last executing test programs: 9m32.565164615s ago: executing program 1 (id=415): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) 9m32.451382237s ago: executing program 1 (id=416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r0, &(0x7f0000019540)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008005}, 0x42010) syz_open_dev$vim2m(0x0, 0x47b, 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 9m31.00109109s ago: executing program 1 (id=418): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="90", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="a4ad", 0x2}], 0x1}}], 0x2, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 9m27.909951391s ago: executing program 1 (id=433): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x840) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$media(0x0, 0x1ff, 0x52300) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = dup(0xffffffffffffffff) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) 9m25.905091835s ago: executing program 1 (id=438): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = gettid() sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x4040) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 9m24.128793036s ago: executing program 1 (id=442): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = syz_io_uring_setup(0xbda, &(0x7f00000005c0)={0x0, 0xec25, 0x8, 0x3, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000780)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9m8.86200527s ago: executing program 32 (id=442): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = syz_io_uring_setup(0xbda, &(0x7f00000005c0)={0x0, 0xec25, 0x8, 0x3, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000780)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m28.252211967s ago: executing program 0 (id=1701): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES8=r1], 0x0) 1m23.977262976s ago: executing program 0 (id=1710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/157}, 0xa5, 0x3, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r3 = syz_open_dev$sndpcmc(0x0, 0x8000000000000001, 0x20002) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000000280)={0x0, 0x0, 0x4}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000540)=""/181, 0xffffffffffffffce) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x4f27, 0x5, 0x1, 0x0, 0x100067, 0xcc7, 0x3, 0x7, 0xa, 0x4, 0x1002, 0x5, 0x8, 0x1, 0x6, 0x140000, 0x2000001, 0x1a44b, 0x3, 0x40100003, 0x89, 0x2, 0xf27, 0x20001e58, 0x6, 0xe69, 0x191fa504, 0x8, 0x5, 0x3, 0xfffffff8]}) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b52, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}) 1m22.237900994s ago: executing program 0 (id=1711): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x4) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x1, 0x0) mount(&(0x7f00000002c0)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r0, 0xffffffffffffffff) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x1401, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000090) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="38000000101401002cbd7000ffdbdf25060003"], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 1m21.148180244s ago: executing program 0 (id=1713): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1}, 0x0) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) lseek(r4, 0xfffffffffffffff5, 0x1) mount$fuse(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002600), 0xa0001c, &(0x7f0000002640)=ANY=[@ANYBLOB='f', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000020000,user_id', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB=',obj_type=,mask=^MAY_EXEC,\x00']) sendmsg$nl_xfrm(r3, 0x0, 0x2c000010) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, 0x0, &(0x7f0000000300)=0x1024) 1m20.821071164s ago: executing program 0 (id=1715): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3ff7fe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000240)={0xfffc, 0x0, 0xfffd}, 0x8) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x2}, 0x18, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0xe020, 0x0, 0x3}, 0x18, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000200)={0x6, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140), &(0x7f0000000180), 0x0}) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x8, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 1m18.587262864s ago: executing program 0 (id=1719): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$vicodec0(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000004c0)={0x9, @capture={0x1000, 0x1, {0x3, 0x4}, 0x0, 0x6}}) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1m2.908169332s ago: executing program 33 (id=1719): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$vicodec0(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000004c0)={0x9, @capture={0x1000, 0x1, {0x3, 0x4}, 0x0, 0x6}}) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 49.957014097s ago: executing program 6 (id=1776): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1004000, &(0x7f0000000cc0)=ANY=[@ANYBLOB="747970653dd88d17102c6e6c733d61736369692c00b65c5e80ee881a8017a99080db5f384bdecc38aad57f2265deb9bc09ceaa37a446dd9779c499df84c71ac5709884f5a46a6157a859efa0011b98ed9e0084e7f30840308a546dfc131f58f11e2885d3d93d1ea670d769ec2f0aa0c9e9bc2dce36eb80f93e9c66e51cd63047e63897ad645ff9e1c43c323948225427a038840483468e20afe97ee11df867f724292017e27da8ee18b36e12ec848a02f157f0c97084870848c3f5103ccfd56e4127491ea8e57c6de2a2684c421731b94b9a8eb0a73852ee4f6b71e76393bd", @ANYRES64, @ANYBLOB="ddfc36c1a86d80c396383ffcc197726f90603a191b7251c97237be8b92a4e2bee79ac5b0a630acc01ff6292ade8efe9a2912e4d5c0a67df08eb1b07fed89a1ed56983cea56d5a14532e0ca6acc7a0c89adaa25f5a6ab6af98d2a5615273b84368fe9a8162067e4931fc69722717bf6fa16ed2b3637b6a2d728ce8e1da3aaf1c1675d818a3346c6ec8521fb5e76a80770c3c036017ab72c5284bf759b76b729d4eaa7a132ebd7f6043c22b32b", @ANYRES32], 0x4, 0x5d9, &(0x7f00000010c0)="$eJzs3U9rHOcdB/DvrNZrrQuOktiJ2wYqUvqHitqS1m2TgqlaTNEhlIBfgajlWHitBGlTlByKXfxCUoLeQC+55OCDz+1LEPRYKPRURC8uMzu72tiyLCWWdhV/Pvaz8zx6Zn7zm9/OjHZXAgV4aS3PpfkwRZbn3tsqxzvbne7OdufuoJ/kbJJG9T/NsvvPZOpBMpt+y3eTFHW44ln7ufbF5818ef9Gf9SoW7X+1EHbHc69umWpTnLpBcZ79I3jFcMjLINeHwSfBI+f7z/HuPupY4zNYbT6i+IZz8VMci7JdH0fGJy4jRPM8FhMzAUIAAAAx+iV3exmK+fHnQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcJvXf/y/q1hj0Z1MM/v5/q/5a6v6p9nDcCQAAAAAAAADAC/CD3exmK+cH48dF9TP/t6vBherxO/k4m1nNRi5nKyvppZeNLCSZGQnU2lrp9TYWDrHl4r5bLp7M8QIAAAAAAADAt9Rfsrz3838AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgERTLVX1TtwqA/k0YzyXSSVrneveQfg/5p9nDcCQAAAMAJeGU3u9nK+cH4cVG953+jet8/nY+znl7W0ks3q7lZfRbQf9ff2NnudHe2O3fL9nTc3/77SGlUEdP/7GH/PV+q1mjn1p1mvc0f82G6uZlGtWXp0iCf/fO6X+ZU/KZ2yMxu1ssiKb5ffxoyGWaqipzJraxVNZqvcyur8erBlTjis/PknhbSGH7yc+EYan6uXpY1n57omi+OnH1vHFyJ5EfX/rt+u7t+5/atzbnJOaSv6clKdEYq8eZLVYn5qhIXh+Pl/D43MpfZvJ+NrOVPWUkvq5nN9aq3Up/P5ePMwZVa+sro/edl0qqfl/5d9Gg5vV1tez5r+UM+zM2s5pdZzNW8k4X8qvp3deQZvniIq75xtKv+hz+tO68lRbu/nBBlXV8dqevoPXemmhv9yl6VXnvx98bm9+rOVFI0hzlNgicrsTBSidcPrsRfH5ePm931Oxu3Vz465P5+Ui/L7xJnn/td4iTr1KrP3v4rla+eHeXc6/vOLVRzF4ZzjafmLg7nnnelturXcE9HWqzm3tx3rlPNXRqZaw/nLg9fbwEw8c797Fyr/a/239uftR+0b7ffm/7d2XfOvtXKmUdnft2cn/px463ib/ksf957/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHx9m598emel213d0NHR0Rl2xn1n4iRc6d396MrmJ5/+fO3uygerH6yud+Z/sfhuZ2Hx3atXbq11V+f7j+NOk2Oyd9GPOxMAAAAAAAAAAACO4iR+nXTcxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDpsTyX5sMUWZi/PF+Od7Y73bIN+ntrNpI0y+X/kqkHyWz6LTMj4Ypn7efaF5838+X9G3uxGoP1pw7a7nDu1S1LdZJLLzDeo28crxgeYRn0+iA4jNv/AwAA///YHBzc") r0 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x3f00, 0x7) 49.465387047s ago: executing program 5 (id=1779): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x5, 0x4) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x88040, &(0x7f0000000a80)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@grpquota}, {@nodioread_nolock}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@nodelalloc}, {@auto_da_alloc}, {@init_itable}]}, 0x5, 0x596, &(0x7f0000000400)="$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") r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="1241d03e00e4"}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r1, &(0x7f0000000480), 0x0, 0x10022, 0x0) 49.130257414s ago: executing program 6 (id=1780): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1}, 0x0) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) lseek(r4, 0xfffffffffffffff5, 0x1) mount$fuse(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002600), 0xa0001c, &(0x7f0000002640)=ANY=[@ANYBLOB='f', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000020000,user_id', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB=',obj_type=,mask=^MAY_EXEC,\x00']) sendmsg$nl_xfrm(r3, 0x0, 0x2c000010) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, 0x0, &(0x7f0000000300)=0x1024) 48.333107082s ago: executing program 5 (id=1781): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x38, &(0x7f0000002380)=""/5, &(0x7f00000023c0)=0x5) 48.073961612s ago: executing program 5 (id=1784): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x6, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRES8=r3, @ANYBLOB="4a2dbf01f9311db375e047b1b8af56e792cfcc89887094c4fb837d22a6d1ca372423cbebe0bfce4841acdec9437824bda0df91236663049667a07a1a9f25b1"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x8) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa140) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000280)={{0x0, 0x0, 0xfff, 0x2, 0x2}}) 47.868854738s ago: executing program 6 (id=1785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x0) 46.688024579s ago: executing program 6 (id=1788): syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1501, &(0x7f0000002a80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) close(r0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304c24, 0x0) 46.394621162s ago: executing program 5 (id=1791): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1001a, &(0x7f0000000280)={[{@quota}, {@nolazytime}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x3829410, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) 45.772030729s ago: executing program 6 (id=1795): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000100000085000000b600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 45.622710689s ago: executing program 5 (id=1796): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1}, 0x0) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) lseek(r4, 0xfffffffffffffff5, 0x1) mount$fuse(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002600), 0xa0001c, &(0x7f0000002640)=ANY=[@ANYBLOB='f', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000020000,user_id', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB=',obj_type=,mask=^MAY_EXEC,\x00']) sendmsg$nl_xfrm(r3, 0x0, 0x2c000010) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, 0x0, &(0x7f0000000300)=0x1024) 45.329111537s ago: executing program 6 (id=1798): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000105804380100000000000109022400010000000009040002010300000009210000000122f80409058103"], 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x81, 0x60, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x12}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x84, 0xc, 0x0, {0x7, 0x25, 0x1, 0x1, 0x4, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xd, 0x7, 0xc6, {0x7, 0x25, 0x1, 0x81, 0x40}}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220508", @ANYRES16=0x0], 0x0}, 0x0) 44.671738386s ago: executing program 34 (id=1798): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000105804380100000000000109022400010000000009040002010300000009210000000122f80409058103"], 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x81, 0x60, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x12}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x84, 0xc, 0x0, {0x7, 0x25, 0x1, 0x1, 0x4, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xd, 0x7, 0xc6, {0x7, 0x25, 0x1, 0x81, 0x40}}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220508", @ANYRES16=0x0], 0x0}, 0x0) 41.572711608s ago: executing program 5 (id=1806): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg}, 0x94) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, 0x0, 0x4c004) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=@gettaction={0x28, 0x32, 0x301, 0x0, 0x2, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x4000000) 41.058226796s ago: executing program 35 (id=1806): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg}, 0x94) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, 0x0, 0x4c004) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=@gettaction={0x28, 0x32, 0x301, 0x0, 0x2, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x4000000) 13.633023324s ago: executing program 4 (id=1864): syz_open_dev$video(0x0, 0x7, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002004000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 13.469149674s ago: executing program 4 (id=1865): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffff8602201a, 0x0, 0x7, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) 13.435289655s ago: executing program 2 (id=1866): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 13.197056189s ago: executing program 2 (id=1867): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x2, {0x2, 0xf}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000080)={0x5, "da8019dea5c88d695f73e31c18f0c7c7fdac910ee2000e08b73b53930efb1a00"}) 13.19658855s ago: executing program 4 (id=1868): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x24044084) sendmmsg(r2, &(0x7f0000000180), 0x40000000000007b, 0x4004) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x28, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4}}, @CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8}]}, 0x28}}, 0x40) sendmsg$IPCTNL_MSG_CT_DELETE(r4, 0x0, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) 12.231646178s ago: executing program 4 (id=1869): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x34b7, &(0x7f0000000000)={0x0, 0x0, 0x30c0, 0x0, 0x24}, &(0x7f00000001c0), 0x0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x3734, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7dc0, &(0x7f0000000880)={0x0, 0x5, 0x20000, 0x2, 0x2000000, 0x0, r4}, &(0x7f0000000780), 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r5, 0x58, &(0x7f0000000500)}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=""/221, 0x200000000000000}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 9.704870617s ago: executing program 2 (id=1871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r4, &(0x7f0000004400)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeea}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x40002042, 0x0) 8.712739289s ago: executing program 3 (id=1873): write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x9, 0x203104, 0xc, 0x7, 0x401, 0x7, 0x0, 0x0, 0x80, 0x8}}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'wlan0\x00', @random="7cf1e97c9e4f"}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x10) creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001400)="c6db895249a70190efd23a214cad28349bf4a28269480c9bc914a10ea1ea6570d12d4a82744ba0045a801ad7de161e60b7c83fe563365e5acff84d205e0d53d57aa35ff6f3b0543140895196020d9afcb0c97e0e6e0f7245f8bfe9018d88136e2cee9049a74c7d620b9e49358a0558f266cc1467f12ebbce067e17d4fe77e065703504884e8bb5a6f24a010aa4ad168bf3074d6b72b6d727923815a7f03baa67a262ce457dcf1423074fe42584e9589ffc786204a961b046dbe81f77219f7c3ee699fbb8e76952d01dcdee5247e6a6d77b3daeed964188a0cdf1e8d3bbce8015b97de99b73ac27f5af7a81de5867cb19f2baef77b036abb949d37d34a73a0eb663a906c49d0cdd531432e4b4f1a4072c580fa19e20f3dcfaeddd9c41cf07a4fb410c44e3b5fe28f2042dfb1956ced8a964af756ba53b0766a35f4c60cb5c4f1340625501e48d3b71480688f19976137e9113c386b7a83ca137ae03717e472a73d8c3fa52545a662b8489f7aaea770db996a0050d15402729198b155b6bb627ab8735354e5c3d0351893fcf57ef23df88b9c383279a142f3d3fa8dba7a40fdafa72b07394c182621b4516230bd849c493fe0cafc830332b6bf7495ec2184e833dd208e3e6c97af6533df9e519fb968f0e0b39a72451ccffa7003395ce78a1b1b6a1ff24032a711984c37061d69922fdbeead34993d312d9f0abd5d2933a8bc1af25b9568c07a588194718fa073dd4caf86102b6b4600e631877a7e66aca47261a79f391f3a5a17c460a345c4839d8b1d7a4a9c3b3a712e7a09885b6cc8fba30a0ffdf9ef6d57ffe57f4eb53c7882479245a190ce3e52f823eb81631cb22483bda591a650c2db9392b7371d0501ea77cc5687a46639a61f52f3f2598989450e7dee6e0227a59b64582a93362f4718a17df73c61a9984ba98d249d6602e6442f9592b19b976d8ee466fc7913eddb43e0c8bc4f0bee2a433c85ada2f17b194ebb8f1818f565715ae963609407fe9c77140e90ae770d4158549fdd154cde390dcfc004410c2f6b00672f1f2023e3a7b8f2da4beee6b96ba0198abbdd8175211438a9f21b818c662e735e14090fa567c922abe2888bd00eeb7eb630166901ba6ba13b0925dba9e1db2de81e566f92d50701fa15828e127352d424a38f3081816baee6b548e44365fcf08971a19630f335ad4225aef574f2c8038472a7220fa0196dbddce60dda9f0c28297719cca2370297593e9fab985000ab3260910b3a057c3a2bdd2ac5dfb62c353f95d3a3fee676cf94c8e5b4cc8b5601de8e2f6932e50c09d5742c9c8ff27bf2ce0d9d2c8f9a578c08a6dee9f711f148f7d1eca02bd25deb2e44fbe42133c0a5f4ce4d1d90228a2a44e91879d6b983cd8afc11f9bea9fef1dc81f4035cc1218d6d23ca1acbd077064b6c3c7385c0adf43b199cda9e34a56899f5431832d191c1ddec1e0e4ef9cd6d689abd18149fa8d522d2a9f5213a5ffd0fdc60c6f877ae40b285de77f8bb136c81fea3a820b6a1d59dfb47b3472cf0127c0a17c2c0b994eb205ba99c9a13b1479d83e9e21174839bfb46cedad9d9af40afadbb17c5ef4b5997f5f24795dcfcb8f3de085153eb853dbf93e5706956a9644ee877aee5e277d51be5a6558ed78099b4767965f040e4a63ec7f1407cea9970cf92c2c512148b4b811d435bd1b52cae5f7714eacad2ea9fee4f60b9deb41e0521aa5d2fbcd2a584003efef1a2164a2a41a5e9522dd74323a9e727c696d520f808b2fb401f622ddbf82e324130c75b7ce918f3ad9ba87abeb1fa99cd011ff01c990cf7d3e104a514f0a42d8aa5e2256e14e8f13142760e177f70dd99178db54c75819012896f890c45b6da9881a85e5e9dbe437e1840cc4e1dd7d2acb1067ae360c2fac303212dc0f4be2f3b5b001fca6e5af0c13e70d32f96fddd2ebdae4c5b39a91576584fe7e1a004467432930c4b2338399b16b16df199be6ef3f2017e37c219b9a2333f197d4c05f3885570589379c1769a2238c69c889b1627d6fa76775f0d6abccbfd416e17e05e2233a297eb967e9837c7ea181fbe284f430bfb22ea7b3584ff79c70b1416f81c12e0d14b6743c145e58fcd8de7e4913a38f72e4076076c7bb9084a0c82c98d9b16ad1da4c5c0fe67b7db7573fc6a178765263cd130f105a573a0179b38bc4f27296758ac08c377f6fee5d24dace6ed54495d03cd43a310cd2265032c02e5bc9e6dbba1a80a359dfb66dc1d3d040867a08942809a2ad091b1a04f39de2961e7e2ae8d280cc64fad468093a11558ea9198bd600068b9bfb1733392c032b10bb4fc2c288b1ba4f5f6c13a15f1251ab459f977be92901c2793ff2202c4f22087683667bf156e002665b1da68e504b76893c94aa54592c4ad91943753c713e6f83237b03b8832140b38ef8c215f893ca4e6bb280be2f3479951966e270343b015b06fe52008b416b87386d8db0f04bab7fc6885699a359a5fcb602bd8079299cd9af6c90087b7f4ec70c26c09fce04b4abace0801468e745883b389cc56b0f519bd73692a52db20b805f070568aa789882cf905dd756ddda310a7a3c19b664ddbe5df066fa72e0ef98c62eb09b836c5ea0d733542eca9b0bd20de1ac909f925223aa8e150adfd8333c43f5d48b9f880240bb4f3ce8d44a5d33781278548c6160d181c3e9f856e8d92b0f2b5a9a0d7a221d94e13a9ddc7813686194a999f0d6ad19ef27b100ce13dca7b120772cf031ff86a14e76e39f8ded32138b4fb86b5f97587cf244ab510012f9e52c2a826e6aad4d550f56e87e36bcd20bf37dc19413940fb6afdcb082e267fc2ecad1f9504dd7e74b461e6ae3076306225ca07e47c40c0ab84bdf5c23dbf5bc65592649ea41b34e3c2ddb386ff06f2472d9e695b6b083ba8dd01ba992224f2f0bb7b63e4667f1d58f08f644d3d56663cf57a3761aebe71943fe9d728eca19ef90627614f735aef161ec624a01d257b65457b35163af05385242042f7a26aaf14e8a9903cf6633cb9afdf1e21eeee98d947df64e3f2b4df5b251c5c6a96081dca367709d2e5bcf3616179426cd9019e5fe367c8d5a3bd6ec04709b551d80d1f31ecf567c69305c2822844fbba27c1cf8c1b514140f874f7eb18921f6b00388c19a1dc6610ef908b0e452f24a36ecfb292c1f592ead7f26fd0f179707a2ce9628e5ac538f12405833a6319906b2455ba6ee4ef7201b59c45a4ec737754be66ebe24c8eaf1c9be4e499f62a038886db40f00da95978759c4d6c93fe65e59b0a4fe1d35efde2880feef6d0e8e4bdd0bb76895ed28eb7947c2f8d4e20881863f5d9fd15d0794c2c56baea19a9741cb33c6d0f24ee2f03e940e5d5ef2f4deca4f9964dd15f68256185ab119d2566d16c0aee629ea50051221010b022da21f95296f48949ae6a1c7d7ad1d8510291ba384918b57df8026020c192c267c110707bc29df14afd1fffab9dcad1f589e66f12853dfd5ca5ff50fbc5407b6378e2f93d6b960ee9641b39d11c70bcded72f5400d3701d4137152c26fcb8a74ce4b483310180b5487ba67a9d09cbadf4ab4747fb636f7bd8e464366c059475b573267198fec0cc7667be8511ae066a9c4aad6023818824a738155516116ca3be30ef1399b679a3b2b5d040235a61ae61f2764951682b0f19af683f2bd90b49f49bf112d4507e63266e77938512e0d3ef24cec89e9457ffb72dc4f58ced023fa81f6ba1dc0f02b291897cc31f1e24a8a392a64ce39740c3dc3aaac32dad2e881347ce88f65efba9ee028966c04f79013f97176f4fb8d3ea03810008daff1f11b2282b7e5bc7322edcef4785bb0fe7b1988c712d95f737d36c80135aefff12ff02487188c9b1aa16a6ece2f5b4388ee04a71aac1e7c634edde5e580dfea077a5c93b31b56c2e9da6844b0a0ae92a5e1a108f418d94cf61741d11414a380bda12a7a9fd2f551a955c6130bb074c3e87bcbab13d4e43687aec2dc7a8a70a19991efcabb5bda8bfab39f11d5904f5a11fb1d2d2e45de34c494ba955a0a832832b6317d26ca332b3e675d452909c34af036e63850715689ecf6352a8602d2fcab7dd4756797d2f8a86948e663a50da7186f869aba7f27d1cff106bfaf1f26f6c8ac8a70978414733791412da2d32d31c93ff6107f59f447cd84a8c6cba2dd2ffccb731b7bf8b6519a5f9ba7ccd2c5f95d938cb3644debab8d6670d0be320c6a0e5c6d0e67916273c350932d4a574d08b00a0246919ed93b82438bba74e1505c4e8a1ca7c6afd68dc5f8e8c487ac588c088c8a86ae579fe74d40bae96ab3adc7becc5db30ffcd4022c0bc613d00fce7f2ddcfac8e090fa48307e2025091a6cc9ca9eb25adaa7aa9e967645038f179c37ac677e62c0fc68118ccec6106498ff1ae485ca68766155f740191b74fc03db1fe21100e6f2a6816a22fbf6a3898fca1c924c8e18a06a004296b35cb013d81db26255417f4c6ad0eb7af2ddca3cb40724715352948cf31a8f6c0b1c63c3b254cd10aeccb2d52d9a9724292c38b09490bde66989b521ac9ffc2d00ea8f3f04f40c3c3bbdc00804e2fbd195d177f625a1951d5814826d810edcd7b77e089df024efb49996977235cbd67f01143dd97d3120f1323f7e2f2103c8f62024b450e0e547ed61838d1ebbaa64cc6531f9c4145b497e24af0c3e9313130a3b0fae61c663ab42d85525c5e95b488063d3c7487f0ebfaf1e0182e16d2c14e99aedee54645ef4b8cf46cd07f9240eec745b2a846f02a3b209fa317d16be52ecf51277b1122ba5fb868ebe8050ad4b0e81ea30899f8398c10d8ca0b8e7f72abfe90f0153fe53b2975ef7a1ed85a088f1588fd73b8379b6435220fdda26f6ca9e1904b35a8b0e181f8f8180d96b28df2327a0776e46da8683422cf37d0958d9fe816e564273df81f3cda1d92777368bf2622a71911201a08911b12558dbfc8a65197c351d03ccb904a3f3ce029553decddd762e27c4e6ed9c3f092d1c87a90268c12eb61106affb5fe742bfd82369d14d9ee7f0572d0fe213607dfe86d40c44c3680dfecb8a0eb9dc0ad7135a2a3fa1797a0ccde16e307208afe6bcb6275d1e9813901e1f9588bfcab1649320baa8af58755561d0a5c1ac7ed4770d7cdd86e907d439e3d7dcfc0a303d8fa8881cfe0c93a6de7d2a5ed9e97159399dbb5552da56d494bb3f571fb175bbd66d31b32f27a9df0f181cc0c71d514ab9d148982337ff365c1feed8bb261dc2b5e0fa43388298652a684c59a6f39de9f7f8e22f6268f93e9b9d7b4966bd9884291e99fe737bd4f424f8e60c9072cd82e5414428bacc3e4f133e49afc464f5cb91fd9028c7777d43e4b8e925283e0d57377fc21d25bfeaea4139e17b91f79c68f2df5ab61ecd2c95f9de4ba2c49664e99d646c771f97d1372e27f54c3a4c1dd121860368d0ddda95e004236d202b11f18d459468061758f882aabd055de50b9e4759f281fedd20ad51699c50b679f2092f94b524839ecf7d2aa542b5ecae0e026295c82741534f38cefdf833267a2edf4acd3c9c2f0848a25440448d0a1cc2c77fff87169dd33d2a9cdc3a4e17ced0763eb7da5dc719c297ce637d7bb47fed9717c0ca6ca610ac5b61e08ef07c6d2f18f432f7b9952477abdcdb7a77fea2792ba87848907b70eae46f253cfee227ca2424e10591293264e4f678f639be28d1c423d3c6e4b1ac24ce264ec1c36508b715c86c2486f2659081f73e44f83d47cd8ed811eaeafc48e78b62af7fbb021539c85c6fe8b38f1d4f9beb3b522b23b86305c3c5dba20212fafc", 0x1000}, {0x0}, {0x0}, {&(0x7f00000006c0)="18f89e083e27335464a5949d5156aee5e53e38bd8afbacaabec07d4ff6c529ca56290639546170fcb3c964cd9a6ad2457e9faf7c5bb057e3a191569534b9d31273fc13", 0x43}, {&(0x7f0000000580)}], 0x5}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000980)}], 0x1}}], 0x2, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.4722796s ago: executing program 4 (id=1874): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56a, &(0x7f0000000580)="$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") ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000300, 0x0, 0x0) 7.731605843s ago: executing program 2 (id=1875): syz_open_dev$video(0x0, 0x7, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002004000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 7.357750503s ago: executing program 4 (id=1876): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019ef00000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xa06, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18000000}, 0x50) syz_usb_connect(0x5, 0x3e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xd1, 0xd4, 0x60, 0x40, 0x763, 0x2019, 0xa036, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2c, 0x2, 0xa, 0x7, 0x60, 0x81, [{{0x9, 0x4, 0x5c, 0x4, 0x1, 0x71, 0xab, 0xaa, 0x8, [], [{{0x9, 0x5, 0x80, 0x0, 0x400, 0x7, 0xb, 0x5, [@generic={0x8, 0x4, "96d538c07fbb"}]}}]}}, {{0x9, 0x4, 0x0, 0x1, 0x0, 0x43, 0x13, 0x69, 0x4}}]}}]}}, 0x0) 7.081020602s ago: executing program 3 (id=1877): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @dev={0xfe, 0x80, '\x00', 0x27}, 0x80000004, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014, r2}) 7.063366375s ago: executing program 2 (id=1878): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 6.801735758s ago: executing program 3 (id=1879): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x24044084) sendmmsg(r2, &(0x7f0000000180), 0x40000000000007b, 0x4004) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x28, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4}}, @CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8}]}, 0x28}}, 0x40) sendmsg$IPCTNL_MSG_CT_DELETE(r4, 0x0, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) 3.959856332s ago: executing program 3 (id=1880): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x5}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000d00)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001dc0)=""/4096, 0x1000}], 0x1}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000d80)=""/4096, 0x1000}], 0x1, &(0x7f0000000b80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x3, 0x40000000, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x204) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee00000000000000000200", 0x57}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40100, 0xa6) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000040)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.938868705s ago: executing program 2 (id=1881): socket(0x8000000010, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x0, {0x2, 0x4e20, @multicast1=0xe000cc02}}) 1.120981541s ago: executing program 3 (id=1882): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') socket$netlink(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000000c0)={r5, 0xf9b}, &(0x7f0000000100)=0x8) 0s ago: executing program 3 (id=1883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x1, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44004) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x115d, &(0x7f0000000440)={0x0, 0xdd3a, 0x80, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) creat(&(0x7f0000000180)='./file0\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) utime(&(0x7f0000000140)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): k nbd3: shutting down sockets [ 267.201325][ T7740] nbd3: detected capacity change from 0 to 10 [ 267.209185][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.610512][ T5862] Bluetooth: hci6: command tx timeout [ 269.942122][ T7697] chnl_net:caif_netlink_parms(): no params data found [ 270.123012][ T5919] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 270.691408][ T5862] Bluetooth: hci6: command tx timeout [ 270.791658][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 270.950816][ T5919] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.030814][ T5919] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.093055][ T5919] usb 1-1: config 0 interface 0 has no altsetting 0 [ 271.194730][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.514'. [ 271.534042][ T5919] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 271.581819][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.796591][ T5919] usb 1-1: config 0 descriptor?? [ 271.836025][ T36] bridge_slave_1: left allmulticast mode [ 271.847289][ T36] bridge_slave_1: left promiscuous mode [ 271.867181][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.990480][ T36] bridge_slave_0: left allmulticast mode [ 272.017401][ T36] bridge_slave_0: left promiscuous mode [ 272.083450][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.760249][ T5919] usbhid 1-1:0.0: can't add hid device: -71 [ 272.766367][ T5919] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 272.984086][ T5919] usb 1-1: USB disconnect, device number 6 [ 273.200999][ T7804] netlink: 'syz.0.520': attribute type 2 has an invalid length. [ 275.040001][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.060262][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.078115][ T36] bond0 (unregistering): Released all slaves [ 275.109861][ T7784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.120637][ T7784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.136057][ T7784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.148717][ T7784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.332895][ T7795] gre1: entered allmulticast mode [ 277.467625][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 279.157329][ T7852] sd 0:0:1:0: device reset [ 279.409649][ T7697] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.427922][ T7697] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.443554][ T7697] bridge_slave_0: entered allmulticast mode [ 279.451379][ T5919] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 279.457874][ T7697] bridge_slave_0: entered promiscuous mode [ 279.745012][ T7697] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.865447][ T7697] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.908895][ T7697] bridge_slave_1: entered allmulticast mode [ 279.913357][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 279.939463][ T5919] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 279.949449][ T7697] bridge_slave_1: entered promiscuous mode [ 279.971048][ T5919] usb 1-1: config 0 has no interface number 0 [ 280.420071][ T5919] usb 1-1: config 0 interface 29 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 280.445439][ T5919] usb 1-1: config 0 interface 29 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 280.457412][ T5919] usb 1-1: config 0 interface 29 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 280.469075][ T5919] usb 1-1: config 0 interface 29 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 280.514574][ T5919] usb 1-1: config 0 interface 29 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 280.587022][ T5919] usb 1-1: config 0 interface 29 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 280.648799][ T5919] usb 1-1: config 0 interface 29 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 280.721255][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 280.728791][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 280.742967][ T5919] usb 1-1: string descriptor 0 read error: -71 [ 280.759591][ T5919] usb 1-1: New USB device found, idVendor=03f0, idProduct=0207, bcdDevice= 0.01 [ 280.808497][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.834544][ T5919] usb 1-1: config 0 descriptor?? [ 281.035985][ T5919] usb 1-1: can't set config #0, error -71 [ 281.090752][ T5919] usb 1-1: USB disconnect, device number 7 [ 281.106257][ T7697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.795165][ T7697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.363617][ T36] hsr_slave_0: left promiscuous mode [ 282.394928][ T36] hsr_slave_1: left promiscuous mode [ 282.430726][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.438166][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.662414][ T36] veth1_macvtap: left promiscuous mode [ 282.668170][ T36] veth0_macvtap: left promiscuous mode [ 282.726732][ T36] veth1_vlan: left promiscuous mode [ 282.768315][ T36] veth0_vlan: left promiscuous mode [ 283.862120][ T7899] (syz.5.543,7899,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 283.890100][ T7899] (syz.5.543,7899,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 285.833121][ T7930] sd 0:0:1:0: device reset [ 288.238054][ T36] team0 (unregistering): Port device team_slave_1 removed [ 290.209023][ T36] team0 (unregistering): Port device team_slave_0 removed [ 291.034019][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 291.234366][ T7697] team0: Port device team_slave_0 added [ 291.261936][ T7697] team0: Port device team_slave_1 added [ 293.514436][ T7697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.530467][ T7697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.560493][ T7697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.585605][ T7697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.600589][ T7697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.637407][ T7697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.525439][ T7697] hsr_slave_0: entered promiscuous mode [ 294.565034][ T7697] hsr_slave_1: entered promiscuous mode [ 294.621867][ T7697] debugfs: 'hsr0' already exists in 'hsr' [ 294.806759][ T7697] Cannot create hsr debugfs directory [ 295.550610][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.570'. [ 297.890519][ T8061] serio: Serial port pts0 [ 298.124579][ T7697] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 298.159185][ T7697] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 298.228611][ T7697] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 298.268937][ T7697] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 298.908577][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 299.979073][ T7697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.118664][ T7697] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.158174][ T6104] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.165328][ T6104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.192946][ T6104] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.200213][ T6104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.552761][ T8126] sd 0:0:1:0: device reset [ 302.246393][ T7697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.686819][ T8145] netlink: 'syz.0.597': attribute type 1 has an invalid length. [ 303.694672][ T8145] netlink: 144 bytes leftover after parsing attributes in process `syz.0.597'. [ 303.703793][ T8145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.597'. [ 304.247162][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'. [ 306.835950][ T8174] nvme_fabrics: missing parameter 'transport=%s' [ 307.038949][ T8174] nvme_fabrics: missing parameter 'nqn=%s' [ 307.650449][ T5862] Bluetooth: hci5: command 0x0c1a tx timeout [ 308.991429][ T7697] veth0_vlan: entered promiscuous mode [ 309.102373][ T7697] veth1_vlan: entered promiscuous mode [ 310.153535][ T7697] veth0_macvtap: entered promiscuous mode [ 310.230819][ T8182] syz.3.604 (8182) used greatest stack depth: 19656 bytes left [ 310.551463][ T7697] veth1_macvtap: entered promiscuous mode [ 310.688366][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'. [ 310.764893][ T8204] vlan2: entered promiscuous mode [ 310.769983][ T8204] syz_tun: entered promiscuous mode [ 311.129847][ T7697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.296201][ T7697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.346270][ T6117] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.590683][ T6109] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.670885][ T6109] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.741330][ T6109] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.226563][ T6749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.270851][ T6749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.437908][ T6104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.633806][ T6104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.900786][ T5918] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 315.174241][ T8256] gre1: entered allmulticast mode [ 315.203701][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 315.257530][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 315.646795][ T5918] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 315.693405][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.721957][ T5918] usb 5-1: Product: syz [ 315.741776][ T5918] usb 5-1: Manufacturer: syz [ 315.746386][ T5918] usb 5-1: SerialNumber: syz [ 315.795649][ T5918] usb 5-1: config 0 descriptor?? [ 315.899798][ T5918] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 316.020465][ T5919] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 316.260708][ T5919] usb 7-1: Using ep0 maxpacket: 16 [ 316.292450][ T5919] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.317239][ T5919] usb 7-1: config 0 has no interface number 0 [ 316.338934][ T5919] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.369010][ T5919] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.411122][ T5919] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 316.449909][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.463857][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.475267][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.530092][ T5919] usb 7-1: config 0 descriptor?? [ 316.864608][ T8277] sd 0:0:1:0: device reset [ 316.940145][ T6749] usb 5-1: Failed to submit usb control message: -110 [ 316.990725][ T6749] usb 5-1: unable to send the bmi data to the device: -110 [ 317.027520][ T6749] usb 5-1: unable to get target info from device [ 317.059313][ T6749] usb 5-1: could not get target info (-110) [ 317.094095][ T6749] usb 5-1: could not probe fw (-110) [ 317.236074][ T8286] netlink: 2 bytes leftover after parsing attributes in process `syz.2.632'. [ 317.308710][ T5919] uclogic 0003:28BD:0071.0002: failed retrieving string descriptor #100: -71 [ 317.923337][ T5919] uclogic 0003:28BD:0071.0002: failed retrieving pen parameters: -71 [ 317.939106][ T5919] uclogic 0003:28BD:0071.0002: pen probing failed: -71 [ 317.947961][ T5919] uclogic 0003:28BD:0071.0002: failed probing parameters: -71 [ 317.955905][ T5919] uclogic 0003:28BD:0071.0002: probe with driver uclogic failed with error -71 [ 317.969643][ T5919] usb 7-1: USB disconnect, device number 2 [ 317.997808][ T8290] netlink: 168 bytes leftover after parsing attributes in process `syz.3.630'. [ 318.408800][ T5942] usb 5-1: USB disconnect, device number 5 [ 318.687271][ T8290] syz.3.630 (8290): drop_caches: 2 [ 318.908656][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.6.635'. [ 321.171046][ T8323] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.241653][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.642'. [ 325.073685][ T90] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 325.940367][ T90] usb 7-1: Using ep0 maxpacket: 16 [ 325.948570][ T90] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 325.961687][ T90] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 325.970894][ T90] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.978875][ T90] usb 7-1: Product: syz [ 326.091418][ T90] usb 7-1: Manufacturer: syz [ 326.135243][ T90] usb 7-1: SerialNumber: syz [ 326.171787][ T90] usb 7-1: config 0 descriptor?? [ 326.414448][ T90] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 326.529655][ T8382] vlan2: entered promiscuous mode [ 327.622783][ T6119] usb 7-1: Failed to submit usb control message: -110 [ 327.770459][ T6119] usb 7-1: unable to send the bmi data to the device: -110 [ 327.777860][ T6119] usb 7-1: unable to get target info from device [ 327.791475][ T6119] usb 7-1: could not get target info (-110) [ 327.815452][ T6119] usb 7-1: could not probe fw (-110) [ 328.231566][ T5849] usb 7-1: USB disconnect, device number 3 [ 329.088066][ T8403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.297459][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 330.400523][ T8415] sd 0:0:1:0: device reset [ 330.505932][ T8414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.660'. [ 330.724368][ T8418] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 331.084397][ T8435] bpq0: entered allmulticast mode [ 331.813159][ T90] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 332.496930][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.666'. [ 332.520388][ T90] usb 5-1: Using ep0 maxpacket: 16 [ 332.531280][ T90] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.593083][ T90] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.651808][ T90] usb 5-1: config 0 interface 0 has no altsetting 0 [ 332.851006][ T8463] netlink: 2 bytes leftover after parsing attributes in process `syz.2.670'. [ 333.165157][ T90] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 333.179286][ T5862] Bluetooth: hci2: command 0x0c1a tx timeout [ 333.209696][ T90] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.229913][ T90] usb 5-1: config 0 descriptor?? [ 333.321060][ T8464] wg1 speed is unknown, defaulting to 1000 [ 333.329558][ T8464] wg1 speed is unknown, defaulting to 1000 [ 333.380258][ T8464] wg1 speed is unknown, defaulting to 1000 [ 333.614623][ T8464] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 333.797171][ T8442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.821014][ T8442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.881178][ T8464] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 334.093913][ T90] usbhid 5-1:0.0: can't add hid device: -71 [ 334.100015][ T90] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 334.313359][ T90] usb 5-1: USB disconnect, device number 6 [ 334.371479][ T8464] wg1 speed is unknown, defaulting to 1000 [ 335.064074][ T8464] wg1 speed is unknown, defaulting to 1000 [ 335.318097][ T8464] wg1 speed is unknown, defaulting to 1000 [ 335.387069][ T8464] wg1 speed is unknown, defaulting to 1000 [ 335.994653][ T8464] wg1 speed is unknown, defaulting to 1000 [ 336.062325][ T8464] wg1 speed is unknown, defaulting to 1000 [ 336.409256][ T8492] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 337.867177][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 337.924230][ T8514] (syz.2.685,8514,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 337.950604][ T8514] (syz.2.685,8514,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 338.561721][ T8553] netlink: 'syz.0.688': attribute type 1 has an invalid length. [ 338.763906][ T8553] netlink: 144 bytes leftover after parsing attributes in process `syz.0.688'. [ 338.981083][ T8553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.688'. [ 340.324966][ T8580] sd 0:0:1:0: device reset [ 340.660774][ T5918] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 341.050476][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 341.069832][ T5918] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.272687][ T5918] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.110392][ T5918] usb 1-1: config 0 interface 0 has no altsetting 0 [ 342.117037][ T5918] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 342.229496][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.267840][ T5918] usb 1-1: config 0 descriptor?? [ 342.510880][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.698'. [ 342.555979][ T8572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.667915][ T8572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.936753][ T5918] usbhid 1-1:0.0: can't add hid device: -71 [ 342.948584][ T8610] program syz.4.703 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.974716][ T5918] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 343.290914][ T5918] usb 1-1: USB disconnect, device number 8 [ 344.286695][ T8635] sd 0:0:1:0: device reset [ 346.317619][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.714'. [ 346.565691][ T8658] (syz.2.716,8658,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 346.610750][ T8658] (syz.2.716,8658,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 347.760109][ T90] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 348.055315][ T8682] sd 0:0:1:0: device reset [ 348.870413][ T5918] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 349.463723][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 349.465319][ T90] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 349.480590][ T90] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 350.285495][ T90] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.298655][ T90] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 350.307754][ T90] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.333659][ T5918] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.552643][ T5918] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.070559][ T5918] usb 6-1: config 0 interface 0 has no altsetting 0 [ 351.077208][ T5918] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 351.095205][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.139084][ T5918] usb 6-1: config 0 descriptor?? [ 351.216760][ T5918] usb 6-1: can't set config #0, error -71 [ 351.289972][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.728'. [ 351.801875][ T5918] usb 6-1: USB disconnect, device number 4 [ 354.050727][ T5862] Bluetooth: hci5: command 0x0c1a tx timeout [ 355.765910][ T90] usb 1-1: can't set config #27, error -110 [ 356.570413][ T5935] usb 1-1: USB disconnect, device number 9 [ 357.190615][ T8751] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 357.206642][ T5919] IPVS: starting estimator thread 0... [ 357.320412][ T8759] IPVS: using max 26 ests per chain, 62400 per kthread [ 357.680455][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 357.872913][ T8775] (syz.0.748,8775,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 358.046206][ T8779] lo speed is unknown, defaulting to 1000 [ 358.053461][ T8779] lo speed is unknown, defaulting to 1000 [ 358.068119][ T8779] lo speed is unknown, defaulting to 1000 [ 358.286758][ T8779] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 358.609547][ T8775] (syz.0.748,8775,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 358.676949][ T8779] lo speed is unknown, defaulting to 1000 [ 358.684698][ T8779] lo speed is unknown, defaulting to 1000 [ 358.692112][ T8779] lo speed is unknown, defaulting to 1000 [ 358.699435][ T8779] lo speed is unknown, defaulting to 1000 [ 358.706672][ T8779] lo speed is unknown, defaulting to 1000 [ 358.731813][ T8779] lo speed is unknown, defaulting to 1000 [ 360.967518][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 360.967538][ T30] audit: type=1326 audit(1754532545.114:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.6.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074ad8ebe9 code=0x7ffc0000 [ 361.404326][ T30] audit: type=1326 audit(1754532545.124:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.6.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074ad8ebe9 code=0x7ffc0000 [ 361.540908][ T30] audit: type=1326 audit(1754532545.124:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.6.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f074ad8ebe9 code=0x7ffc0000 [ 361.640858][ T30] audit: type=1326 audit(1754532545.124:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.6.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074ad8ebe9 code=0x7ffc0000 [ 361.740560][ T30] audit: type=1326 audit(1754532545.124:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.6.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074ad8ebe9 code=0x7ffc0000 [ 361.901246][ T8830] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 368.382551][ T48] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 368.570844][ T48] usb 7-1: Using ep0 maxpacket: 8 [ 368.598085][ T48] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 368.637571][ T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.680167][ T48] usb 7-1: Product: syz [ 368.697210][ T48] usb 7-1: Manufacturer: syz [ 368.723182][ T48] usb 7-1: SerialNumber: syz [ 368.765304][ T48] usb 7-1: config 0 descriptor?? [ 368.780755][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 368.955984][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 368.986927][ T10] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 369.015723][ T48] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 369.044093][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.079485][ T10] usb 4-1: Product: syz [ 369.090445][ T10] usb 4-1: Manufacturer: syz [ 369.096377][ T10] usb 4-1: SerialNumber: syz [ 369.124829][ T10] usb 4-1: config 0 descriptor?? [ 369.215694][ T10] usb 4-1: selecting invalid altsetting 3 [ 369.229647][ T10] comedi comedi5: could not set alternate setting 3 in high speed [ 369.250077][ T10] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 369.294668][ T10] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 369.993263][ T8914] ptrace attach of "./syz-executor exec"[5859] was attempted by "./syz-executor exec"[8914] [ 370.440370][ T10] usb 4-1: USB disconnect, device number 5 [ 370.542266][ T8892] loop4: detected capacity change from 0 to 40427 [ 370.571690][ T8892] F2FS-fs (loop4): Image doesn't support compression [ 370.604396][ T8892] F2FS-fs (loop4): build fault injection rate: 690 [ 370.631128][ T48] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 370.694003][ T48] usb 7-1: USB disconnect, device number 4 [ 370.728309][ T8892] F2FS-fs (loop4): invalid crc value [ 371.574242][ T8892] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 371.652087][ T8892] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 371.894167][ T10] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 372.147937][ T10] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 372.217918][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.305499][ T10] usb 3-1: config 0 descriptor?? [ 374.061109][ T8963] siw: device registration error -23 [ 374.365501][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 374.540364][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 374.600979][ T10] asix 3-1:0.0: probe with driver asix failed with error -71 [ 374.650851][ T10] usb 3-1: USB disconnect, device number 7 [ 377.895406][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.940524][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.365445][ T9010] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 380.096213][ T30] audit: type=1326 audit(1754532564.234:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd04f8ebe9 code=0x7ffc0000 [ 380.158167][ T8992] loop5: detected capacity change from 0 to 40427 [ 380.186225][ T8992] F2FS-fs (loop5): Image doesn't support compression [ 380.190374][ T30] audit: type=1326 audit(1754532564.244:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd04f8ebe9 code=0x7ffc0000 [ 380.221791][ T8992] F2FS-fs (loop5): build fault injection rate: 690 [ 380.303541][ T8992] F2FS-fs (loop5): invalid crc value [ 380.309986][ T30] audit: type=1326 audit(1754532564.244:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd04f8ebe9 code=0x7ffc0000 [ 380.452685][ T30] audit: type=1326 audit(1754532564.244:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd04f8ebe9 code=0x7ffc0000 [ 380.565158][ T30] audit: type=1326 audit(1754532564.244:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd04f8ebe9 code=0x7ffc0000 [ 380.638482][ T30] audit: type=1326 audit(1754532564.274:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fbd04f8ebe9 code=0x7ffc0000 [ 380.765777][ T30] audit: type=1326 audit(1754532564.274:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd04f8ebe9 code=0x7ffc0000 [ 380.804519][ T8992] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 380.830758][ T8992] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 380.863637][ T30] audit: type=1326 audit(1754532564.274:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd04f8ebe9 code=0x7ffc0000 [ 380.956431][ T30] audit: type=1326 audit(1754532564.274:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd04f8ebe9 code=0x7ffc0000 [ 381.086727][ T30] audit: type=1326 audit(1754532564.274:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd04f8ebe9 code=0x7ffc0000 [ 381.585727][ T9049] siw: device registration error -23 [ 382.774881][ T9058] sd 0:0:1:0: device reset [ 385.100700][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 391.415417][ T9143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.668516][ T9143] bond0: (slave rose0): Enslaving as an active interface with an up link [ 392.009162][ T9161] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.837'. [ 392.330387][ T5942] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 392.508870][ T5942] usb 7-1: unable to get BOS descriptor or descriptor too short [ 392.537808][ T5942] usb 7-1: not running at top speed; connect to a high speed hub [ 392.557408][ T5942] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 392.576430][ T5942] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 392.592493][ T5942] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 392.652022][ T5942] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 392.720474][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.798057][ T5942] usb 7-1: Product: syz [ 392.848700][ T5942] usb 7-1: Manufacturer: syz [ 393.150432][ T5942] usb 7-1: SerialNumber: syz [ 393.444043][ T5942] usb 7-1: 0:2 : does not exist [ 393.581172][ T5942] usb 7-1: USB disconnect, device number 5 [ 393.638124][ T9099] syz.0.823 (9099): drop_caches: 2 [ 393.702773][ T8852] udevd[8852]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.894176][ T9193] sd 0:0:1:0: device reset [ 397.439441][ T9218] overlayfs: failed to resolve './file1': -2 [ 399.389475][ T9233] netlink: 2 bytes leftover after parsing attributes in process `syz.3.854'. [ 404.280384][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 404.280406][ T30] audit: type=1326 audit(1754532588.424:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2f18ebe9 code=0x7ffc0000 [ 404.320421][ T30] audit: type=1326 audit(1754532588.434:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f9e2f18ebe9 code=0x7ffc0000 [ 404.342635][ T30] audit: type=1326 audit(1754532588.434:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2f18ebe9 code=0x7ffc0000 [ 404.365128][ T30] audit: type=1326 audit(1754532588.434:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9268 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2f18ebe9 code=0x7ffc0000 [ 404.835790][ T9281] kAFS: No cell specified [ 405.811334][ T5942] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 406.158074][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.208416][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.281202][ T5942] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 406.344874][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.809995][ T5942] usb 3-1: config 0 descriptor?? [ 407.815110][ T5942] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 407.863022][ T5942] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 407.960511][ T5919] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 408.019972][ T5942] cp2112 0003:10C4:EA90.0003: error requesting version [ 408.036448][ T5942] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -71 [ 408.233508][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 408.290394][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 408.303186][ T5942] usb 3-1: USB disconnect, device number 8 [ 408.610212][ T5919] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 408.654722][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.677654][ T5919] usb 1-1: Product: syz [ 408.714494][ T5919] usb 1-1: Manufacturer: syz [ 408.750265][ T5919] usb 1-1: SerialNumber: syz [ 408.810899][ T5919] usb 1-1: config 0 descriptor?? [ 408.895305][ T5919] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 409.209276][ T9337] netlink: 28 bytes leftover after parsing attributes in process `syz.4.881'. [ 409.218369][ T9337] netlink: 32 bytes leftover after parsing attributes in process `syz.4.881'. [ 409.227371][ T9337] netlink: 28 bytes leftover after parsing attributes in process `syz.4.881'. [ 410.077532][ T12] usb 1-1: Failed to submit usb control message: -110 [ 410.088390][ T12] usb 1-1: unable to send the bmi data to the device: -110 [ 410.133348][ T12] usb 1-1: unable to get target info from device [ 410.178790][ T12] usb 1-1: could not get target info (-110) [ 410.214061][ T12] usb 1-1: could not probe fw (-110) [ 412.527551][ T9360] netlink: 2 bytes leftover after parsing attributes in process `syz.2.886'. [ 412.951553][ T5918] usb 1-1: USB disconnect, device number 10 [ 420.851157][ T9448] netlink: 2 bytes leftover after parsing attributes in process `syz.5.903'. [ 422.580406][ T5919] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 423.272124][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 423.284002][ T5919] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 423.293436][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.396720][ T5919] usb 6-1: config 0 descriptor?? [ 423.404244][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 423.445782][ T9461] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 424.602085][ T5919] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 424.935778][ T9489] binfmt_misc: register: failed to install interpreter file ./bus [ 425.154172][ T5919] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 425.309125][ T5918] usb 6-1: USB disconnect, device number 5 [ 425.350776][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 425.392397][ T5919] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 425.522231][ T5919] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 425.590734][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 425.648441][ T5919] usb 5-1: Product: syz [ 425.719386][ T5919] usb 5-1: Manufacturer: syz [ 425.790560][ T5919] usb 5-1: SerialNumber: syz [ 425.885117][ T5919] usb 5-1: config 0 descriptor?? [ 425.947084][ T9490] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 426.141761][ T5919] hub 5-1:0.0: bad descriptor, ignoring hub [ 426.147704][ T5919] hub 5-1:0.0: probe with driver hub failed with error -5 [ 427.139532][ T9530] hfsplus: unable to find HFS+ superblock [ 427.148858][ T9530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.919'. [ 427.728985][ T9538] netlink: 2 bytes leftover after parsing attributes in process `syz.5.921'. [ 428.580854][ T5942] usb 5-1: USB disconnect, device number 7 [ 429.258506][ T9551] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 431.500555][ T9594] netlink: 40 bytes leftover after parsing attributes in process `syz.0.929'. [ 432.648990][ T9606] syz.4.931 (9606) used greatest stack depth: 16120 bytes left [ 433.971014][ T9617] netlink: 2 bytes leftover after parsing attributes in process `syz.4.935'. [ 435.133762][ T9624] ISOFS: Unable to identify CD-ROM format. [ 435.667721][ T9630] /dev/nullb0: Can't open blockdev [ 435.675287][ T9630] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 439.336395][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.344972][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.093463][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.925'. [ 447.201268][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.962'. [ 447.647944][ T5862] Bluetooth: hci2: command 0x0c1a tx timeout [ 451.142780][ T9787] ptrace attach of "./syz-executor exec"[5858] was attempted by "./syz-executor exec"[9787] [ 451.712880][ T9798] hfsplus: unable to find HFS+ superblock [ 452.491737][ T9798] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 452.891414][ T9807] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 453.096423][ T9808] bpq0: entered promiscuous mode [ 453.101487][ T9808] bpq0: left allmulticast mode [ 454.010022][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 455.834998][ T9836] netlink: 40 bytes leftover after parsing attributes in process `syz.0.984'. [ 458.789118][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'. [ 459.517518][ T9860] hfsplus: unable to find HFS+ superblock [ 459.541416][ T9860] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 464.326539][ T9879] netlink: 'syz.2.999': attribute type 1 has an invalid length. [ 464.362048][ T9879] netlink: 184 bytes leftover after parsing attributes in process `syz.2.999'. [ 464.413176][ T9879] netlink: 'syz.2.999': attribute type 1 has an invalid length. [ 465.551098][ T9881] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 465.557953][ T9881] PKCS7: Only support pkcs7_signedData type [ 467.567915][ T9917] Invalid source name [ 467.572335][ T9917] UBIFS error (pid: 9917): cannot open "/dev/sg0", error -22 [ 467.577515][ T9917] netlink: 'syz.3.1011': attribute type 3 has an invalid length. [ 469.768186][ T9929] siw: device registration error -23 [ 470.410762][ T9930] netlink: 'syz.6.1016': attribute type 1 has an invalid length. [ 470.418533][ T9930] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1016'. [ 470.887735][ T9930] netlink: 'syz.6.1016': attribute type 1 has an invalid length. [ 471.025296][ T9937] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1019'. [ 471.618942][ T9945] vlan2: entered promiscuous mode [ 471.624087][ T9945] syz_tun: entered promiscuous mode [ 472.973271][ T9957] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1026'. [ 474.938426][ T9976] netlink: 'syz.5.1033': attribute type 1 has an invalid length. [ 475.266350][ T9976] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1033'. [ 475.306196][ T9976] netlink: 'syz.5.1033': attribute type 1 has an invalid length. [ 475.615851][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1036'. [ 476.191410][ T9994] vlan2: entered promiscuous mode [ 476.196538][ T9994] syz_tun: entered promiscuous mode [ 478.274105][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'. [ 478.684252][T10018] ptrace attach of "./syz-executor exec"[5863] was attempted by "./syz-executor exec"[10018] [ 480.289664][T10034] netlink: 'syz.3.1050': attribute type 1 has an invalid length. [ 480.300770][T10034] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1050'. [ 480.428810][T10034] netlink: 'syz.3.1050': attribute type 1 has an invalid length. [ 480.541851][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1051'. [ 483.097891][T10064] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1060'. [ 484.921122][T10066] siw: device registration error -23 [ 484.930284][T10068] netlink: 'syz.3.1063': attribute type 8 has an invalid length. [ 487.951483][T10088] netlink: 'syz.0.1067': attribute type 1 has an invalid length. [ 487.972925][T10090] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 487.998296][T10088] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1067'. [ 488.038979][T10088] netlink: 'syz.0.1067': attribute type 1 has an invalid length. [ 492.771217][T10130] use of bytesused == 0 is deprecated and will be removed in the future, [ 492.943355][T10130] use the actual size instead. [ 493.775992][T10134] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.783592][T10134] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.980423][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 494.041839][T10134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.054612][T10134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.194914][ T6109] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.254315][ T6102] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.303182][ T6109] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.352952][ T6109] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.430515][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 494.440958][ T24] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 494.483499][ T24] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 494.533379][ T24] usb 3-1: config 0 has no interface number 0 [ 494.566109][ T24] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 494.638918][ T24] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 494.640466][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 494.732583][ T24] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 494.797059][ T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 494.919053][ T24] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 494.950487][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 494.959975][ T10] usb 7-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 494.989359][ T24] usb 3-1: Product: syz [ 495.008398][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.046753][ T24] usb 3-1: config 0 descriptor?? [ 495.057202][ T10] usb 7-1: Product: syz [ 495.072135][ T10] usb 7-1: Manufacturer: syz [ 495.087290][ T10] usb 7-1: SerialNumber: syz [ 495.103959][T10138] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 495.118024][ T10] usb 7-1: config 0 descriptor?? [ 495.159631][ T10] usb 7-1: selecting invalid altsetting 3 [ 495.183181][ T10] comedi comedi5: could not set alternate setting 3 in high speed [ 495.225966][ T10] usbdux 7-1:0.0: driver 'usbdux' failed to auto-configure device. [ 495.323382][ T10] usbdux 7-1:0.0: probe with driver usbdux failed with error -22 [ 495.378468][ T10] usb 7-1: USB disconnect, device number 6 [ 495.422173][ T24] usb 3-1: USB disconnect, device number 9 [ 495.539472][T10152] kAFS: No cell specified [ 497.572647][T10160] siw: device registration error -23 [ 500.811029][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.817424][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.151486][T10185] syz.6.1096 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 506.617849][T10229] siw: device registration error -23 [ 508.140754][T10245] netlink: 'syz.6.1113': attribute type 1 has an invalid length. [ 508.180084][T10245] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1113'. [ 508.237393][T10245] netlink: 'syz.6.1113': attribute type 1 has an invalid length. [ 508.335493][T10250] ISOFS: Unable to identify CD-ROM format. [ 508.586499][ T5918] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 509.040423][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 509.060651][ T5918] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 509.079895][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.098248][ T5918] usb 6-1: Product: syz [ 509.123397][ T5918] usb 6-1: Manufacturer: syz [ 509.158345][ T5918] usb 6-1: SerialNumber: syz [ 509.181221][ T5918] usb 6-1: config 0 descriptor?? [ 509.204916][ T5918] usb 6-1: selecting invalid altsetting 3 [ 509.242629][ T5918] comedi comedi5: could not set alternate setting 3 in high speed [ 509.260799][ T5918] usbdux 6-1:0.0: driver 'usbdux' failed to auto-configure device. [ 509.305118][ T5918] usbdux 6-1:0.0: probe with driver usbdux failed with error -22 [ 510.203373][ T5935] usb 6-1: USB disconnect, device number 6 [ 511.365576][T10272] siw: device registration error -23 [ 512.697114][T10290] ISOFS: Unable to identify CD-ROM format. [ 513.172135][T10304] ptrace attach of "./syz-executor exec"[5858] was attempted by "./syz-executor exec"[10304] [ 513.762499][T10305] siw: device registration error -23 [ 514.258863][T10312] ptrace attach of "./syz-executor exec"[7697] was attempted by "./syz-executor exec"[10312] [ 515.093933][T10323] sd 0:0:1:0: device reset [ 515.964569][T10329] siw: device registration error -23 [ 516.057300][T10269] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 516.220560][T10269] usb 1-1: Using ep0 maxpacket: 32 [ 516.891484][T10269] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 516.976578][T10269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.095938][T10269] usb 1-1: Product: syz [ 517.100138][T10269] usb 1-1: Manufacturer: syz [ 517.115830][T10269] usb 1-1: SerialNumber: syz [ 517.162583][T10269] usb 1-1: config 0 descriptor?? [ 517.212450][T10269] usb 1-1: selecting invalid altsetting 3 [ 517.239836][T10269] comedi comedi5: could not set alternate setting 3 in high speed [ 517.289245][T10269] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 517.333669][T10269] usbdux 1-1:0.0: probe with driver usbdux failed with error -22 [ 518.100157][ T10] usb 1-1: USB disconnect, device number 11 [ 519.301722][T10358] netlink: 'syz.3.1154': attribute type 1 has an invalid length. [ 519.310550][T10361] ptrace attach of "./syz-executor exec"[7697] was attempted by "./syz-executor exec"[10361] [ 519.661609][T10358] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1154'. [ 519.792211][T10363] siw: device registration error -23 [ 520.132733][T10358] netlink: 'syz.3.1154': attribute type 1 has an invalid length. [ 520.693839][T10379] sd 0:0:1:0: device reset [ 521.260851][ T48] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 523.091507][ T48] usb 7-1: Using ep0 maxpacket: 8 [ 524.312616][T10400] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 525.878297][T10404] Invalid source name [ 525.944937][T10404] UBIFS error (pid: 10404): cannot open "/dev/sg0", error -22 [ 525.978711][ T48] usb 7-1: unable to read config index 0 descriptor/all [ 526.026084][ T48] usb 7-1: can't read configurations, error -71 [ 526.273431][T10269] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 526.440903][T10269] usb 1-1: Using ep0 maxpacket: 16 [ 526.474682][T10269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 526.526122][T10269] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 526.566229][T10269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.602449][T10269] usb 1-1: Product: syz [ 526.606644][T10269] usb 1-1: Manufacturer: syz [ 526.632186][T10269] usb 1-1: SerialNumber: syz [ 526.660395][T10269] usb 1-1: config 0 descriptor?? [ 526.715168][T10269] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 527.774317][ T5918] usb 1-1: USB disconnect, device number 12 [ 527.780974][ T6102] usb 1-1: Failed to submit usb control message: -110 [ 527.787933][ T6102] usb 1-1: unable to send the bmi data to the device: -110 [ 527.830379][ T6102] usb 1-1: unable to get target info from device [ 527.867662][ T6102] usb 1-1: could not get target info (-110) [ 527.900377][ T6102] usb 1-1: could not probe fw (-110) [ 529.218853][T10423] loop6: detected capacity change from 0 to 32768 [ 529.961408][T10423] binfmt_misc: register: failed to install interpreter file ./bus [ 530.310529][ T5862] Bluetooth: hci3: command 0x0c1a tx timeout [ 530.513061][T10451] netlink: 'syz.4.1183': attribute type 1 has an invalid length. [ 530.522965][T10451] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1183'. [ 530.533662][T10451] netlink: 'syz.4.1183': attribute type 1 has an invalid length. [ 532.370773][T10269] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 532.491422][T10481] siw: device registration error -23 [ 532.913262][T10269] usb 7-1: Using ep0 maxpacket: 8 [ 532.945881][T10269] usb 7-1: config 0 has no interfaces? [ 532.992474][T10269] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=a9.dc [ 533.010453][ T5862] Bluetooth: hci5: command 0x0c1a tx timeout [ 533.026223][T10269] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.048551][T10269] usb 7-1: Product: syz [ 533.056407][T10269] usb 7-1: Manufacturer: syz [ 533.110578][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 533.231012][T10269] usb 7-1: SerialNumber: syz [ 533.245040][T10269] r8152-cfgselector 7-1: Unknown version 0x0000 [ 533.254983][T10269] r8152-cfgselector 7-1: config 0 descriptor?? [ 534.355566][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 534.365363][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 534.377737][ T5862] Bluetooth: hci3: command 0x0c1a tx timeout [ 534.389586][ T10] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 534.409631][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.418064][ T10] usb 3-1: Product: syz [ 534.422488][ T10] usb 3-1: Manufacturer: syz [ 534.427106][ T10] usb 3-1: SerialNumber: syz [ 534.435768][ T10] usb 3-1: config 0 descriptor?? [ 534.470347][ T10] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 535.333628][ T5849] r8152-cfgselector 7-1: USB disconnect, device number 9 [ 535.491300][ T9440] usb 3-1: Failed to submit usb control message: -110 [ 535.520508][ T9440] usb 3-1: unable to send the bmi data to the device: -110 [ 535.534539][ T9440] usb 3-1: unable to get target info from device [ 535.543796][ T9440] usb 3-1: could not get target info (-110) [ 535.574043][ T9440] usb 3-1: could not probe fw (-110) [ 535.785090][T10269] usb 3-1: USB disconnect, device number 10 [ 537.210740][T10269] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 537.701295][T10269] usb 6-1: Using ep0 maxpacket: 16 [ 537.733201][T10269] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.753475][T10269] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.791485][T10269] usb 6-1: config 0 interface 0 has no altsetting 0 [ 537.848555][T10269] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 537.897377][T10269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.938541][T10269] usb 6-1: config 0 descriptor?? [ 537.973414][T10269] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 538.518856][T10518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.743240][T10518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.371074][ T5862] Bluetooth: hci3: command 0x0c1a tx timeout [ 542.104199][ T10] usb 6-1: USB disconnect, device number 7 [ 542.231501][T10269] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 542.820394][T10269] usb 5-1: Using ep0 maxpacket: 8 [ 542.831992][T10269] usb 5-1: config 0 has no interfaces? [ 542.860591][T10269] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=a9.dc [ 542.910428][T10269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.918485][T10269] usb 5-1: Product: syz [ 542.956647][T10269] usb 5-1: Manufacturer: syz [ 542.979773][T10269] usb 5-1: SerialNumber: syz [ 543.120839][T10269] r8152-cfgselector 5-1: Unknown version 0x0000 [ 543.212908][T10269] r8152-cfgselector 5-1: config 0 descriptor?? [ 543.284917][T10269] r8152-cfgselector 5-1: can't set config #0, error -71 [ 543.342436][T10269] r8152-cfgselector 5-1: USB disconnect, device number 8 [ 544.712037][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 545.070381][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 545.463284][ T10] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 545.506781][ T10] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 545.546604][T10585] loop2: detected capacity change from 0 to 1024 [ 545.618270][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 545.663781][ T10] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 545.777185][ T10] usb 1-1: Product: syz [ 545.781744][ T10] usb 1-1: Manufacturer: syz [ 546.180726][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 546.370575][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 546.386128][ T10] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 546.408256][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.437621][ T10] usb 5-1: Product: syz [ 546.447180][ T10] usb 5-1: Manufacturer: syz [ 546.460714][ T48] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 546.479549][ T10] usb 5-1: SerialNumber: syz [ 546.645265][ T10] usb 5-1: config 0 descriptor?? [ 546.663750][ T10] usb 5-1: selecting invalid altsetting 3 [ 546.669513][ T10] comedi comedi5: could not set alternate setting 3 in high speed [ 546.690560][ T5862] Bluetooth: hci2: command 0x0c1a tx timeout [ 546.706299][ T10] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 546.710904][ T48] usb 7-1: Using ep0 maxpacket: 16 [ 546.731573][ T10] usbdux 5-1:0.0: probe with driver usbdux failed with error -22 [ 546.734252][ T48] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.803912][ T48] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 547.275517][ T5862] Bluetooth: hci5: command 0x0c1a tx timeout [ 547.305639][ T48] usb 7-1: config 0 interface 0 has no altsetting 0 [ 547.347999][ T5935] usb 1-1: USB disconnect, device number 13 [ 547.370506][ T48] usb 7-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 547.503436][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.543952][T10603] siw: device registration error -23 [ 547.918216][ T5849] usb 5-1: USB disconnect, device number 9 [ 547.956130][ T48] usb 7-1: config 0 descriptor?? [ 548.010822][ T48] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 548.221013][T10592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.229888][T10592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.819736][T10619] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 550.593883][ T5994] usb 7-1: USB disconnect, device number 10 [ 552.012613][T10650] hfsplus: unable to find HFS+ superblock [ 552.032235][T10650] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1243'. [ 552.047343][T10650] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 552.670503][ T5994] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 552.678544][ T10] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 552.850537][ T5994] usb 4-1: Using ep0 maxpacket: 32 [ 552.858318][ T5994] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 552.872074][ T5994] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 552.900467][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 552.955751][ T10] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 552.991699][T10658] siw: device registration error -23 [ 553.010510][ T5862] Bluetooth: hci3: command 0x0c1a tx timeout [ 553.397310][ T5994] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 553.407189][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.415395][ T5994] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 553.454614][ T10] usb 1-1: config 0 descriptor?? [ 553.455774][ T5994] usb 4-1: Product: syz [ 553.467559][T10646] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 553.504493][ T5994] usb 4-1: Manufacturer: syz [ 553.535378][ T5994] hub 4-1:4.0: bad descriptor, ignoring hub [ 553.563569][ T5994] hub 4-1:4.0: probe with driver hub failed with error -5 [ 553.601633][ T5994] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 553.904833][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 553.912371][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 553.919753][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 553.926989][ T10] usbhid 1-1:0.0: can't add hid device: -32 [ 553.933103][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 553.967679][ T10] usb 1-1: USB disconnect, device number 14 [ 554.981145][ T5994] usb 4-1: USB disconnect, device number 6 [ 556.945509][T10678] ptrace attach of "./syz-executor exec"[5858] was attempted by "./syz-executor exec"[10678] [ 558.561613][T10694] loop4: detected capacity change from 0 to 1024 [ 559.120006][T10702] sd 0:0:1:0: device reset [ 559.360443][ T5862] Bluetooth: hci5: command 0x0c1a tx timeout [ 559.890433][ T5862] Bluetooth: hci2: command 0x0c1a tx timeout [ 562.216559][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.223133][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.325877][ T5994] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 562.333784][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 562.530448][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 562.612276][ T5994] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 563.477940][ T10] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 564.889972][ T5994] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 565.589865][ T10] usb 6-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 566.334688][ T5994] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.346504][ T5994] usb 7-1: config 0 descriptor?? [ 567.024993][ T10] usb 6-1: string descriptor 0 read error: -71 [ 567.060616][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 567.069700][ T10] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 567.140685][ T10] usb 6-1: can't set config #4, error -71 [ 567.184946][ T5994] usb 7-1: can't set config #0, error -71 [ 567.236234][ T10] usb 6-1: USB disconnect, device number 8 [ 567.264253][ T5994] usb 7-1: USB disconnect, device number 11 [ 568.074293][T10739] ptrace attach of "./syz-executor exec"[5858] was attempted by "./syz-executor exec"[10739] [ 568.857107][T10749] sd 0:0:1:0: device reset [ 569.010580][ T5862] Bluetooth: hci1: command 0x0c1a tx timeout [ 569.823688][T10757] /dev/nullb0: Can't open blockdev [ 569.841095][T10757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1274'. [ 569.856841][T10757] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 570.290449][ T5862] Bluetooth: hci2: command 0x0c1a tx timeout [ 570.798362][T10762] loop2: detected capacity change from 0 to 1024 [ 573.072813][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 574.291543][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 574.909282][ T10] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 574.973385][ T10] usb 7-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 575.070274][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 575.107494][ T10] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 575.125324][ T10] usb 7-1: Product: syz [ 575.178514][ T10] usb 7-1: Manufacturer: syz [ 575.228424][ T10] hub 7-1:4.0: bad descriptor, ignoring hub [ 575.274895][ T10] hub 7-1:4.0: probe with driver hub failed with error -5 [ 575.371248][ T10] usbhid 7-1:4.0: couldn't find an input interrupt endpoint [ 575.461181][ T10] usb 7-1: USB disconnect, device number 12 [ 577.195204][ T5862] Bluetooth: hci3: command 0x0c1a tx timeout [ 578.509684][T10809] ptrace attach of "./syz-executor exec"[7697] was attempted by "./syz-executor exec"[10809] [ 579.215765][T10808] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 580.448042][T10815] loop5: detected capacity change from 0 to 1024 [ 580.520433][ T48] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 580.750670][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 580.830727][ T48] usb 1-1: config 0 has no interfaces? [ 580.858549][ T48] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=a9.dc [ 580.897647][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.952794][ T48] usb 1-1: Product: syz [ 580.994562][ T48] usb 1-1: Manufacturer: syz [ 581.078769][ T48] usb 1-1: SerialNumber: syz [ 581.471899][ T48] r8152-cfgselector 1-1: Unknown version 0x0000 [ 581.478434][ T48] r8152-cfgselector 1-1: config 0 descriptor?? [ 583.306404][ T48] r8152-cfgselector 1-1: USB disconnect, device number 15 [ 583.977677][T10854] hfsplus: unable to find HFS+ superblock [ 583.997884][T10854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1297'. [ 584.014074][T10854] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 585.197320][T10860] overlayfs: failed to resolve './file0': -2 [ 586.270493][T10269] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 586.510447][T10269] usb 6-1: Using ep0 maxpacket: 16 [ 586.537767][T10269] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 586.576116][T10269] usb 6-1: config 0 interface 0 has no altsetting 0 [ 586.790509][T10269] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 586.799581][T10269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.924843][T10269] usb 6-1: config 0 descriptor?? [ 586.956413][T10884] loop4: detected capacity change from 0 to 1024 [ 586.980184][T10269] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 587.251374][T10875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.290932][T10875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.412291][T10889] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.1317'. [ 588.655155][T10269] usb 6-1: USB disconnect, device number 9 [ 588.970734][T10910] cgroup: Invalid name [ 588.982519][T10910] program syz.5.1323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 588.997157][ T48] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 589.170530][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 589.182805][ T48] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.202048][ T48] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.218075][ T48] usb 4-1: config 0 interface 0 has no altsetting 0 [ 589.228924][ T48] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 589.244358][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.288693][ T48] usb 4-1: config 0 descriptor?? [ 589.320455][T10269] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 589.605587][T10269] usb 1-1: unable to get BOS descriptor or descriptor too short [ 589.650891][T10269] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 589.658595][T10269] usb 1-1: can't read configurations, error -71 [ 589.991019][ T48] usb 4-1: USB disconnect, device number 7 [ 591.572258][ T5862] Bluetooth: hci3: Malformed LE Event: 0x0b [ 592.333592][T10944] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 592.380720][T10944] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1335'. [ 592.423429][T10944] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 592.551646][T10945] overlayfs: failed to resolve './file0': -2 [ 594.306504][T10954] loop5: detected capacity change from 0 to 1024 [ 595.220662][T10269] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 595.427412][ T5849] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 595.441219][T10269] usb 1-1: Using ep0 maxpacket: 32 [ 595.831363][T10269] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 595.860426][ T5849] usb 5-1: Using ep0 maxpacket: 16 [ 595.878034][ T5849] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.892264][ T5849] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.909981][T10269] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 595.946767][T10269] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 595.959001][ T5849] usb 5-1: config 0 interface 0 has no altsetting 0 [ 595.978697][ T5849] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 595.987444][T10269] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 596.023624][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.024568][T10269] usb 1-1: Product: syz [ 596.056317][T10269] usb 1-1: Manufacturer: syz [ 596.069120][ T5849] usb 5-1: config 0 descriptor?? [ 596.152201][T10269] hub 1-1:4.0: bad descriptor, ignoring hub [ 596.231659][T10269] hub 1-1:4.0: probe with driver hub failed with error -5 [ 596.290118][T10269] usbhid 1-1:4.0: couldn't find an input interrupt endpoint [ 596.464081][ T5862] Bluetooth: hci6: Malformed LE Event: 0x0b [ 596.695416][ T5849] usb 5-1: USB disconnect, device number 10 [ 598.028054][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1349'. [ 598.947922][ T5849] usb 1-1: USB disconnect, device number 18 [ 601.997928][T11018] capability: warning: `syz.4.1359' uses 32-bit capabilities (legacy support in use) [ 602.490479][ T5849] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 603.101007][ T5849] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 603.109032][ T5849] usb 5-1: config 0 has no interface number 0 [ 603.158749][ T5849] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 603.178356][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.210557][ T5849] usb 5-1: Product: syz [ 603.225414][ T5849] usb 5-1: Manufacturer: syz [ 603.262741][ T5849] usb 5-1: SerialNumber: syz [ 603.369633][ T5849] usb 5-1: config 0 descriptor?? [ 603.585060][ T5849] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 603.629704][ T5849] usb 5-1: USB disconnect, device number 11 [ 603.950163][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1364'. [ 604.593101][T11034] loop2: detected capacity change from 0 to 1024 [ 606.354029][T11055] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1370'. [ 608.816077][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1380'. [ 608.939074][T11083] netlink: 'syz.6.1381': attribute type 1 has an invalid length. [ 608.957728][T11083] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1381'. [ 608.989165][T11083] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1381'. [ 609.060628][ T5994] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 609.369600][ T5994] usb 5-1: Using ep0 maxpacket: 8 [ 609.380930][ T5994] usb 5-1: config 0 has no interfaces? [ 609.402412][ T5994] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=a9.dc [ 609.420466][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.437221][ T5994] usb 5-1: Product: syz [ 609.448413][ T5994] usb 5-1: Manufacturer: syz [ 609.458546][ T5994] usb 5-1: SerialNumber: syz [ 609.492577][ T5994] r8152-cfgselector 5-1: Unknown version 0x0000 [ 609.512179][ T5994] r8152-cfgselector 5-1: config 0 descriptor?? [ 610.120665][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 610.920728][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 610.933343][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.964763][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.985848][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 611.000213][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 