last executing test programs: 22m26.364851058s ago: executing program 32 (id=2143): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 22m11.334825922s ago: executing program 33 (id=2190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r0) 21m56.398731085s ago: executing program 3 (id=2228): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xa4ca, 0x183801) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000980)={0x80000000, 0x0, "9c6eae52a120dc717a60eeb23b0d4b4ba9f002d5c71dbf68af0fe4482764ad2c", 0x100000000, 0x5, 0x3, 0x7ff, 0x0, 0x8, 0x3, 0xfffffe00, [0x8, 0x100, 0x0, 0x2]}) 21m55.683581716s ago: executing program 34 (id=2228): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xa4ca, 0x183801) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000980)={0x80000000, 0x0, "9c6eae52a120dc717a60eeb23b0d4b4ba9f002d5c71dbf68af0fe4482764ad2c", 0x100000000, 0x5, 0x3, 0x7ff, 0x0, 0x8, 0x3, 0xfffffe00, [0x8, 0x100, 0x0, 0x2]}) 21m53.340138179s ago: executing program 5 (id=2235): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) read(r2, &(0x7f0000001400)=""/4076, 0xfffffeea) 21m52.894592076s ago: executing program 5 (id=2236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x81, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r4, 0xc3d33000) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21m52.222121585s ago: executing program 35 (id=2236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x81, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r4, 0xc3d33000) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21m40.539266902s ago: executing program 36 (id=2257): unshare(0x24020400) prctl$PR_SET_NAME(0x4, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x1, r0, 0x6000) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x22400, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r4, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f00000002c0)=0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000300)={0x40000001}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)={0x1c, 0x5e, 0x1, 0x0, 0x25dfdbfd, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r6}]}]}, 0x1c}], 0x1}, 0x0) r7 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040040}, 0x40004) write$binfmt_misc(r7, &(0x7f0000000280), 0xff9d) r9 = timerfd_create(0x1, 0x0) timerfd_settime(r9, 0x3, 0x0, 0x0) 21m27.397351289s ago: executing program 37 (id=2277): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x2d0, 0x7c0, 0x1, 0x3, 0xd59f80, 0x8, 0x5, 0xb, 0x9, 0xd002, 0x80, 0xe72, 0x0, 0x9, 0x35, 0x1, {0x4, 0x8001}, 0x3, 0x5}}) 21m23.532585684s ago: executing program 38 (id=2290): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) fanotify_init(0x200, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000440)={'wg1\x00'}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 21m3.211819464s ago: executing program 39 (id=2323): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="33aaf14f564b1bf220cb1137d54b407511ce09dfd9657fe3", 0x18, 0x40, &(0x7f0000000200)={0x11, 0x2, r2, 0x1, 0x8, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x13}}}, 0x24}}, 0x0) 20m15.54294674s ago: executing program 40 (id=2458): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 20m15.091611386s ago: executing program 8 (id=2462): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, 0x0) read(r0, 0x0, 0x0) 20m14.732763831s ago: executing program 8 (id=2463): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000400)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000440)="f1", 0x1}], 0x1}}], 0x1, 0xc810) 20m14.549733654s ago: executing program 8 (id=2464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x894, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfffc}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x30, 0x1, {0xe, 0x7, 0x4, 0xc, 0x9, {0xd, 0x2, 0x4, 0x4, 0x7, 0x401}, {0x4, 0x1, 0x5, 0x10, 0xfff7, 0x4b2}, 0x6, 0x14ff, 0x3ff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x38, 0x1, 0x1, 0x8, 0x7f, 0x6, 0x3, 0x6, 0x10000, 0x86, 0x9, 0x6, 0x5, 0x9, 0x5f, 0x0, 0x0, 0x13f, 0xfffffffe, 0x0, 0xd31, 0xf54, 0x9, 0x4, 0x4, 0x6, 0x9, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0x8, 0x0, 0xfffffffe, 0x5, 0x5dbd0fd8, 0x8, 0x1887, 0x2, 0x95f, 0x7, 0x6, 0xa, 0x7f, 0xfffffffe, 0x8, 0x2, 0x6, 0x4, 0x6, 0x402f, 0xd, 0x5, 0x6f9d, 0x0, 0x800, 0x3ff, 0x8, 0xa, 0x9, 0x4, 0xd, 0x3, 0xb8f, 0x6, 0x0, 0xffffffff, 0x8000, 0xffffffff, 0x8, 0xfffffffc, 0xee, 0x4, 0x9, 0x2, 0x54eef174, 0xc, 0x9, 0x5, 0xe2, 0x20004, 0x1, 0xffff, 0x5, 0x5, 0x7, 0x5, 0x7, 0x4, 0x4, 0x7, 0x100, 0x8, 0x2, 0x9, 0x0, 0x0, 0xe32, 0x6, 0x8, 0x6, 0x66, 0x7, 0x7, 0x8, 0x5b, 0x7625, 0x51, 0x6, 0xfffffffe, 0x0, 0xa4d, 0x2, 0x10001, 0x7, 0x8, 0x3, 0x8, 0x3, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x400000, 0xc55b, 0x8000, 0xf943, 0x4, 0x3000000, 0x2, 0x10000, 0xd, 0xffffffff, 0x9, 0xd3, 0xfffffffb, 0x4, 0x9, 0x401, 0x82baa23, 0xd, 0x0, 0x6, 0x21a, 0xe, 0x1, 0x1430, 0x8, 0x4, 0x7, 0xe, 0x7dab, 0x4, 0x5, 0x4, 0x3, 0xfffffffe, 