syz.4.344) did not claim interface 0 before use [ 232.224311][ T5237] Bluetooth: hci1: command tx timeout [ 232.252513][ T7165] loop4: detected capacity change from 0 to 1024 [ 232.566642][ T5443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.622554][ T5443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.658244][ T5443] bond0 (unregistering): Released all slaves [ 232.660840][ T7175] loop4: detected capacity change from 0 to 512 [ 232.705555][ T7169] bridge0: port 3(vlan2) entered blocking state [ 232.724687][ T5315] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 232.740453][ T7169] bridge0: port 3(vlan2) entered disabled state [ 232.749677][ T7169] vlan2: entered allmulticast mode [ 232.814405][ T7169] vlan2: left allmulticast mode [ 232.885909][ T5315] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 232.909371][ T5315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 232.948968][ T5315] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.969864][ T5315] usb 3-1: string descriptor 0 read error: -22 [ 232.976305][ T5315] usb 3-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 232.985853][ T5315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.164502][ T5315] usb 3-1: config 0 descriptor?? [ 233.189611][ T5315] em28xx 3-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 233.198570][ T5315] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 233.220994][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.228452][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.235938][ T7088] bridge_slave_0: entered allmulticast mode [ 233.245313][ T7088] bridge_slave_0: entered promiscuous mode [ 233.253719][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.261331][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.268943][ T7088] bridge_slave_1: entered allmulticast mode [ 233.276431][ T7088] bridge_slave_1: entered promiscuous mode [ 233.555591][ T7167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.013963][ T5443] hsr_slave_0: left promiscuous mode [ 234.214626][ T5443] hsr_slave_1: left promiscuous mode [ 235.048495][ T5315] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 235.055416][ T5315] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 235.065515][ T5315] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 235.148217][ T5443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.156118][ T5443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.163983][ T5315] em28xx 3-1:0.0: No AC97 audio processor [ 235.221123][ T5443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.235415][ T5315] usb 3-1: USB disconnect, device number 7 [ 235.284797][ T5315] em28xx 3-1:0.0: Disconnecting em28xx [ 235.305596][ T5315] em28xx 3-1:0.0: Freeing device [ 235.483379][ T5443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.538713][ T5443] veth1_macvtap: left promiscuous mode [ 235.549192][ T5443] veth0_macvtap: left promiscuous mode [ 235.558757][ T5443] veth1_vlan: left promiscuous mode [ 235.569073][ T5443] veth0_vlan: left promiscuous mode [ 236.372969][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 236.573095][ T7212] loop2: detected capacity change from 0 to 1024 [ 236.636860][ T8] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 236.748137][ T8] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 237.108976][ T8] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 237.134015][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.213148][ T8] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 237.677259][ T5277] usb 4-1: USB disconnect, device number 14 [ 238.490046][ T7231] usb usb1: usbfs: process 7231 (syz.0.355) did not claim interface 0 before use [ 239.077222][ T7236] random: crng reseeded on system resumption [ 239.109187][ T5443] team0 (unregistering): Port device team_slave_1 removed [ 239.192357][ T5443] team0 (unregistering): Port device team_slave_0 removed [ 240.652517][ T7244] loop3: detected capacity change from 0 to 1024 [ 240.929274][ T7246] /dev/loop3: Can't open blockdev [ 241.512601][ T7088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.533690][ T7088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.742888][ T7219] netlink: 'syz.4.356': attribute type 1 has an invalid length. [ 241.771774][ T7219] netlink: 'syz.4.356': attribute type 4 has an invalid length. [ 241.801636][ T7219] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.356'. [ 242.973345][ T7254] loop4: detected capacity change from 0 to 512 [ 243.063531][ T7088] team0: Port device team_slave_0 added [ 243.109518][ T7260] loop0: detected capacity change from 0 to 1024 [ 243.657983][ T7088] team0: Port device team_slave_1 added [ 243.745363][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.814647][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.934009][ T7088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.046928][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.061484][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.183229][ T7088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.294046][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 245.924352][ T7296] loop4: detected capacity change from 0 to 1024 [ 245.934655][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 245.966827][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 246.114452][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 