611.022271][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.055772][ T10] usb 3-1: config 0 descriptor?? [ 611.500807][T11097] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1385'. [ 611.725968][ T10] usb 3-1: USB disconnect, device number 11 [ 611.921944][ T5994] r8152-cfgselector 5-1: USB disconnect, device number 12 [ 613.522637][T11116] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 613.922543][T11120] hfsplus: unable to find HFS+ superblock [ 613.941102][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1390'. [ 613.956617][T11120] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 615.324621][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1394'. [ 615.474543][T11134] loop4: detected capacity change from 0 to 1024 [ 620.522960][T11159] netlink: 'syz.4.1405': attribute type 1 has an invalid length. [ 620.628207][T11159] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1405'. [ 620.648973][T11159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1405'. [ 620.690510][T10269] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 620.865766][T10269] usb 7-1: Using ep0 maxpacket: 16 [ 620.925723][T10269] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.964588][T10269] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.011448][T10269] usb 7-1: config 0 interface 0 has no altsetting 0 [ 621.018194][T10269] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 621.031894][T10269] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.077847][T10269] usb 7-1: config 0 descriptor?? [ 621.257275][T11171] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 621.834155][ T5994] usb 7-1: USB disconnect, device number 13 [ 622.839462][T11183] loop6: detected capacity change from 0 to 1024 [ 623.811670][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.818361][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.299546][ T5862] Bluetooth: hci1: command 0x0c1a tx timeout [ 626.480610][T11208] netlink: 'syz.0.1420': attribute type 1 has an invalid length. [ 626.610884][T11208] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1420'. [ 626.640700][T11208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1420'. [ 626.836426][T11212] overlayfs: failed to resolve './file1': -2 [ 627.372073][T11220] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1423'. [ 627.855835][T11229] loop2: detected capacity change from 0 to 1024 [ 628.831168][ T48] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 629.170666][ T48] usb 7-1: Using ep0 maxpacket: 16 [ 629.378672][ T48] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.476432][ T48] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.580642][ T48] usb 7-1: config 0 interface 0 has no altsetting 0 [ 629.610093][ T48] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 629.629364][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.098862][ T48] usb 7-1: config 0 descriptor?? [ 631.260786][ T5862] Bluetooth: hci1: command 0x0c1a tx timeout [ 631.492298][ T48] usb 7-1: USB disconnect, device number 14 [ 631.618860][T11262] netlink: 'syz.2.1436': attribute type 1 has an invalid length. [ 631.693372][T11262] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1436'. [ 631.707689][T11263] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1438'. [ 632.210648][T11262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1436'. [ 633.534979][T11278] loop4: detected capacity change from 0 to 1024 [ 635.552499][T11297] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 635.720443][ T5849] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 636.054370][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1453'. [ 636.110441][ T5849] usb 7-1: Using ep0 maxpacket: 16 [ 636.119549][ T5849] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.166893][ T5849] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.177905][ T5849] usb 7-1: config 0 interface 0 has no altsetting 0 [ 636.187361][ T5849] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 636.389089][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.473260][ T5849] usb 7-1: config 0 descriptor?? [ 636.890681][ T5849] hid (null): report_id 0 is invalid [ 637.233772][ T5849] usb 7-1: USB disconnect, device number 15 [ 637.634024][T11320] overlayfs: failed to resolve './file1': -2 [ 638.279405][T11322] loop5: detected capacity change from 0 to 1024 [ 639.990580][ T5849] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 640.200414][ T5849] usb 5-1: Using ep0 maxpacket: 16 [ 640.207759][ T5849] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.293045][ T5849] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.308285][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1466'. [ 640.370380][ T5849] usb 5-1: config 0 interface 0 has no altsetting 0 [ 640.377040][ T5849] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 640.440400][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.491672][ T5849] usb 5-1: config 0 descriptor?? [ 641.101867][ T5849] kye 0003:0458:0138.000B: unknown main item tag 0x4 [ 641.394328][ T5849] kye 0003:0458:0138.000B: unexpected long global item [ 641.418515][ T5849] kye 0003:0458:0138.000B: parse failed [ 641.443969][ T5849] kye 0003:0458:0138.000B: probe with driver kye failed with error -22 [ 641.560572][ T5849] usb 5-1: USB disconnect, device number 13 [ 643.165021][T11367] loop2: detected capacity change from 0 to 1024 [ 645.127594][T11383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1480'. [ 645.520768][ T5862] Bluetooth: hci3: command 0x0c1a tx timeout [ 646.504146][T10269] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 646.517503][T11402] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1487'. [ 647.140577][T10269] usb 4-1: Using ep0 maxpacket: 16 [ 647.147819][T10269] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.761305][T10269] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.772218][T10269] usb 4-1: config 0 interface 0 has no altsetting 0 [ 647.778938][T10269] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 647.798115][T10269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.856028][T10269] usb 4-1: config 0 descriptor?? [ 647.883504][T11411] overlayfs: failed to resolve './file1': -2 [ 648.732221][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 649.099224][T10269] kye 0003:0458:0138.000C: unknown main item tag 0x4 [ 649.466808][T10269] kye 0003:0458:0138.000C: unexpected long global item [ 649.514884][T10269] kye 0003:0458:0138.000C: parse failed [ 649.534494][T10269] kye 0003:0458:0138.000C: probe with driver kye failed with error -22 [ 649.565627][T10269] usb 4-1: USB disconnect, device number 8 [ 651.023572][T10269] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 651.210638][T10269] usb 4-1: Using ep0 maxpacket: 16 [ 651.238499][T10269] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.290516][T10269] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.346737][T10269] usb 4-1: config 0 interface 0 has no altsetting 0 [ 651.529433][T10269] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 651.580415][T11454] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1501'. [ 651.611607][T10269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.837168][T10269] usb 4-1: config 0 descriptor?? [ 652.736186][T10269] hid (null): report_id 0 is invalid [ 653.051850][T10269] usb 4-1: USB disconnect, device number 9 [ 654.022591][T11466] hfsplus: unable to find HFS+ superblock [ 654.109168][T11466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1503'. [ 654.120195][T11466] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 656.270415][ T5849] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 656.470692][ T5849] usb 6-1: Using ep0 maxpacket: 16 [ 656.481616][ T5849] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.568656][T11497] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1515'. [ 656.721010][ T5849] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.018698][T11496] siw: device registration error -23 [ 657.055787][ T5849] usb 6-1: config 0 interface 0 has no altsetting 0 [ 657.078508][ T5849] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 657.115979][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.148543][ T5849] usb 6-1: config 0 descriptor?? [ 658.263240][T11506] overlayfs: failed to resolve './file1': -2 [ 658.561307][T11485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.616532][T11485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.926547][ T5849] kye 0003:0458:0138.000E: unknown main item tag 0x4 [ 658.972141][ T5849] kye 0003:0458:0138.000E: unexpected long global item [ 658.979764][ T5849] kye 0003:0458:0138.000E: parse failed [ 659.034352][ T5849] kye 0003:0458:0138.000E: probe with driver kye failed with error -22 [ 659.243877][ T5935] usb 6-1: USB disconnect, device number 10 [ 660.276181][T11529] hfsplus: unable to find HFS+ superblock [ 660.285388][T11529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1526'. [ 660.295948][T11529] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 663.374840][T11556] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1534'. [ 664.358736][T11568] overlayfs: failed to resolve './file1': -2 [ 666.721257][T11595] hfsplus: unable to find HFS+ superblock [ 666.729346][T11595] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1548'. [ 666.740768][T11595] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 667.354579][ T5935] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 667.677706][ T5935] usb 4-1: unable to get BOS descriptor or descriptor too short [ 667.689707][ T5935] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 667.714673][ T5935] usb 4-1: can't read configurations, error -71 [ 668.059682][ T5849] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 668.261692][ T5849] usb 7-1: Using ep0 maxpacket: 16 [ 668.513558][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 668.548457][ T5849] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 668.590256][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.618522][ T5849] usb 7-1: Product: syz [ 668.627115][ T5849] usb 7-1: Manufacturer: syz [ 668.636562][ T5849] usb 7-1: SerialNumber: syz [ 668.654240][ T5849] usb 7-1: config 0 descriptor?? [ 668.917631][ T5849] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 670.210869][ T5862] Bluetooth: hci5: command 0x0c1a tx timeout [ 670.706715][ T6102] usb 7-1: Failed to submit usb control message: -110 [ 670.919129][ T6102] usb 7-1: unable to send the bmi data to the device: -110 [ 670.972235][ T6102] usb 7-1: unable to get target info from device [ 671.280052][ T6102] usb 7-1: could not get target info (-110) [ 671.451232][ T6102] usb 7-1: could not probe fw (-110) [ 671.558653][T11633] overlayfs: failed to resolve './file1': -2 [ 671.951128][T10269] usb 7-1: USB disconnect, device number 16 [ 674.949383][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1569'. [ 675.430696][ T5849] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 675.570456][ T5849] usb 7-1: device descriptor read/64, error -71 [ 675.740887][ T5918] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 675.830584][ T5849] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 675.981030][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 676.131777][ T5849] usb 7-1: device descriptor read/64, error -71 [ 676.350265][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 676.407053][ T5918] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 676.431121][ T5849] usb usb7-port1: attempt power cycle [ 676.438754][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.698964][ T5918] usb 6-1: Product: syz [ 676.900705][ T5918] usb 6-1: Manufacturer: syz [ 676.905329][ T5918] usb 6-1: SerialNumber: syz [ 676.913844][ T5918] usb 6-1: config 0 descriptor?? [ 676.952910][ T5918] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 677.199806][ T5849] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 677.253911][ T5849] usb 7-1: device descriptor read/8, error -71 [ 677.255079][T11698] overlayfs: failed to resolve './file1': -2 [ 677.621005][ T5849] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 677.671886][ T5849] usb 7-1: device descriptor read/8, error -71 [ 677.805202][ T5849] usb usb7-port1: unable to enumerate USB device [ 677.971731][ T6117] usb 6-1: Failed to submit usb control message: -110 [ 677.997674][ T6117] usb 6-1: unable to send the bmi data to the device: -110 [ 678.054218][ T6117] usb 6-1: unable to get target info from device [ 678.104398][ T6117] usb 6-1: could not get target info (-110) [ 678.140503][ T6117] usb 6-1: could not probe fw (-110) [ 678.389900][T11682] loop3: detected capacity change from 0 to 32768 [ 678.551654][T11682] binfmt_misc: register: failed to install interpreter file ./bus [ 678.787035][ T5935] usb 6-1: USB disconnect, device number 11 [ 683.160434][ T5849] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 683.293980][ T5849] usb 3-1: device descriptor read/64, error -71 [ 683.488234][T11757] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1598'. [ 683.590531][ T5849] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 684.412679][T11757] syz.4.1598 (11757): drop_caches: 2 [ 684.438626][ T5849] usb 3-1: device descriptor read/64, error -71 [ 684.610659][ T5849] usb usb3-port1: attempt power cycle [ 685.102879][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.109574][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.212126][ T5849] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 685.394818][ T5849] usb 3-1: device descriptor read/8, error -71 [ 685.750577][ T5849] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 686.599045][T11780] overlayfs: failed to resolve './file1': -2 [ 686.601943][T11779] netlink: 'syz.2.1607': attribute type 1 has an invalid length. [ 686.646933][T11779] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1607'. [ 686.688888][ T5849] usb 3-1: device not accepting address 15, error -71 [ 686.692917][T11779] netlink: 'syz.2.1607': attribute type 1 has an invalid length. [ 686.726107][ T5849] usb usb3-port1: unable to enumerate USB device [ 689.153486][ T48] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 689.354754][ T48] usb 3-1: unable to get BOS descriptor or descriptor too short [ 689.388727][ T48] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 689.420093][ T48] usb 3-1: can't read configurations, error -71 [ 689.430473][ T5994] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 689.580450][ T5994] usb 5-1: device descriptor read/64, error -71 [ 689.820573][ T5994] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 690.080433][ T5994] usb 5-1: device descriptor read/64, error -71 [ 690.901075][ T5994] usb usb5-port1: attempt power cycle [ 691.303974][T11835] netlink: 'syz.6.1625': attribute type 1 has an invalid length. [ 691.312741][T11835] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1625'. [ 691.315880][ T5994] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 691.329706][T11835] netlink: 'syz.6.1625': attribute type 1 has an invalid length. [ 691.361195][ T5994] usb 5-1: device descriptor read/8, error -71 [ 691.750441][ T5994] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 691.773486][ T5994] usb 5-1: device descriptor read/8, error -71 [ 691.921577][ T5994] usb usb5-port1: unable to enumerate USB device [ 692.980408][ T5849] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 693.140416][ T5849] usb 1-1: Using ep0 maxpacket: 32 [ 693.153475][ T5849] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.164592][ T5849] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.179674][ T5849] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 693.190730][ T5849] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 693.217092][ T5849] usb 1-1: Product: syz [ 693.227692][ T5849] usb 1-1: Manufacturer: syz [ 693.248997][ T5849] hub 1-1:4.0: USB hub found [ 693.502470][ T5849] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 693.952088][T11866] overlayfs: failed to resolve './file1': -2 [ 694.610728][T10269] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 694.849677][T10269] usb 3-1: unable to get BOS descriptor or descriptor too short [ 694.875634][T10269] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 694.949476][T10269] usb 3-1: can't read configurations, error -71 [ 696.000665][ T5935] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 696.359608][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.426110][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.490481][ T5935] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 696.541210][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.597151][ T5935] usb 6-1: config 0 descriptor?? [ 696.610776][ T5994] usb 1-1: USB disconnect, device number 19 [ 698.055146][ T5935] uclogic 0003:256C:006D.000F: failed retrieving Huion firmware version: -71 [ 698.065236][ T5935] uclogic 0003:256C:006D.000F: failed probing parameters: -71 [ 698.075773][ T5935] uclogic 0003:256C:006D.000F: probe with driver uclogic failed with error -71 [ 698.088769][ T5935] usb 6-1: USB disconnect, device number 12 [ 698.190783][ T90] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 698.340496][ T90] usb 1-1: device descriptor read/64, error -71 [ 699.350521][ T90] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 700.160640][ T90] usb 1-1: device descriptor read/64, error -71 [ 700.273181][ T90] usb usb1-port1: attempt power cycle [ 704.034175][T11957] overlayfs: failed to resolve './file1': -2 [ 704.497490][T11959] kAFS: No cell specified [ 705.596876][T11969] warning: `syz.4.1667' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 706.890394][ T90] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 707.231406][ T90] usb 6-1: device descriptor read/64, error -71 [ 709.423120][ T90] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 709.804917][ T5935] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 710.075043][T12014] overlayfs: failed to resolve './file1': -2 [ 710.691026][ T5935] usb 4-1: device descriptor read/64, error -71 [ 711.260414][ T5935] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 711.450391][ T5935] usb 4-1: device descriptor read/64, error -71 [ 711.606677][ T5935] usb usb4-port1: attempt power cycle [ 712.930437][ T5862] Bluetooth: hci5: command 0x0c1a tx timeout [ 714.149418][T12057] overlayfs: failed to resolve './file1': -2 [ 714.231995][ T5918] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 715.183719][ T5918] usb 4-1: device descriptor read/64, error -71 [ 715.679785][ T5918] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 715.850471][ T5918] usb 4-1: device descriptor read/64, error -71 [ 715.960822][ T5918] usb usb4-port1: attempt power cycle [ 716.320480][ T5918] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 717.363163][ T5918] usb 4-1: device descriptor read/8, error -71 [ 717.570863][ T5862] Bluetooth: hci1: command 0x0c1a tx timeout [ 718.615568][T12102] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1704'. [ 723.106044][T12130] Invalid source name [ 723.110107][T12130] UBIFS error (pid: 12130): cannot open "/dev/sg0", error -22 [ 723.128475][T12130] netlink: 'syz.0.1711': attribute type 3 has an invalid length. [ 723.906714][T12133] loop5: detected capacity change from 0 to 16 [ 724.025257][T12133] erofs (device loop5): mounted with root inode @ nid 36. [ 724.144678][T12133] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 724.225598][T12133] erofs (device loop5): read error -117 @ 43 of nid 36 [ 724.636909][T12133] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 724.646398][T12133] erofs (device loop5): read error -117 @ 43 of nid 36 [ 724.655954][T12139] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 724.670219][T12139] erofs (device loop5): read error -117 @ 43 of nid 36 [ 725.760429][ T90] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 726.290967][ T90] usb 3-1: Using ep0 maxpacket: 16 [ 726.319621][ T90] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.346321][ T90] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 726.406551][ T90] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 726.442960][ T90] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.502115][ T90] usb 3-1: config 0 descriptor?? [ 728.050527][ T5862] Bluetooth: hci5: command 0x0c1a tx timeout [ 728.461728][ T48] usb 3-1: USB disconnect, device number 20 [ 729.490134][T12171] ubi31: attaching mtd0 [ 729.497412][T12171] ubi31: scanning is finished [ 729.502181][T12171] ubi31: empty MTD device detected [ 730.301232][T12173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1725'. [ 732.688210][T12171] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 734.142476][T12184] ISOFS: Unable to identify CD-ROM format. [ 735.382451][T12196] loop2: detected capacity change from 0 to 1024 [ 736.580570][T12209] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1734'. [ 743.772225][T12244] ISOFS: Unable to identify CD-ROM format. [ 744.166637][T12247] loop5: detected capacity change from 0 to 1024 [ 744.442605][T12249] loop3: detected capacity change from 0 to 8 [ 744.963667][T12249] SQUASHFS error: Failed to read block 0x4de: -5 [ 745.199919][T12249] SQUASHFS error: Failed to read block 0x4de: -5 [ 745.460721][ T30] audit: type=1800 audit(1754532929.614:80): pid=12249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1749" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 745.583650][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 745.593176][T12259] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 745.602414][T12259] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 745.650148][T12259] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 745.658873][T12259] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 746.535531][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.550429][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.580485][T12264] loop3: detected capacity change from 0 to 128 [ 746.702374][T12264] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 746.834031][T12264] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 746.881008][T12162] bond0: (slave syz_tun): Releasing backup interface [ 747.336250][T12257] wg1 speed is unknown, defaulting to 1000 [ 747.376692][T12257] lo speed is unknown, defaulting to 1000 [ 747.384726][T12277] Invalid source name [ 747.388722][T12277] UBIFS error (pid: 12277): cannot open "/dev/sg0", error -22 [ 747.454122][ T5860] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 747.829536][ T5862] Bluetooth: hci4: command tx timeout [ 749.171824][ T5918] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 749.680506][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 749.686688][T12298] loop6: detected capacity change from 0 to 1024 [ 749.698849][ T5918] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.763543][ T5918] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.941526][ T5862] Bluetooth: hci4: command tx timeout [ 749.954731][ T5918] usb 3-1: config 0 interface 0 has no altsetting 0 [ 749.967716][ T5918] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 749.978774][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.710005][ T5918] usb 3-1: config 0 descriptor?? [ 751.740520][ T5918] usb 3-1: can't set config #0, error -71 [ 751.762263][ T5918] usb 3-1: USB disconnect, device number 21 [ 751.970686][ T5862] Bluetooth: hci4: command tx timeout [ 752.039688][T12316] netlink: 'syz.4.1767': attribute type 1 has an invalid length. [ 752.050695][T12316] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1767'. [ 752.343180][ T5918] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 752.520569][ T5918] usb 7-1: Using ep0 maxpacket: 32 [ 752.569788][ T5918] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 752.593992][T12327] input: syz0 as /devices/virtual/input/input9 [ 752.601754][T12257] chnl_net:caif_netlink_parms(): no params data found [ 752.648620][ T5918] usb 7-1: config 0 has no interface number 0 [ 752.701173][ T5918] usb 7-1: config 0 interface 184 has no altsetting 0 [ 752.800608][ T5918] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 752.852905][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.896100][ T5918] usb 7-1: Product: syz [ 752.908372][ T6109] bridge_slave_1: left promiscuous mode [ 752.920621][ T5918] usb 7-1: Manufacturer: syz [ 752.927234][ T5918] usb 7-1: SerialNumber: syz [ 752.942299][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.947383][ T5918] usb 7-1: config 0 descriptor?? [ 752.993586][ T5918] smsc75xx v1.0.0 [ 753.116122][ T6109] bridge_slave_0: left promiscuous mode [ 753.130225][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.050456][ T5862] Bluetooth: hci4: command tx timeout [ 754.168370][T12338] cgroup: Invalid name [ 754.193731][T12338] program syz.5.1773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 754.298956][ T5918] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 754.381477][ T5918] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 754.812548][ T5918] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 754.936029][ T5918] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 754.976123][ T5918] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 755.058502][ T5918] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 755.118113][ T5918] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 755.190787][ T5918] usb 7-1: USB disconnect, device number 21 [ 755.199877][T12348] loop6: detected capacity change from 0 to 1024 [ 755.490979][ T90] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 755.538469][ T30] audit: type=1800 audit(1754532939.684:81): pid=12348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1776" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 755.623197][T12360] loop5: detected capacity change from 0 to 1024 [ 755.883234][ T90] usb 5-1: Using ep0 maxpacket: 16 [ 755.891297][ T90] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.902340][ T90] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.914795][ T90] usb 5-1: config 0 interface 0 has no altsetting 0 [ 755.921615][ T90] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 755.931570][ T90] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.991449][ T90] usb 5-1: config 0 descriptor?? [ 756.216820][T12352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.256539][T12352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.575348][ T90] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 756.620452][ T90] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 756.656295][ T90] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 756.697902][ T90] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 756.725816][ T90] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 756.772887][ T90] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 756.810184][ T90] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 756.860738][ T90] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 756.927813][ T90] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 756.944920][ T90] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 756.998165][ T90] kye 0003:0458:0138.0010: report_id 0 is invalid [ 757.050382][ T90] kye 0003:0458:0138.0010: item 0 0 1 8 parsing failed [ 757.070158][ T90] kye 0003:0458:0138.0010: parse failed [ 757.100736][ T90] kye 0003:0458:0138.0010: probe with driver kye failed with error -22 [ 757.392083][ T6109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.735244][T12389] cgroup: Invalid name [ 757.848125][ T6109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.023933][T12389] program syz.2.1786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 758.051471][ T90] usb 5-1: USB disconnect, device number 18 [ 758.290483][ T6109] bond0 (unregistering): Released all slaves [ 758.370994][T12393] loop4: detected capacity change from 0 to 512 [ 758.400047][T12396] loop6: detected capacity change from 0 to 256 [ 758.413032][T12393] EXT4-fs (loop4): Test dummy encryption mode enabled [ 758.427770][T12393] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 758.454304][T12393] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 758.505208][T12396] exfat: Deprecated parameter 'namecase' [ 758.517958][T12396] exfat: Deprecated parameter 'namecase' [ 758.531962][T12393] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 758.570765][T12393] EXT4-fs (loop4): 1 truncate cleaned up [ 758.630746][T12393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 758.656658][T12396] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 758.667667][T12393] EXT4-fs error (device loop4): ext4_lookup:1787: inode #16: comm syz.4.1787: iget: bad i_size value: 5497558147880 [ 758.736431][T12406] loop2: detected capacity change from 0 to 1024 [ 758.871774][T12409] loop5: detected capacity change from 0 to 512 [ 758.925453][ T5863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.978084][T12409] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 759.106929][T12409] EXT4-fs (loop5): 1 truncate cleaned up [ 759.155640][T12409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 759.179440][ T7697] exFAT-fs (loop6): error, data size is invalid(16777215) [ 759.194626][ T7697] exFAT-fs (loop6): error, data size is invalid(16777215) [ 759.381478][ T5857] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 759.415137][ T5857] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 759.463915][T12257] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.478151][T12257] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.508158][T12257] bridge_slave_0: entered allmulticast mode [ 759.590849][T12257] bridge_slave_0: entered promiscuous mode [ 759.618877][T12257] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.675344][T12257] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.699844][T12257] bridge_slave_1: entered allmulticast mode [ 759.707986][T12257] bridge_slave_1: entered promiscuous mode [ 760.044887][ T6109] hsr_slave_0: left promiscuous mode [ 760.067518][ T6109] hsr_slave_1: left promiscuous mode [ 760.081135][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.125031][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.234728][ T5857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.453077][T12259] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 763.465703][T12259] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 763.474012][T12259] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 763.488066][T12259] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 763.497488][T12259] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 764.154217][T12454] loop4: detected capacity change from 0 to 1024 [ 764.231325][T12454] hfsplus: bad catalog entry type [ 764.261009][ T6109] team0 (unregistering): Port device team_slave_1 removed [ 764.478506][ T6109] team0 (unregistering): Port device team_slave_0 removed [ 764.701955][T12463] loop4: detected capacity change from 0 to 1024 [ 764.984101][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 765.000089][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 765.007963][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 765.016111][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 765.031928][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 765.590568][T12259] Bluetooth: hci0: command tx timeout [ 766.156734][T12470] loop4: detected capacity change from 0 to 512 [ 766.225824][T12470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.251363][T12470] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.267565][T12257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.279917][T12470] fs-verity (loop4, inode 15): Unrecognized descriptor size: 0 bytes [ 766.297958][T12257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.669304][T12257] team0: Port device team_slave_0 added [ 766.758058][ T5863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.777258][T12257] team0: Port device team_slave_1 added [ 766.839183][T12462] wg1 speed is unknown, defaulting to 1000 [ 767.031534][T12450] wg1 speed is unknown, defaulting to 1000 [ 767.037656][T12462] lo speed is unknown, defaulting to 1000 [ 767.044021][T12257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.075309][T12257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.101394][T12259] Bluetooth: hci1: command tx timeout [ 767.204541][T12257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.234828][T12259] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 767.282698][T12257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.362607][T12257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.453806][T12490] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1817'. [ 767.467628][T12257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.660414][T12259] Bluetooth: hci0: command tx timeout [ 767.937083][T12450] lo speed is unknown, defaulting to 1000 [ 767.957826][T12492] loop4: detected capacity change from 0 to 1024 [ 768.262388][ T6109] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.293621][ T5918] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 768.620428][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 768.699839][ T5918] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 768.709539][ T5918] usb 3-1: config 0 has no interface number 0 [ 768.841802][ T5918] usb 3-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 768.916754][ T5918] usb 3-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 768.931480][ T5918] usb 3-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 768.976268][ T5918] usb 3-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 768.997991][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.049861][ T5918] usb 3-1: Product: syz [ 769.062894][ T5918] usb 3-1: Manufacturer: syz [ 769.087060][ T5918] usb 3-1: SerialNumber: syz [ 769.095501][ T6109] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.126961][ T5918] usb 3-1: config 0 descriptor?? [ 769.175303][T12259] Bluetooth: hci1: command tx timeout [ 769.200227][T12494] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 769.228032][T12494] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 769.402790][T12257] hsr_slave_0: entered promiscuous mode [ 769.409455][T12257] hsr_slave_1: entered promiscuous mode [ 769.419222][T12257] debugfs: 'hsr0' already exists in 'hsr' [ 769.426278][T12257] Cannot create hsr debugfs directory [ 769.545309][ T6109] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.630543][ T5935] wg1 speed is unknown, defaulting to 1000 [ 769.636528][ T5935] syz0: Port: 1 Link DOWN [ 769.809153][T12259] Bluetooth: hci0: command tx timeout [ 770.240017][ T6109] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.013537][T12541] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1831'. [ 771.250781][T12259] Bluetooth: hci1: command tx timeout [ 771.488618][ T5849] usb 3-1: USB disconnect, device number 22 [ 771.638097][T12544] loop2: detected capacity change from 0 to 1024 [ 771.890767][T12259] Bluetooth: hci0: command tx timeout [ 773.291594][ T5918] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 773.335557][T12259] Bluetooth: hci1: command tx timeout [ 773.565618][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 773.603595][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.639886][ T5918] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 773.677474][ T5918] usb 5-1: config 0 interface 0 has no altsetting 0 [ 773.689153][T12450] chnl_net:caif_netlink_parms(): no params data found [ 773.695863][ T5918] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 773.722816][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.783436][ T5918] usb 5-1: config 0 descriptor?? [ 773.828061][T12566] loop3: detected capacity change from 0 to 512 [ 773.835175][ T5918] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 773.877412][T12566] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 773.924203][T12566] EXT4-fs (loop3): 1 truncate cleaned up [ 773.937051][T12566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.131079][T12462] chnl_net:caif_netlink_parms(): no params data found [ 774.153387][ T5918] kernel read not supported for file /hwrng (pid: 5918 comm: kworker/0:4) [ 774.406221][ T5860] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.927521][T12450] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.969957][T12450] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.012445][T12450] bridge_slave_0: entered allmulticast mode [ 775.021163][T12450] bridge_slave_0: entered promiscuous mode [ 775.031613][T12450] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.038752][T12450] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.045980][T12450] bridge_slave_1: entered allmulticast mode [ 775.053916][T12450] bridge_slave_1: entered promiscuous mode [ 775.844538][ T5994] usb 5-1: USB disconnect, device number 19 [ 776.334248][T12257] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 776.360413][ T30] audit: type=1326 audit(1754532960.464:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12603 comm="syz.4.