0x7, 0x6, 0x8ef6, 0x7239, 0x80000001, 0x0, 0xd41, 0x6, 0x2, 0x4, 0x200, 0x8, 0x5, 0xc14, 0x7324, 0x4, 0x50f6, 0x5, 0x4, 0x3, 0x2, 0x7, 0x4, 0x6, 0x5, 0x3, 0x7767, 0x8, 0xe0ba, 0x4f, 0x3, 0x4, 0x7, 0x7fffffff, 0x3, 0x3, 0x5, 0x8, 0x4, 0x80, 0x401, 0x7, 0x1, 0x0, 0x8, 0x7c4, 0x3, 0x6, 0x6, 0xe8, 0x0, 0x6, 0x6, 0x3, 0x8a4, 0x1, 0x9, 0x9, 0x9, 0x200, 0x7, 0xd235, 0x9, 0x7fffffff, 0xf7d, 0x8001, 0x2, 0x7fff, 0x9f7c, 0x7, 0x4, 0xf, 0x1, 0x2, 0x6, 0x400, 0x5, 0x80, 0x400, 0x5, 0xc, 0xff, 0xffff7002, 0x63c, 0x9, 0x1ff, 0xfff, 0x8, 0x8c, 0x40, 0x8, 0xed6, 0xf6, 0x0, 0x3, 0x9, 0x10, 0x9, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x8, 0x8000, 0x8, 0x2, 0x9, 0x5, 0xfff, 0x3, 0x101, 0xbf7, 0x8, 0xff, 0x6, 0x113, 0xffff, 0x1, 0x8, 0x7fffffff, 0x6, 0x9, 0x33, 0x5, 0x2f7, 0x100, 0x21, 0x4, 0x7, 0xff, 0x6, 0xfffffffe, 0x7, 0x8, 0x1, 0x8, 0xf33c, 0x3, 0x1, 0x80000000, 0x62e, 0x3, 0xdb2, 0x0, 0xe00, 0x4, 0x2, 0x3, 0x2, 0xfffffff6, 0x5, 0x3, 0x7, 0x8, 0x1, 0x7f, 0x8, 0x6, 0x4, 0x3, 0x0, 0x803, 0x1, 0x5, 0x0, 0x8000, 0xfffffffa, 0xb7, 0xc8b6f5a2, 0x6, 0x2f, 0x7ff, 0x9, 0x8, 0x6, 0x0, 0x8, 0x9, 0x0, 0x5, 0x8b34, 0x2, 0x7e, 0x4, 0x4, 0xfeffffff, 0x1, 0xa, 0xfffffffb, 0x3, 0xffffffff, 0x0, 0x4, 0xd6, 0x7, 0x4, 0x3, 0x8, 0x9, 0x8, 0x2de0, 0x5191, 0x6, 0x401, 0x7, 0x9, 0x7, 0x3, 0x6, 0x1, 0xfffffffb, 0xb839, 0xfffffffa, 0x4, 0x768, 0x7, 0x7f, 0x6, 0x7, 0x4, 0x8b, 0x4, 0x0, 0x5, 0xf0, 0x42490, 0xd, 0x3, 0x5c, 0x80, 0x2, 0x800, 0x8, 0x6, 0xff, 0xffff0000, 0x3, 0x10000, 0x80000001, 0x5, 0xffffffff, 0x4be24694, 0x2, 0x2, 0x100, 0x5, 0x1, 0x5, 0x4, 0xffffff95, 0x5, 0x0, 0xc, 0x6, 0x1000, 0xa, 0x7, 0x4, 0x340, 0x0, 0x0, 0x7, 0x101, 0x2, 0x7ce2352, 0x7fffffff, 0x5e, 0x8e5b, 0x3, 0x8, 0x9, 0x1, 0x80000000, 0x7, 0x301, 0x91, 0x3, 0x80000001, 0x9, 0x1, 0x3e79, 0xffffffff, 0x8, 0x525, 0x7, 0x6, 0x2470a614, 0xe, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4, 0x1, 0x1, 0xfffffc1f, 0x6, 0x2, 0x1, 0x9, 0x7fff, 0xffffffff, 0x4, 0xffff2b7d, 0x4, 0xcdff, 0x9, 0x0, 0x49, 0x6, 0x0, 0x5, 0x9, 0x7, 0x8, 0x7, 0xea, 0x7, 0x7, 0x2, 0x5, 0xff, 0x6, 0xffff, 0x4cd, 0x7, 0x3, 0x3, 0x10001, 0x0, 0x6, 0x7, 0xffffffff, 0xe000000, 0x1, 0x4, 0x7, 0x8, 0xb, 0x7, 0x0, 0xcb65, 0x6, 0xe, 0x240000, 0x9, 0x8, 0x8, 0xfffffff8, 0x9, 0xf, 0x8, 0x5, 0x9, 0x100]}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x10}}]}, 0x894}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) 20m14.250370569s ago: executing program 8 (id=2466): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 20m13.329987802s ago: executing program 8 (id=2468): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0xfffffffc, 0x5, 0x1, 0x0, 0xf9}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 20m12.84254106s ago: executing program 41 (id=2470): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, 0x0) read(r0, 0x0, 0x0) 20m10.532333014s ago: executing program 8 (id=2476): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000340)=ANY=[@ANYBLOB="7070114ecf1fdb27e3d52440b3f76294dec3347fa6a92ab70c1a785634182c3af26a2684144d4fb016cc7006b2947a11aed2c97c5c2cca69e38dd14513fbe5a8d8"]) 20m10.014480331s ago: executing program 42 (id=2477): socket$rds(0x15, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x3, 0x3, {0xa, 0x4e24, 0xb4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10001}}}, 0x32) syz_emit_ethernet(0x9a, &(0x7f0000000700)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x2b8, 0x0, 0x28c, 0x6000000, 0x3b8, 0x3a8, 0x3a8, 0x3b8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x224, 0x28c, 0x0, {0xd2030000}, [@common=@frag={{0x30}, {[], 0x7f}}, @common=@inet=@hashlimit2={{0x150}, {'wg1\x00', {0x0, 0x1, 0x7a, 0x200, 0x3, 0x8, 0x1, 0xa0, 0x40}, {0x6}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}, {0x66aa4bd5, 0x0, 0x0, [0x1, 0x0, 0xc, 0xad23, 0x2, 0x3, 0x7, 0x1, 0x4e02, 0x6, 0x8000, 0xa3c, 0x8000, 0xfffe, 0x2e], 0xb}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x9, 0xa97d, 0x0, 0x40, 0x9, 0x3ff, 0xffffffc0]}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x503) 20m10.004190781s ago: executing program 43 (id=2476): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000340)=ANY=[@ANYBLOB="7070114ecf1fdb27e3d52440b3f76294dec3347fa6a92ab70c1a785634182c3af26a2684144d4fb016cc7006b2947a11aed2c97c5c2cca69e38dd14513fbe5a8d8"]) 20m0.097887139s ago: executing program 3 (id=2459): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r0 = socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$pptp(0x18, 0x1, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd701"], 0x0) r3 = io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x320}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r6 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) ftruncate(r6, 0xffff) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ipv6={@mcast2, @mcast2, [0xffffffff, 0xffffff00, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'veth0_virt_wifi\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x28}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x9, 