246.137901][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 246.140940][ T7088] hsr_slave_0: entered promiscuous mode [ 246.232277][ T7298] /dev/loop4: Can't open blockdev [ 246.961982][ T7088] hsr_slave_1: entered promiscuous mode [ 247.014710][ T7088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.022337][ T7088] Cannot create hsr debugfs directory [ 247.028847][ T9] usb 3-1: Product: syz [ 247.033053][ T9] usb 3-1: Manufacturer: syz [ 247.038602][ T9] usb 3-1: SerialNumber: syz [ 247.046442][ T9] usb 3-1: config 0 descriptor?? [ 247.057166][ T9] usb 3-1: can't set config #0, error -71 [ 247.067954][ T9] usb 3-1: USB disconnect, device number 8 [ 248.315091][ T7306] Driver unsupported XDP return value 0 on prog (id 118) dev N/A, expect packet loss! [ 248.420134][ T7320] loop3: detected capacity change from 0 to 1024 [ 250.284431][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 250.429767][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 250.845170][ T7088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 250.876196][ T7088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 250.892471][ T7355] loop0: detected capacity change from 0 to 1024 [ 251.030820][ T7088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 251.052011][ T7088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 251.148418][ T7357] /dev/loop0: Can't open blockdev [ 252.020967][ T7088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.037267][ T7088] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.066533][ T7088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.077040][ T7088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.101050][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.108251][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.166752][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.173922][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.209027][ T7364] loop0: detected capacity change from 0 to 2048 [ 252.256017][ T7364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.511978][ T7088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.249036][ T7088] veth0_vlan: entered promiscuous mode [ 253.261872][ T7088] veth1_vlan: entered promiscuous mode [ 253.332483][ T5236] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.381474][ T7088] veth0_macvtap: entered promiscuous mode [ 253.392954][ T7088] veth1_macvtap: entered promiscuous mode [ 253.413077][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.455074][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.473734][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.488154][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.498702][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.528313][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.058586][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.080166][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.095190][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.139563][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.168704][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.180039][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.197011][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.209623][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.221002][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.233933][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.247635][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.258847][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.289991][ T7088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.310123][ T7088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.341353][ T7088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.361588][ T7088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.482387][ T5443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.507534][ T5443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.617355][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.652520][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.819748][ T7407] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 254.854035][ T7407] overlayfs: failed to set xattr on upper [ 254.859907][ T7407] overlayfs: ...falling back to redirect_dir=nofollow. [ 254.911049][ T7407] overlayfs: ...falling back to index=off. [ 254.923988][ T940] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 254.931388][ T7407] overlayfs: ...falling back to uuid=null. [ 254.994586][ T7407] netlink: 44 bytes leftover after parsing attributes in process `syz.1.330'. [ 255.009969][ T7407] netlink: 43 bytes leftover after parsing attributes in process `syz.1.330'. [ 255.080364][ T7407] netlink: 'syz.1.330': attribute type 6 has an invalid length. [ 255.149831][ T940] usb 1-1: Using ep0 maxpacket: 16 [ 255.157952][ T7407] netlink: 43 bytes leftover after parsing attributes in process `syz.1.330'. [ 255.207428][ T940] usb 1-1: config 0 has no interfaces? [ 255.257565][ T940] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 255.322091][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.336973][ T940] usb 1-1: Product: syz [ 255.383504][ T940] usb 1-1: Manufacturer: syz [ 255.431791][ T940] usb 1-1: SerialNumber: syz [ 255.472973][ T940] usb 1-1: config 0 descriptor?? [ 255.753195][ T29] audit: type=1326 