last executing test programs: 8m37.467086463s ago: executing program 32 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) r3 = mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) mq_notify(r3, &(0x7f0000000200)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0x400, 0xe0, 0xfffffff9, 0x0}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r5, 0x0, 0x0) io_uring_setup(0xab1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) 6m16.700944239s ago: executing program 0 (id=368): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000002c0)='pvfs2\x00', 0x101c802, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 6m13.80229697s ago: executing program 0 (id=374): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x6, &(0x7f0000000400)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x80000) kcmp$KCMP_EPOLL_TFD(r1, 0xffffffffffffffff, 0x7, r2, &(0x7f0000000100)={r3, 0xffffffffffffffff, 0x9}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20a02, 0x0) fdatasync(r4) 6m12.337432047s ago: executing program 0 (id=375): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x8, 0x6}) 6m7.344656456s ago: executing program 0 (id=386): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 6m7.277416948s ago: executing program 0 (id=387): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) futex(&(0x7f0000000800)=0x2, 0x80, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) io_uring_setup(0x5f4f, &(0x7f00000003c0)={0x0, 0x804, 0x2, 0x1000000}) 5m59.190894764s ago: executing program 0 (id=409): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000180), 0xfff, 0x48c40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000000)={0x0, 0x0, {0xfffffff3, 0xffffff7d, 0x16, 0xfffffffc}}) 5m43.931330698s ago: executing program 33 (id=409): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000180), 0xfff, 0x48c40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000000)={0x0, 0x0, {0xfffffff3, 0xffffff7d, 0x16, 0xfffffffc}}) 5m12.277483462s ago: executing program 4 (id=514): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002e00090027bd70000000000004000000240011"], 0x38}, 0x1, 0x0, 0x0, 0x42890}, 0x4004004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 5m9.821291771s ago: executing program 4 (id=520): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x12a, 0x80004100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @loopback, 0x5}, 0x1c) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x81}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 5m7.497254374s ago: executing program 4 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'s526\x00', [0x100, 0x5, 0x2, 0xc, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x6, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r6 = io_uring_setup(0x6bb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x1e00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="150b", 0x2}], 0x1}}], 0x1, 0x20040140) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b7000000181403f8bca30000000000002403000040feffff720af8ff0000000071a4f0ff000000001f030000000000002e140200000000002604fdffffff000061140400000000001d430000000000007a0a00fe0000001f6114000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767912d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce0900000000000000499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc682928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348de20f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97b4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b4f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb1bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb36e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e8a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2a, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) 5m5.130020049s ago: executing program 4 (id=529): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x3}, 0x18, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) syz_open_dev$amidi(0x0, 0x2, 0x20000) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0xdddd0000, 0x1000, &(0x7f0000c15000/0x1000)=nil}) setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) getitimer(0x0, &(0x7f0000000800)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) lseek(r3, 0x2000, 0x0) 5m3.631184777s ago: executing program 4 (id=534): socket$alg(0x26, 0x5, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x70bd29, 0xffffffff, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_TABLE={0x8, 0xf, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 5m1.974658939s ago: executing program 4 (id=536): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}}, {{&(0x7f0000000180)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)="f7f10957d7b4ac38", 0x8}], 0x1}}], 0x2, 0xe000) 4m46.252714698s ago: executing program 34 (id=536): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}}, {{&(0x7f0000000180)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)="f7f10957d7b4ac38", 0x8}], 0x1}}], 0x2, 0xe000) 3m36.793196162s ago: executing program 3 (id=721): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) inotify_init() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1", 0xf, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x8000090) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x8b22, 0x0, 0x0, 0x16, 0x11, "fee8a2ab78fc979fd1e00d96072000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13103e52f400003fe2000000000000000000000000000000002000", [0x0, 0x2000000000001]}}) ioctl$I2C_FUNCS(r8, 0x705, &(0x7f0000000100)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x13, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000f7b40a000000000000850000001100000095"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) 3m35.209845622s ago: executing program 3 (id=723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) syz_emit_ethernet(0x4c8, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2f, 0x4ba, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4a6, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x100, @val=0x80}, "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"}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) 3m33.37581371s ago: executing program 3 (id=726): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x7, 0x1, 0x1, 0x0, 0x7f}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r4, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0/file0\x00', 0x604d01, 0x20) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5}, 0x50) 3m31.293345516s ago: executing program 3 (id=728): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "611aa09f8cdfeb65", "4867f60c9366f8caca55097828d9173185df9cd607089de85deb98049bc3b01e", "7185a435", "3800986000004000"}, 0x38) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 3m30.439229073s ago: executing program 3 (id=734): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x12a, 0x80004100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @loopback, 0x5}, 0x1c) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x81}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 3m28.780096856s ago: executing program 3 (id=737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x200800, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x29, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times', 0xa242, 0x114) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r4 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000300)={0x6f4d, 0x6, 0x4, {0x9, @vbi={0x5, 0x0, 0x9, 0x41415270, [0x9, 0x3ff], [0xfffffff7, 0x2], 0x13a}}, 0x9}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0x0, 0x1, 0xbe}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) 3m13.151059102s ago: executing program 35 (id=737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x200800, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x29, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times', 0xa242, 0x114) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r4 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000300)={0x6f4d, 0x6, 0x4, {0x9, @vbi={0x5, 0x0, 0x9, 0x41415270, [0x9, 0x3ff], [0xfffffff7, 0x2], 0x13a}}, 0x9}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0x0, 0x1, 0xbe}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) 2m52.757406189s ago: executing program 5 (id=795): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x12a, 0x80004100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @loopback, 0x5}, 0x1c) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 2m51.418352131s ago: executing program 5 (id=798): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x15, "518aba4d000000000000000000000000002000"}) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x0, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000"], 0x0) 2m48.276587321s ago: executing program 5 (id=803): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') gettid() syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r2, 0x9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv2(r3, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 2m47.933881652s ago: executing program 5 (id=804): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = accept$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000200)=0x1c) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x4000000, @empty, 0xffffffff}, 0xfffffffffffffc6f) listen(r0, 0x0) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008"], 0x70}}, 0x4008000) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0xfc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @mcast1, [0x0, 0xff000000, 0xffff00, 0xffffff00], [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], 'bridge_slave_1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x3a, 0xb, 0x1, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fedb0200020202000900030073797a30000000000900010073797a3200000000050004000200000084813f4fdff4002c3ec4e29ae2f02bf07aafdf43df4c"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) syz_open_dev$dri(0x0, 0x634, 0x12101) 2m46.803679578s ago: executing program 5 (id=807): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffbfffff4]}, 0x8, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000140)={'veth0_to_bond\x00', 0x8, 0x9}) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r6 = openat$audio1(0xffffff9c, &(0x7f0000000240), 0x80100, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r6, 0xc0045004, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x10, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1}, {0xa, 0x4e24, 0x2, @remote, 0x80400004}, 0xffffffffffffffff, 0xfffffe4d}}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4811}, 0x4000000) 2m44.362198865s ago: executing program 5 (id=810): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x6, &(0x7f0000000400)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000005c0)='wg1\x00', 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20a02, 0x0) fdatasync(r3) 2m29.306639283s ago: executing program 36 (id=810): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x6, &(0x7f0000000400)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000005c0)='wg1\x00', 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20a02, 0x0) fdatasync(r3) 1m4.849329372s ago: executing program 8 (id=1044): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000001, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000400)=0x6, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 1m4.534046762s ago: executing program 8 (id=1046): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') io_setup(0x2, &(0x7f0000000180)=0x0) io_getevents(r1, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r0, 0x0}]) io_destroy(r1) 1m3.473648296s ago: executing program 8 (id=1049): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000200)=0x1d) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xffffffff}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x3a1dc0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="0f00000004000000040000000700000080"], 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) tkill(0x0, 0x2b) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @sdr={0x3432564e, 0xf3}}) 1m0.711735834s ago: executing program 8 (id=1055): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001080)=""/79, 0x4f) getdents(r1, 0xfffffffffffffffd, 0x58) 59.486129893s ago: executing program 8 (id=1059): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000099dc320d112f37e685401020301090224000100001010090459e102ff063d0009050b0200020500ff0905820206"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000480)={0x14, &(0x7f0000000500)=ANY=[], 0x0}, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000bc0)={0x0, 0xa, 0x1}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000000)={0x20, 0x81, 0x2, "dd74"}, 0x0, &(0x7f0000000cc0)={0x20, 0x83, 0x1, "e2"}, 0x0, &(0x7f0000000d40)={0x20, 0x85, 0x3, "17d6ac"}}) socket$kcm(0x21, 0xa, 0xa) close(0xffffffffffffffff) setresgid(0xee00, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x16000, 0x800, 0x3, 0x43b17eec204a78ca}, 0x20) socket$vsock_stream(0x28, 0x1, 0x0) mknod$loop(0x0, 0xc000, 0x1) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) 58.799149454s ago: executing program 8 (id=1060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) r1 = eventfd2(0x3, 0x0) fcntl$notify(r1, 0x402, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) r5 = io_uring_setup(0x101822, &(0x7f0000000000)={0x0, 0x627c, 0x0, 0xfffffffc, 0x119}) io_uring_register$IORING_REGISTER_FILES(r5, 0x23, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, 0x0, 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) 58.449572795s ago: executing program 37 (id=1060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) r1 = eventfd2(0x3, 0x0) fcntl$notify(r1, 0x402, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) r5 = io_uring_setup(0x101822, &(0x7f0000000000)={0x0, 0x627c, 0x0, 0xfffffffc, 0x119}) io_uring_register$IORING_REGISTER_FILES(r5, 0x23, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, 0x0, 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) 12.008557209s ago: executing program 2 (id=1238): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x7, 0x1, 0x1, 0x0, 0x7f}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x80000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r4, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0/file0\x00', 0x604d01, 0x20) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5}, 0x50) 10.361951851s ago: executing program 2 (id=1242): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000600)={[{@grpquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpjquota}]}, 0x3, 0x79b, &(0x7f0000001200)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000007c0)={0xd, 0x4, 0x6, 0x800}) 9.405464462s ago: executing program 2 (id=1249): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x8000000004) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x80049370, 0x1000000000000) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@delqdisc={0x2c, 0x25, 0x8, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0xb}, {0xc, 0x10}, {0xaed7c706b85916f1, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3fc8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004914}, 0x4004001) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) 8.687682284s ago: executing program 7 (id=1251): r0 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0xfffffffb, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000340)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r3, 0x0, r7, 0x0, 0x6, 0x0) 7.88099889s ago: executing program 2 (id=1252): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x7, 0x1, 0x1, 0x0, 0x7f}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x80000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r4, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0/file0\x00', 0x604d01, 0x20) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5}, 0x50) 7.367415016s ago: executing program 6 (id=1254): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@nomblk_io_submit}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000380)={0x40, 0x2, 0x5, 0xfff, 0x1, 0x0, [{0x4, 0x7f, 0x200, '\x00', 0xa05}]}) 7.24839436s ago: executing program 9 (id=1257): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x1008400, &(0x7f0000000100)=ANY=[], 0x85, 0x676, &(0x7f0000001240)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f000000e0c0), 0x10010) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 6.577214181s ago: executing program 9 (id=1260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgrcv(r1, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_pid(r2, &(0x7f0000000240), 0xb3a8) r3 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xb) setresuid(0x0, 0xee01, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000040)='!