0xf6, {0x938f}}}}, {{@uncond, 0x0, 0x100, 0x160, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x39], 0x9, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e20, 0x4e21, 0x1, 0xa1a9, 0x7, 0x7, 0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) r9 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r9, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f00000001c0)={'ip6gre0\x00', 0x1}) 19m56.779356278s ago: executing program 3 (id=2480): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0xc810) 19m56.63470961s ago: executing program 3 (id=2481): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 19m55.781789953s ago: executing program 3 (id=2482): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0xfffffffc, 0x5, 0x1, 0x0, 0xf9}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 19m53.109818592s ago: executing program 3 (id=2483): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 19m52.333117284s ago: executing program 44 (id=2483): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 19m50.174995756s ago: executing program 5 (id=2472): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r0 = socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$pptp(0x18, 0x1, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) r3 = io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x320}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r6 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ipv6={@mcast2, @mcast2, [0xffffffff, 0xffffff00, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'veth0_virt_wifi\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x28}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x9, 0xf6, {0x938f}}}}, {{@uncond, 0x0, 0x100, 0x160, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x39], 0x9, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e20, 0x4e21, 0x1, 0xa1a9, 0x7, 0x7, 0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) r9 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r9, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f00000001c0)={'ip6gre0\x00', 0x1}) 19m46.49075348s ago: executing program 5 (id=2487): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 19m45.505831905s ago: executing program 5 (id=2492): socket$nl_generic(0x10, 0x3, 0x10) get_mempolicy(0x0, &(0x7f0000000440), 0x4000, &(0x7f000015c000/0x2000)=nil, 0x4) socket$igmp(0x2, 0x3, 0x2) socket(0xd8a982b17b1ba894, 0xb3d641165cf4b2ba, 0x1ef) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200f, 0xfffffffffffffffe, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000000ffffffff390000000c009900010000005600000018000d80140000800500070000000000050006000237c03c"], 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x0) r4 = request_key(&(0x7f0000001240)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000001280)='/dev/vsock\x00/(zu\xaa\xa9\x9c\x11\xcb!i\x80\xeds/\xaa#\xd8^\xf2B\xf6\x81\x02\xae\xed\xcc\xd0\x80\x8eCA\xdd`\xcco$G\xf6f\xa7\xe2\xc2e\xf0&\x81\x9f)\'\x87Ro|\x0e,\x85\xe9\xa5\x93\xd7\xbb\x0fe?G\xeb\xd6\x0e/,\xec\xb1\xaf\xaeIZAk\xb3\xfcm\x12\xcb\x97,\xd2\xda\x19~\xbaAEV\xde\x15\x02\x0fA\xe3p\xe9\x96\xc3\x1f\x8e\xa7\xadi\x00\xf7\x05\xb4.f\b\x9f\xe1\f\x7f\x16!\xda\xfd\xb4\xbf\x88\x9dl\xda\xe8\xb1=\xceS\x85\xedVq2\"\x89\xd3\x8f\xbb\x1dP\xf2\x8f\xfb\xdfz2\x16\"\xfa\x1aX\x13\xb9\x94\x99\xa1T#`\xff61b\xbew\x17\xb3\x95z\xaey\xe9?n\xc3\xf7\xde\xbf\xb8\\D\xf4\xc8\xc6e\xc9\xbb\x1a>P\xf2\x10\xbf\x01\xc4\xca\xe2\xe3\x8a\xca!\x1e2\x03N\xe0\xb9OD\xd6\xbf\x02_|i/\x8a\x90\x155\x8e\xd9\xf4\x1e\aS-\x14\v\x05\xee\x83l.D\x03h\xbc@\xe0\xae\xa1zK\xc8\xd0\xbb\x89\xf1my*\x12\xb5\xbbE\x14\xd3', 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b75c7f40471501026411010203010902120001000000000904000000a2cdd2"], 0x0) keyctl$search(0xa, r4, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, r4) getxattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0}, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x13a}}, 0x3}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x8884) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet_smc(0x2b, 0x1, 0x0) r8 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source\xa8n\x91\x9c\xd1\xc0\x02n\xd6\xecB\xc7\xae\xe4\xc3\x80\xb2_\xb7|\xb2H=)', &(0x7f00000005c0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$pptp(0x18, 0x1, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) r3 = io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x320}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r6 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ipv6={@mcast2, @mcast2, [0xffffffff, 0xffffff00, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'veth0_virt_wifi\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x28}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x9, 0xf6, {0x938f}}}}, {{@uncond, 0x0, 0x100, 0x160, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x39], 0x9, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e20, 0x4e21, 0x1, 0xa1a9, 0x7, 0x7, 