audit(1727985244.168:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.1.388" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a55b7dff9 code=0x0 [ 255.812446][ T8] usb 1-1: USB disconnect, device number 12 [ 256.024283][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.030675][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.766361][ T7456] loop0: detected capacity change from 0 to 1024 [ 258.644064][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 259.034663][ T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 259.123941][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 259.131709][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.162406][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 259.222314][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 259.291212][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 259.300156][ T9] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 259.324063][ T9] usb 4-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.326136][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 259.354118][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 259.393912][ T25] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 259.408248][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.40 [ 259.417962][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.430120][ T9] usb 4-1: Product: syz [ 259.444314][ T9] usb 4-1: Manufacturer: syz [ 259.453920][ T9] usb 4-1: SerialNumber: syz [ 259.463838][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.472371][ T7466] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 259.517034][ T25] hub 5-1:1.0: bad descriptor, ignoring hub [ 259.524391][ T25] hub 5-1:1.0: probe with driver hub failed with error -5 [ 259.532066][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 259.544108][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 259.559398][ T5279] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 259.581905][ T25] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 259.593970][ T25] cdc_wdm 5-1:1.0: Unknown control protocol [ 259.761147][ T5279] usb 3-1: Using ep0 maxpacket: 16 [ 259.804206][ T7484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.814271][ T7484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.840494][ T5279] usb 3-1: config 0 has no interfaces? [ 259.859881][ T5279] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 259.869447][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.878205][ T5279] usb 3-1: Product: syz [ 259.883458][ T5279] usb 3-1: Manufacturer: syz [ 259.898337][ T5279] usb 3-1: SerialNumber: syz [ 259.966227][ T5279] usb 3-1: config 0 descriptor?? [ 260.055335][ T9] usbhid 4-1:1.0: can't add hid device: -71 [ 260.084266][ T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 260.372167][ T9] usb 4-1: USB disconnect, device number 15 [ 260.407628][ T5279] usb 3-1: USB disconnect, device number 9 [ 260.871243][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 260.897812][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 260.918543][ T25] usb 5-1: USB disconnect, device number 11 [ 261.565167][ T7517] loop3: detected capacity change from 0 to 512 [ 262.865944][ T7531] loop4: detected capacity change from 0 to 1024 [ 263.487599][ T7538] loop1: detected capacity change from 0 to 1024 [ 263.754792][ T7542] /dev/loop1: Can't open blockdev [ 264.884716][ T25] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 264.935940][ T7548] loop1: detected capacity change from 0 to 1024 [ 265.304062][ T7555] /dev/loop1: Can't open blockdev [ 265.564024][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 265.770059][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 265.799318][ T9] usb 4-1: descriptor type invalid, skip [ 265.848409][ T9] usb 4-1: config 1 interface 0 altsetting 252 bulk endpoint 0x1 has invalid maxpacket 16 [ 265.879781][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 265.897898][ T25] usb 3-1: not running at top speed; connect to a high speed hub [ 265.907558][ T25] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 265.916419][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 265.944047][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.958024][ T7559] loop4: detected capacity change from 0 to 512 [ 265.971244][ T25] usb 3-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.988871][ T9] usb 4-1: Product: syz [ 266.000873][ T9] usb 4-1: Manufacturer: syz [ 266.020570][ T9] usb 4-1: SerialNumber: syz [ 266.020656][ T7559] EXT4-fs (loop4): Test dummy encryption mode enabled [ 266.059171][ T7556] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 266.073283][ T25] usb 3-1: config 1 interface 0 has no altsetting 0 [ 266.113665][ T25] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.40 [ 266.130885][ T7559] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.415: corrupted in-inode xattr: invalid ea_ino [ 266.150217][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.174283][ T7559] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.415: couldn't read orphan inode 12 (err -117) [ 266.202347][ T25] usb 3-1: Product: syz [ 266.227685][ T25] usb 3-1: Manufacturer: syz [ 266.241816][ T7559] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.242688][ T25] usb 3-1: SerialNumber: syz [ 266.272048][ T7540] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 