last executing test programs: 18.041138172s ago: executing program 4 (id=191): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000300)='./file0\x00', 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) pipe2$9p(&(0x7f0000000180), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae56bc07c3906"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.575839274s ago: executing program 1 (id=193): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, 0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) syz_usb_connect(0x5, 0x2f, &(0x7f0000007c40)={{0x12, 0x1, 0x250, 0x45, 0xda, 0x56, 0x10, 0x421, 0x4df, 0x7376, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x7, 0x3, 0x40, 0xd, [{{0x9, 0x4, 0xbc, 0x5, 0x1, 0x2, 0x2, 0xff, 0x1, [], [{{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x2, 0x4, 0xf9, [@generic={0x2, 0x23}]}}]}}]}}]}}, &(0x7f0000008480)={0x0, 0x0, 0x0, 0x0}) 16.352482566s ago: executing program 0 (id=195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES8=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r2, 0x0, &(0x7f0000000c00)=""/225}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x1) r5 = socket$packet(0x11, 0x2, 0x300) unshare(0x22020600) getsockopt$packet_int(r5, 0x107, 0x8, 0x0, &(0x7f0000000140)) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r9, r10) r11 = getegid() r12 = getegid() lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000440), &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='fd=', @ANYBLOB="2c726f6f746d6f64653d303030303030303dcd5886df5b3e667947f1cfe36b300030302c75ba0b7c3069115445f07b454e140f35cb68107389a302b51e3177e3", @ANYRESDEC=0xee00, @ANYBLOB, @ANYBLOB="f18f6c2d78"], 0x0, 0x0, &(0x7f0000000780)="618f8f2ae7758cb13b42d8e817a29cfddb7d2ceb334b") fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000840)={{}, {0x1, 0x7}, [{0x2, 0x1}, {0x2, 0x3}], {0x4, 0x1}, [{}, {0x8, 0x1}, {}, {0x8, 0x5, r10}, {0x8, 0x0, r11}, {0x8, 0x3, r12}, {0x8, 0x1, r13}], {0x10, 0x4}, {0x20, 0x1}}, 0x6c, 0x1) ioctl$VHOST_GET_VRING_BASE(r8, 0x4008af24, &(0x7f0000000200)) 16.074979491s ago: executing program 1 (id=196): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00000001c0)) syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x108383) 14.413166129s ago: executing program 0 (id=198): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.31202378s ago: executing program 1 (id=200): socket$inet6(0xa, 0x3, 0x5) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8040, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3], 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x1, 0x8000001, 0x7, 0x2}], 0x10, 0xab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[@ANYBLOB="68234017dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14140000212000001c001280090001007866726d000000000c0002800800020001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) socket(0x3, 0x1, 0x8) setitimer(0x2, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_init(0x200, 0x40800) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[]) 14.276505458s ago: executing program 4 (id=201): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x891, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) 13.644255838s ago: executing program 0 (id=203): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000001ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 13.256742203s ago: executing program 4 (id=205): r0 = dup(0xffffffffffffffff) syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0xf694, 0x10100, 0x0, 0x168, 0x0, r0}, 0x0, 0x0) pipe(&(0x7f0000000200)) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.964299141s ago: executing program 0 (id=206): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x7, 0x285}, 0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) syz_usb_connect(0x5, 0x2f, &(0x7f0000007c40)={{0x12, 0x1, 0x250, 0x45, 0xda, 0x56, 0x10, 0x421, 0x4df, 0x7376, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x7, 0x3, 0x40, 0xd, [{{0x9, 0x4, 0xbc, 0x5, 0x1, 0x2, 0x2, 0xff, 0x1, [], [{{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x2, 0x4, 0xf9, [@generic={0x2, 0x23}]}}]}}]}}]}}, &(0x7f0000008480)={0x0, 0x0, 0x0, 0x0}) 12.054049269s ago: executing program 4 (id=208): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES8=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r2, 0x0, &(0x7f0000000c00)=""/225}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x1) r5 = socket$packet(0x11, 0x2, 0x300) unshare(0x22020600) getsockopt$packet_int(r5, 0x107, 0x8, 0x0, &(0x7f0000000140)) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r9, r10) r11 = getegid() r12 = getegid() lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000440), &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='fd=', @ANYBLOB="2c726f6f746d6f64653d303030303030303dcd5886df5b3e667947f1cfe36b300030302c75ba0b7c3069115445f07b454e140f35cb68107389a302b51e3177e3", @ANYRESDEC=0xee00, @ANYBLOB, @ANYBLOB="f18f6c2d78"], 0x0, 0x0, &(0x7f0000000780)="618f8f2ae7758cb13b42d8e817a29cfddb7d2ceb334b") fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000840)={{}, {0x1, 0x7}, [{0x2, 0x1}, {0x2, 0x3}], {0x4, 0x1}, [{}, {0x8, 0x1}, {}, {0x8, 0x5, r10}, {0x8, 0x0, r11}, {0x8, 0x3, r12}, {0x8, 0x1, r13}], {0x10, 0x4}, {0x20, 0x1}}, 0x6c, 0x1) ioctl$VHOST_GET_VRING_BASE(r8, 0x4008af24, &(0x7f0000000200)) 11.243025604s ago: executing program 0 (id=211): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000300)='./file0\x00', 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) pipe2$9p(&(0x7f0000000180), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae56bc07c3906"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.476045706s ago: executing program 4 (id=212): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) preadv(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) 8.364649756s ago: executing program 2 (id=216): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x891, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) 7.736743736s ago: executing program 2 (id=217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 7.669388446s ago: executing program 0 (id=218): r0 = open(0x0, 0x88800, 0x12) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x78}}, 0x20000800) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x3, 0x10004, 0x800, 0x7}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728", 0x1f) unshare(0x22020600) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x4) r10 = openat$cgroup_pressure(r9, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000040)={'full', 0x20, 0x800, 0x20, 0x7}, 0x19) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) bind$packet(r1, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) 7.076317091s ago: executing program 2 (id=220): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0005}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7}}, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) write$apparmor_exec(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x564) open(0x0, 0x60840, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) syz_usb_disconnect(r1) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) write(r2, &(0x7f00000008c0)="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", 0x251) r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0xadc) 6.336646744s ago: executing program 3 (id=221): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x7, 0x285}, 0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) syz_usb_connect(0x5, 0x2f, &(0x7f0000007c40)={{0x12, 0x1, 0x250, 0x45, 0xda, 0x56, 0x10, 0x421, 0x4df, 0x7376, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x7, 0x3, 0x40, 0xd, [{{0x9, 0x4, 0xbc, 0x5, 0x1, 0x2, 0x2, 0xff, 0x1, [], [{{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x2, 0x4, 0xf9, [@generic={0x2, 0x23}]}}]}}]}}]}}, &(0x7f0000008480)={0x0, 0x0, 0x0, 0x0}) 4.46757746s ago: executing program 3 (id=222): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000100)) 3.652380437s ago: executing program 3 (id=223): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES8=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r2, 0x0, &(0x7f0000000c00)=""/225}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x1) r5 = socket$packet(0x11, 0x2, 0x300) unshare(0x22020600) getsockopt$packet_int(r5, 0x107, 0x8, 0x0, &(0x7f0000000140)) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r9, r10) r11 = getegid() r12 = getegid() lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000440), &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='fd=', @ANYBLOB="2c726f6f746d6f64653d303030303030303dcd5886df5b3e667947f1cfe36b300030302c75ba0b7c3069115445f07b454e140f35cb68107389a302b51e3177e3", @ANYRESDEC=0xee00, @ANYBLOB, @ANYBLOB="f18f6c2d78"], 0x0, 0x0, &(0x7f0000000780)="618f8f2ae7758cb13b42d8e817a29cfddb7d2ceb334b") fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000840)={{}, {0x1, 0x7}, [{0x2, 0x1}, {0x2, 0x3}], {0x4, 0x1}, [{}, {0x8, 0x1}, {}, {0x8, 0x5, r10}, {0x8, 0x0, r11}, {0x8, 0x3, r12}, {0x8, 0x1, r13}], {0x10, 0x4}, {0x20, 0x1}}, 0x6c, 0x1) ioctl$VHOST_GET_VRING_BASE(r8, 0x4008af24, &(0x7f0000000200)) 3.612955698s ago: executing program 2 (id=224): syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r0 = syz_io_uring_setup(0x88b, &(0x7f0000000140)={0x0, 0x3f84, 0x10, 0x4, 0x6fd}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x4047f6, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2.559408158s ago: executing program 3 (id=225): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000001ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.303803294s ago: executing program 2 (id=226): socket$inet(0x2, 