---\x00', 0x0, r4) 6.31210749s ago: executing program 2 (id=1262): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x8000000004) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x80049370, 0x1000000000000) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@delqdisc={0x2c, 0x25, 0x8, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0xb}, {0xc, 0x10}, {0xaed7c706b85916f1, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3fc8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004914}, 0x4004001) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) 4.338378962s ago: executing program 1 (id=1263): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f00000002c0)="d2e88be60c18", 0x6}], 0x2) 4.310447663s ago: executing program 2 (id=1264): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 4.306954844s ago: executing program 7 (id=1265): syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xe7, [@multicast2]}, @timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{@empty, 0xe7}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @ssrr={0x89, 0x3, 0x3b}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x5}}}}}}, 0x0) 4.189929037s ago: executing program 1 (id=1266): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x301200, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000400)='8'}) close_range(r0, 0xffffffffffffffff, 0x0) 4.189719347s ago: executing program 7 (id=1267): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mknod$loop(0x0, 0xc000, 0x1) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) 4.188846007s ago: executing program 9 (id=1268): fspick(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fremovexattr(0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) unshare(0x22020400) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = eventfd2(0xffffffff, 0x1) read$eventfd(r2, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r4, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r3, 0x0, r0, 0x0, 0x40010003, 0x0) 4.09733037s ago: executing program 6 (id=1269): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001e00010026bd7000fedbdf2507"], 0x34}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) 4.053067221s ago: executing program 7 (id=1270): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000001c0)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 3.965975054s ago: executing program 7 (id=1271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x4c8, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2f, 0x4ba, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4a6, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x100, @val=0x80}, "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"}}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) 3.873049517s ago: executing program 1 (id=1272): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x7, 0x1, 0x1, 0x0, 0x7f}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x80000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r2, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0/file0\x00', 0x604d01, 0x20) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3}, 0x50) 3.834480518s ago: executing program 6 (id=1273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init1(0x80800) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c46800c040001000000010000000200060001000000dd000000380000004503000008000000050020000100050009000000000000000300000005"], 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(0xffffffffffffffff, &(0x7f0000000180)=""/59, 0x3b) r3 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0xc08, 0x3, 0x4a0, 0x0, 0x5002004a, 0xb, 0x330, 0xea13, 0x408, 0x3c8, 0x3c8, 0x408, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x330, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {0x9}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {0x0, 0x0, 0x0, 0x1000}, {0x1}, {0x0, 0x0, 0x81, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0x1}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x8000}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {0x80}, {}, {}, {}, {0x20}, {}, {0x0, 0x0, 0xfd}, {0x0, 0x0, 0xe6, 0xca}, {}, {0x0, 0x7}], {0x734}}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x13, 0x1ff, 0x5, 0x80001, 'pptp\x00', 'syz1\x00', {0x404000000000000}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8, 0xad82, 0x2, 'syz1\x00', 'syz0\x00', {0x1ac4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x500) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 3.48067137s ago: executing program 1 (id=1274): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x8000000004) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x80049370, 0x1000000000000) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@delqdisc={0x2c, 0x25, 0x8, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0xb}, {0xc, 0x10}, {0xaed7c706b85916f1, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3fc8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004914}, 0x4004001) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) 2.765928592s ago: executing program 6 (id=1275): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname={'fsname', 0x3d, '.'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001200015e36bfa1000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x240448c0}, 0x0) 2.054866905s ago: executing program 7 (id=1276): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r2, 0x0, 0x6, 0x0) splice(0xffffffffffffffff, &(0x7f00000001c0)=0x1, r1, &(0x7f00000002c0)=0xbd, 0x1ff, 0x2) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) 2.045642775s ago: executing program 1 (id=1277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setpriority(0x2, r4, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000280)={0x18f, @tick=0x8, 0x6, {0x8, 0x80}, 0x44, 0x1}) close_range(r5, 0xffffffffffffffff, 0x0) 1.993424307s ago: executing program 9 (id=1278): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") creat(&(0x7f0000000140)='./bus\x00', 0x182) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101242, 0x0) io_submit(0x0, 0x0, &(0x7f0000000200)) syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)={0x4, 0x6, 0x3, 0x400, 0x5, 0x8000000000000000, 0x1, 0x6, 0x4}) 1.526348571s ago: executing program 9 (id=1279): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) splice(r2, 0x0, r1, 0x0, 0x1000, 0x0) splice(r0, 0x0, r3, 0x0, 0x80, 0x0) 1.521308532s ago: executing program 6 (id=1280): syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mknod$loop(0x0, 0xc000, 0x1) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) 509.281684ms ago: executing program 1 (id=1281): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x200c9a, &(0x7f0000000280)=ANY=[], 0x1, 0x68b, &(0x7f0000000a40)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x44828, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x12000051) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0) lseek(r1, 0xd488, 0x1) getdents64(r1, 0x0, 0x22) 123.816406ms ago: executing program 6 (id=1282): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x82, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000006, 0x7, 0x100, 0x9024, 0x0, 0x7, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x9, 0x664a, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0xb, 0x7fffffff, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x4, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x0, 0xe, 0x7, 0x8, 0xe6, 0x200000000000101, 0x5, 0x8, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc01, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x6, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x2, 0x4, 0xfff, 0xfdffffffffffff81, 0x9, 0x4, 0x2000000000000006, 0x1, 0x5, 0x400000000008061f, 0x100000000000001, 0x8, 0xf6, 0x4, 0x6, 0xffffffffffffffff, 0x7, 0xe542, 0x2c, 0x8, 0x400000002293332d, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x0, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcd, 0x8, 0x3]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x268, 0x33a, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0xd8000000, {0x9402}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x9, 0xd, 0x0, 0xfffffffa, 0x9, 0x5, 0x2, 0x8, 0x9, 0xfc, 0x9, 0x0, 0xf, 0x4, 0x6, 0x5, 0x82, 0x6, '\x00', 0x0, 0x7}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x48000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 9 (id=1283): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000d80)={&(0x7f00000008c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@ip_retopts={{0x28, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0xd, 0x1, 0xf, [{@multicast2, 0x40000000}, {@private=0xa010101, 0x4}]}]}}}], 0x28}, 0x0) kernel console output (not intermixed with test programs): GE): vxcan0: link becomes ready [ 271.994495][ T6284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.455400][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 274.477817][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.370382][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.529487][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.826204][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.834511][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.925855][ T6284] device veth0_vlan entered promiscuous mode [ 276.080308][ T6284] device veth1_vlan entered promiscuous mode [ 277.310148][ T6284] device veth0_macvtap entered promiscuous mode [ 277.476416][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.485931][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.497360][ T6284] device veth1_macvtap entered promiscuous mode [ 278.279281][ T4232] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 278.327948][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.402189][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.477106][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.497223][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.541390][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.605959][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.687179][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 279.410051][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.553471][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.570507][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.588150][ T6284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.598749][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.609501][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.620096][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.631040][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.641271][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.730146][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.747124][ T4232] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 279.756219][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.771644][ T4232] usb 4-1: can't read configurations, error -71 [ 280.197310][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.468338][ T6284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.592554][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.620253][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.730197][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.057279][ T1107] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 281.278007][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.418478][ T6284] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.461788][ T6284] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.487199][ T6284] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.595020][ T6284] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.617183][ T1107] usb 6-1: unable to get BOS descriptor or descriptor too short [ 281.658392][ T1107] usb 6-1: not running at top speed; connect to a high speed hub [ 281.747413][ T1107] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 281.784152][ T1107] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.847138][ T1107] usb 6-1: config 1 interface 0 has no altsetting 0 [ 282.017301][ T1107] usb 6-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 282.056658][ T1246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.087131][ T1246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.102971][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.112339][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 282.148377][ T4400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.156229][ T4400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.167656][ T1107] usb 6-1: Product: syz [ 282.171856][ T1107] usb 6-1: Manufacturer: syz [ 282.252499][ T1107] usb 6-1: SerialNumber: syz [ 282.276022][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 282.490264][ T6577] 9pnet: Insufficient options for proto=fd [ 282.638640][ T1107] usbtouchscreen: probe of 6-1:1.0 failed with error -12 [ 282.682681][ T1107] usb 6-1: USB disconnect, device number 8 [ 285.887334][ T4232] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 286.097511][ T6606] syz.5.515 (6606) used greatest stack depth: 18512 bytes left [ 286.458881][ T4232] usb 3-1: unable to get BOS descriptor or descriptor too short [ 286.497408][ T4232] usb 3-1: not running at top speed; connect to a high speed hub [ 286.597655][ T4232] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 286.847176][ T4232] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 287.587076][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.595245][ T4232] usb 3-1: Product: syz [ 287.599476][ T4232] usb 3-1: Manufacturer: syz [ 287.604108][ T4232] usb 3-1: SerialNumber: syz [ 287.757203][ T4232] usb 3-1: can't set config #1, error -71 [ 287.768038][ T4232] usb 3-1: USB disconnect, device number 9 [ 291.181715][ T4232] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 291.447274][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 291.978231][ T4232] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 292.013739][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.316583][ T4232] usb 3-1: Product: syz [ 293.321075][ T4232] usb 3-1: Manufacturer: syz [ 293.325681][ T4232] usb 3-1: SerialNumber: syz [ 293.343605][ T4232] usb 3-1: config 0 descriptor?? [ 293.398561][ T6692] Cannot find del_set index 1 as target [ 293.727261][ T4232] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 293.827050][ T4232] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 293.957331][ T1110] usb 3-1: USB disconnect, device number 10 [ 298.545733][ T6736] Cannot find del_set index 1 as target [ 302.214173][ T6782] xt_bpf: check failed: parse error [ 303.281443][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.558'. [ 306.167959][ T6819] Cannot find del_set index 1 as target [ 306.402746][ T6821] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 306.402746][ T6821] program syz.2.562 not setting count and/or reply_len properly [ 310.494908][ T4282] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.553690][ T4282] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.738357][ T4282] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.813652][ T6856] chnl_net:caif_netlink_parms(): no params data found [ 310.853157][ T6883] Cannot find del_set index 1 as target [ 311.753349][ T4282] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.787088][ T4233] Bluetooth: hci4: command 0x0409 tx timeout [ 312.047759][ T6856] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.239939][ T6856] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.443684][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 314.451054][ T6856] device bridge_slave_0 entered promiscuous mode [ 314.483758][ T6856] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.710585][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.362091][ T6856] device bridge_slave_1 entered promiscuous mode [ 315.616451][ T6856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.706072][ T6856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.969749][ T6856] team0: Port device team_slave_0 added [ 315.976317][ T4282] tipc: Left network mode [ 315.980107][ T6856] team0: Port device team_slave_1 added [ 316.029788][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.044767][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.114171][ T6856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.137089][ T1110] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 316.173985][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.186099][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.223650][ T6856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.398082][ T1110] usb 7-1: Using ep0 maxpacket: 8 [ 316.508377][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 316.937070][ T1110] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.548609][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.555723][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.577116][ T1110] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 317.594919][ T6856] device hsr_slave_0 entered promiscuous mode [ 317.696287][ T1110] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 317.701514][ T6856] device hsr_slave_1 entered promiscuous mode [ 317.736902][ T1110] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.750963][ T1110] usb 7-1: config 0 descriptor?? [ 317.894978][ T6856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.365563][ T6943] Cannot find del_set index 1 as target [ 318.578922][ T1110] ryos 0003:1E7D:3138.0001: unknown main item tag 0x0 [ 319.047183][ T6856] Cannot create hsr debugfs directory [ 319.052738][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 319.243413][ T1110] ryos 0003:1E7D:3138.0001: unknown main item tag 0x0 [ 319.348377][ T1110] ryos 0003:1E7D:3138.0001: unknown main item tag 0x0 [ 320.038048][ T1110] ryos 0003:1E7D:3138.0001: unknown main item tag 0x0 [ 320.044892][ T1110] ryos 0003:1E7D:3138.0001: unknown main item tag 0x0 [ 320.382590][ T1110] ryos 0003:1E7D:3138.0001: item fetching failed at offset 5/40 [ 320.425960][ T1110] ryos 0003:1E7D:3138.0001: parse failed [ 320.454550][ T1110] ryos: probe of 0003:1E7D:3138.0001 failed with error -22 [ 320.493705][ T1110] usb 7-1: USB disconnect, device number 2 [ 320.726616][ T6856] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 320.785649][ T6856] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 320.826786][ T6856] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 320.870778][ T6856] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 321.475234][ T4282] device hsr_slave_0 left promiscuous mode [ 321.510136][ T4282] device hsr_slave_1 left promiscuous mode [ 321.543509][ T4282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.601501][ T4282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.613742][ T4282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.641883][ T4282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.661243][ T4282] device bridge_slave_1 left promiscuous mode [ 321.683198][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.677783][ T4282] device bridge_slave_0 left promiscuous mode [ 322.684041][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.127473][ T4282] device veth1_macvtap left promiscuous mode [ 323.133570][ T4282] device veth0_macvtap left promiscuous mode [ 323.145080][ T4282] device veth1_vlan left promiscuous mode [ 323.162724][ T4282] device veth0_vlan left promiscuous mode [ 323.257176][ T4235] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 324.057071][ T4235] usb 7-1: Using ep0 maxpacket: 8 [ 324.217259][ T4235] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 325.827105][ T4235] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.321639][ T4235] usb 7-1: can't set config #252, error -71 [ 327.428065][ T4235] usb 7-1: USB disconnect, device number 3 [ 328.791962][ T7035] overlayfs: failed to resolve './file1': -2 [ 331.460944][ T4178] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 331.537107][ T4233] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 331.576396][ T4282] team0 (unregistering): Port device team_slave_1 removed [ 331.626743][ T4282] team0 (unregistering): Port device team_slave_0 removed [ 332.918684][ T4282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.938256][ T4282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.997288][ T4178] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 333.019357][ T4178] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.047362][ T4233] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 333.085794][ T4233] usb 3-1: config 0 interface 0 has no altsetting 0 [ 333.117985][ T4178] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 333.137104][ T4178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.148963][ T4282] bond0 (unregistering): Released all slaves [ 333.248231][ T4178] usbtmc 4-1:16.0: bulk endpoints not found [ 333.267366][ T4233] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 333.296533][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 333.313153][ T6856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.325865][ T4233] usb 3-1: Product: syz [ 333.347102][ T4233] usb 3-1: Manufacturer: syz [ 333.353277][ T4233] usb 3-1: SerialNumber: syz [ 333.369922][ T6856] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.392436][ T4233] usb 3-1: config 0 descriptor?? [ 333.404032][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 333.413864][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 333.440270][ T4233] usb 3-1: selecting invalid altsetting 0 [ 333.487698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 333.518339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 333.609650][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.616807][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.767491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 333.889532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 333.999095][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.006355][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.153397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 334.308476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.328287][ T4233] usb 3-1: USB disconnect, device number 11 [ 334.338015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.417460][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.430353][ T7074] usb 4-1: USB disconnect, device number 8 [ 334.545384][ T7086] overlayfs: failed to resolve './file1': -2 [ 335.377632][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.405685][ T5148] udevd[5148]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.536538][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 337.539405][ T7098] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 337.727072][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 337.786791][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 338.111054][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 338.228392][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 338.395994][ T6856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.458293][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 338.503257][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 338.548021][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.842662][ T7148] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 339.849236][ T7148] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 340.358464][ T7148] vhci_hcd vhci_hcd.0: Device attached [ 340.444072][ T6856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.454025][ T7149] vhci_hcd: connection closed [ 340.462607][ T4338] vhci_hcd: stop threads [ 340.472536][ T4338] vhci_hcd: release socket [ 340.477812][ T4338] vhci_hcd: disconnect device [ 340.502090][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 340.515777][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 342.057590][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 343.227394][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 343.241719][ T6856] device veth0_vlan entered promiscuous mode [ 343.301283][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 343.319216][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 343.483172][ T6856] device veth1_vlan entered promiscuous mode [ 343.502845][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 343.520883][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 343.665358][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 343.697430][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 343.755354][ T6856] device veth0_macvtap entered promiscuous mode [ 343.789702][ T6856] device veth1_macvtap entered promiscuous mode [ 343.894137][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.006409][ T7211] input: syz1 as /devices/virtual/input/input18 [ 344.764015][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.567842][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.578672][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.588818][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.600237][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.611503][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.622449][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.688026][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.696708][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 345.755824][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 345.867388][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 345.886180][ T7216] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 345.892723][ T7216] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 345.926417][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 345.983551][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.013428][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.030444][ T7216] vhci_hcd vhci_hcd.0: Device attached [ 346.073927][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.120293][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.159460][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.218511][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.262450][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.305779][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.337283][ T4233] usb 46-1: SetAddress Request (2) to port 0 [ 346.345075][ T4233] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 346.381341][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.410749][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 346.421851][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 346.433564][ T7217] vhci_hcd: connection closed [ 346.433777][ T4400] vhci_hcd: stop threads [ 346.462064][ T4400] vhci_hcd: release socket [ 346.472339][ T6856] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.492123][ T4400] vhci_hcd: disconnect device [ 346.496844][ T6856] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.517438][ T6856] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.539849][ T6856] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.912998][ T5691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.952639][ T5691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.998231][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.554193][ T1246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.849695][ T7246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.643'. [ 349.010519][ T1246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.079372][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 349.384504][ T7259] Cannot find del_set index 1 as target [ 350.547145][ T4234] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 350.807118][ T4234] usb 4-1: Using ep0 maxpacket: 8 [ 350.952495][ T4234] usb 4-1: config 2 has an invalid interface number: 101 but max is 0 [ 350.968759][ T4234] usb 4-1: config 2 has no interface number 0 [ 350.995661][ T4234] usb 4-1: config 2 interface 101 has no altsetting 0 [ 351.207390][ T4234] usb 4-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=53.2a [ 351.236914][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.297097][ T4234] usb 4-1: Product: syz [ 351.316925][ T4234] usb 4-1: Manufacturer: syz [ 351.340786][ T4234] usb 4-1: SerialNumber: syz [ 351.467345][ T4233] usb 46-1: device descriptor read/8, error -110 [ 351.668523][ T4234] ipw 4-1:2.101: IPWireless converter converter detected [ 351.725150][ T4234] usb 4-1: USB disconnect, device number 9 [ 351.796212][ T4234] ipw 4-1:2.101: device disconnected [ 351.907327][ T4233] usb usb46-port1: Cannot enable. Maybe the USB cable is bad? [ 351.927273][ T4233] usb usb46-port1: attempt power cycle [ 352.307387][ T4233] usb usb46-port1: Cannot enable. Maybe the USB cable is bad? [ 352.397703][ T7306] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 352.404278][ T7306] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 352.576094][ T7306] vhci_hcd vhci_hcd.0: Device attached [ 352.686060][ T7308] vhci_hcd: connection closed [ 352.687439][ T4233] usb usb46-port1: Cannot enable. Maybe the USB cable is bad? [ 352.732532][ T4233] usb usb46-port1: unable to enumerate USB device [ 353.716960][ T1154] vhci_hcd: stop threads [ 353.721557][ T1154] vhci_hcd: release socket [ 353.726074][ T1154] vhci_hcd: disconnect device [ 354.283828][ T7334] ieee802154 phy0 wpan0: encryption failed: -22 [ 354.674595][ T7342] tipc: Started in network mode [ 354.713516][ T7342] tipc: Node identity beea15b143c1, cluster identity 4711 [ 354.763643][ T7342] tipc: Enabled bearer , priority 0 [ 354.809689][ T7342] tipc: Resetting bearer [ 354.855186][ T7340] tipc: Disabling bearer [ 356.827257][ T4265] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 357.288147][ T4265] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 357.306756][ T4265] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.631923][ T4265] usb 8-1: config 0 descriptor?? [ 357.699043][ T4265] cp210x 8-1:0.0: cp210x converter detected [ 358.050616][ T7395] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 358.057362][ T7395] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 358.137172][ T4265] cp210x 8-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 358.189852][ T7395] vhci_hcd vhci_hcd.0: Device attached [ 358.229279][ T7398] vhci_hcd: connection closed [ 358.317753][ T151] vhci_hcd: stop threads [ 358.319148][ T4265] usb 8-1: cp210x converter now attached to ttyUSB0 [ 358.322474][ T151] vhci_hcd: release socket [ 358.376345][ T151] vhci_hcd: disconnect device [ 358.433707][ T4265] usb 8-1: USB disconnect, device number 2 [ 358.468226][ T4265] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 358.534387][ T4265] cp210x 8-1:0.0: device disconnected [ 364.449394][ T7473] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 364.455974][ T7473] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 365.315329][ T7478] vhci_hcd: connection closed [ 365.347793][ T7473] vhci_hcd vhci_hcd.0: Device attached [ 365.428570][ T5086] vhci_hcd: stop threads [ 365.432943][ T5086] vhci_hcd: release socket [ 365.439932][ T5086] vhci_hcd: disconnect device [ 366.877188][ T13] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 366.937183][ T6014] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 367.808431][ T13] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 367.819973][ T6014] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 367.839503][ T6014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.847749][ T13] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 367.908316][ T6014] usb 4-1: config 0 descriptor?? [ 367.918142][ T13] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 368.041702][ T6014] cp210x 4-1:0.0: cp210x converter detected [ 368.075294][ T13] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.238886][ T7496] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 368.697422][ T6014] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 368.707116][ T6014] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 368.725637][ T13] usb 8-1: USB disconnect, device number 3 [ 368.776163][ T6014] usb 4-1: cp210x converter now attached to ttyUSB0 [ 368.844931][ T6014] usb 4-1: USB disconnect, device number 10 [ 368.910852][ T6014] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 368.957256][ T6014] cp210x 4-1:0.0: device disconnected [ 371.689125][ T4280] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 371.947352][ T4280] usb 6-1: Using ep0 maxpacket: 32 [ 372.067400][ T4280] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 372.075678][ T4280] usb 6-1: config 0 has no interface number 0 [ 372.222970][ T4280] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 372.303862][ T4280] usb 6-1: config 0 interface 85 has no altsetting 0 [ 373.027193][ T4280] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 373.060749][ T4280] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.123440][ T4280] usb 6-1: Product: syz [ 373.139939][ T4280] usb 6-1: Manufacturer: syz [ 373.199397][ T4280] usb 6-1: config 0 descriptor?? [ 373.227258][ T4280] usb 6-1: can't set config #0, error -71 [ 373.256645][ T4280] usb 6-1: USB disconnect, device number 9 [ 373.429239][ T7587] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 378.511301][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.517664][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.901118][ T7636] input: syz1 as /devices/virtual/input/input19 [ 381.237626][ T7647] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 388.867577][ T7732] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7733] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7732] [ 392.815597][ T7772] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 403.583379][ T4202] Bluetooth: hci4: link tx timeout [ 403.589840][ T4202] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 406.594820][ T4233] Bluetooth: hci4: command 0x0406 tx timeout [ 408.678623][ T4233] Bluetooth: hci0: command 0x0409 tx timeout [ 411.183080][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 411.363856][ T7910] netlink: 68 bytes leftover after parsing attributes in process `syz.5.775'. [ 411.379600][ T7877] chnl_net:caif_netlink_parms(): no params data found [ 413.227228][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 413.253003][ T4362] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.725219][ T7877] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.109683][ T7877] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.187939][ T7877] device