266.817707][ T7563] EXT4-fs error (device loop4): ext4_add_entry:2437: inode #2: comm syz.4.415: Directory hole found for htree leaf block 0 [ 267.661707][ T6686] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 267.740660][ T25] usbhid 3-1:1.0: can't add hid device: -71 [ 267.746910][ T25] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 267.788184][ T25] usb 3-1: USB disconnect, device number 10 [ 268.202114][ T7570] loop1: detected capacity change from 0 to 256 [ 269.716103][ T7583] loop2: detected capacity change from 0 to 8 [ 270.519985][ T7590] loop2: detected capacity change from 0 to 1024 [ 270.843527][ T7594] /dev/loop2: Can't open blockdev [ 271.619760][ T7600] loop4: detected capacity change from 0 to 512 [ 271.693976][ T7600] EXT4-fs (loop4): Test dummy encryption mode enabled [ 271.837129][ T5232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.848397][ T5232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.856919][ T5232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.869499][ T7600] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.426: corrupted in-inode xattr: invalid ea_ino [ 271.891849][ T5232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.899073][ T7600] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.426: couldn't read orphan inode 12 (err -117) [ 271.916243][ T5232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 271.923680][ T5232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.931805][ T7600] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.422241][ T7611] EXT4-fs error (device loop4): ext4_add_entry:2437: inode #2: comm syz.4.426: Directory hole found for htree leaf block 0 [ 272.783163][ T6686] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 272.810496][ T7613] loop1: detected capacity change from 0 to 2048 [ 272.898667][ T7613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.196851][ T7605] chnl_net:caif_netlink_parms(): no params data found [ 274.218358][ T5232] Bluetooth: hci5: command tx timeout [ 274.663933][ T5277] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 274.706164][ T7605] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.713398][ T7605] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.760440][ T7605] bridge_slave_0: entered allmulticast mode [ 274.777300][ T7605] bridge_slave_0: entered promiscuous mode [ 274.817632][ T7605] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.826428][ T7605] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.833655][ T7605] bridge_slave_1: entered allmulticast mode [ 274.849090][ T7605] bridge_slave_1: entered promiscuous mode [ 274.866105][ T5277] usb 5-1: not running at top speed; connect to a high speed hub [ 274.886132][ T5277] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 274.898416][ T5277] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.922823][ T5277] usb 5-1: config 1 interface 0 has no altsetting 0 [ 274.951987][ T5277] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.40 [ 275.023268][ T7088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.026430][ T7605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.045410][ T5277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.053838][ T5277] usb 5-1: Product: syz [ 275.060585][ T5277] usb 5-1: Manufacturer: syz [ 275.066354][ T5277] usb 5-1: SerialNumber: syz [ 275.094807][ T7605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.198259][ T7629] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 275.370065][ T5443] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.698904][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'. [ 275.845159][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 275.857568][ T5443] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.898838][ T7605] team0: Port device team_slave_0 added [ 275.905570][ T5277] usbhid 5-1:1.0: can't add hid device: -71 [ 275.911548][ T5277] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 275.940639][ T7605] team0: Port device team_slave_1 added [ 275.950094][ T5277] usb 5-1: USB disconnect, device number 12 [ 276.039126][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.048308][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.057214][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.071136][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.079307][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.087110][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.239872][ T5443] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.345496][ T7652] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN PTI [ 276.358110][ T7652] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 276.366603][ T7652] CPU: 0 UID: 0 PID: 7652 Comm: syz.1.436 Not tainted 6.12.0-rc1-next-20241003-syzkaller #0 [ 276.376651][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.386687][ T7652] RIP: 0010:follow_pfnmap_start+0x1a7/0xfd0 [ 276.392580][ T7652] Code: 8d 9f 80 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 77 37 1a 00 48 8b 1b 48 83 c3 58 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 5a 37 1a 00 4c 8b 23 48 c7 c0 3c [ 276.412187][ T7652] RSP: 0018:ffffc90002dbf100 EFLAGS: 00010202 [ 276.418257][ T7652] RAX: 000000000000000b RBX: 0000000000000058 RCX: 0000000000040000 [ 276.426220][ T7652] RDX: ffffc9000e1c6000 RSI: 000000000000191d RDI: ffffc90002dbf1e0 [ 