0x4000000000000001, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000af, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8000b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.977021459s ago: executing program 1 (id=227): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000000)=0x2, 0x4) 1.666396198s ago: executing program 3 (id=228): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002540)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0xa, 0x7, 0x0, 0x0, 0xffffffff, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xc000, 0x1, 0x0, 0x0, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) 1.136887155s ago: executing program 2 (id=229): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 980.275559ms ago: executing program 1 (id=230): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x1, 0x0) 699.83872ms ago: executing program 3 (id=231): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x500) pread64(r0, 0x0, 0xea, 0x0) 96.79023ms ago: executing program 1 (id=232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0xfffffffffffffff8, 0x10000, 0x8, r2, 0x9}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x278000003e7, 0x0, 0x1, r2, 0x1}) 0s ago: executing program 4 (id=233): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'team0\x00'}}, 0x1e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040)=0x10000, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x1, 0xff, 0x1, 0x66, 0x4}, 0x35) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff, 0x3, 0x0, 0xc}, 0x20) signalfd(r2, 0x0, 0x0) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103096353d61e3e6d2f272d72287c21a8515b9ec0e9d7c7f02f65f18d9ad3f74573c6faa288f5ad1e9a4f831db4838c8b406b638f4d144285b078dcf25ef6348f89d47b6fb22bcb27bc0457ba6c487b008fb17c7a061a052a2f786878d7bcb55586d0997560db343a585a83087943e18636a9934d8e26f8567d290dfed3ea86d83dc82feef3371e4c7ac7eedd7e3222136a8e1f36926ebf013da1caaae27db3379eb0e03dedc1f1b1d01ee731be7a54182f5c8b2631b803851cbc95c17285cbeb04b1083a4cfe9f232f504cd192ec7dfd953d309ddd8743314bd37b721e62bd", @ANYRES64=0x0, @ANYRESHEX], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b31ce93ee9070c000000290495b9585dde8300"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14e040) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x1, 0x1}}, 0x2e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000000)=0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. [ 197.817865][ T5785] cgroup: Unknown subsys name 'net' [ 197.943661][ T5785] cgroup: Unknown subsys name 'cpuset' [ 197.961332][ T5785] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 204.441602][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 210.275150][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.284182][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.294905][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.313410][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.323751][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.355616][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.376427][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.385483][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.412967][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.423499][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.425489][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.440304][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.455798][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.477094][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.480261][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.495452][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.497203][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.513504][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.516024][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.527774][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.537821][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.558932][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.559978][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.574516][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.578863][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.979430][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 212.531890][ T5813] Bluetooth: hci0: command tx timeout [ 212.603120][ T5813] Bluetooth: hci3: command tx timeout [ 212.608782][ T5813] Bluetooth: hci1: command tx timeout [ 212.687867][ T5803] Bluetooth: hci4: command tx timeout [ 212.694125][ T5813] Bluetooth: hci2: command tx timeout [ 212.737501][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 212.779966][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 212.917957][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 213.142982][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 213.548949][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.556731][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.564862][ T5802] bridge_slave_0: entered allmulticast mode [ 213.574857][ T5802] bridge_slave_0: entered promiscuous mode [ 213.635748][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.647539][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.655555][ T5802] bridge_slave_1: entered allmulticast mode [ 213.665715][ T5802] bridge_slave_1: entered promiscuous mode [ 213.986914][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.000538][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.010662][ T5810] bridge_slave_0: entered allmulticast mode [ 214.020480][ T5810] bridge_slave_0: entered promiscuous mode [ 214.149883][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.259106][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.266791][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.274946][ T5810] bridge_slave_1: entered allmulticast mode [ 214.283924][ T5810] bridge_slave_1: entered promiscuous mode [ 214.293734][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.301297][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.309186][ T5812] bridge_slave_0: entered allmulticast mode [ 214.318796][ T5812] bridge_slave_0: entered promiscuous mode [ 214.381021][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.457936][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.465639][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.473674][ T5812] bridge_slave_1: entered allmulticast mode [ 214.482989][ T5812] bridge_slave_1: entered promiscuous mode [ 214.567035][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.575511][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.583292][ T5801] bridge_slave_0: entered allmulticast mode [ 214.591962][ T5801] bridge_slave_0: entered promiscuous mode [ 214.602821][ T5803] Bluetooth: hci0: command tx timeout [ 214.682722][ T5803] Bluetooth: hci1: command tx timeout [ 214.688079][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.688328][ T5803] Bluetooth: hci3: command tx timeout [ 214.741204][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.748997][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.756912][ T5801] bridge_slave_1: entered allmulticast mode [ 214.765624][ T5803] Bluetooth: hci4: command tx timeout [ 214.767183][ T5801] bridge_slave_1: entered promiscuous mode [ 214.771469][ T5803] Bluetooth: hci2: command tx timeout [ 214.783077][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.790653][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.798940][ T5816] bridge_slave_0: entered allmulticast mode [ 214.808770][ T5816] bridge_slave_0: entered promiscuous mode [ 214.867669][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.885595][ T5802] team0: Port device team_slave_0 added [ 214.935515][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.943249][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.950911][ T5816] bridge_slave_1: entered allmulticast mode [ 214.960659][ T5816] bridge_slave_1: entered promiscuous mode [ 214.980962][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.037602][ T5802] team0: Port device team_slave_1 added [ 215.121643][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.223761][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.310837][ T5810] team0: Port device team_slave_0 added [ 215.407224][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.427635][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.446000][ T5810] team0: Port device team_slave_1 added [ 215.464241][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.481750][ T5812] team0: Port device team_slave_0 added [ 215.493094][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.500323][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.526876][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.646422][ T5812] team0: Port device team_slave_1 added [ 215.656598][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.663999][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.690634][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.878308][ T5801] team0: Port device team_slave_0 added [ 215.887884][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.896515][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.923517][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.944340][ T5816] team0: Port device team_slave_0 added [ 215.954460][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.961598][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.988702][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.048217][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.055570][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.081925][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.108251][ T5801] team0: Port device team_slave_1 added [ 216.124827][ T5816] team0: Port device team_slave_1 added [ 216.196541][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.204304][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.232140][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.533090][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.540313][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.566717][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.593924][ T5802] hsr_slave_0: entered promiscuous mode [ 216.604048][ T5802] hsr_slave_1: entered promiscuous mode [ 216.616498][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.623799][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.650203][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.668308][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.675664][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.702050][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.714761][ T5803] Bluetooth: hci0: command tx timeout [ 216.752158][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.759455][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.764495][ T5803] Bluetooth: hci3: command tx timeout [ 216.785888][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.802648][ T5803] Bluetooth: hci1: command tx timeout [ 216.842738][ T5803] Bluetooth: hci4: command tx timeout [ 216.853917][ T5803] Bluetooth: hci2: command tx timeout [ 217.013821][ T5810] hsr_slave_0: entered promiscuous mode [ 217.024357][ T5810] hsr_slave_1: entered promiscuous mode [ 217.032563][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 217.038492][ T5810] Cannot create hsr debugfs directory [ 217.086735][ T5812] hsr_slave_0: entered promiscuous mode [ 217.096165][ T5812] hsr_slave_1: entered promiscuous mode [ 217.105211][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 217.111104][ T5812] Cannot create hsr debugfs directory [ 217.511057][ T5816] hsr_slave_0: entered promiscuous mode [ 217.522646][ T5816] hsr_slave_1: entered promiscuous mode [ 217.530729][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 217.536792][ T5816] Cannot create hsr debugfs directory [ 217.626397][ T5801] hsr_slave_0: entered promiscuous mode [ 217.636177][ T5801] hsr_slave_1: entered promiscuous mode [ 217.647576][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 217.653597][ T5801] Cannot create hsr debugfs directory [ 218.769589][ T5803] Bluetooth: hci0: command tx timeout [ 218.842738][ T5803] Bluetooth: hci3: command tx timeout [ 218.848468][ T5813] Bluetooth: hci1: command tx timeout [ 218.922730][ T5803] Bluetooth: hci2: command tx timeout [ 218.928370][ T5803] Bluetooth: hci4: command tx timeout [ 219.003086][ T5802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 219.039801][ T5802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 219.066732][ T5802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 219.123142][ T5802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 219.298295][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.321748][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.349136][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.370603][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.543646][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.586652][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.611120][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.651874][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.747844][ T5816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.777792][ T5816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.817539][ T5816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.868232][ T5816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.150779][ T5801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 220.175880][ T5801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 220.201844][ T5801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 220.231915][ T5801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 220.754774][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.946804][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.030805][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.081424][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.089152][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.192619][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.200358][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.224026][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.298284][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.420047][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.478449][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.486132][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.556605][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.659319][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.667007][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.784949][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.792742][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.829064][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.885411][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.964393][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.971935][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.191378][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.199052][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.246292][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.307420][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.315291][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.444973][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.596672][ T5812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.609508][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.743432][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.751015][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.820307][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.828225][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.013354][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.430553][ T5802] veth0_vlan: entered promiscuous mode [ 224.568885][ T5802] veth1_vlan: entered promiscuous mode [ 224.694641][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.887645][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.949368][ T5802] veth0_macvtap: entered promiscuous mode [ 225.078802][ T5802] veth1_macvtap: entered promiscuous mode [ 225.111732][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.285614][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.319284][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.474525][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.521934][ T5810] veth0_vlan: entered promiscuous mode [ 225.607402][ T3765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.642143][ T3765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.659155][ T4079] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.688793][ T5810] veth1_vlan: entered promiscuous mode [ 225.727234][ T4079] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.796834][ T5812] veth0_vlan: entered promiscuous mode [ 225.918742][ T5812] veth1_vlan: entered promiscuous mode [ 226.150954][ T5801] veth0_vlan: entered promiscuous mode [ 226.229567][ T5810] veth0_macvtap: entered promiscuous mode [ 226.285110][ T5801] veth1_vlan: entered promiscuous mode [ 226.304579][ T5810] veth1_macvtap: entered promiscuous mode [ 226.317079][ T5812] veth0_macvtap: entered promiscuous mode [ 226.390140][ T5812] veth1_macvtap: entered promiscuous mode [ 226.558503][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.637163][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.709329][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.754257][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.775576][ T5801] veth0_macvtap: entered promiscuous mode [ 226.829913][ T76] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.876517][ T5801] veth1_macvtap: entered promiscuous mode [ 226.886974][ T76] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.949231][ T76] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.005802][ T76] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.060980][ T76] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.107491][ T76] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.158606][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.217867][ T76] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.246838][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.337786][ T76] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.364296][ T76] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.388961][ T4079] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.437521][ T4079] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.500336][ T4079] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.139663][ T5816] veth0_vlan: entered promiscuous mode [ 228.281147][ T5816] veth1_vlan: entered promiscuous mode [ 228.751211][ T5816] veth0_macvtap: entered promiscuous mode [ 228.853079][ T5816] veth1_macvtap: entered promiscuous mode [ 229.066557][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.165597][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.268325][ T76] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.303071][ T76] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.335246][ T76] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.349710][ T76] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.985250][ T3765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.994577][ T3765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.112193][ T3765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.121158][ T3765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.738739][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.746893][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.829754][ T5802] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 233.921038][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.930630][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.322849][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.330910][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.773131][ T3626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.781189][ T3626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.882018][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.888932][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 234.924839][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.933030][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.964816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 235.554373][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.565570][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.480778][ T5999] syzkaller0: entered promiscuous mode [ 236.486705][ T5999] syzkaller0: entered allmulticast mode [ 236.964792][ T6005] process 'syz.0.6' launched './file2' with NULL argv: empty string added [ 237.013488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 237.115933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 237.185016][ T3765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.193542][ T3765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.326395][ T4079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.335159][ T4079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.426452][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 237.584219][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 237.638694][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 237.648798][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 237.659588][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 237.669005][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 237.678941][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 237.688955][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 237.702505][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 237.711807][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.961732][ T9] usb 3-1: config 0 descriptor?? [ 239.063543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 239.322487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 239.574234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 239.675339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 239.733207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 239.984616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 240.025982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 243.024552][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 249.125247][ T6050] syzkaller0: entered promiscuous mode [ 249.130891][ T6050] syzkaller0: entered allmulticast mode [ 249.490090][ T24] usb 3-1: USB disconnect, device number 2 [ 249.540702][ T24] usblp0: removed [ 251.443404][ T6061] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 252.713174][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 252.916790][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 252.928700][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 252.939942][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 252.949377][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.993096][ T6070] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 253.018975][ T6068] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 253.027529][ T6068] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 253.055098][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 253.404808][ T30] audit: type=1326 audit(1762990583.891:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 253.494298][ T9] usb 1-1: USB disconnect, device number 2 [ 253.627750][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.699221][ T30] audit: type=1326 audit(1762990584.031:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 253.699479][ T30] audit: type=1326 audit(1762990584.121:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 253.699725][ T30] audit: type=1326 audit(1762990584.121:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 253.699973][ T30] audit: type=1326 audit(1762990584.201:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 253.700211][ T30] audit: type=1326 audit(1762990584.201:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 253.700442][ T30] audit: type=1326 audit(1762990584.201:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 253.704991][ T30] audit: type=1326 audit(1762990584.201:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=40000003 syscall=194 compat=1 ip=0x80000006 code=0x7ffc0000 [ 253.705239][ T30] audit: type=1326 audit(1762990584.201:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 254.429361][ T6076] syz_tun: entered allmulticast mode [ 254.905789][ T6067] syz_tun: left allmulticast mode [ 255.120489][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 255.214057][ T6085] syzkaller0: entered promiscuous mode [ 255.220122][ T6085] syzkaller0: entered allmulticast mode [ 255.344585][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 255.494044][ T24] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 255.503881][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.512116][ T24] usb 3-1: Product: syz [ 255.516790][ T24] usb 3-1: Manufacturer: syz [ 255.521602][ T24] usb 3-1: SerialNumber: syz [ 255.529076][ T5862] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 255.666915][ T24] usb 3-1: config 0 descriptor?? [ 255.715897][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 255.724561][ T24] usb 3-1: setting power ON [ 255.729290][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 255.764348][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 255.835038][ T5862] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 255.847670][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.859682][ T5862] usb 2-1: Product: syz [ 255.865422][ T5862] usb 2-1: Manufacturer: syz [ 255.893372][ T5862] usb 2-1: SerialNumber: syz [ 255.944892][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 255.984569][ T6081] dvb-usb: bulk message failed: -22 (3/0) [ 255.990541][ T6081] dvb-usb: bulk message failed: -22 (7/0) [ 256.066237][ T6089] dvb-usb: bulk message failed: -22 (3/0) [ 256.079063][ T5862] usb 2-1: config 0 descriptor?? [ 256.088116][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 256.097566][ T24] usb 3-1: media controller created [ 256.145305][ T5862] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 256.281435][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.716578][ T5862] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 256.792494][ T24] usb 3-1: selecting invalid altsetting 6 [ 256.798704][ T24] usb 3-1: digital interface selection failed (-22) [ 256.806039][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 256.973165][ T24] usb 3-1: setting power OFF [ 256.983519][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 256.989553][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 257.000819][ T24] (NULL device *): no alternate interface [ 258.294751][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 258.454487][ T24] usb 3-1: USB disconnect, device number 3 [ 258.736844][ T9] usb 2-1: USB disconnect, device number 2 [ 258.800182][ T9] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 258.811933][ T9] visor 2-1:0.0: device disconnected [ 259.194504][ T5855] IPVS: starting estimator thread 0... [ 259.306364][ T6112] IPVS: using max 192 ests per chain, 9600 per kthread [ 260.090731][ T6117] program syz.2.35 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.483265][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 260.785480][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 260.795759][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 260.806122][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 260.816334][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 260.825651][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.028451][ T24] usb 3-1: config 0 descriptor?? [ 261.129673][ T24] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 261.136713][ T24] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 261.407397][ T6117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.408983][ T6117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.255881][ T6144] syzkaller0: entered promiscuous mode [ 264.261511][ T6144] syzkaller0: entered allmulticast mode [ 265.164274][ T5855] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 265.460698][ T5855] usb 4-1: Using ep0 maxpacket: 8 [ 265.594382][ T5855] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 265.604077][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.613139][ T5855] usb 4-1: Product: syz [ 265.617520][ T5855] usb 4-1: Manufacturer: syz [ 265.622491][ T5855] usb 4-1: SerialNumber: syz [ 265.864816][ T5855] usb 4-1: config 0 descriptor?? [ 265.941383][ T5855] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 265.949732][ T5855] usb 4-1: setting power ON [ 265.954564][ T5855] dvb-usb: bulk message failed: -22 (2/0) [ 266.128126][ T5855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 266.167714][ T6149] dvb-usb: bulk message failed: -22 (3/0) [ 266.173833][ T6149] dvb-usb: bulk message failed: -22 (3/0) [ 266.257150][ T5855] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 266.266046][ T5855] usb 4-1: media controller created [ 266.431421][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.665352][ T5855] usb 4-1: selecting invalid altsetting 6 [ 266.671328][ T5855] usb 4-1: digital interface selection failed (-22) [ 266.678839][ T5855] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 266.891661][ T5855] usb 4-1: setting power OFF [ 266.896772][ T5855] dvb-usb: bulk message failed: -22 (2/0) [ 266.902895][ T5855] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 266.919425][ T5855] (NULL device *): no alternate interface [ 267.957304][ T5855] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 268.235934][ T5855] usb 4-1: USB disconnect, device number 2 [ 269.682951][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 269.870739][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 269.884029][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.961888][ T24] usb 4-1: config 0 descriptor?? [ 270.032849][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 270.313232][ T24] usb 4-1: USB disconnect, device number 3 [ 271.565015][ T24] usb 3-1: USB disconnect, device number 4 [ 274.683235][ T5803] Bluetooth: hci0: command 0x0c1a tx timeout [ 274.717059][ T6197] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 274.723897][ T6197] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 274.783020][ T6197] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 274.814505][ T6197] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 274.821071][ T6197] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 274.858321][ T6197] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 274.882966][ T6197] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 274.889707][ T6197] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 274.937863][ T6197] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 274.967048][ T6197] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 274.973713][ T6197] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 275.011502][ T6197] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 275.031112][ T6197] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 275.038844][ T6197] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 275.065048][ T6197] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 276.762841][ T5803] Bluetooth: hci0: command 0x0c1a tx timeout [ 276.850835][ T5803] Bluetooth: hci1: command 0x0c1a tx timeout [ 276.922804][ T5803] Bluetooth: hci2: command 0x0c1a tx timeout [ 277.002707][ T5803] Bluetooth: hci3: command 0x0c1a tx timeout [ 277.084707][ T5803] Bluetooth: hci4: command 0x0c1a tx timeout [ 278.852813][ T5803] Bluetooth: hci0: command 0x0c1a tx timeout [ 278.922873][ T5803] Bluetooth: hci1: command 0x0c1a tx timeout [ 279.016320][ T5803] Bluetooth: hci2: command 0x0c1a tx timeout [ 279.082829][ T5803] Bluetooth: hci3: command 0x0c1a tx timeout [ 279.162965][ T5803] Bluetooth: hci4: command 0x0c1a tx timeout [ 281.003093][ T5803] Bluetooth: hci1: command 0x0c1a tx timeout [ 281.083440][ T5803] Bluetooth: hci2: command 0x0c1a tx timeout [ 281.173176][ T5803] Bluetooth: hci3: command 0x0c1a tx timeout [ 281.253603][ T5803] Bluetooth: hci4: command 0x0c1a tx timeout [ 284.962897][ T5855] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 285.175589][ T5855] usb 4-1: Using ep0 maxpacket: 8 [ 285.268320][ T5855] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 285.278162][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.288364][ T5855] usb 4-1: Product: syz [ 285.293036][ T5855] usb 4-1: Manufacturer: syz [ 285.297839][ T5855] usb 4-1: SerialNumber: syz [ 285.363877][ T5855] usb 4-1: config 0 descriptor?? [ 285.391006][ T5855] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 285.399886][ T5855] usb 4-1: setting power ON [ 285.407547][ T5855] dvb-usb: bulk message failed: -22 (2/0) [ 285.532851][ T5855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 285.610365][ T5855] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 285.619444][ T5855] usb 4-1: media controller created [ 285.670687][ T6242] dvb-usb: bulk message failed: -22 (3/0) [ 285.677077][ T6242] dvb-usb: bulk message failed: -22 (3/0) [ 285.766591][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.925414][ T6251] syz.4.66 uses obsolete (PF_INET,SOCK_PACKET) [ 285.982588][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.66'. [ 286.081463][ T5855] usb 4-1: selecting invalid altsetting 6 [ 286.090416][ T5855] usb 4-1: digital interface selection failed (-22) [ 286.098936][ T5855] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 286.147778][ T6258] netlink: 'syz.2.68': attribute type 8 has an invalid length. [ 286.258383][ T5855] usb 4-1: setting power OFF [ 286.264451][ T5855] dvb-usb: bulk message failed: -22 (2/0) [ 286.270375][ T5855] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 286.288066][ T5855] (NULL device *): no alternate interface [ 286.397074][ T6252] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 286.706166][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 286.901085][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.911681][ T9] usb 1-1: config 0 has no interfaces? [ 286.918120][ T9] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 286.928122][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.170442][ T5855] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 287.198863][ T9] usb 1-1: config 0 descriptor?? [ 287.301015][ T5855] usb 4-1: USB disconnect, device number 4 [ 287.537282][ T6255] dummy0: entered promiscuous mode [ 287.543185][ T6255] vlan2: entered promiscuous mode [ 287.930500][ T5855] usb 1-1: USB disconnect, device number 3 [ 287.950334][ C0] hrtimer: interrupt took 453368 ns [ 289.637370][ T6284] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 290.038478][ T6284] Zero length message leads to an empty skb [ 292.966812][ T6300] fuse: Bad value for 'fd' [ 293.282746][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 293.502609][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 293.603021][ T9] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 293.612490][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.620734][ T9] usb 2-1: Product: syz [ 293.625489][ T9] usb 2-1: Manufacturer: syz [ 293.630218][ T9] usb 2-1: SerialNumber: syz [ 293.865907][ T9] usb 2-1: config 0 descriptor?? [ 293.930380][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 293.938719][ T9] usb 2-1: setting power ON [ 293.943525][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 294.061045][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 294.144637][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 294.160971][ T9] usb 2-1: media controller created [ 294.290729][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.82'. [ 294.479251][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.065372][ T9] usb 2-1: selecting invalid altsetting 6 [ 295.080290][ T9] usb 2-1: digital interface selection failed (-22) [ 295.088906][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 295.114347][ T9] usb 2-1: setting power OFF [ 295.119199][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 295.125538][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 295.136155][ T9] (NULL device *): no alternate interface [ 295.934913][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 296.189173][ T9] usb 2-1: USB disconnect, device number 3 [ 296.321702][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.328519][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.933039][ T6311] mmap: syz.1.83 (6311) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 300.203036][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 302.805547][ T6337] fuse: Bad value for 'fd' [ 304.944658][ T6350] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.442665][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 305.763024][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.773559][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 305.783092][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 305.792557][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.923952][ T24] usb 1-1: config 0 descriptor?? [ 307.057182][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 307.281379][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.293142][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.303323][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.316694][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.326291][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.501383][ T24] usb 4-1: config 0 descriptor?? [ 308.202639][ T24] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 308.460042][ T24] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 308.575100][ T24] usb 4-1: USB disconnect, device number 5 [ 308.811882][ T6380] fuse: Bad value for 'fd' [ 309.073616][ T5862] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 309.283197][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 309.422175][ T5862] usb 5-1: config 0 has no interfaces? [ 309.428080][ T5862] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 309.437630][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.782052][ T6383] fido_id[6383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 309.813283][ T5862] usb 5-1: config 0 descriptor?? [ 310.042707][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 310.104915][ T6384] loop2: detected capacity change from 0 to 7 [ 310.197104][ T6384] Dev loop2: unable to read RDB block 7 [ 310.204115][ T6384] loop2: unable to read partition table [ 310.279182][ T6384] loop2: partition table beyond EOD, truncated [ 310.286134][ T6384] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 310.423522][ T5862] usb 5-1: USB disconnect, device number 2 [ 310.447652][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 310.530066][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 310.605076][ T24] usb 2-1: config 7 has an invalid interface number: 188 but max is 0 [ 310.613709][ T24] usb 2-1: config 7 has no interface number 0 [ 310.620031][ T24] usb 2-1: config 7 interface 188 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 1023 [ 310.630617][ T24] usb 2-1: config 7 interface 188 has no altsetting 0 [ 310.757593][ T24] usb 2-1: New USB device found, idVendor=0421, idProduct=04df, bcdDevice=73.76 [ 310.767232][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.775656][ T24] usb 2-1: Product: syz [ 310.782225][ T24] usb 2-1: Manufacturer: syz [ 310.787359][ T24] usb 2-1: SerialNumber: syz [ 310.880314][ T6387] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 311.278223][ T24] rndis_host 2-1:7.188: invalid descriptor buffer length [ 311.285721][ T24] usb 2-1: bad CDC descriptors [ 311.292892][ T24] cdc_acm 2-1:7.188: invalid descriptor buffer length [ 311.404553][ T24] usb 2-1: USB disconnect, device number 4 [ 314.750895][ T6413] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=5 (10 ns) > initial count (8 ns). Using initial count to start timer. [ 315.296963][ T6421] fuse: Bad value for 'fd' [ 316.513008][ T9] usb 1-1: USB disconnect, device number 4 [ 318.012920][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 318.242828][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 318.298732][ T24] usb 2-1: config 0 has no interfaces? [ 318.304789][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 318.314480][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.446315][ T24] usb 2-1: config 0 descriptor?? [ 318.751837][ T6434] loop2: detected capacity change from 0 to 7 [ 318.762067][ T6434] Dev loop2: unable to read RDB block 7 [ 318.768057][ T6434] loop2: unable to read partition table [ 318.785497][ T6434] loop2: partition table beyond EOD, truncated [ 318.791973][ T6434] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 319.022825][ T24] usb 2-1: USB disconnect, device number 5 [ 320.172653][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 320.392607][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 320.419769][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 320.470454][ T24] usb 1-1: config 7 has an invalid interface number: 188 but max is 0 [ 320.479203][ T24] usb 1-1: config 7 has no interface number 0 [ 320.485768][ T24] usb 1-1: config 7 interface 188 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 1023 [ 320.496241][ T24] usb 1-1: config 7 interface 188 has no altsetting 0 [ 320.590218][ T24] usb 1-1: New USB device found, idVendor=0421, idProduct=04df, bcdDevice=73.76 [ 320.599824][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.608141][ T24] usb 1-1: Product: syz [ 320.612598][ T24] usb 1-1: Manufacturer: syz [ 320.617378][ T24] usb 1-1: SerialNumber: syz [ 320.699872][ T6438] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 321.331882][ T24] rndis_host 1-1:7.188: invalid descriptor buffer length [ 321.339476][ T24] usb 1-1: bad CDC descriptors [ 321.346353][ T24] cdc_acm 1-1:7.188: invalid descriptor buffer length [ 321.779790][ T24] usb 1-1: USB disconnect, device number 5 [ 323.122782][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 323.382833][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 323.459844][ T24] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 323.468719][ T24] usb 3-1: config 150 has no interface number 0 [ 323.475406][ T24] usb 3-1: config 150 interface 204 has no altsetting 0 [ 323.483042][ T24] usb 3-1: config 150 interface 1 has no altsetting 0 [ 323.589840][ T24] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 323.599338][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.607793][ T24] usb 3-1: Product: syz [ 323.612072][ T24] usb 3-1: Manufacturer: syz [ 323.616882][ T24] usb 3-1: SerialNumber: syz [ 324.350115][ T24] xr_serial 3-1:150.204: xr_serial converter detected [ 324.469284][ T24] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 324.477222][ T24] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 324.554672][ T24] usb 3-1: USB disconnect, device number 5 [ 324.569031][ T24] xr_serial 3-1:150.204: device disconnected [ 325.862935][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 326.075456][ T6460] fuse: Bad value for 'fd' [ 326.113242][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 326.122834][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.184013][ T9] usb 1-1: config 0 descriptor?? [ 326.228973][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 326.580709][ T9] usb 1-1: USB disconnect, device number 6 [ 328.553116][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 328.832763][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 328.847074][ T9] usb 4-1: config 0 has no interfaces? [ 328.853110][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 328.867585][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.882534][ T9] usb 4-1: config 0 descriptor?? [ 329.117019][ T6474] loop2: detected capacity change from 0 to 7 [ 329.141278][ T6474] Dev loop2: unable to read RDB block 7 [ 329.147373][ T6474] loop2: unable to read partition table [ 329.263739][ T6474] loop2: partition table beyond EOD, truncated [ 329.270244][ T6474] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 329.401734][ T24] usb 4-1: USB disconnect, device number 6 [ 329.422748][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 329.648554][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 329.731565][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 329.814605][ T9] usb 5-1: config 7 has an invalid interface number: 188 but max is 0 [ 329.823712][ T9] usb 5-1: config 7 has no interface number 0 [ 329.830373][ T9] usb 5-1: config 7 interface 188 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 1023 [ 329.840961][ T9] usb 5-1: config 7 interface 188 has no altsetting 0 [ 329.933115][ T9] usb 5-1: New USB device found, idVendor=0421, idProduct=04df, bcdDevice=73.76 [ 329.942722][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.950863][ T9] usb 5-1: Product: syz [ 329.955427][ T9] usb 5-1: Manufacturer: syz [ 329.960161][ T9] usb 5-1: SerialNumber: syz [ 330.133706][ T6480] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 330.155739][ T6485] netlink: 2 bytes leftover after parsing attributes in process `syz.0.139'. [ 330.512267][ T9] rndis_host 5-1:7.188: invalid descriptor buffer length [ 330.521977][ T9] usb 5-1: bad CDC descriptors [ 330.529355][ T9] cdc_acm 5-1:7.188: invalid descriptor buffer length [ 330.746410][ T9] usb 5-1: USB disconnect, device number 3 [ 331.780616][ T6501] fuse: Bad value for 'fd' [ 332.382760][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 332.572751][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 332.582226][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.710697][ T24] usb 1-1: config 0 descriptor?? [ 332.786089][ T24] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 332.951970][ T24] usb 1-1: USB disconnect, device number 7 [ 335.542621][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 335.833101][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 336.016470][ T24] usb 5-1: config 0 has no interfaces? [ 336.022226][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 336.035573][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.069178][ T24] usb 5-1: config 0 descriptor?? [ 336.327442][ T6522] loop2: detected capacity change from 0 to 7 [ 336.343997][ T6522] Dev loop2: unable to read RDB block 7 [ 336.349858][ T6522] loop2: unable to read partition table [ 336.358294][ T6522] loop2: partition table beyond EOD, truncated [ 336.365055][ T6522] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 336.463262][ T9] usb 5-1: USB disconnect, device number 4 [ 338.069337][ T6535] netlink: 2 bytes leftover after parsing attributes in process `syz.4.153'. [ 338.086402][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 338.322789][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 338.361391][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 338.427294][ T24] usb 1-1: config 7 has an invalid interface number: 188 but max is 0 [ 338.435961][ T24] usb 1-1: config 7 has no interface number 0 [ 338.442946][ T24] usb 1-1: config 7 interface 188 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 1023 [ 338.453656][ T24] usb 1-1: config 7 interface 188 has no altsetting 0 [ 338.572695][ T24] usb 1-1: New USB device found, idVendor=0421, idProduct=04df, bcdDevice=73.76 [ 338.582132][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.594542][ T24] usb 1-1: Product: syz [ 338.598911][ T24] usb 1-1: Manufacturer: syz [ 338.606059][ T24] usb 1-1: SerialNumber: syz [ 338.741189][ T6533] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 339.076359][ T24] rndis_host 1-1:7.188: invalid descriptor buffer length [ 339.083975][ T24] usb 1-1: bad CDC descriptors [ 339.090255][ T24] cdc_acm 1-1:7.188: invalid descriptor buffer length [ 339.303310][ T24] usb 1-1: USB disconnect, device number 8 [ 340.289267][ T6539] fuse: Bad value for 'fd' [ 342.113335][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 342.197169][ T6547] loop4: detected capacity change from 0 to 1024 [ 342.241564][ T6547] EXT4-fs: Ignoring removed orlov option [ 342.263930][ T6547] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 342.320424][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 342.330084][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.409093][ T9] usb 4-1: config 0 descriptor?? [ 342.448480][ T6547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.467889][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 342.692799][ T24] usb 4-1: USB disconnect, device number 7 [ 342.812739][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 343.030431][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 343.040815][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 124, changing to 7 [ 343.052614][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 49259, setting to 1024 [ 343.154911][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 343.164386][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.172853][ T9] usb 5-1: Product: syz [ 343.177159][ T9] usb 5-1: Manufacturer: syz [ 343.181867][ T9] usb 5-1: SerialNumber: syz [ 343.338042][ T9] usb 5-1: config 0 descriptor?? [ 343.400449][ T9] usb 5-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress 06 [ 343.864573][ T9] usb 5-1: USB disconnect, device number 5 [ 344.182083][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.568256][ T6569] netlink: 2 bytes leftover after parsing attributes in process `syz.0.164'. [ 344.672631][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 344.784088][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.900181][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 344.946903][ T24] usb 4-1: config 0 has no interfaces? [ 344.953058][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 344.963462][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.092480][ T24] usb 4-1: config 0 descriptor?? [ 345.504002][ T6565] loop2: detected capacity change from 0 to 7 [ 345.583167][ T6565] Dev loop2: unable to read RDB block 7 [ 345.589192][ T6565] loop2: unable to read partition table [ 345.667724][ T6565] loop2: partition table beyond EOD, truncated [ 345.674450][ T6565] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 345.813400][ T5855] usb 4-1: USB disconnect, device number 8 [ 346.007639][ T6576] fuse: Bad value for 'fd' [ 347.988417][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 348.251180][ T24] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 348.260553][ T24] usb 5-1: config 160 has no interface number 0 [ 348.267230][ T24] usb 5-1: config 160 interface 200 has no altsetting 0 [ 348.360393][ T24] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 348.369972][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.378427][ T24] usb 5-1: Product: syz [ 348.382982][ T24] usb 5-1: Manufacturer: syz [ 348.387781][ T24] usb 5-1: SerialNumber: syz [ 349.361309][ T6601] loop1: detected capacity change from 0 to 1024 [ 349.473890][ T6601] EXT4-fs: Ignoring removed orlov option [ 349.500595][ T6606] netlink: 2 bytes leftover after parsing attributes in process `syz.3.177'. [ 349.532066][ T6601] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 349.683485][ T6601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.241815][ T5862] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 350.448268][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 350.458903][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 124, changing to 7 [ 350.473979][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 49259, setting to 1024 [ 350.584028][ T5862] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 350.593767][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.602038][ T5862] usb 2-1: Product: syz [ 350.606618][ T5862] usb 2-1: Manufacturer: syz [ 350.611583][ T5862] usb 2-1: SerialNumber: syz [ 350.652619][ T5862] usb 2-1: config 0 descriptor?? [ 350.738667][ T5862] usb 2-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress 06 [ 351.164339][ T5862] usb 2-1: USB disconnect, device number 6 [ 351.568139][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.576744][ T24] usb 5-1: MIDIStreaming interface descriptor not found [ 351.688905][ T6566] udevd[6566]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.996717][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.031928][ T24] usb 5-1: USB disconnect, device number 6 [ 352.483577][ T6566] udevd[6566]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.603588][ T5855] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 353.707945][ T6632] fuse: Bad value for 'fd' [ 353.790301][ T5855] usb 2-1: Using ep0 maxpacket: 16 [ 353.846126][ T5855] usb 2-1: config 0 has no interfaces? [ 353.857765][ T5855] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 353.869344][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.085519][ T5855] usb 2-1: config 0 descriptor?? [ 354.470502][ T6628] loop2: detected capacity change from 0 to 7 [ 354.513018][ T6628] Dev loop2: unable to read RDB block 7 [ 354.519047][ T6628] loop2: unable to read partition table [ 354.577221][ T6628] loop2: partition table beyond EOD, truncated [ 354.584333][ T6628] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 354.899012][ T24] usb 2-1: USB disconnect, device number 7 [ 356.091853][ T6647] syzkaller0: entered promiscuous mode [ 356.098292][ T6647] syzkaller0: entered allmulticast mode [ 356.315568][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'. [ 356.529332][ T6653] syzkaller0: entered promiscuous mode [ 356.535608][ T6653] syzkaller0: entered allmulticast mode [ 357.530313][ T6659] loop4: detected capacity change from 0 to 1024 [ 357.625488][ T6659] EXT4-fs: Ignoring removed orlov option [ 357.698880][ T6659] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 357.770905][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.778038][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 357.925234][ T6659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.422789][ T1661] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 358.649580][ T1661] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 358.659921][ T1661] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 124, changing to 7 [ 358.676923][ T1661] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 49259, setting to 1024 [ 358.892899][ T1661] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 358.902729][ T1661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.910974][ T1661] usb 5-1: Product: syz [ 358.915728][ T1661] usb 5-1: Manufacturer: syz [ 358.920567][ T1661] usb 5-1: SerialNumber: syz [ 359.146026][ T1661] usb 5-1: config 0 descriptor?? [ 359.190109][ T1661] usb 5-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress 06 [ 359.537658][ T6676] fuse: Bad value for 'fd' [ 359.598898][ T1661] usb 5-1: USB disconnect, device number 7 [ 359.718933][ T6678] syzkaller0: entered promiscuous mode [ 359.725328][ T6678] syzkaller0: entered allmulticast mode [ 359.939816][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.587461][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.262573][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 361.413468][ T6691] syz.1.200 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 361.472891][ T6691] random: crng reseeded on system resumption [ 361.503175][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 361.545140][ T24] usb 3-1: config 0 has no interfaces? [ 361.550822][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 361.560529][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.628267][ T24] usb 3-1: config 0 descriptor?? [ 361.950410][ T6684] loop2: detected capacity change from 0 to 7 [ 361.993139][ T6684] Dev loop2: unable to read RDB block 7 [ 361.999272][ T6684] loop2: unable to read partition table [ 362.015525][ T6684] loop2: partition table beyond EOD, truncated [ 362.022003][ T6684] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 362.107106][ T5855] usb 3-1: USB disconnect, device number 6 [ 363.515930][ T6714] fuse: Bad value for 'fd' [ 364.524228][ T6722] loop0: detected capacity change from 0 to 1024 [ 364.571420][ T6722] EXT4-fs: Ignoring removed orlov option [ 364.740525][ T6722] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 364.964946][ T6722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.615594][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 365.803429][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 365.813565][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 124, changing to 7 [ 365.824919][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 49259, setting to 1024 [ 365.976377][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 365.985982][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.994540][ T24] usb 1-1: Product: syz [ 365.998813][ T24] usb 1-1: Manufacturer: syz [ 366.003786][ T24] usb 1-1: SerialNumber: syz [ 366.066012][ T24] usb 1-1: config 0 descriptor?? [ 366.251000][ T24] usb 1-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress 06 [ 366.551707][ T24] usb 1-1: USB disconnect, device number 9 [ 367.068959][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.270168][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.563128][ T6751] netlink: 148 bytes leftover after parsing attributes in process `syz.0.218'. [ 368.682890][ T24] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 368.979494][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 368.990910][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 369.002137][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 369.014561][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.228469][ T6749] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 369.243117][ T6749] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 