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52aeb8ebe9 code=0x7ffc0000 [ 776.417065][T12450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.431089][ T30] audit: type=1326 audit(1754532960.464:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12603 comm="syz.4.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f52aeb8ebe9 code=0x7ffc0000 [ 776.470177][ T30] audit: type=1326 audit(1754532960.464:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12603 comm="syz.4.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52aeb8ebe9 code=0x7ffc0000 [ 776.558277][T12450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.573809][ T30] audit: type=1326 audit(1754532960.464:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12603 comm="syz.4.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f52aeb8ebe9 code=0x7ffc0000 [ 776.663221][T12462] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.511869][T12462] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.519183][T12462] bridge_slave_0: entered allmulticast mode [ 778.528767][ T30] audit: type=1326 audit(1754532960.464:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12603 comm="syz.4.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52aeb8ebe9 code=0x7ffc0000 [ 778.562038][T12462] bridge_slave_0: entered promiscuous mode [ 778.587817][T12257] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 778.610619][ T30] audit: type=1326 audit(1754532960.464:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12603 comm="syz.4.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52aeb8ebe9 code=0x7ffc0000 [ 778.657518][T12257] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 778.824848][T12462] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.861656][T12462] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.868928][T12462] bridge_slave_1: entered allmulticast mode [ 778.910215][T12462] bridge_slave_1: entered promiscuous mode [ 778.940663][T12625] loop3: detected capacity change from 0 to 2048 [ 779.046633][T12257] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 779.070730][T12625] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 779.087587][T12628] loop2: detected capacity change from 0 to 512 [ 779.173440][T12628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.193633][T12628] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 779.208982][T12450] team0: Port device team_slave_0 added [ 779.744958][T12450] team0: Port device team_slave_1 added [ 779.793449][T12462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.845321][T12462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.964376][ T5859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.159761][T12650] loop2: detected capacity change from 0 to 256 [ 780.418513][T12652] Invalid source name [ 780.422641][T12652] UBIFS error (pid: 12652): cannot open "/dev/sg0", error -22 [ 780.440086][T12652] netlink: 'syz.3.1852': attribute type 3 has an invalid length. [ 784.084856][T12450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.100455][T12450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.960473][T12450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.018138][T12462] team0: Port device team_slave_0 added [ 785.054383][T12462] team0: Port device team_slave_1 added [ 785.080992][ T6109] bridge_slave_1: left allmulticast mode [ 785.086930][ T6109] bridge_slave_1: left promiscuous mode [ 785.120968][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.183689][T12660] loop4: detected capacity change from 0 to 128 [ 785.191297][ T6109] bridge_slave_0: left allmulticast mode [ 785.201359][ T6109] bridge_slave_0: left promiscuous mode [ 785.207119][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.304522][T12660] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 785.339993][T12660] ext4 filesystem being mounted at /328/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 785.403762][ T6109] bridge_slave_1: left allmulticast mode [ 785.409415][ T6109] bridge_slave_1: left promiscuous mode [ 785.477637][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.557767][ T6109] bridge_slave_0: left allmulticast mode [ 785.585844][ T6109] bridge_slave_0: left promiscuous mode [ 785.620132][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.719722][ T5863] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 786.200931][ T5935] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 786.382665][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 786.400398][ T5935] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 786.439954][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.472216][ T5935] usb 5-1: config 0 descriptor?? [ 786.478660][T12664] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 786.632414][T12666] loop2: detected capacity change from 0 to 128 [ 786.701845][T12666] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 786.935181][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 786.943013][ T5935] usbhid 5-1:0.0: can't add hid device: -71 [ 786.949065][ T5935] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 787.713397][T12666] ext4 filesystem being mounted at /309/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 788.960698][ T5935] usb 5-1: USB disconnect, device number 20 [ 789.177127][T12666] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 789.327267][T12666] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 789.404866][ T5859] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 790.051263][ T6109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.080189][ T6109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.144142][ T6109] bond0 (unregistering): Released all slaves [ 790.310482][ T5994] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 790.478320][ T5994] usb 4-1: Using ep0 maxpacket: 32 [ 790.504978][ T5994] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 790.523482][ T5994] usb 4-1: config 0 has no interface number 0 [ 790.544630][ T5994] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 790.576223][ T5994] usb 4-1: config 0 interface 85 has no altsetting 0 [ 790.602897][ T5994] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 790.627858][ T5994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.656606][ T5994] usb 4-1: Product: syz [ 790.670477][ T5994] usb 4-1: Manufacturer: syz [ 790.680374][ T5994] usb 4-1: SerialNumber: syz [ 790.696694][ T5994] usb 4-1: config 0 descriptor?? [ 790.844903][ T6109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.866418][ T6109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.876584][ T6109] bond0 (unregistering): Released all slaves [ 790.899441][T12450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.911353][T12450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.972088][T12450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.094197][T12462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.110523][T12462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.137308][T12462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.153259][T12462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.160190][T12462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.194705][T12462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.339029][ T5994] appletouch 4-1:0.85: Geyser mode initialized. [ 791.347752][ T5994] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input10 [ 791.393679][T12450] hsr_slave_0: entered promiscuous mode [ 791.441793][T12450] hsr_slave_1: entered promiscuous mode [ 791.451102][T12450] debugfs: 'hsr0' already exists in 'hsr' [ 791.456975][T12450] Cannot create hsr debugfs directory [ 791.562987][ T5994] usb 4-1: USB disconnect, device number 19 [ 791.599409][T12693] Driver unsupported XDP return value 0 on prog (id 210) dev N/A, expect packet loss! [ 791.666505][ T5994] appletouch 4-1:0.85: input: appletouch disconnected [ 791.990415][ T5849] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 792.854248][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 793.950791][ T5849] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 793.959954][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.844738][ T5849] usb 3-1: config 0 descriptor?? [ 795.006660][T12462] hsr_slave_0: entered promiscuous mode [ 795.013606][T12462] hsr_slave_1: entered promiscuous mode [ 795.020073][T12462] debugfs: 'hsr0' already exists in 'hsr' [ 795.025883][T12462] Cannot create hsr debugfs directory [ 795.036332][ T5849] usb 3-1: can't set config #0, error -71 [ 795.173820][ T5849] usb 3-1: USB disconnect, device number 23 [ 797.244227][T12726] loop4: detected capacity change from 0 to 164 [ 797.278771][T12726] ISOFS: unable to read i-node block [ 797.287423][T12726] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 800.896772][ T6109] hsr_slave_0: left promiscuous mode [ 800.917880][ T6109] hsr_slave_1: left promiscuous mode [ 800.924386][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.959688][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.998378][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.040883][ T5919] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 801.058169][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.096223][ T6109] hsr_slave_0: left promiscuous mode [ 801.105141][ T6109] hsr_slave_1: left promiscuous mode [ 801.112038][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.130099][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.196284][ T6109] veth1_macvtap: left promiscuous mode [ 801.207041][ T6109] veth0_macvtap: left promiscuous mode [ 801.224408][ T6109] veth1_vlan: left promiscuous mode [ 801.238341][ T6109] veth0_vlan: left promiscuous mode [ 805.613430][ T6109] team0 (unregistering): Port device team_slave_1 removed [ 805.666016][ T6109] team0 (unregistering): Port device team_slave_0 removed [ 805.763652][ T5862] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 805.788625][ T5862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 805.804707][ T5862] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 805.822168][ T5862] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 805.830183][ T5862] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 806.233705][ T6109] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN NOPTI [ 806.245787][ T6109] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 806.255309][ T6109] CPU: 0 UID: 0 PID: 6109 Comm: kworker/u8:12 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 806.267188][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 806.277228][ T6109] Workqueue: netns cleanup_net [ 806.281986][ T6109] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 806.287632][ T6109] Code: ff ff ff e8 43 db 41 01 89 c5 31 ff 89 c6 e8 38 f0 88 f7 85 ed 74 45 e8 ef eb 88 f7 eb 05 e8 e8 eb 88 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 72 56 ec f7 49 8b 2c 24 49 8d 7c [ 806.307218][ T6109] RSP: 0018:ffffc9000b777340 EFLAGS: 00010216 [ 806.313269][ T6109] RAX: 000000001fffe000 RBX: 1ffff1100a8a7982 RCX: ffff88807ebc0000 [ 806.321222][ T6109] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 806.329194][ T6109] RBP: 0000000000000001 R08: ffffffff8fa34137 R09: 1ffffffff1f46826 [ 806.337174][ T6109] R10: dffffc0000000000 R11: fffffbfff1f46827 R12: 00000000ffff0000 [ 806.345129][ T6109] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88805453cc10 [ 806.353093][ T6109] FS: 0000000000000000(0000) GS:ffff888125c24000(0000) knlGS:0000000000000000 [ 806.362010][ T6109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 806.368577][ T6109] CR2: 00007f85b74e5000 CR3: 000000005af98000 CR4: 0000000000350ef0 [ 806.376533][ T6109] Call Trace: [ 806.379796][ T6109] [ 806.382715][ T6109] mld_clear_delrec+0x160/0x660 [ 806.387564][ T6109] ipv6_mc_destroy_dev+0x45/0x5a0 [ 806.392598][ T6109] ? addrconf_ifdown+0x1396/0x1880 [ 806.397712][ T6109] addrconf_ifdown+0x139e/0x1880 [ 806.402646][ T6109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 806.408278][ T6109] ? tls_dev_event+0x717/0xec0 [ 806.413036][ T6109] ? __pfx_addrconf_ifdown+0x10/0x10 [ 806.418334][ T6109] addrconf_notify+0x1bc/0x1010 [ 806.423185][ T6109] notifier_call_chain+0x1b6/0x3e0 [ 806.428296][ T6109] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 806.434713][ T6109] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 806.441467][ T6109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 806.447092][ T6109] ? unregister_netdevice_queue+0x1b3/0x380 [ 806.452985][ T6109] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 806.459315][ T6109] ? batadv_meshif_destroy_netlink+0x1b0/0x250 [ 806.465470][ T6109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 806.471097][ T6109] default_device_exit_batch+0x819/0x890 [ 806.476727][ T6109] ? __pfx___might_resched+0x10/0x10 [ 806.482001][ T6109] ? __pfx_default_device_exit_batch+0x10/0x10 [ 806.488152][ T6109] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 806.493596][ T6109] ? net_generic+0x1e/0x240 [ 806.498097][ T6109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 806.503718][ T6109] ? __pfx_default_device_exit_batch+0x10/0x10 [ 806.509867][ T6109] ops_undo_list+0x525/0x990 [ 806.514546][ T6109] ? __pfx_ops_undo_list+0x10/0x10 [ 806.519651][ T6109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 806.525279][ T6109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 806.530900][ T6109] ? do_raw_spin_unlock+0x122/0x240 [ 806.536092][ T6109] cleanup_net+0x4c5/0x800 [ 806.540506][ T6109] ? __pfx_cleanup_net+0x10/0x10 [ 806.545437][ T6109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 806.551238][ T6109] ? _raw_spin_unlock_irq+0x23/0x50 [ 806.556427][ T6109] ? process_scheduled_works+0x9ef/0x17b0 [ 806.562154][ T6109] ? process_scheduled_works+0x9ef/0x17b0 [ 806.567863][ T6109] process_scheduled_works+0xae1/0x17b0 [ 806.573414][ T6109] ? __pfx_process_scheduled_works+0x10/0x10 [ 806.579408][ T6109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 806.585033][ T6109] worker_thread+0x8a0/0xda0 [ 806.589620][ T6109] kthread+0x711/0x8a0 [ 806.593687][ T6109] ? __pfx_worker_thread+0x10/0x10 [ 806.598785][ T6109] ? __pfx_kthread+0x10/0x10 [ 806.603362][ T6109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 806.608992][ T6109] ? _raw_spin_unlock_irq+0x23/0x50 [ 806.614197][ T6109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 806.619840][ T6109] ? lockdep_hardirqs_on+0x9c/0x150 [ 806.625028][ T6109] ? __pfx_kthread+0x10/0x10 [ 806.629614][ T6109] ret_from_fork+0x3fc/0x770 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 806.634194][ T6109] ? __pfx_ret_from_fork+0x10/0x10 [ 806.639296][ T6109] ? __switch_to_asm+0x39/0x70 [ 806.644053][ T6109] ? __switch_to_asm+0x33/0x70 [ 806.648811][ T6109] ? __pfx_kthread+0x10/0x10 [ 806.653390][ T6109] ret_from_fork_asm+0x1a/0x30 [ 806.658156][ T6109] [ 806.661154][ T6109] Modules linked in: [ 806.665782][ T6109] ---[ end trace 0000000000000000 ]--- [ 806.678960][ T5919] usb 5-1: device descriptor read/64, error -110 [ 806.685796][ T6109] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 806.694175][ T6109] Code: ff ff ff e8 43 db 41 01 89 c5 31 ff 89 c6 e8 38 f0 88 f7 85 ed 74 45 e8 ef eb 88 f7 eb 05 e8 e8 eb 88 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 72 56 ec f7 49 8b 2c 24 49 8d 7c [ 806.717016][ T6109] RSP: 0018:ffffc9000b777340 EFLAGS: 00010216 [ 806.723174][ T6109] RAX: 000000001fffe000 RBX: 1ffff1100a8a7982 RCX: ffff88807ebc0000 [ 806.733664][ T6109] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 806.741701][ T6109] RBP: 0000000000000001 R08: ffffffff8fa34137 R09: 1ffffffff1f46826 [ 806.749783][ T6109] R10: dffffc0000000000 R11: fffffbfff1f46827 R12: 00000000ffff0000 [ 806.807582][ T6109] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88805453cc10 [ 806.816230][ T6109] FS: 0000000000000000(0000) GS:ffff888125d24000(0000) knlGS:0000000000000000 [ 806.825936][ T6109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 806.832690][ T6109] CR2: 0000563108eb2fb0 CR3: 0000000030978000 CR4: 0000000000350ef0 [ 806.844946][ T6109] Kernel panic - not syncing: Fatal exception [ 806.851365][ T6109] Kernel Offset: disabled [ 806.855675][ T6109] Rebooting in 86400 seconds..