276.434197][ T7652] RBP: ffffc90002dbf290 R08: ffffc90002dbf311 R09: 0000000000000000 [ 276.442152][ T7652] R10: ffffc90002dbf2f0 R11: fffff520005b7e63 R12: dffffc0000000000 [ 276.450121][ T7652] R13: 1ffff11004e16b76 R14: ffffc90002dbf2e0 R15: ffff8880270b5ba0 [ 276.458084][ T7652] FS: 00007f1a569176c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 276.466999][ T7652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.473579][ T7652] CR2: 0000000000000000 CR3: 0000000070314000 CR4: 00000000003526f0 [ 276.481536][ T7652] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 276.489505][ T7652] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 276.497472][ T7652] Call Trace: [ 276.500752][ T7652] [ 276.503670][ T7652] ? __die_body+0x5f/0xb0 [ 276.507987][ T7652] ? die_addr+0xb0/0xe0 [ 276.512296][ T7652] ? exc_general_protection+0x3dd/0x5d0 [ 276.517849][ T7652] ? asm_exc_general_protection+0x26/0x30 [ 276.523574][ T7652] ? follow_pfnmap_start+0x1a7/0xfd0 [ 276.528854][ T7652] ? __pfx_follow_pfnmap_start+0x10/0x10 [ 276.534487][ T7652] ? __pfx_validate_chain+0x10/0x10 [ 276.539668][ T7652] ? __pfx_validate_chain+0x10/0x10 [ 276.544859][ T7652] get_pat_info+0x182/0x3f0 [ 276.549363][ T7652] ? __pfx_get_pat_info+0x10/0x10 [ 276.554376][ T7652] untrack_pfn+0x327/0x640 [ 276.558788][ T7652] ? __pfx_untrack_pfn+0x10/0x10 [ 276.563707][ T7652] ? unmap_vmas+0x1f1/0x5f0 [ 276.568209][ T7652] ? __pfx_lock_release+0x10/0x10 [ 276.573238][ T7652] unmap_single_vma+0x1f6/0x2b0 [ 276.578087][ T7652] unmap_vmas+0x3cc/0x5f0 [ 276.582399][ T7652] ? __pfx_unmap_vmas+0x10/0x10 [ 276.587237][ T7652] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 276.593216][ T7652] ? tlb_gather_mmu+0x24e/0x310 [ 276.598066][ T7652] unmap_region+0x214/0x380 [ 276.602550][ T7652] ? __pfx_unmap_region+0x10/0x10 [ 276.607556][ T7652] ? __mas_set_range+0x133/0x3c0 [ 276.612470][ T7652] ? fput+0x1a8/0x230 [ 276.616433][ T7652] mmap_region+0x22f9/0x2990 [ 276.621016][ T7652] ? __pfx_mmap_region+0x10/0x10 [ 276.625940][ T7652] ? __asan_memset+0x23/0x50 [ 276.630507][ T7652] ? process_measurement+0x3ca/0x1fb0 [ 276.635868][ T7652] ? __pfx_lock_acquire+0x10/0x10 [ 276.640882][ T7652] ? mm_get_unmapped_area_vmflags+0xb9/0xf0 [ 276.646768][ T7652] ? bpf_lsm_mmap_addr+0x9/0x10 [ 276.651596][ T7652] ? security_mmap_addr+0x6f/0x250 [ 276.656706][ T7652] ? __get_unmapped_area+0x2ed/0x350 [ 276.661975][ T7652] do_mmap+0x8f0/0x1000 [ 276.666116][ T7652] ? __pfx_do_mmap+0x10/0x10 [ 276.670688][ T7652] ? __pfx_down_write_killable+0x10/0x10 [ 276.676303][ T7652] ? common_file_perm+0x1a6/0x210 [ 276.681314][ T7652] vm_mmap_pgoff+0x1dd/0x3d0 [ 276.685887][ T7652] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 276.690978][ T7652] ? __fget_files+0x29/0x470 [ 276.695552][ T7652] ? __fget_files+0x3f3/0x470 [ 276.700213][ T7652] ? __fget_files+0x29/0x470 [ 276.704791][ T7652] ksys_mmap_pgoff+0x4eb/0x720 [ 276.709543][ T7652] ? __x64_sys_mmap+0x7f/0x140 [ 276.714288][ T7652] do_syscall_64+0xf3/0x230 [ 276.718830][ T7652] ? clear_bhb_loop+0x35/0x90 [ 276.723498][ T7652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.729379][ T7652] RIP: 0033:0x7f1a55b7dff9 [ 276.733792][ T7652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.753386][ T7652] RSP: 002b:00007f1a56917038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 276.761784][ T7652] RAX: ffffffffffffffda RBX: 00007f1a55d35f80 RCX: 00007f1a55b7dff9 [ 276.769738][ T7652] RDX: 000000000200000f RSI: 0000000000004000 RDI: 0000000020ff9000 [ 276.777690][ T7652] RBP: 00007f1a55bf0296 R08: 0000000000000005 R09: 0000000000000000 [ 276.785640][ T7652] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 276.793587][ T7652] R13: 0000000000000000 R14: 00007f1a55d35f80 R15: 00007ffc0ec3dcd8 [ 276.801549][ T7652] [ 276.804550][ T7652] Modules linked in: [ 276.809365][ T7652] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 276.840062][ T5232] Bluetooth: hci5: command tx timeout [ 276.901490][ T7652] RIP: 0010:follow_pfnmap_start+0x1a7/0xfd0 [ 276.929357][ T5443] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.942989][ T7652] Code: 8d 9f 80 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 77 37 1a 00 48 8b 1b 48 83 c3 58 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 5a 37 1a 00 4c 8b 23 48 c7 c0 3c [ 276.965197][ T7652] RSP: 0018:ffffc90002dbf100 EFLAGS: 00010202 [ 276.971335][ T7652] RAX: 000000000000000b RBX: 0000000000000058 RCX: 0000000000040000 [ 276.979861][ T7652] RDX: ffffc9000e1c6000 RSI: 000000000000191d RDI: ffffc90002dbf1e0 [ 276.994387][ T7652] RBP: ffffc90002dbf290 R08: ffffc90002dbf311 R09: 0000000000000000 [ 277.002368][ T7652] R10: ffffc90002dbf2f0 R11: fffff520005b7e63 R12: dffffc0000000000 [ 277.012533][ T7652] R13: 1ffff11004e16b76 R14: ffffc90002dbf2e0 R15: ffff8880270b5ba0 [ 277.020754][ T7652] FS: 00007f1a569176c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 277.040222][ T7652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.066297][ T7652] CR2: 0000000000000000 CR3: 0000000070314000 CR4: 00000000003526f0 [ 277.074348][ T7652] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 277.082361][ T7652] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 277.090501][ T7652] Kernel panic - not syncing: Fatal exception [ 277.096839][ T7652] Kernel Offset: disabled [ 277.101151][ T7652] Rebooting in 86400 seconds..