0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) r9 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r9, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f00000001c0)={'ip6gre0\x00', 0x1}) 19m44.560499439s ago: executing program 45 (id=2493): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r0 = socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$pptp(0x18, 0x1, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) r3 = io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x320}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r6 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ipv6={@mcast2, @mcast2, [0xffffffff, 0xffffff00, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'veth0_virt_wifi\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x28}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x9, 0xf6, {0x938f}}}}, {{@uncond, 0x0, 0x100, 0x160, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x39], 0x9, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e20, 0x4e21, 0x1, 0xa1a9, 0x7, 0x7, 0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) r9 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r9, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f00000001c0)={'ip6gre0\x00', 0x1}) 19m40.45924914s ago: executing program 0 (id=2498): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 19m40.160433814s ago: executing program 0 (id=2500): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000001b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="fd", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x2, 0x4000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2, 0x6}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) close_range(r0, r0, 0x0) r3 = openat$vimc2(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x2b0, 0x9403, 0x0, 0x2b0, 0x2c0, 0x3c0, 0x3d8, 0x3d8, 0x3c0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, [0x0, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0x0, 0xffffffff], 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {}, 0x2f, 0x0, 0x4, 0x14fb472eb2e58261}, 0x0, 0x28c, 0x2b0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x5fc, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xd}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0x0, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x52e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)={0x18, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0185648, &(0x7f0000000280)={0x9b0000, 0x8000, 0x7, 0xffffffffffffffff, 0x0, 0x0}) 19m39.691299521s ago: executing program 0 (id=2503): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) fsopen(&(0x7f0000000100)='udf\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000900000030000380140002007369"], 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19m39.244028858s ago: executing program 0 (id=2506): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 19m38.212973353s ago: executing program 0 (id=2507): get_mempolicy(0x0, &(0x7f0000000440), 0x4000, &(0x7f000015c000/0x2000)=nil, 0x4) 19m37.786607909s ago: executing program 0 (id=2508): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000ac0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="d09ca1b9050ca77fcdaa0148ea892f56", 0x10}], 0x1, 0x0, 0x0, 0x4001}], 0x1, 0x8000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000180)=""/46, 0x2e}], 0x2}, 0x0) 19m37.276906657s ago: executing program 46 (id=2508): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000ac0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="d09ca1b9050ca77fcdaa0148ea892f56", 0x10}], 0x1, 0x0, 0x0, 0x4001}], 0x1, 0x8000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000180)=""/46, 0x2e}], 0x2}, 0x0) 15m6.887855855s ago: executing program 6 (id=3419): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) write$cgroup_pid(r1, 0x0, 0x0) 15m4.874421455s ago: executing program 6 (id=3423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000200000000000000800000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4f549b, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x32, 0x0, 0x800000]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x1a, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x4004804) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000280)={&(0x7f0000000600)=[{0x7, 0x211, 0x0, 0x0}, {0x8, 0x4021, 0x0, 0x0}], 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r9, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) readv(r8, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000600)=@framed={{}, [@ldst={0x7, 0x3, 0x4, 0x0, 0x3, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_control_io$hid(r7, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "00001000"}]}}, 0x0}, 0x0) 15m1.350493677s ago: executing program 6 (id=3436): openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd701"], 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x7, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x5c9f, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x8, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x0, 