bridge_slave_0 entered promiscuous mode [ 414.280154][ T4362] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.408982][ T7877] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.416371][ T7877] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.440423][ T7877] device bridge_slave_1 entered promiscuous mode [ 414.769055][ T4362] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.322641][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 416.325452][ T7877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.381357][ T7877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.427213][ T4265] Bluetooth: hci5: command 0x0406 tx timeout [ 416.452735][ T4362] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.275838][ T7877] team0: Port device team_slave_0 added [ 417.333959][ T7877] team0: Port device team_slave_1 added [ 417.412086][ T7877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.451865][ T7877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.478036][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.653287][ T7877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.821990][ T7877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.896675][ T7877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.262126][ T7877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.662830][ T7877] device hsr_slave_0 entered promiscuous mode [ 418.817181][ T7877] device hsr_slave_1 entered promiscuous mode [ 421.112395][ T7877] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 421.126693][ T7877] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 422.780865][ T7877] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 422.881287][ T7877] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 423.507155][ T6014] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 423.752478][ T7877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.848102][ T6014] usb 3-1: Using ep0 maxpacket: 32 [ 423.861800][ T7877] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.932218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 423.950244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 423.988071][ T6014] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 423.996303][ T6014] usb 3-1: config 0 has no interface number 0 [ 424.017880][ T6014] usb 3-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6 [ 424.022455][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 424.046609][ T6014] usb 3-1: config 0 interface 89 has no altsetting 0 [ 424.057179][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 424.087457][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.094565][ T4282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.165109][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 424.204635][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 424.233958][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 424.257251][ T4280] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 424.267304][ T6014] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 424.276364][ T6014] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.295051][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.302221][ T4282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.329199][ T6014] usb 3-1: Product: syz [ 424.332665][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 424.333420][ T6014] usb 3-1: Manufacturer: syz [ 424.406864][ T6014] usb 3-1: SerialNumber: syz [ 424.428607][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 424.447742][ T6014] usb 3-1: config 0 descriptor?? [ 424.458184][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 424.477420][ T8029] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 424.497730][ T6014] hub 3-1:0.89: bad descriptor, ignoring hub [ 424.514829][ T4280] usb 6-1: Using ep0 maxpacket: 32 [ 424.516461][ T6014] hub: probe of 3-1:0.89 failed with error -5 [ 424.528675][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 424.547682][ T6014] option 3-1:0.89: GSM modem (1-port) converter detected [ 424.554496][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 424.596213][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 424.598843][ T6014] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 424.637222][ T4280] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 424.667493][ T4280] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.705505][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 424.733233][ T4280] usb 6-1: config 0 has no interface number 0 [ 424.754739][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 424.772164][ T4280] usb 6-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 424.797749][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 424.856738][ T4280] usb 6-1: config 0 interface 1 has no altsetting 0 [ 424.875396][ T4362] device hsr_slave_0 left promiscuous mode [ 424.884977][ T4362] device hsr_slave_1 left promiscuous mode [ 425.778371][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.798481][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.827870][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.835344][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.872658][ T4362] device bridge_slave_1 left promiscuous mode [ 425.880788][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.900966][ T4362] device bridge_slave_0 left promiscuous mode [ 425.917225][ T4280] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 425.928965][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.936798][ T4280] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.962336][ T4280] usb 6-1: Product: syz [ 425.983926][ T4280] usb 6-1: Manufacturer: syz [ 426.010402][ T4280] usb 6-1: SerialNumber: syz [ 426.722327][ T4280] usb 6-1: config 0 descriptor?? [ 426.765632][ T4362] device veth1_macvtap left promiscuous mode [ 426.809780][ T4362] device veth0_macvtap left promiscuous mode [ 426.830692][ T4362] device veth1_vlan left promiscuous mode [ 426.845493][ T4362] device veth0_vlan left promiscuous mode [ 426.944571][ T8068] Cannot find del_set index 1 as target [ 426.987572][ T4233] usb 3-1: USB disconnect, device number 12 [ 427.009191][ T4280] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 427.028995][ T4233] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 427.071350][ T4280] cx231xx 6-1:0.1: Not found matching IAD interface [ 427.101976][ T4233] option 3-1:0.89: device disconnected [ 427.111550][ T4280] usb 6-1: USB disconnect, device number 10 [ 428.661124][ T8085] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 428.912016][ T4362] team0 (unregistering): Port device team_slave_1 removed [ 429.055186][ T4362] team0 (unregistering): Port device team_slave_0 removed [ 430.914888][ T4362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.595883][ T4362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.838073][ T4362] bond0 (unregistering): Released all slaves [ 432.962090][ T7877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.002720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 433.022167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 433.268190][ T8121] Cannot find del_set index 1 as target [ 433.820227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 433.839892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 433.892598][ T7877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.951122][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.957799][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.812771][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 440.849497][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 440.864993][ T8173] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 440.871505][ T8173] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 441.367323][ T8173] vhci_hcd vhci_hcd.0: Device attached [ 441.387786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 441.483802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 441.625819][ T7877] device veth0_vlan entered promiscuous mode [ 441.641480][ T8192] overlayfs: unrecognized mount option "uuid=null" or missing value [ 441.669961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 441.679183][ T8175] vhci_hcd: connection closed [ 441.680576][ T5086] vhci_hcd: stop threads [ 441.697135][ T1107] usb 48-1: SetAddress Request (2) to port 0 [ 441.703306][ T1107] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 441.768015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 441.784329][ T5086] vhci_hcd: release socket [ 441.801332][ T7877] device veth1_vlan entered promiscuous mode [ 441.941253][ T5086] vhci_hcd: disconnect device [ 442.693290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 443.585070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 443.706304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 444.701128][ T7877] device veth0_macvtap entered promiscuous mode [ 446.988293][ T1107] usb 48-1: device descriptor read/8, error -110 [ 447.427692][ T7877] device veth1_macvtap entered promiscuous mode [ 447.637043][ T1107] usb usb48-port1: Cannot enable. Maybe the USB cable is bad? [ 447.667554][ T1107] usb usb48-port1: attempt power cycle [ 448.628626][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.746560][ T8248] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 448.753118][ T8248] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 448.771556][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.825332][ T8248] vhci_hcd vhci_hcd.0: Device attached [ 448.832364][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.897028][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.953879][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.955251][ T8250] vhci_hcd: connection closed [ 448.976107][ T144] vhci_hcd: stop threads [ 448.999892][ T144] vhci_hcd: release socket [ 449.039207][ T1107] usb usb48-port1: Cannot enable. Maybe the USB cable is bad? [ 449.061866][ T144] vhci_hcd: disconnect device [ 449.073274][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.118940][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.184667][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.254335][ T7877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.336488][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.073942][ T1107] usb usb48-port1: Cannot enable. Maybe the USB cable is bad? [ 450.122249][ T1107] usb usb48-port1: unable to enumerate USB device [ 450.219977][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.247161][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.266099][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.288177][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.441849][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.862709][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.898802][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.942387][ T7877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.229674][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 451.238917][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 451.308354][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 452.173909][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 452.681612][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 452.720990][ T7877] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.807179][ T7877] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.986489][ T7877] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.098720][ T7877] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.207289][ T1107] Bluetooth: hci2: command 0x041b tx timeout [ 454.714109][ T8306] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 454.720683][ T8306] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 454.762997][ T8306] vhci_hcd vhci_hcd.0: Device attached [ 454.818011][ T8310] vhci_hcd: connection closed [ 454.819169][ T4300] vhci_hcd: stop threads [ 454.838660][ T4300] vhci_hcd: release socket [ 454.852195][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.647273][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.656465][ T4300] vhci_hcd: disconnect device [ 455.846582][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 455.910337][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.936243][ T8261] chnl_net:caif_netlink_parms(): no params data found [ 455.973878][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.044913][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 456.903443][ T1107] Bluetooth: hci2: command 0x040f tx timeout [ 458.761037][ T8261] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.895112][ T8261] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.996150][ T8261] device bridge_slave_0 entered promiscuous mode [ 459.089635][ T8261] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.546316][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 459.546357][ T26] audit: type=1326 audit(1780626165.107:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.6.858" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48989a9e59 code=0x7ffc0000 [ 460.071660][ T8261] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.004726][ T8261] device bridge_slave_1 entered promiscuous mode [ 461.127095][ T26] audit: type=1326 audit(1780626165.107:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.6.858" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48989a9e59 code=0x7ffc0000 [ 461.193216][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 461.256327][ T8376] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 461.262881][ T8376] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 461.274643][ T8376] vhci_hcd vhci_hcd.0: Device attached [ 461.285248][ T8380] vhci_hcd: connection closed [ 461.286568][ T8344] vhci_hcd: stop threads [ 461.308645][ T8344] vhci_hcd: release socket [ 461.308723][ T26] audit: type=1326 audit(1780626165.127:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.6.858" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f48989a9e59 code=0x7ffc0000 [ 461.356755][ T8344] vhci_hcd: disconnect device [ 461.356790][ T26] audit: type=1326 audit(1780626165.127:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.6.858" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48989a9e59 code=0x7ffc0000 [ 461.407125][ T26] audit: type=1326 audit(1780626165.137:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.6.858" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48989a9e59 code=0x7ffc0000 [ 461.477389][ T26] audit: type=1326 audit(1780626165.147:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.6.858" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f48989a9e59 code=0x7ffc0000 [ 461.512120][ T26] audit: type=1326 audit(1780626165.147:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.6.858" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48989a9e59 code=0x7ffc0000 [ 461.538514][ T8261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.544981][ T26] audit: type=1326 audit(1780626165.147:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.6.858" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48989a9e59 code=0x7ffc0000 [ 461.563728][ T8261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.595190][ T26] audit: type=1326 audit(1780626165.157:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.6.858" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f48989a9e59 code=0x7ffc0000 [ 461.672198][ T26] audit: type=1326 audit(1780626165.167:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.6.858" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48989a9e59 code=0x7ffc0000 [ 461.726363][ T8261] team0: Port device team_slave_0 added [ 461.745401][ T8261] team0: Port device team_slave_1 added [ 463.422448][ T8261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.429556][ T8261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.465857][ T8261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.544493][ T8261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.615792][ T8261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.500880][ T8261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.588924][ T8434] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8435] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8434] [ 467.322371][ T8261] device hsr_slave_0 entered promiscuous mode [ 467.447803][ T8261] device hsr_slave_1 entered promiscuous mode [ 467.466838][ T8261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.474802][ T8261] Cannot create hsr debugfs directory [ 468.219749][ T4233] Bluetooth: hci1: command 0x0406 tx timeout [ 468.676440][ T8446] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 468.683089][ T8446] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 469.212324][ T8446] vhci_hcd vhci_hcd.0: Device attached [ 469.226673][ T8449] vhci_hcd: connection closed [ 469.227696][ T4338] vhci_hcd: stop threads [ 469.256806][ T4338] vhci_hcd: release socket [ 469.378579][ T4338] vhci_hcd: disconnect device [ 471.641879][ T8261] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 471.659740][ T8261] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 471.789513][ T8261] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 471.855372][ T8261] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 473.389108][ T8497] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8498] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8497] [ 474.414865][ T8261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.546491][ T8261] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.439629][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 475.448112][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 475.510344][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 475.530606][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 475.538897][ T8514] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 475.545726][ T8514] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 475.555984][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.563094][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.582413][ T8514] vhci_hcd vhci_hcd.0: Device attached [ 475.588726][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 475.605330][ T8515] vhci_hcd: connection closed [ 475.605783][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 475.605926][ T4338] vhci_hcd: stop threads [ 475.611869][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 475.674085][ T4338] vhci_hcd: release socket [ 475.698883][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.705994][ T5086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.717267][ T4338] vhci_hcd: disconnect device [ 475.790013][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 475.865154][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 475.921917][ T8524] Cannot find del_set index 1 as target [ 475.940845][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 476.800027][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 476.926526][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 476.987339][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 476.996592][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 477.035032][ T8533] loop6: detected capacity change from 0 to 512 [ 477.057810][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 480.673620][ T8533] EXT4-fs (loop6): Test dummy encryption mode enabled [ 481.128917][ T8540] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8541] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8540] [ 481.787732][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 481.831272][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 481.878307][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 481.927106][ T4233] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 481.934868][ T8533] EXT4-fs: failed to create workqueue [ 481.946602][ T8261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 481.954408][ T8533] EXT4-fs (loop6): mount failed [ 482.207293][ T4233] usb 9-1: Using ep0 maxpacket: 32 [ 482.328372][ T4233] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 482.369916][ T4233] usb 9-1: config 0 has no interface number 0 [ 482.475758][ T4233] usb 9-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6 [ 482.608872][ T4233] usb 9-1: config 0 interface 89 has no altsetting 0 [ 483.027652][ T4233] usb 9-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 483.038291][ T4233] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.051492][ T4233] usb 9-1: Product: syz [ 483.056158][ T4233] usb 9-1: Manufacturer: syz [ 483.065159][ T4233] usb 9-1: SerialNumber: syz [ 483.119581][ T4233] usb 9-1: config 0 descriptor?? [ 483.169091][ T8539] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 483.257840][ T4233] hub 9-1:0.89: bad descriptor, ignoring hub [ 483.272967][ T4233] hub: probe of 9-1:0.89 failed with error -5 [ 483.353845][ T4233] option 9-1:0.89: GSM modem (1-port) converter detected [ 483.397968][ T4233] usb 9-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 483.597512][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 483.605045][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 483.632332][ T8261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.207503][ T8591] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 484.214074][ T8591] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 484.244663][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 484.255420][ T8591] vhci_hcd vhci_hcd.0: Device attached [ 484.263950][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 484.314608][ T8592] vhci_hcd: connection closed [ 484.314971][ T4326] vhci_hcd: stop threads [ 484.331696][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 484.340783][ T4326] vhci_hcd: release socket [ 484.352267][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 484.363316][ T4326] vhci_hcd: disconnect device [ 484.380709][ T8261] device veth0_vlan entered promiscuous mode [ 484.398008][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 484.416251][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 484.455607][ T8261] device veth1_vlan entered promiscuous mode [ 484.664051][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 484.816162][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 484.912744][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 484.932156][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 486.139842][ T8261] device veth0_macvtap entered promiscuous mode [ 486.794150][ T8618] loop6: detected capacity change from 0 to 256 [ 486.852390][ T8261] device veth1_macvtap entered promiscuous mode [ 486.895999][ T1107] usb 9-1: USB disconnect, device number 2 [ 487.018430][ T1107] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 487.034761][ T1107] option 9-1:0.89: device disconnected [ 487.066071][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.077912][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.079520][ T8618] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 487.088374][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.276618][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.338836][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.394069][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.444240][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.501012][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.553804][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.609422][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.675996][ T8261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.733436][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.812897][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.886911][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.012948][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.058565][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.374692][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.435466][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.504445][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.524696][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.552838][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.586544][ T8261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.442375][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 489.472396][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 489.562711][ T8656] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 489.569238][ T8656] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 489.625697][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 489.627229][ T8656] vhci_hcd vhci_hcd.0: Device attached [ 489.748205][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 489.760790][ T8261] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.770173][ T8261] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.595816][ T6014] usb 48-1: SetAddress Request (6) to port 0 [ 490.674467][ T8261] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.697282][ T6014] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 490.710320][ T8261] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.829227][ T8657] vhci_hcd: connection reset by peer [ 490.847465][ T4354] vhci_hcd: stop threads [ 490.851774][ T4354] vhci_hcd: release socket [ 490.919200][ T4354] vhci_hcd: disconnect device [ 491.005317][ T150] block nbd2: Attempted send on invalid socket [ 491.012695][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 491.024703][ T8676] SQUASHFS error: Failed to read block 0x0: -5 [ 491.031132][ T8676] unable to read squashfs_super_block [ 491.553588][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.887031][ T8671] loop8: detected capacity change from 0 to 8192 [ 491.917267][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.969179][ T8344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 492.881288][ T8344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.933626][ T8344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.994290][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 493.153241][ T8708] loop2: detected capacity change from 0 to 128 [ 494.898009][ T8708] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 494.971348][ T8708] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 495.026576][ T8724] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 495.033121][ T8724] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 495.047389][ T8724] vhci_hcd vhci_hcd.0: Device attached [ 495.201788][ T8725] vhci_hcd: connection closed [ 495.203458][ T4400] vhci_hcd: stop threads [ 495.223364][ T4400] vhci_hcd: release socket [ 495.228562][ T4400] vhci_hcd: disconnect device [ 495.335216][ T150] block nbd6: Attempted send on invalid socket [ 495.342035][ T150] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 495.354574][ T8734] SQUASHFS error: Failed to read block 0x0: -5 [ 495.361014][ T8734] unable to read squashfs_super_block [ 495.788426][ T6014] usb 48-1: device descriptor read/8, error -110 [ 496.817283][ T6014] usb usb48-port1: Cannot enable. Maybe the USB cable is bad? [ 496.913418][ T6014] usb usb48-port1: attempt power cycle [ 496.920903][ T8742] loop6: detected capacity change from 0 to 512 [ 497.617174][ T6014] usb usb48-port1: Cannot enable. Maybe the USB cable is bad? [ 497.771999][ T8753] netlink: 'syz.8.936': attribute type 11 has an invalid length. [ 497.794962][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 497.839269][ T8753] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 497.858239][ T8755] loop9: detected capacity change from 0 to 1024 [ 497.859310][ T8742] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 497.953946][ T8757] loop8: detected capacity change from 0 to 1024 [ 497.987264][ T6014] usb usb48-port1: Cannot enable. Maybe the USB cable is bad? [ 498.005437][ T6014] usb usb48-port1: unable to enumerate USB device [ 498.180135][ T8742] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback. [ 498.272390][ T8757] EXT4-fs (loop8): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,sb=0x0000000100000000,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 498.373210][ T8742] ext4 filesystem being mounted at /87/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.416045][ T8757] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.064150][ T5086] hfsplus: b-tree write err: -5, ino 8 [ 501.326486][ T150] block nbd8: Attempted send on invalid socket [ 501.332956][ T150] blk_update_request: I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 501.644169][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.656429][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.786838][ T8810] SQUASHFS error: Failed to read block 0x0: -5 [ 501.793237][ T8810] unable to read squashfs_super_block [ 502.500000][ T8815] input: syz1 as /devices/virtual/input/input20 [ 502.573172][ T4400] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.400760][ T4400] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.078903][ T8839] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8840] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8839] [ 505.749748][ T4400] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.859699][ T4400] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.037045][ T4235] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 506.437289][ T4235] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.481869][ T4235] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.727607][ T4235] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.736817][ T4235] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.847856][ T4235] usb 10-1: Product: syz [ 506.859891][ T4235] usb 10-1: Manufacturer: syz [ 506.864625][ T4235] usb 10-1: SerialNumber: syz [ 507.667315][ T4235] usb 10-1: cannot find UAC_HEADER [ 507.688657][ T4235] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 507.908645][ T6014] usb 10-1: USB disconnect, device number 2 [ 509.607812][ T8771] udevd[8771]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.153137][ T8888] input: syz1 as /devices/virtual/input/input21 [ 510.619063][ T8895] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8896] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8895] [ 511.408150][ T8901] loop7: detected capacity change from 0 to 1024 [ 512.430579][ T8921] loop2: detected capacity change from 0 to 2048 [ 512.665331][ T8921] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 512.737889][ T8939] loop7: detected capacity change from 0 to 2048 [ 512.785206][ T8939] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=3932051, location=3932051 [ 512.814551][ T8939] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 514.258996][ T8957] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8958] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8957] [ 514.918027][ T4400] device hsr_slave_0 left promiscuous mode [ 514.944685][ T4400] device hsr_slave_1 left promiscuous mode [ 514.955043][ T8952] loop2: detected capacity change from 0 to 4096 [ 515.037695][ T4400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.045173][ T4400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.064693][ T8965] input: syz1 as /devices/virtual/input/input22 [ 515.105615][ T4400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.114587][ T4400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.154374][ T8952] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 515.168020][ T4400] device bridge_slave_1 left promiscuous mode [ 515.260779][ T4400] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.277817][ T4400] device bridge_slave_0 left promiscuous mode [ 515.284105][ T4400] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.370308][ T8980] loop7: detected capacity change from 0 to 512 [ 515.484371][ T4400] device veth1_macvtap left promiscuous mode [ 515.499732][ T4400] device veth0_macvtap left promiscuous mode [ 515.505856][ T4400] device veth1_vlan left promiscuous mode [ 515.535220][ T8980] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 515.660874][ T4400] device veth0_vlan left promiscuous mode [ 515.667150][ T8980] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 516.119658][ T8993] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 516.328395][ T8997] xt_CT: You must specify a L4 protocol and not use inversions on it [ 517.560969][ T9004] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[9007] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9004] [ 518.118451][ T4400] team0 (unregistering): Port device team_slave_1 removed [ 518.230665][ T150] block nbd6: Attempted send on invalid socket [ 518.237120][ T150] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 518.256962][ T4400] team0 (unregistering): Port device team_slave_0 removed [ 518.298869][ T9010] SQUASHFS error: Failed to read block 0x0: -5 [ 518.305068][ T9010] unable to read squashfs_super_block [ 518.487426][ T4400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.819029][ T4400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.263665][ T9033] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 519.451629][ T9040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1005'. [ 519.938945][ T9041] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[9042] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9041] [ 520.620708][ T9040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1005'. [ 520.656064][ T9044] loop9: detected capacity change from 0 to 512 [ 521.177924][ T9044] UDF-fs: bad mount option "measure" or missing value [ 521.288868][ T4400] bond0 (unregistering): Released all slaves [ 521.442753][ T9044] loop2: detected capacity change from 0 to 7 [ 521.471288][ T9052] netlink: 'syz.7.1010': attribute type 10 has an invalid length. [ 521.489397][ T9052] netlink: 'syz.7.1010': attribute type 17 has an invalid length. [ 521.514393][ T9044] loop2: [ 521.549035][ T9044] loop2: partition table partially beyond EOD, truncated [ 521.613142][ T9054] loop6: detected capacity change from 0 to 512 [ 521.682237][ T9054] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 522.610012][ T9054] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 522.756713][ T9054] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 523.254376][ T9079] loop9: detected