369.351987][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 369.894034][ T24] usb 3-1: USB disconnect, device number 7 [ 369.976127][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.792597][ T6759] fuse: Bad value for 'fd' [ 373.765323][ T6772] fuse: Bad value for 'group_id' [ 373.770506][ T6772] fuse: Bad value for 'group_id' [ 374.562949][ T5855] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 374.798070][ T5855] usb 3-1: Using ep0 maxpacket: 16 [ 374.863765][ T5855] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.874006][ T5855] usb 3-1: config 0 interface 0 has no altsetting 0 [ 374.880933][ T5855] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 374.890516][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.993786][ T5855] usb 3-1: config 0 descriptor?? [ 375.022916][ T5855] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 375.069157][ T1661] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 375.272818][ T1661] usb 4-1: Using ep0 maxpacket: 8 [ 375.311886][ T24] usb 3-1: USB disconnect, device number 8 [ 375.358384][ T1661] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 375.368043][ T1661] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.376898][ T1661] usb 4-1: Product: syz [ 375.381282][ T1661] usb 4-1: Manufacturer: syz [ 375.386228][ T1661] usb 4-1: SerialNumber: syz [ 375.505072][ T1661] usb 4-1: config 0 descriptor?? [ 375.583386][ T1661] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 375.591586][ T1661] pctv452e: pctv452e_power_ctrl: 1 [ 375.591586][ T1661] [ 375.599480][ T1661] usb 4-1: selecting invalid altsetting 3 [ 375.605628][ T1661] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 375.605628][ T1661] [ 375.616406][ T1661] dvb-usb: bulk message failed: -22 (5/0) [ 375.664868][ T5862] usb 5-1: new full-speed USB device number 8 using dummy_hcd ** 1 printk messages dropped ** [ 375.730336][ T6779] ===================================================== [ 375.730565][ T6779] BUG: KMSAN: uninit-value in hex_string+0x681/0x740 [ 375.730712][ T6779] hex_string+0x681/0x740 [ 375.730846][ T6779] pointer+0x2c7/0x1bd0 [ 375.730967][ T6779] vsnprintf+0xf8a/0x1bd0 [ 375.731098][ T6779] vscnprintf+0x6d/0x120 [ 375.731225][ T6779] printk_sprint+0x53/0x5c0 [ 375.731342][ T6779] vprintk_store+0xbb9/0x1530 [ 375.731460][ T6779] vprintk_emit+0x21a/0xb60 [ 375.731580][ T6779] vprintk_default+0x3f/0x50 [ 375.731704][ T6779] vprintk+0x36/0x50 [ 375.731849][ T6779] _printk+0x17e/0x1b0 [ 375.732020][ T6779] pctv452e_i2c_msg+0x82a/0x8f0 [ 375.732198][ T6779] pctv452e_i2c_xfer+0x2e6/0x4c0 [ 375.732367][ T6779] __i2c_transfer+0xecd/0x3110 [ 375.732498][ T6779] i2c_transfer+0x300/0x4b0 [ 375.732622][ T6779] i2c_transfer_buffer_flags+0x138/0x200 [ 375.732767][ T6779] i2cdev_read+0x1b2/0x3c0 [ 375.732891][ T6779] vfs_read+0x27c/0xf90 [ 375.733084][ T6779] ksys_pread64+0x1d6/0x2a0 [ 375.733204][ T6779] __ia32_sys_ia32_pread64+0xf0/0x150 [ 375.733382][ T6779] ia32_sys_call+0x963/0x4310 [ 375.733573][ T6779] __do_fast_syscall_32+0xb0/0x150 [ 375.733761][ T6779] do_fast_syscall_32+0x38/0x80 [ 375.733939][ T6779] do_SYSENTER_32+0x1f/0x30 [ 375.734124][ T6779] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 375.734292][ T6779] [ 375.734331][ T6779] Uninit was created at: [ 375.734536][ T6779] __kmalloc_cache_noprof+0x8f5/0x16b0 [ 375.734695][ T6779] pctv452e_i2c_msg+0x98/0x8f0 [ 375.734860][ T6779] pctv452e_i2c_xfer+0x2e6/0x4c0 [ 375.735025][ T6779] __i2c_transfer+0xecd/0x3110 [ 375.735159][ T6779] i2c_transfer+0x300/0x4b0 [ 375.735284][ T6779] i2c_transfer_buffer_flags+0x138/0x200 [ 375.735429][ T6779] i2cdev_read+0x1b2/0x3c0 [ 375.735548][ T6779] vfs_read+0x27c/0xf90 [ 375.735726][ T6779] ksys_pread64+0x1d6/0x2a0 [ 375.735843][ T6779] __ia32_sys_ia32_pread64+0xf0/0x150 [ 375.736015][ T6779] ia32_sys_call+0x963/0x4310 [ 375.736208][ T6779] __do_fast_syscall_32+0xb0/0x150 [ 375.736391][ T6779] do_fast_syscall_32+0x38/0x80 [ 375.736565][ T6779] do_SYSENTER_32+0x1f/0x30 [ 375.736742][ T6779] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 375.736911][ T6779] [ 375.737000][ T6779] CPU: 0 UID: 0 PID: 6779 Comm: syz.3.231 Not tainted syzkaller #0 PREEMPT(none) [ 375.737153][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.737238][ T6779] ===================================================== [ 375.737291][ T6779] Disabling lock debugging due to kernel taint [ 375.737355][ T6779] Kernel panic - not syncing: kmsan.panic set ... [ 375.990173][ T6779] CPU: 0 UID: 0 PID: 6779 Comm: syz.3.231 Tainted: G B syzkaller #0 PREEMPT(none) [ 376.001129][ T6779] Tainted: [B]=BAD_PAGE [ 376.005375][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.015563][ T6779] Call Trace: [ 376.018945][ T6779] [ 376.021965][ T6779] __dump_stack+0x26/0x30 [ 376.026569][ T6779] dump_stack_lvl+0x53/0x270 [ 376.031337][ T6779] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 376.037342][ T6779] dump_stack+0x1e/0x25 [ 376.041685][ T6779] vpanic+0x435/0xd30 [ 376.045908][ T6779] panic+0x15d/0x160 [ 376.050146][ T6779] kmsan_report+0x31c/0x320 [ 376.054857][ T6779] ? __msan_warning+0x1b/0x30 [ 376.059689][ T6779] ? hex_string+0x681/0x740 [ 376.064371][ T6779] ? pointer+0x2c7/0x1bd0 [ 376.068853][ T6779] ? vsnprintf+0xf8a/0x1bd0 [ 376.073534][ T6779] ? vscnprintf+0x6d/0x120 [ 376.078105][ T6779] ? printk_sprint+0x53/0x5c0 [ 376.082946][ T6779] ? vprintk_store+0xbb9/0x1530 [ 376.087966][ T6779] ? vprintk_emit+0x21a/0xb60 [ 376.092796][ T6779] ? vprintk_default+0x3f/0x50 [ 376.097718][ T6779] ? vprintk+0x36/0x50 [ 376.101980][ T6779] ? _printk+0x17e/0x1b0 [ 376.106432][ T6779] ? pctv452e_i2c_msg+0x82a/0x8f0 [ 376.111654][ T6779] ? pctv452e_i2c_xfer+0x2e6/0x4c0 [ 376.116950][ T6779] ? __i2c_transfer+0xecd/0x3110 [ 376.122072][ T6779] ? i2c_transfer+0x300/0x4b0 [ 376.126908][ T6779] ? i2c_transfer_buffer_flags+0x138/0x200 [ 376.132884][ T6779] ? i2cdev_read+0x1b2/0x3c0 [ 376.137628][ T6779] ? vfs_read+0x27c/0xf90 [ 376.142179][ T6779] ? ksys_pread64+0x1d6/0x2a0 [ 376.147012][ T6779] ? __ia32_sys_ia32_pread64+0xf0/0x150 [ 376.152784][ T6779] ? ia32_sys_call+0x963/0x4310 [ 376.157853][ T6779] ? __do_fast_syscall_32+0xb0/0x150 [ 376.163352][ T6779] ? do_fast_syscall_32+0x38/0x80 [ 376.168569][ T6779] ? do_SYSENTER_32+0x1f/0x30 [ 376.173464][ T6779] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 376.180190][ T6779] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 376.186220][ T6779] ? format_decode+0x1131/0x1160 [ 376.191328][ T6779] ? filter_irq_stacks+0x49/0x190 [ 376.196585][ T6779] ? stack_depot_save_flags+0x35/0x7b0 [ 376.202220][ T6779] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 376.208217][ T6779] ? kmsan_get_metadata+0xfb/0x160 [ 376.213505][ T6779] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 376.220056][ T6779] ? kmsan_get_metadata+0xfb/0x160 [ 376.225339][ T6779] __msan_warning+0x1b/0x30 [ 376.229993][ T6779] hex_string+0x681/0x740 [ 376.234529][ T6779] pointer+0x2c7/0x1bd0 [ 376.238849][ T6779] ? kmsan_get_metadata+0xfb/0x160 [ 376.244147][ T6779] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 376.250140][ T6779] vsnprintf+0xf8a/0x1bd0 [ 376.254728][ T6779] vscnprintf+0x6d/0x120 [ 376.259151][ T6779] printk_sprint+0x53/0x5c0 [ 376.263903][ T6779] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 376.269943][ T6779] vprintk_store+0xbb9/0x1530 [ 376.274795][ T6779] ? kmsan_get_metadata+0xfb/0x160 [ 376.280169][ T6779] vprintk_emit+0x21a/0xb60 [ 376.284854][ T6779] vprintk_default+0x3f/0x50 [ 376.289620][ T6779] vprintk+0x36/0x50 [ 376.293706][ T6779] _printk+0x17e/0x1b0 [ 376.298051][ T6779] pctv452e_i2c_msg+0x82a/0x8f0 [ 376.303128][ T6779] ? kmsan_get_metadata+0xfb/0x160 [ 376.308449][ T6779] pctv452e_i2c_xfer+0x2e6/0x4c0 [ 376.313604][ T6779] ? __pfx_pctv452e_i2c_xfer+0x10/0x10 [ 376.319251][ T6779] __i2c_transfer+0xecd/0x3110 [ 376.324174][ T6779] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 376.330731][ T6779] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 376.336636][ T6779] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 376.342947][ T6779] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 376.348848][ T6779] i2c_transfer+0x300/0x4b0 [ 376.353543][ T6779] i2c_transfer_buffer_flags+0x138/0x200 [ 376.359357][ T6779] i2cdev_read+0x1b2/0x3c0 [ 376.363950][ T6779] ? __pfx_i2cdev_read+0x10/0x10 [ 376.369061][ T6779] vfs_read+0x27c/0xf90 [ 376.373430][ T6779] ? __fget_files+0x3b9/0x4a0 [ 376.378284][ T6779] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 376.384309][ T6779] ksys_pread64+0x1d6/0x2a0 [ 376.389009][ T6779] __ia32_sys_ia32_pread64+0xf0/0x150 [ 376.394615][ T6779] ia32_sys_call+0x963/0x4310 [ 376.399514][ T6779] __do_fast_syscall_32+0xb0/0x150 [ 376.404836][ T6779] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 376.410762][ T6779] do_fast_syscall_32+0x38/0x80 [ 376.415817][ T6779] do_SYSENTER_32+0x1f/0x30 [ 376.420539][ T6779] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 376.427084][ T6779] RIP: 0023:0xf7fd1539 [ 376.431293][ T6779] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 376.451165][ T6779] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 00000000000000b4 [ 376.459742][ T6779] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 376.467845][ T6779] RDX: 00000000000000ea RSI: 0000000000000000 RDI: 0000000000000000 [ 376.475936][ T6779] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 376.484060][ T6779] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 376.492167][ T6779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 376.500301][ T6779] [ 376.503804][ T6779] Kernel Offset: disabled [ 376.508203][ T6779] Rebooting in 86400 seconds..