0x6, 0xf667, 0xfffffffc, 0x4007, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0x4704, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x44e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x82, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a000000080000", @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006f"], 0x230}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r6, 0x0, 0x0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f00000001c0)={0x0}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0xb001, 0x4, 0x3b0, 0x0, 0x10c, 0x1f0, 0x2d0, 0x2d0, 0x2d0, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x1}}}, {{@uncond, 0xbc, 0xe4, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3fc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x1b, 0x0, 0x0) 14m57.134537579s ago: executing program 6 (id=3451): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$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") bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x8800, 0x0) chdir(&(0x7f0000000000)='./file0\x00') semctl$IPC_RMID(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) 14m56.40626054s ago: executing program 6 (id=3454): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="dccb07ef399fa77311413e3cc9adf84d8610a42dae9b113a24288a1a7f834417b381ced900f61b5f7a9cd30a51dc432a6e27e25be626f6c476ba1378fbed11fd28d3409cebcf4ff5cabb", 0x4a}, {&(0x7f0000000040)="f583fbef", 0x4}, {&(0x7f0000000380)="edd9041e7dd2ad65c24790ccddba4a8069e9", 0x12}, {&(0x7f0000000540)="d7fa398b3dc99f2d124aa94ee13c8082b04a7b3681e16e463011d356749d8cf74f9de1d02e5d697d221b21a4480963712c0f18540dc669976f5f9c5232267566319a5b6f614856d9957cce73f014b6e7a8d494c3777a89309e7e39e671027933aa8a497756474c8237ab001b04450f18914340304e8881ab41b0873b73206c8e7a3e601679220c7300a4fb60657bca8594e9cbb95fd25815b1723f27769fdac42328a6c56c0ff88b02208f643f3ca8bf06cd4649558e97d2dae85dd7e40770c8c478b4eb255d957400a1d7d532b283ef39a8881b988d57d7319e73a94dee4b923ae05550e027a3c5364b3078f33d6e0ade4a4bf03e208bf0dabbf500239e6fa6e665d5e41bfd3bca076f9c9729900f3f38480413e0c1e9ee9579669c22429c0f2785e3874227fa481cec9c4cccd608884839abcbff485a6a57afbe31fac54d5d4e5be94a58fbb64fc3253861b9ffc7380eebd04126f6a11fb0144cd5b1064e80a64158c90d9665b28cfd334d12e7bd7982dcb90a595afe338f2e12f0900d5740a08b8999e4547f9c8255fab4a8ecfe5325de74be055fe019c6f7c5daa65cc58213aa1e30eb1e9461da93f565f0cb963d0addadfa1a9975b361e32784ee43b7e91438501c3c69391a99b46fbf774380e5e29df42e536f9cc95315cfdd303708e9c1fd7d8a13a78edf6a9b0cabbc7cbe2ceba0da6da22a046ecc2584d01f664fb0491b14f9e98ca79c95076991115ec2983001e5582833b0bc99e06f93b2880bac134299e1570b2f10d0f1608c92e6b956229f81d198404fce89b9d86c9bc1a1c3661e3ea14efa37e1ad699c973619421f0ab31d30da24d8719a438e21e6c0409f3348770e0ac624b4695a622e123189ffcb2177daaa7cdd96c45f54a7ea9ede0d1664ade868c2d8214eb0d25afaf47e8450b8e0965f4deceefb1fa82cda1e522fee804dd6065c397696946ab5ef5c446d57a86e95ab744e32e0137a66686afe41c853540342671bad5f61ff2cc9fe5b492d55689ea4bd157acb21efe3e0e3d2fa2442b46d5060e29d6d4f753559fabc9cd28db6dc5c6cbc4052a9c3834b9740e1559166477d9bb6078f5c8ac30dc825557d8f646a88805f8185f2df4e9981278710e4ed0bb5bda7b15e70b5a246367744559b5d316eafe260af449aad7bdd78f43778ef61f83c058519b931cba90acb800eb20f7dc2daeb129da369c035a5bf2985e097392e16eedfe037dbb8b2f50078e8375b58cff4b5ba2dd0f68570ae41b084afa9ba01a4c5f98261ac207ef3262747c22fac31c22c2fd10de2cd1f4751ccdf39033892169db0143480612ca257611abec274cda87be98ae26a1cbb3dddebafaf717c2c1127da2f13608c4e25e3811e825eae5e419aabdc71519039213ffbd4b7ee4df3245a97d0c5d598d0df37f7d89900b9cd3179a89432291b921e7dd047f0bda1faf0cd97d4470fb44ee2d54bbe028c80e0f24f18ebb6e17807c5b23a8ecdaca1d3c19bf936f5b25692196709240413407a5286fbc62e4de6d94e1f3841d22670d9fd8f4cfcbbf05729390a639412e6928cfdabd2ab9e8a5132f8ba159b22abf8096977801a07347b1ff83ef02a6b38bf6dded287c04fcb8d40bda213bb8119b363fe0585ab8d5d886b2a05634f058041fa50734eb35ace47e11fb68c4586637ea769a4da996da419e762665c80fd6ade5c6b8738f3a35666226c418aa991cccd3af15ce543ed107c4e443da90d26891bf909a7eb3a83bb4b2b2c33f9e5cb6bc7713763e95caecc4c84b8a68fb4b44e4e9bdf1355b678f2afb6230e25772670071606a70f3dffe81878d68cd578b68668154823aeaa4eae771e4c249d9f1306cfe7fca0ae79eae2ab76620ee08ff76b505fe83b661a26d8923a64148b4cd97263a15deff44a3c64a7e196ebf1c5f8af83dd963de1f6c03f3bee6a1b5ff5fa59632e43043a2f3562971a584e37a4ff8d337969ebfc72f955cefd467f4ed51776ed7d148f31f876f211c4b802f8af18b38762465fb4ca463bd866e41e3ddc3f67797d00d68d08e5267752ad9fc43f55032558937b417d022ed9bfa78bec3c183798f44b4b676fcf5b085c22e529c205e99bc1efab8ab63972802a8ff4c158b6e08ac0be03294de6a4393e51547bbb14789c899e6634f63f7cec93d68585c8b7ede064388f278a37da1f510e8428e33a9a3db092f031f1a71ba35656c13b84e932b3793d2353c20bdbfc9d01ce421ffdc2651082a77c20cb7a1cccb55ee3977e445f75b9800c2cefbfa872715bed244d9240951a0583267458f6c55e6632e28399a974ab2d112906748d1dc3b5d962817b39567d5bf0f110ad695ccc92dd0550a160f5146222f12450e8e76450a453e858