capacity change from 0 to 256 [ 523.384547][ T9083] loop7: detected capacity change from 0 to 128 [ 524.398232][ T9096] attempt to access beyond end of device [ 524.398232][ T9096] loop7: rw=2049, want=425, limit=128 [ 524.667285][ T4235] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 524.687155][ T8953] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 524.807707][ T4338] attempt to access beyond end of device [ 524.807707][ T4338] loop7: rw=1, want=433, limit=128 [ 524.917131][ T4235] usb 3-1: Using ep0 maxpacket: 32 [ 525.050921][ T8953] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 525.081846][ T8953] usb 9-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 525.111547][ T8953] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 525.137235][ T4235] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 525.187195][ T4235] usb 3-1: config 0 has no interface number 0 [ 525.205648][ T4235] usb 3-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6 [ 525.910806][ T8953] usb 9-1: config 220 interface 0 has no altsetting 0 [ 525.954299][ T8953] usb 9-1: config 220 interface 1 has no altsetting 0 [ 525.977096][ T4235] usb 3-1: config 0 interface 89 has no altsetting 0 [ 525.990959][ T9119] loop7: detected capacity change from 0 to 256 [ 526.022518][ T9119] exfat: Unknown parameter '18446744073709551615' [ 526.157339][ T8953] usb 9-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 526.167264][ T4235] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 526.176305][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.202070][ T8953] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.222410][ T4235] usb 3-1: Product: syz [ 526.226751][ T4235] usb 3-1: Manufacturer: syz [ 526.233226][ T8953] usb 9-1: Product: syz [ 526.247105][ T8953] usb 9-1: Manufacturer: syz [ 526.287114][ T8953] usb 9-1: SerialNumber: syz [ 526.293024][ T4235] usb 3-1: SerialNumber: syz [ 526.314422][ T4235] usb 3-1: config 0 descriptor?? [ 526.358518][ T9101] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 526.428442][ T4235] hub 3-1:0.89: bad descriptor, ignoring hub [ 526.443230][ T4235] hub: probe of 3-1:0.89 failed with error -5 [ 526.483194][ T4235] option 3-1:0.89: GSM modem (1-port) converter detected [ 526.570361][ T4235] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 526.737466][ T8953] usb 9-1: selecting invalid altsetting 0 [ 526.788210][ T8953] usb 9-1: selecting invalid altsetting 0 [ 526.793993][ T8953] usbtest: probe of 9-1:220.1 failed with error -22 [ 526.910046][ T8953] usb 9-1: USB disconnect, device number 3 [ 528.440915][ T4233] usb 3-1: USB disconnect, device number 13 [ 528.473168][ T4233] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 529.218191][ T4233] option 3-1:0.89: device disconnected [ 529.228509][ T1107] Bluetooth: hci0: command 0x0406 tx timeout [ 529.504443][ T9174] loop9: detected capacity change from 0 to 1024 [ 530.340816][ T9182] loop2: detected capacity change from 0 to 256 [ 530.401151][ T9174] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 530.428725][ T9174] EXT4-fs (loop9): inline encryption not supported [ 530.515210][ T9182] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 530.613153][ T9174] EXT4-fs (loop9): mounted filesystem without journal. Opts: data_err=abort,init_itable,norecovery,mblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,init_itable=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 530.638003][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.746191][ T9226] loop8: detected capacity change from 0 to 2048 [ 534.847634][ T9226] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 534.972952][ T9231] loop2: detected capacity change from 0 to 2048 [ 535.196834][ T9231] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 535.222558][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 535.222572][ T26] audit: type=1800 audit(1780626240.887:55): pid=9231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1056" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 535.377158][ T1107] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 535.873633][ T7877] UDF-fs: error (device loop8): udf_read_inode: (ino 1317) failed !bh [ 535.897799][ T7877] UDF-fs: error (device loop8): udf_read_inode: (ino 1317) failed !bh [ 535.918863][ T1107] usb 10-1: too many endpoints for config 0 interface 0 altsetting 4: 254, using maximum allowed: 30 [ 535.946371][ T1107] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 535.974814][ T1107] usb 10-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 535.995660][ T1091] block nbd2: Attempted send on invalid socket [ 536.001961][ T1091] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 536.013424][ T9256] SQUASHFS error: Failed to read block 0x0: -5 [ 536.019750][ T9256] unable to read squashfs_super_block [ 536.025013][ T1107] usb 10-1: config 0 interface 0 has no altsetting 0 [ 536.032113][ T1107] usb 10-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00 [ 536.047312][ T1107] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.080303][ T1107] usb 10-1: config 0 descriptor?? [ 536.113418][ T9235] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 536.649699][ T1107] wacom 0003:056A:00B9.0002: unknown main item tag 0x0 [ 536.704699][ T1107] wacom 0003:056A:00B9.0002: unknown main item tag 0x6 [ 536.741377][ T1107] wacom 0003:056A:00B9.0002: unknown main item tag 0x2 [ 536.867816][ T1107] wacom 0003:056A:00B9.0002: Unknown device_type for 'HID 056a:00b9'. Assuming pen. [ 536.961509][ T4400] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.981093][ T1107] wacom 0003:056A:00B9.0002: hidraw0: USB HID v0.05 Device [HID 056a:00b9] on usb-dummy_hcd.9-1/input0 [ 537.025791][ T1107] input: Wacom Intuos4 6x9 Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:056A:00B9.0002/input/input23 [ 537.135985][ T1107] usb 10-1: USB disconnect, device number 3 [ 537.239246][ T4400] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.074449][ T4400] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.722854][ T4400] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.759200][ T9278] fido_id[9278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 540.209616][ T9279] chnl_net:caif_netlink_parms(): no params data found [ 540.257144][ T13] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 540.273803][ T4232] Bluetooth: hci0: command 0x0409 tx timeout [ 540.448933][ T9279] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.456326][ T9279] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.469389][ T9279] device bridge_slave_0 entered promiscuous mode [ 540.487235][ T9279] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.502207][ T9279] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.507139][ T13] usb 8-1: Using ep0 maxpacket: 32 [ 540.518192][ T9279] device bridge_slave_1 entered promiscuous mode [ 540.552446][ T9279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.197772][ T13] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 541.205897][ T13] usb 8-1: config 0 has no interface number 0 [ 541.217292][ T13] usb 8-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6 [ 541.227747][ T13] usb 8-1: config 0 interface 89 has no altsetting 0 [ 541.257849][ T9279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.649961][ T13] usb 8-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 541.794911][ T9279] team0: Port device team_slave_0 added [ 541.826901][ T13] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.846676][ T13] usb 8-1: Product: syz [ 541.851194][ T13] usb 8-1: Manufacturer: syz [ 541.855819][ T13] usb 8-1: SerialNumber: syz [ 541.863144][ T13] usb 8-1: config 0 descriptor?? [ 542.019864][ T9302] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 542.700199][ T8953] Bluetooth: hci0: command 0x041b tx timeout [ 542.717808][ T13] hub 8-1:0.89: bad descriptor, ignoring hub [ 542.735077][ T13] hub: probe of 8-1:0.89 failed with error -5 [ 542.775459][ T13] option 8-1:0.89: GSM modem (1-port) converter detected [ 542.908840][ T13] usb 8-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 543.011978][ T9279] team0: Port device team_slave_1 added [ 543.023026][ T13] usb 8-1: USB disconnect, device number 4 [ 543.049195][ T13] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 543.066386][ T13] option 8-1:0.89: device disconnected [ 543.172594][ T9279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.182903][ T9279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.220027][ T9345] loop7: detected capacity change from 0 to 512 [ 543.250074][ T9279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.300839][ T9279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.321758][ T9279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.347785][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.357459][ T9345] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 543.466470][ T9279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.618370][ T9279] device hsr_slave_0 entered promiscuous mode [ 543.636111][ T9279] device hsr_slave_1 entered promiscuous mode [ 543.661475][ T9279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 543.682715][ T9279] Cannot create hsr debugfs directory [ 543.931581][ T9349] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 543.938148][ T9349] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 543.972224][ T9349] vhci_hcd vhci_hcd.0: Device attached [ 544.030321][ T4400] device hsr_slave_0 left promiscuous mode [ 544.041056][ T4400] device hsr_slave_1 left promiscuous mode [ 544.217233][ T9351] vhci_hcd: connection closed [ 544.227766][ T5691] vhci_hcd: stop threads [ 544.339453][ T4265] usb 38-1: SetAddress Request (5) to port 0 [ 544.345963][ T4265] usb 38-1: new SuperSpeed USB device number 5 using vhci_hcd [ 544.365273][ T5691] vhci_hcd: release socket [ 544.376042][ T9364] loop7: detected capacity change from 0 to 512 [ 544.377368][ T5691] vhci_hcd: disconnect device [ 544.387712][ T4400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.403634][ T4400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.416668][ T4400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.444957][ T4400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.515456][ T4400] device bridge_slave_1 left promiscuous mode [ 544.583764][ T4400] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.632880][ T4400] device bridge_slave_0 left promiscuous mode [ 544.715509][ T4400] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.747267][ T8953] Bluetooth: hci0: command 0x040f tx timeout [ 544.769984][ T9373] loop6: detected capacity change from 0 to 256 [ 544.777856][ T4400] device veth1_macvtap left promiscuous mode [ 544.784817][ T4400] device veth0_macvtap left promiscuous mode [ 544.807349][ T4400] device veth1_vlan left promiscuous mode [ 544.854670][ T4400] device veth0_vlan left promiscuous mode [ 544.864840][ T9373] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 544.913055][ T9373] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 544.982481][ T9376] loop2: detected capacity change from 0 to 2048 [ 544.989580][ T9373] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 545.074348][ T9376] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 545.144967][ T9384] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 545.327157][ T9384] FAT-fs (loop7): Filesystem has been set read-only [ 545.629957][ T9398] loop6: detected capacity change from 0 to 1024 [ 545.679930][ T150] block nbd2: Attempted send on invalid socket [ 545.686186][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 545.704705][ T9399] SQUASHFS error: Failed to read block 0x0: -5 [ 545.711024][ T9399] unable to read squashfs_super_block [ 545.807198][ T9398] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 545.839467][ T9398] System zones: 0-1, 3-8 [ 545.882984][ T9398] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouid32,jqfmt=vfsv1,noquota,debug,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none. [ 546.007985][ T9398] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.160961][ T9398] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #15: comm syz.6.1084: lblock 0 mapped to illegal pblock 0 (length 6) [ 546.269941][ T4400] team0 (unregistering): Port device team_slave_1 removed [ 546.306663][ T9398] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 546.367855][ T4400] team0 (unregistering): Port device team_slave_0 removed [ 546.392286][ T9398] EXT4-fs (loop6): This should not happen!! Data will be lost [ 546.392286][ T9398] [ 546.432946][ T4400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.456595][ T9414] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #15: comm syz.6.1084: lblock 0 mapped to illegal pblock 0 (length 4) [ 546.488721][ T4400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.584310][ T5691] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:15: lblock 8 mapped to illegal pblock 8 (length 8) [ 546.649589][ T5691] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 546.687097][ T5691] EXT4-fs (loop6): This should not happen!! Data will be lost [ 546.687097][ T5691] [ 546.732812][ T4400] bond0 (unregistering): Released all slaves [ 546.831855][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 547.935645][ T9433] loop9: detected capacity change from 0 to 8 [ 547.964752][ T9435] loop6: detected capacity change from 0 to 1024 [ 548.052842][ T9433] SQUASHFS error: zlib decompression failed, data probably corrupt [ 548.077326][ T9435] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 548.127605][ T9433] SQUASHFS error: Failed to read block 0x9b: -5 [ 548.170286][ T9433] SQUASHFS error: Unable to read metadata cache entry [99] [ 548.225055][ T9433] SQUASHFS error: Unable to read inode 0x104 [ 548.383700][ T9433] loop9: detected capacity change from 0 to 512 [ 548.531190][ T9433] EXT4-fs (loop9): mounted filesystem without journal. Opts: noauto_da_alloc,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 548.587170][ T9433] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.726045][ T9433] EXT4-fs error (device loop9): ext4_xattr_block_list:713: inode #12: comm syz.9.1089: corrupted xattr block 6 [ 548.762840][ T9451] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 548.769774][ T9451] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 548.928928][ T9451] vhci_hcd vhci_hcd.0: Device attached [ 548.995919][ T9452] vhci_hcd: connection closed [ 548.996188][ T4362] vhci_hcd: stop threads [ 549.038184][ T4362] vhci_hcd: release socket [ 549.042656][ T4362] vhci_hcd: disconnect device [ 549.105284][ T9467] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 549.137499][ T9467] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 549.167520][ T9462] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 549.187866][ T9462] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 549.477201][ T4265] usb 38-1: device descriptor read/8, error -110 [ 550.368157][ T9279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 550.637241][ T4265] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 550.687860][ T9478] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[9480] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9478] [ 550.706533][ T4265] usb usb38-port1: attempt power cycle [ 550.889001][ T9279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 550.937307][ T9279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 551.020321][ T8953] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 551.048600][ T9279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 551.148632][ T1091] block nbd7: Attempted send on invalid socket [ 551.154859][ T1091] blk_update_request: I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 551.166170][ T9509] SQUASHFS error: Failed to read block 0x0: -5 [ 551.172408][ T9509] unable to read squashfs_super_block [ 551.187228][ T4265] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 551.349508][ T9494] udc-core: couldn't find an available UDC or it's busy [ 551.360785][ T9494] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 551.427112][ T8953] usb 3-1: unable to get BOS descriptor or descriptor too short [ 551.507203][ T8953] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 551.507353][ T4265] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 551.518365][ T8953] usb 3-1: can't read configurations, error -71 [ 551.540756][ T9279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.618041][ T9516] loop6: detected capacity change from 0 to 256 [ 551.624785][ T4265] usb usb38-port1: unable to enumerate USB device [ 551.704379][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 551.835182][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 551.858339][ T9279] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.910401][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 551.919346][ T9516] exfat: Deprecated parameter 'utf8' [ 551.944077][ T9516] exfat: Deprecated parameter 'namecase' [ 551.951561][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 551.967721][ T9516] exfat: Deprecated parameter 'utf8' [ 