f13f0310565f465ccc5fe3f144cad6898c85f1935c70bb9d65117148b24fc3d2f47629d3812b923658700cc23be7ea4e0d8fcf139548b27d4dd2fd97b65775d7a477c7d20bb73a5d9bc5ff36a0abdbb84c9ac675571813c2ddaa30f344c7d8f7dbdb330cb7841b2e8559f4de99011f9320052d78ffa19a58634efa3206833395494bec7183cae09efc8c93982dbab007d52f0d78331f01236ae894ffce620e052bbd20295dd77d560729d0fbb30e8bc5339c736b042bed17ffd572441297e5cde03e880f37841f9e76cc8096d3139454a9463c2943820e8dd1cc5233dfe968ecaff29759d760d87d92da416055ed68506336f72cd5dad3bb24cb6aad22d571a10049317a7c48cab78a4cfcef9c7dc64cf94e2ef85a93c4ed3d624ad5b63c79596623c2d3891daff68bcf2cd13dada92701377b6302b68d2950b0bf44673b741ec7767bcc868f9e807a93514b6ccecd6254b907f8ca81aa4b2154c7f7e5b95f631b93fa7b409d54eb29c2c96ecf842e5175dbb1c1159caa938033f9b91def0445ebb3816ff602cf74170adae66f1ebacb8a949654e05226e8fb1f71bd5b32a34cc9c5db972e6d91824ef9dd5558844399c5eac04a76447bb795587d4bb7c887274ed203a86143a7daabd55af80dca85c63119cdb0996f5f3ef08450a97a0daed2043b376e1beb9eb2e4278e8eb8c81b1c65ed16eb1be23cd51b94a8848053afce61e5de734da055f088da294d44a119d017b9ca3da76b077329fba8e914e91006e11454b21fcfecbab39cc97db73ad623cd1250d4fd90923d144e850633bf28e37d7f926b541364f7851d439c49b8dcd513dcd89dbdabdf8668dfe4f69f5526bfa258c95e5810de76ab05450bc1bb43ece80d2657ebfb3ab9fd9b0a7bbe935623c89eae33eda7d203048cf635a0083d11d5bbc717b8a8801d4614a1903de4f65f435167a20c1bafc1aefa55126937ebf0e7903b32b041306f2d7fec211d317c1e74f9f678ce927201118a37174dd65ba72d7c4a034afc9b0a29a507607c4160cf111e8a517b790d5cca841c7e632b15840111b36b8d1d0e089a78275df0c7ce47d9861674c2993943ffec8f5c930b18e36bd551e29f3bb854c5fb1f3ce52a6efa0e9fc802c2c60a7e3faa927bfda83eb94d1e3e98342d5cbe8705d0a86620268616656b2734d60d251756afdaf39c108c1974ab674628cf88c2f0ca6671bb59dc1f445754e687636ad365ce817365a2200ed15124f11cfd1bd8f5dafc483b14aa0fabe0b0759bf2c5882a6c472867ba575a4402b1ea7bd123b4c3d15d701526048750874ea65629fbb198600e5e0b474b184a4a3123b667d11676f23accc89b0683e20b7bcf042d5a31f6edbca54c83f2f926ba0c147925f3340a435506511c475aafeb41051a70b215038b777f370cea63a8726aa3a162087b3c4178b00777de4adca9e1d81fa05d0177ce80e2336093319ad18cb83d50ce9c7d3846251a3366b56e7db3254615632920f42c076af0a013dc5061712104fb028f530d89ac7b43f4848c5983d3e040e616938971813d8c732c50870a70ab29b9c0da302da36a7171f7e8f9089b195863ec3e0f078b8b7096e981fec0eefb8d667c4ee36b846b8435628370f3ded7b1b8a17292361e5fe2bc5f7fde4007d806140d309f06514a38d7edaf56c54e725741f8601a154cea3ae15fee45f986dd92da958eff6485cae9a4e1a8a342012c12d65b82b3f60fb58413a93af67709bd2af53b72ac4ffc6f4b90a85aa7b3e77d2a802a3fe45e4362f20322c6a3ea8537b7c7b694c95b7596503ccb4a7e8653631103d14faaaf9bf85e6e850f5a23098fcddcee99ebb15f52d58d28129f1f2b3e6158d394851d80c161e3ff71c8afc1513e083181706d683902be9d2eccdb7f7dcf7f1f0db7389f317d55a8ef1a7791db7bb90d7384503fc9161289a0122043b3ab15481d6d3b4586d547c3da8834c0efde538229233975869a105eec43c4ca6c3a37f8f74c8ba93db8a273fab89e509c5eb6884ad8b35ca475472887b4b44e2cef5cc4e8243b16dd64ac8255f57f95d734470c5ed2d56f290a7e38b4d5cd5df0b1f7a916026506a6d8baf5059abf401d0507b057caef0bbac42ff459af9169cf465561839a130a54ca8f925a4422840a31ed5187b0f98548ea438b706dfa1381e84f27c5f3d4a2c0ae9a86fd6d35ed247988f50c1c734aa27b417901de5e5063c1c4c9aa3f3834514cfc48342619451e736c9c299bd63ac81c10ce4177e22074664294a800a87a539daa3107d26d3e88f90cc197bebeaf7d7b5aff89c73917eeddf3878e56b8b1d3fbb1e316585071114f284d8f42886fac3b44c47600ce4a2419ff48ae308e2916997661c05d65c9c56ec98b0681f807ed323d2ecd7e8b7e9182744a12bb5af0e817a198af91246077e5b037f415c7a6884f5c957c5e9198ed3a21861b655e61dfbff3003674c3c8ea572d468c8186d18adc3b3e65f97896f1d5a77a428de94eee7624afd29ab6696fe35486008aec5e422bb83fe9209394dc4c294e6c9dfde4bf294a31d069f4d8a65b7d", 0xdac}, {&(0x7f0000000280)="76ee", 0x2}], 0x5) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 14m55.822422009s ago: executing program 6 (id=3459): openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd701"], 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x7, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x5c9f, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x8, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x0, 0x6, 0xf667, 0xfffffffc, 0x4007, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0x4704, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x44e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x82, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a000000080000", @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006f"], 0x230}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r6, 0x0, 0x0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f00000001c0)={0x0}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0xb001, 0x4, 0x3b0, 0x0, 0x10c, 0x1f0, 0x2d0, 0x2d0, 0x2d0, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x1}}}, {{@uncond, 0xbc, 0xe4, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3fc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x1b, 0x0, 0x0) 14m55.393177465s ago: executing program 47 (id=3459): openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd701"], 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x7, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x5c9f, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x8, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x0, 0x6, 0xf667, 0xfffffffc, 0x4007, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0x4704, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x44e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x82, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a000000080000", @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006f"], 0x230}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r6, 0x0, 0x0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f00000001c0)={0x0}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0xb001, 0x4, 0x3b0, 0x0, 0x10c, 0x1f0, 0x2d0, 0x2d0, 0x2d0, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x1}}}, {{@uncond, 0xbc, 0xe4, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3fc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x1b, 0x0, 0x0) 6m38.391283052s ago: executing program 2 (id=5089): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2], 0x8) open$dir(0x0, 0x149800, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000002c80)={[{0x0, 0xc, 0x0, 0x3, 0x1, 0x4, 0x3f, 0xe9, 0x7, 0x5, 0x6, 0x4, 0xfffffffffffffffb}, {0xb, 0x7, 0x9, 0x8a, 0x4, 0x2, 0x1, 0x3, 0xda, 0xc2, 0x5, 0xfa, 0x5}, {0xfff, 0x6, 0x7, 0x3, 0xfe, 0x2, 0x9, 0x4, 0xba, 0x10, 0x8, 0x4, 0x9}]}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'wg2\x00', {0x2, 0x4e21, @private=0xa010100}}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f0000000080)='\x01') r3 = msgget$private(0x0, 0x1) msgrcv(r3, &(0x7f0000000180)={0x0, ""/246}, 0xfe, 0x3, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x0, 0x0, 0x0) 6m37.097493221s ago: executing program 2 (id=5094): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) 6m36.186481625s ago: executing program 2 (id=5096): close(0x3) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f00000002c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d02000000000000000000000300000000"], 0x0, 0x3e, 0x0, 0x0, 0x1, 0x0, @void, @value}, 0x28) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000200), &(0x7f0000001480)='./file1\x00', 0x220004c, &(0x7f0000000280)=ANY=[], 0x11, 0x6b2, &(0x7f0000000ac0)="$eJzs3c1vHGcdB/DvrNcvm0qu26YvSJVqGqkgIpo4VgrhkoAQClKFqnDgbBGnsbJJg+OitAfiAhJXDvwB5RAucAIhJCSkSOUMt4qbxakSEpee0h4YNLOz9trdtTdJk3Xg84lm5/fMM/PMb347s2+RNQH+b50/nvaddHL++Os3q/bW7eXu1u3lq7241U0ym6SVtHuzFNeS4oPkXHpTvlAtbIYrRu3nV2tnLnz48dZHvVY7O+NVD53RCbbHOYrNZspikqlm/gB2jffD+xtvdicstitTFexYv3AwadNJyl1+9NxOzzDl1EBj5PUOPD6K3vvmgN71v5AcSTLXf0Pb7HW2Hn2GB7qn16LNh5cHAAAAHBpP3r2V3Mz8pPMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx0lz//+imVr9eDFF//7/MwP32J+ZcLqj7Z/ZXD+403oUyQAAAAAAAADAw/XS3fz2QlnO99tlUf+f/8t142j9+ETezo2sZj2v5mZWspGNrGcpycLAQDM3VzY21pf6W35aluWILU/t/O/7wJanxky48+DHDAAAAAAAAAD/Q84285/mfOYnnAsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxSJFO9WT0d7ccLabWTzCWZqdbbTP7ejx9ndyadAAAAADwCT97N3dzMfL9dFvV3/ufq7/1zeTvXspG1bKSb1Vysfwvofetvbd1e7m7dXr5aTZ8d95v/3on/MH9gGvWI6f32MHzPL9RrdHIpa81ayVvp5mJa9ZaVF/r5DM/rvSqn4mxPWWZ2nAJdbObVkf+ymR8OC3VFpuuKVDU62eRWVeOp/Ssx+Ozcx56W0tr+5efoPdT87L57Kf5Tlr3oSH9J8sR3D6759D0dzFimRizfW4lTA2ffc/tXIvnSH3/3g8vda1cuF5vHD89pNMxLwxfP/rP/DPUr0bOZ1SwPVOL5pgJVFfevxKUbh7wSY2rl2e34fL6T7+d4FvNG1rOWH2clG1nNYr5dRyvN+Vw9Lux/zpzb1XrjoCxmmudlak9OX3yyN98vp5frbeezlu/lrVzMal6r/53KUr6W0zmdMwPP8LNjXPWtIVf9n0Ynf+zLTdBJ8otmfjhUdX1qoK6Dr7kLdd/gklbK5p3l6c/ttbFSNtJkkfxs4BqcvO1KzGX7XaKf3TP9CkwPrcSv64O60b12Zf3yyvU94xabw/f3SnYf/uF5IanOl6eTtOvW7rOj6ntmaN9S3Xd0u6+1t+83ne2+g67UmeYz3GdHOlX3PT+0b7nue2Ggr/q8NZdkNZ+WZdn7vAXAoXfkK0dmOv/q/K3zfufnncud1+e+Nfv12RdnMv3X6W+0T0690nqx+H3ez09y8Dd0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgQDfeeffKSre7ur4nKMvy1oiuhxKknexa8pc/N0F9l7ep1DcDGn/Aau1zraRe0k4T3Ftit+7vcN673yL8o3lOHknBP5dgbuT5szf4pCzLw5HzOEH/lluHJZ9JBJN8VQIehRMbV6+fuPHOu19du9p6c/XN1WtnTp8+c/LM6deWT1xa685NOj3gIarf6+vPOZPOBAAAAAAAAAAAABjXeH+cUzzY3/YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPIDzx9O+kyJLJ189WbW3bi93q6kf76z5SZJWkmIxKT5IzqU3ZWFguGLUfjaTCx9+vPVRr9Vupnr91n7bjWezmbKYZKqZDzGX5MjeheWtUeMV9TjXR483pmL7CKuCHesXDibtvwEAAP//LUwZYQ==") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000740)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x101) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) ioctl$RTC_SET_TIME(r5, 0x5452, &(0x7f0000000280)={0x14, 0x1000036, 0x0, 0x1ffffc, 0x8, 0x0, 0x3, 0xffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0xc040400) 6m35.074748111s ago: executing program 2 (id=5097): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) truncate(0x0, 0x9) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, 0x0, 0x40000) getpid() write$binfmt_misc(r0, &(0x7f0000000640)="728b", 0x2) getpgrp(0x0) 6m33.888147749s ago: executing program 2 (id=5104): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0xfaa}) 6m31.618807063s ago: executing