551.978747][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.985848][ T4326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.026116][ T9516] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 552.134806][ T9522] device syzkaller0 entered promiscuous mode [ 552.173585][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 552.193519][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 552.233388][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 552.263603][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.270740][ T4326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.521319][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 552.561007][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 552.586272][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 552.600831][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 552.624644][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 552.703361][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 552.737954][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 552.783639][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 552.822871][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 552.912330][ T9537] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 552.918890][ T9537] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 552.940015][ T9537] vhci_hcd vhci_hcd.0: Device attached [ 552.951839][ T9279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 552.998587][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 553.014392][ T9538] vhci_hcd: connection closed [ 553.014631][ T1246] vhci_hcd: stop threads [ 553.024291][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 553.052244][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 553.059055][ T1246] vhci_hcd: release socket [ 553.073439][ T1246] vhci_hcd: disconnect device [ 554.226063][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 554.230242][ T9555] loop2: detected capacity change from 0 to 2048 [ 554.270509][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 554.413854][ T9279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.439748][ T9555] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 555.111243][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 555.149136][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 555.287136][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 555.327366][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 555.355573][ T9279] device veth0_vlan entered promiscuous mode [ 555.399580][ T9570] device syzkaller0 entered promiscuous mode [ 555.414659][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 555.465026][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 555.494800][ T9279] device veth1_vlan entered promiscuous mode [ 555.696925][ T9279] device veth0_macvtap entered promiscuous mode [ 555.720264][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 555.778655][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 555.806579][ T9279] device veth1_macvtap entered promiscuous mode [ 555.820004][ T9575] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[9578] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9575] [ 555.842429][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 555.865542][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 555.999012][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.012807][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.036230][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.102086][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.127060][ T7074] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 556.152415][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.172477][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.193235][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.213600][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.267907][ T150] block nbd9: Attempted send on invalid socket [ 556.274195][ T150] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 556.285358][ T9586] SQUASHFS error: Failed to read block 0x0: -5 [ 556.291594][ T9586] unable to read squashfs_super_block [ 556.377131][ T7074] usb 8-1: Using ep0 maxpacket: 32 [ 556.468255][ T9279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.497314][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 556.516372][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 556.548092][ T7074] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 556.556430][ T7074] usb 8-1: config 0 has no interface number 0 [ 556.562781][ T7074] usb 8-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6 [ 556.573173][ T7074] usb 8-1: config 0 interface 89 has no altsetting 0 [ 556.578330][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.633707][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.735289][ T9590] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 556.741835][ T9590] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 556.750296][ T7074] usb 8-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 556.768254][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.786846][ T7074] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.815627][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.828644][ T7074] usb 8-1: Product: syz [ 556.832811][ T7074] usb 8-1: Manufacturer: syz [ 556.846639][ T7074] usb 8-1: SerialNumber: syz [ 556.852548][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.873452][ T9590] vhci_hcd vhci_hcd.0: Device attached [ 556.879801][ T7074] usb 8-1: config 0 descriptor?? [ 556.887098][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.900416][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.915611][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.926840][ T9581] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 556.936750][ T9279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.950125][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 556.958348][ T7074] hub 8-1:0.89: bad descriptor, ignoring hub [ 556.958375][ T7074] hub: probe of 8-1:0.89 failed with error -5 [ 556.959292][ T7074] option 8-1:0.89: GSM modem (1-port) converter detected [ 556.995436][ T7074] usb 8-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 557.097862][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 557.109577][ T9591] vhci_hcd: connection closed [ 557.120418][ T9279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.137238][ T4354] vhci_hcd: stop threads [ 557.140523][ T9279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.141504][ T4354] vhci_hcd: release socket [ 557.153046][ T9279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.842344][ T9279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.967611][ T4354] vhci_hcd: disconnect device [ 557.991660][ T4280] usb 38-1: enqueue for inactive port 0 [ 558.091161][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.105454][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.146470][ T9609] loop6: detected capacity change from 0 to 512 [ 558.158914][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 558.209715][ T5086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.230536][ T5086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.270242][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 558.281515][ T9609] EXT4-fs (loop6): 1 truncate cleaned up [ 558.349676][ T9609] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 558.490584][ T9619] loop1: detected capacity change from 0 to 164 [ 558.537760][ T4280] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 558.554842][ T4280] usb usb38-port1: attempt power cycle [ 558.632260][ T26] audit: type=1800 audit(1780626264.297:56): pid=9609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1129" name="file1" dev="loop6" ino=13 res=0 errno=0 [ 558.632614][ T9621] device syzkaller0 entered promiscuous mode [ 558.704848][ T9609] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.1129: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 558.826454][ T26] audit: type=1800 audit(1780626264.487:57): pid=9609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1129" name="file1" dev="loop6" ino=13 res=0 errno=0 [ 558.828532][ T9609] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1129: bg 0: block 465: padding at end of block bitmap is not set [ 558.926341][ T9609] EXT4-fs (loop6): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 558.953355][ T4280] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 559.091251][ T9609] EXT4-fs (loop6): This should not happen!! Data will be lost [ 559.091251][ T9609] [ 559.329473][ T4280] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 559.361797][ T4280] usb usb38-port1: unable to enumerate USB device [ 559.646501][ T9609] EXT4-fs (loop6): Total free blocks count 0 [ 559.758992][ T9609] EXT4-fs (loop6): Free/Dirty block details [ 559.765873][ T9609] EXT4-fs (loop6): free_blocks=0 [ 559.771758][ T9609] EXT4-fs (loop6): dirty_blocks=2 [ 559.779702][ T9609] EXT4-fs (loop6): Block reservation details [ 559.786176][ T9609] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 559.997293][ T4280] usb 8-1: USB disconnect, device number 5 [ 560.690368][ T4280] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 560.699735][ T4280] option 8-1:0.89: device disconnected [ 560.756145][ T9643] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 560.762693][ T9643] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 560.849562][ T9643] vhci_hcd vhci_hcd.0: Device attached [ 560.859661][ T9648] vhci_hcd: connection closed [ 560.859968][ T144] vhci_hcd: stop threads [ 560.889296][ T144] vhci_hcd: release socket [ 560.893754][ T144] vhci_hcd: disconnect device [ 561.280966][ T150] block nbd1: Attempted send on invalid socket [ 561.287391][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 561.299381][ T9652] SQUASHFS error: Failed to read block 0x0: -5 [ 561.305548][ T9652] unable to read squashfs_super_block [ 561.386550][ T9654] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[9655] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9654] [ 561.995783][ T9658] loop7: detected capacity change from 0 to 512 [ 562.053093][ T9658] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 562.141389][ T9658] EXT4-fs (loop7): 1 truncate cleaned up [ 562.173887][ T9663] loop2: detected capacity change from 0 to 512 [ 562.202696][ T9658] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 562.264057][ T9663] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 562.389546][ T9669] device syzkaller0 entered promiscuous mode [ 562.401669][ T9673] loop6: detected capacity change from 0 to 512 [ 562.417163][ T9663] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 562.521185][ T9673] EXT4-fs (loop6): Ignoring removed bh option [ 562.591727][ T9663] EXT4-fs (loop2): orphan cleanup on readonly fs [ 562.607162][ T9663] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #3: comm syz.2.1142: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 562.767197][ T9663] EXT4-fs error (device loop2): ext4_quota_enable:6447: comm syz.2.1142: Bad quota inode: 3, type: 0 [ 562.779034][ T9673] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 562.842133][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.849382][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.888926][ T9663] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 563.043050][ T9673] EXT4-fs (loop6): 1 truncate cleaned up [ 563.060491][ T9663] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 563.097549][ T9663] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,noblock_validity,noquota,nolazytime,nogrpid,errors=continue,jqfmt=vfsold,i_version,resuid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 563.122165][ T9673] EXT4-fs (loop6): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 563.271892][ T26] audit: type=1800 audit(1780626268.937:58): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1141" name="file0" dev="loop6" ino=13 res=0 errno=0 [ 563.372731][ T9702] loop2: detected capacity change from 0 to 512 [ 563.415453][ T9673] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1141: bg 0: block 465: padding at end of block bitmap is not set [ 563.475698][ T9705] loop7: detected capacity change from 0 to 512 [ 563.501820][ T9702] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 563.529347][ T9702] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 563.571357][ T9702] EXT4-fs (loop2): 1 truncate cleaned up [ 563.581426][ T9702] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,sysvgroups,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none. [ 563.584199][ T9673] EXT4-fs (loop6): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 563.637462][ T9673] EXT4-fs (loop6): This should not happen!! Data will be lost [ 563.637462][ T9673] [ 563.690237][ T9705] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.1149: inode has both inline data and extents flags [ 563.719099][ T9705] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.1149: couldn't read orphan inode 15 (err -117) [ 563.730272][ T9710] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 563.737439][ T9710] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 563.739430][ T26] audit: type=1800 audit(1780626269.397:59): pid=9702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1148" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 563.746433][ T9710] vhci_hcd vhci_hcd.0: Device attached [ 563.790553][ T9711] vhci_hcd: connection closed [ 563.799284][ T144] vhci_hcd: stop threads [ 563.832379][ T9702] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.1148: corrupted xattr entries [ 563.867897][ T9705] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 563.875649][ T144] vhci_hcd: release socket [ 563.919966][ T9673] EXT4-fs (loop6): Total free blocks count 0 [ 563.929629][ T144] vhci_hcd: disconnect device [ 563.963179][ T9673] EXT4-fs (loop6): Free/Dirty block details [ 564.052193][ T9673] EXT4-fs (loop6): free_blocks=0 [ 564.905437][ T9673] EXT4-fs (loop6): dirty_blocks=10 [ 564.936953][ T9673] EXT4-fs (loop6): Block reservation details [ 564.982377][ T9724] device syzkaller0 entered promiscuous mode [ 565.011733][ T9673] EXT4-fs (loop6): i_reserved_data_blocks=10 [ 565.136398][ T9734] device syzkaller0 entered promiscuous mode [ 565.786750][ T9753] loop7: detected capacity change from 0 to 512 [ 565.910306][ T9753] EXT4-fs (loop7): orphan cleanup on readonly fs [ 565.926240][ T9753] Quota error (device loop7): find_block_dqentry: Quota for id 0 referenced but not present [ 565.955316][ T9753] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 565.985176][ T9753] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.1162: Failed to acquire dquot type 1 [ 566.019225][ T9753] EXT4-fs (loop7): 1 truncate cleaned up [ 566.036218][ T9753] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 566.287870][ T9770] loop2: detected capacity change from 0 to 16 [ 566.463545][ T9773] loop9: detected capacity change from 0 to 512 [ 566.484282][ T9770] erofs: (device loop2): mounted with root inode @ nid 36. [ 566.677638][ T9773] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.9.1164: corrupted xattr block 95 [ 566.728756][ T9770] attempt to access beyond end of device [ 566.728756][ T9770] loop2: rw=524288, want=34359738368, limit=16 [ 566.752631][ T9773] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 566.755679][ T4193] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -4055 in[4096, 0] out[9000] [ 566.850215][ T9770] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 566.866532][ T9773] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.1164: bg 0: block 7: invalid block bitmap [ 566.903580][ T9773] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 566.916673][ T9773] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2925: inode #11: comm syz.9.1164: corrupted xattr block 95 [ 566.933310][ T9773] EXT4-fs warning (device loop9): ext4_evict_inode:304: xattr delete (err -117) [ 566.944089][ T9773] EXT4-fs (loop9): 1 orphan inode deleted [ 566.950090][ T9773] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 566.980621][ T9770] erofs: (device loop2): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 567.057164][ T9770] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 567.095784][ T9784] loop6: detected capacity change from 0 to 1024 [ 567.131221][ T9770] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 567.262410][ T9770] attempt to access beyond end of device [ 567.262410][ T9770] loop2: rw=524288, want=56, limit=16 [ 567.402726][ T9770] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -4055 in[4096, 0] out[8192] [ 567.458891][ T9784] hfsplus: xattr searching failed [ 567.589162][ T26] audit: type=1800 audit(1780626273.257:60): pid=9770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1154" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 567.780495][ T1246] hfsplus: bad catalog folder entry [ 567.792648][ T1246] hfsplus: bad catalog file entry [ 567.796573][ T9802] device syzkaller0 entered promiscuous mode [ 568.076441][ T9813] loop2: detected capacity change from 0 to 512 [ 568.209414][ T9813] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 569.284326][ T9832] loop9: detected capacity change from 0 to 256 [ 569.410566][ T9839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1179'. [ 569.430906][ T9832] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 569.496635][ T9832] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 569.556403][ T26] audit: type=1800 audit(1780626275.217:61): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1180" name="bus" dev="loop9" ino=1048616 res=0 errno=0 [ 569.587235][ T4265] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 569.642110][ T9845] device syzkaller0 entered promiscuous mode [ 570.145461][ T9858] netlink: 'syz.2.1187': attribute type 1 has an invalid length. [ 570.243069][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 570.272110][ T4265] usb 2-1: Using ep0 maxpacket: 8 [ 570.340913][ T9863] loop7: detected capacity change from 0 to 512 [ 570.427469][ T4265] usb 2-1: config 1 has an invalid descriptor of length 94, skipping remainder of the config [ 570.464188][ T9863] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.1188: corrupted inode contents [ 570.486269][ T4265] usb 2-1: config 1 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.602085][ T9863] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 570.610744][ T4265] usb 2-1: config 1 interface 0 has no altsetting 0 [ 570.671442][ T9863] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.1188: corrupted inode contents [ 570.699357][ T9863] EXT4-fs error (device loop7): ext4_evict_inode:332: inode #15: comm syz.7.1188: mark_inode_dirty error [ 570.721748][ T9863] EXT4-fs (loop7): 1 orphan inode deleted [ 570.786571][ T9873] input: syz1 as /devices/virtual/input/input26 [ 570.798885][ T9863] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 570.837735][ T9873] input: failed to attach handler leds to device input26, error: -6 [ 570.949010][ T4265] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 570.966522][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.008395][ T4265] usb 2-1: Product: syz [ 571.056341][ T4265] usb 2-1: Manufacturer: syz [ 571.080521][ T4265] usb 2-1: SerialNumber: syz [ 572.139995][ T4265] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 572.211310][ T4265] usb 2-1: USB disconnect, device number 2 [ 572.536320][ T9906] device syzkaller0 entered promiscuous mode [ 576.305851][ T9951] loop6: detected capacity change from 0 to 1024 [ 577.627873][ T9951] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,errors=continue,noquota,barrier,auto_da_alloc,nolazytime,errors=remount-ro,. Quota mode: none. [ 577.748070][ T9968] netlink: 'syz.2.1217': attribute type 4 has an invalid length. [ 577.757179][ T9951] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.838184][ T9973] loop9: detected capacity change from 0 to 512 [ 577.896171][ T9973] EXT4-fs (loop9): Ignoring removed orlov option [ 577.976615][ T9973] EXT4-fs (loop9): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,orlov,. Quota mode: writeback. [ 578.062839][ T9981] loop6: detected capacity change from 0 to 16 [ 578.102750][ T9973] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.179765][ T9981] erofs: (device loop6): mounted with root inode @ nid 36. [ 578.221244][ T9981] attempt to access beyond end of device [ 578.221244][ T9981] loop6: rw=524288, want=34359738368, limit=16 [ 578.252033][ T9973] EXT4-fs error (device loop9): ext4_get_verity_descriptor_location:338: inode #15: comm syz.9.1218: verity file corrupted; can't find descriptor [ 578.306768][ T9973] EXT4-fs (loop9): Remounting filesystem read-only [ 578.311226][ T4193] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -4055 in[4096, 0] out[9000] [ 578.339586][ T9973] fs-verity (loop9, inode 15): Error -117 getting verity descriptor size [ 578.351913][ T9981] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 578.362563][ T9981] erofs: (device loop6): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 578.375127][ T9981] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 578.386379][ T9981] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 578.395608][ T9981] attempt to access beyond end of device [ 578.395608][ T9981] loop6: rw=524288, want=56, limit=16 [ 578.410444][ T9981] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -4055 in[4096, 0] out[8192] [ 578.435318][ T26] audit: type=1800 audit(1780626284.097:62): pid=9981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1219" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 578.967314][ T7074] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 579.267120][ T7074] usb 8-1: Using ep0 maxpacket: 32 [ 579.387469][ T7074] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 579.443627][ T7074] usb 8-1: config 0 has no interface number 0 [ 579.545341][ T7074] usb 8-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6 [ 579.700344][ T7074] usb 8-1: config 0 interface 89 has no altsetting 0 [ 580.137069][T10013] autofs4:pid:10013:autofs_fill_super: called with bogus options [ 581.047417][ T7074] usb 8-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 581.066819][ T7074] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.107986][ T7074] usb 8-1: Product: syz [ 581.117192][ T7074] usb 8-1: Manufacturer: syz [ 581.298473][ T7074] usb 8-1: SerialNumber: syz [ 581.324938][ T7074] usb 8-1: config 0 descriptor?? [ 581.367631][ T9993] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 581.405273][ T7074] hub 8-1:0.89: bad descriptor, ignoring hub [ 581.454321][ T7074] hub: probe of 8-1:0.89 failed with error -5 [ 581.465542][T10026] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 581.480490][ T7074] option 8-1:0.89: GSM modem (1-port) converter detected [ 581.497862][ T7074] usb 8-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 581.507256][ T13] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 581.737418][ T4235] usb 8-1: USB disconnect, device number 6 [ 581.760900][ T4235] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 581.811052][ T4235] option 8-1:0.89: device disconnected [ 581.873052][ T13] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 581.912339][ T13] usb 10-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 582.127671][ T13] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 582.159478][ T13] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.187380][ T13] usb 10-1: Product: syz [ 582.202377][ T13] usb 10-1: Manufacturer: syz [ 582.272331][ T13] usb 10-1: SerialNumber: syz [ 582.523953][T10059] loop7: detected capacity change from 0 to 4096 [ 583.298795][T10059] EXT4-fs (loop7): Test dummy encryption mode enabled [ 583.317718][T10059] EXT4-fs (loop7): Ignoring removed orlov option [ 584.428951][T10059] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 584.451776][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.487204][ T13] cdc_ncm 10-1:1.0: failed to get mac address [ 584.527268][ T13] cdc_ncm 10-1:1.0: bind() failure [ 584.767184][ T13] cdc_ncm: probe of 10-1:1.1 failed with error -71 [ 584.787204][ T13] cdc_mbim: probe of 10-1:1.1 failed with error -71 [ 584.807795][ T13] usbtest: probe of 10-1:1.1 failed with error -71 [ 584.841926][ T13] usb 10-1: USB disconnect, device number 4 [ 584.915955][T10084] loop9: detected capacity change from 0 to 1024 [ 585.011113][T10089] loop2: detected capacity change from 0 to 2048 [ 585.052586][ T4300] hfsplus: b-tree write err: -5, ino 25 [ 585.061519][ T4300] hfsplus: b-tree write err: -5, ino 4 [ 585.114069][ T4300] hfsplus: b-tree write err: -5, ino 2 [ 585.115945][T10095] loop6: detected capacity change from 0 to 128 [ 585.129707][ T4300] hfsplus: b-tree write err: -5, ino 26 [ 585.145580][ T4300] hfsplus: b-tree write err: -5, ino 27 [ 585.186548][T10089] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,max_dir_size_kb=0x0000000000000004,grpjquota=,. Quota mode: writeback. [ 585.245896][T10095] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 585.377738][T10089] EXT4-fs error (device loop2): ext4_find_extent:929: inode #2: comm syz.2.1242: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 585.501987][T10089] EXT4-fs (loop2): Remounting filesystem read-only [ 585.517545][T10095] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 585.545978][T10109] EXT4-fs error (device loop2): ext4_ext_precache:608: inode #2: comm syz.2.1242: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 585.564143][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.767087][T10109] EXT4-fs (loop2): Remounting filesystem read-only [ 586.583488][T10131] loop1: detected capacity change from 0 to 512 [ 586.821810][T10138] autofs4:pid:10138:autofs_fill_super: called with bogus options [ 587.414713][T10131] EXT4-fs (loop1): Ignoring removed nobh option [ 587.457372][T10131] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 587.742726][T10131] EXT4-fs (loop1): 1 truncate cleaned up [ 587.752831][T10131] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 587.832521][ T26] audit: type=1800 audit(1780626293.497:63): pid=10131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1250" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 588.006188][T10150] loop6: detected capacity change from 0 to 1024 [ 588.112644][T10150] EXT4-fs (loop6): Ignoring removed oldalloc option [ 588.114483][T10157] loop9: detected capacity change from 0 to 1024 [ 588.137693][T10150] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 588.184620][T10150] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 588.258140][T10150] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,nomblk_io_submit,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 590.329889][T10192] autofs4:pid:10192:autofs_fill_super: called with bogus options [ 591.175313][T10201] binder: 10200:10201 ioctl c0306201 0 returned -14 [ 591.354428][T10214] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1269'. [ 591.772317][T10227] xt_CT: You must specify a L4 protocol and not use inversions on it [ 592.685522][T10230] autofs4:pid:10230:autofs_fill_super: called with bogus options [ 593.255849][T10235] loop6: detected capacity change from 0 to 1024 [ 593.292415][T10240] loop9: detected capacity change from 0 to 512 [ 593.334171][T10235] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 593.424937][T10235] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000004,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 593.453683][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.475492][T10240] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 593.557297][T10240] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 593.643759][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1275'. [ 593.687111][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1275'. [ 595.202765][ T151] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.293616][ T151] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.353167][T10277] ------------[ cut here ]------------ [ 595.371859][T10277] WARNING: CPU: 1 PID: 10277 at arch/x86/kvm/x86.c:10384 kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 595.413196][T10277] Modules linked in: [ 595.413252][ T151] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.427888][T10277] CPU: 1 PID: 10277 Comm: syz.6.1282 Not tainted syzkaller #0 [ 595.449818][T10277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 595.499522][T10277] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 595.526321][T10277] Code: e8 11 26 af 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 f6 25 af 00 e9 c8 ed ff ff e8 bc 0c 6a 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 595.553975][T10288] loop1: detected capacity change from 0 to 1024 [ 595.587266][T10277] RSP: 0018:ffffc900030cfc30 EFLAGS: 00010283 [ 595.620748][T10277] RAX: ffffffff810f3c34 RBX: ffff888064b38000 RCX: 0000000000080000 [ 595.707374][T10277] RDX: ffffc90017bb8000 RSI: 00000000000003f6 RDI: 00000000000003f7 [ 595.715397][T10277] RBP: 0000000000000000 R08: ffffffff8d8a06ef R09: 1ffffffff1b140dd [ 595.756597][T10277] R10: dffffc0000000000 R11: fffffbfff1b140de R12: ffff88807675d001 [ 595.759567][ T151] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.777084][T10277] R13: 1ffff1100c96701e R14: ffff888064b380f0 R15: ffff88807675d000 [ 595.785109][T10277] FS: 00007f4896c036c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 595.907189][T10277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 595.914092][T10277] CR2: 000055a982a55000 CR3: 0000000073b4e000 CR4: 00000000003526f0 [ 595.957640][T10277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 595.965656][T10277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 596.059729][T10277] Call Trace: [ 596.063055][T10277] [ 596.065998][T10277] ? __lock_acquire+0x7d10/0x7d10 [ 596.140262][T10277] kvm_vcpu_ioctl+0x8f7/0xc10 [ 596.145180][T10277] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 596.158883][T10277] ? bpf_lsm_file_ioctl+0x5/0x10 [ 596.163953][T10277] ? security_file_ioctl+0x7c/0xa0 [ 596.211887][T10277] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 596.218165][T10277] __se_sys_ioctl+0xfa/0x170 [ 596.222883][T10277] do_syscall_64+0x4c/0xa0 [ 596.238728][T10277] ? clear_bhb_loop+0x30/0x80 [ 596.262667][T10277] ? clear_bhb_loop+0x30/0x80 [ 596.267724][T10277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 596.274969][T10277] RIP: 0033:0x7f48989a9e59 [ 596.291250][T10277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.313946][T10277] RSP: 002b:00007f4896c03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.322708][T10277] RAX: ffffffffffffffda RBX: 00007f4898c22fa0 RCX: 00007f48989a9e59 [ 596.332277][T10277] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 596.340732][T10277] RBP: 00007f4898a3fd6f R08: 0000000000000000 R09: 0000000000000000 [ 596.349195][T10277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.357471][T10277] R13: 00007f4898c23038 R14: 00007f4898c22fa0 R15: 00007ffeb744d4e8 [ 596.365478][T10277] [ 596.371101][T10277] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 596.378391][T10277] CPU: 1 PID: 10277 Comm: syz.6.1282 Not tainted syzkaller #0 [ 596.385855][T10277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 596.395919][T10277] Call Trace: [ 596.399342][T10277] [ 596.402281][T10277] dump_stack_lvl+0x188/0x250 [ 596.407353][T10277] ? show_regs_print_info+0x20/0x20 [ 596.412696][T10277] ? load_image+0x400/0x400 [ 596.417253][T10277] panic+0x2e5/0x810 [ 596.421245][T10277] ? bpf_jit_dump+0xd0/0xd0 [ 596.425771][T10277] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 596.431590][T10277] __warn+0x248/0x2b0 [ 596.435586][T10277] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 596.441418][T10277] report_bug+0x1b7/0x2e0 [ 596.445834][T10277] handle_bug+0x3a/0x70 [ 596.450007][T10277] exc_invalid_op+0x16/0x40 [ 596.454524][T10277] asm_exc_invalid_op+0x16/0x20 [ 596.459386][T10277] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 596.465820][T10277] Code: e8 11 26 af 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 f6 25 af 00 e9 c8 ed ff ff e8 bc 0c 6a 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 596.485435][T10277] RSP: 0018:ffffc900030cfc30 EFLAGS: 00010283 [ 596.491519][T10277] RAX: ffffffff810f3c34 RBX: ffff888064b38000 RCX: 0000000000080000 [ 596.499501][T10277] RDX: ffffc90017bb8000 RSI: 00000000000003f6 RDI: 00000000000003f7 [ 596.507483][T10277] RBP: 0000000000000000 R08: ffffffff8d8a06ef R09: 1ffffffff1b140dd [ 596.515465][T10277] R10: dffffc0000000000 R11: fffffbfff1b140de R12: ffff88807675d001 [ 596.523444][T10277] R13: 1ffff1100c96701e R14: ffff888064b380f0 R15: ffff88807675d000 [ 596.531430][T10277] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 596.537260][T10277] ? __lock_acquire+0x7d10/0x7d10 [ 596.542318][T10277] kvm_vcpu_ioctl+0x8f7/0xc10 [ 596.547011][T10277] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 596.552678][T10277] ? bpf_lsm_file_ioctl+0x5/0x10 [ 596.557627][T10277] ? security_file_ioctl+0x7c/0xa0 [ 596.558931][T10293] chnl_net:caif_netlink_parms(): no params data found [ 596.562755][T10277] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 596.575139][T10277] __se_sys_ioctl+0xfa/0x170 [ 596.579743][T10277] do_syscall_64+0x4c/0xa0 [ 596.584170][T10277] ? clear_bhb_loop+0x30/0x80 [ 596.589029][T10277] ? clear_bhb_loop+0x30/0x80 [ 596.593722][T10277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 596.599631][T10277] RIP: 0033:0x7f48989a9e59 [ 596.604073][T10277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.623698][T10277] RSP: 002b:00007f4896c03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.632127][T10277] RAX: ffffffffffffffda RBX: 00007f4898c22fa0 RCX: 00007f48989a9e59 [ 596.640112][T10277] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 596.648531][T10277] RBP: 00007f4898a3fd6f R08: 0000000000000000 R09: 0000000000000000 [ 596.656519][T10277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.664502][T10277] R13: 00007f4898c23038 R14: 00007f4898c22fa0 R15: 00007ffeb744d4e8 [ 596.672501][T10277] [ 596.675797][T10277] Kernel Offset: disabled [ 596.684983][T10277] Rebooting in 86400 seconds..