program 2 (id=5111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) munlockall() 6m29.720917211s ago: executing program 48 (id=5111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) munlockall() 12.085542057s ago: executing program 7 (id=6846): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0xfff, 0x2}, 0x1c) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000600)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000240)="1a329ffa", 0x4}], 0x1, 0x0, 0x0, 0x48040}, 0x1) 10.857850766s ago: executing program 7 (id=6852): r0 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYBLOB="01980000000000002000128008000100677265001400028008000100"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xf}, {0x9, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) 10.388208823s ago: executing program 7 (id=6856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x38, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) 10.185814916s ago: executing program 7 (id=6859): close(0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000000)={[{@showassoc}, {@block={'block', 0x3d, 0x800}, 0x0}, {}, {@hide}, {@map_off}, {@map_acorn, 0x41}, {@session={'session', 0x3d, 0x23}}, {@unhide}, {}, {@gid}, {}, {@unhide}, {}]}, 0x2, 0x6a0, &(0x7f0000000a40)="$eJzs3V1rG+n5x/HfyLIte/+E5d8SQnCSO0kXHJoqI3njYFLoqqORPa2kETNysaGwpBt7CZGzbZJC45OtT/oA2zfQs570oC+i0ON9Fz0pLSztWaE9mDIPeoqeol0l2d18P2ZXo3uumfuauRVdjK25JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIMup2nbJUt1r7h+YyZxq4Dey5f9Go+vTvS3rRrpwY2a/khX/p0JBF9KmC9/srz4f/++aNtJnGyrEDwWdvnX+7bvfyOe6209J+PPQvDt88uz04b1O5+jxC8Quae7dv07KdZfWsjEZE7TrNr3Q9xqVXdd4oW92trftW3u10NS8uhsehm23YZzAzbX9wGw6N0xpZ2fLuMVDf7+5W63U3W7jne+UbXvb/GA1HWhJxdDZ8+p1r7mbxMSr45g75pMfpwFupWHM8YPO0dasI4mDSi8SVJ4VVLbL5VKpXC5t3965fce28yMNdsyyezQSsfAXLb5iFvPGDSxALq7/f7Wkugpqal8HMmN/HFUVyFdjwvpMt/6/c8ud2u9g/e9W+QvS97LVF5XU/8vps8uT6v+EXIxMssG4NdaE9vl+lpOMjJ7omU71UPfUUUdHeryAfRuZKwvZyyv42ZWrpjyF8uWpoUrSYrIWox1ta1u23teeagplVJOnulyFOlSottzkFeUokKuK2vIVyGhTjm7IqKQd7WhLRq6KOpSvfTW1q6oq+ncURcd6kJz3rSk5qhtUmhCwOhhUnrKnSfX/Jx+nr9Os/tvU/zdV+jpYTR8+nRYDfAlE2fX/oNzsza68vIwAAAAAAMCiWclv363kb/eXJEWqeXXXft1pAQAAAACABbIUrWpDVnz9L+mSLK7/AQAAAAD4urGSe+wsSevJh/qt/p1QL/JLgKVXkCIAAAAAAPiCkjv/L69IUTJpxRVZc13/AwAAAACAr4DfDMyxn+/OsRt1/6yfkxS2Vq0//3NVwbJ11jr4lnVSiddUTrKYkU8AtGsXrXPZRL3Jw4qk5Jnjblgb6eSY2SSYvXkHPzueNde/FTyXwMrS4A4mJGDFPW/ns2f6RFfTTa5m88zfP80pWZP2sl7z6m7R8et3S6pUzuXa7kH7548e/EIKesd5/KBzVPzgo879JJezuOnsJN7px0Pp5MafjH4uT5P5FpJ7LsYd8Zpq3S5/22ysW0m/dvf4l1Q5yQ12NG0A+n3+StfSMbu2nsaun/Zm3I+PvxAff6mYDNnQ0QfLVj+L0vNHPm4gJmRRSLK4nsZc37yu8t/S5d4o5KzCt5ekcnF0DIayKA9mMftcWP8aORcDWSQP3TUD52IrzuIv8Y4mZLE1XxYjIwIAr8uxLil5F7qkZBLzXhUqZHW3Wx66b2qfq+7Mru7vDVf3p7+PomSDJSmf/W1iai8Fxe/om1ZSh1bSQ8pfHPOObmd1paAJ7+j2F6hucV9/6n8HUpb2SBb/iaLobinp93fPVdU/DHU30m9YLy/Fp/DW05OfJhPgxz48+vDoUbm8tW2/a9u3y1pODiN7WBK1BwAwYvZ37MyMsN7V1TTi6v1/vJMuDVW8/+99pKCoD/SROrqvm92vELgyfq/rAx9DuJletWrgqtWcf/tu8r10w7El3Zx4VZfU0oHYci92Wd1Nhit1P3brJY8CAACv1rUZdXh8/S8M1f+b2kwjNi+Ove4eruXZ1XHvkn5SbGl28u8t+mwAAPBmcIPPrPX2r60g8Frvl3Z2SpX2nmsC3/mhCbzqrmu8ZtsNnL1Kc9c1rcBv+45fN61Aq17VDU2432r5QdvU/MC0/NA7SL753WRf/R66jUqz7Tlhq+5WQtc4frNdcdqm6oWOae1/v+6Fe26QbBy2XMereU6l7flNE/r7geMWjQlddyDQq7rNtlfz4sWmaQVeoxIcmh/59f2Ga6pu6AReq+2nO+z25TVrftBIdlvMR+M+LwAAwBvnybPTh/c6naPHzy+sxZfmacuZJsSMLqzoybP4qjxuyWermCMIAIAvmX4Bn2OjwktMCAAAAAAAAAAAAAAAAAAAAAAAjJh9S9+cC8vjbhaUei0/O5e16Jfq32I4sh9Li05snoXcvFt1b4k4ffjplOC1Xkv39A/GnL2yA/z7/0lvJS1KW/KL72ttyuC+jIXvHqdndGJMvHLsqtXeWOQX/88hXnj0xwmroiiKpm++OnwOV4YOMDet07ykxytzD8HKyEsUwNfV/wIAAP//qMc0fQ==") socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000400), 0x4, 0x542, &(0x7f0000000440)="$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") syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000d80)='./file0/file0\x00', 0x1004800, &(0x7f0000000100)=ANY=[], 0x1, 0x6bb, &(0x7f00000018c0)="$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") ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) 8.364841843s ago: executing program 7 (id=6866): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xe0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x94, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0x74, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x40, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0xd, 0x6, "726786f34dc39a3b09"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 7.646748324s ago: executing program 7 (id=6875): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) 6.58543381s ago: executing program 49 (id=6875): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) 3.799508463s ago: executing program 4 (id=6900): ioperm(0x0, 0x33, 0x3) futex(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x3) fremovexattr(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$KVM_VCPU(&(0x7f0000f3d000/0x4000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) syz_usbip_server_init(0x0) syz_emit_vhci(&(0x7f0000000880)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x2fb}, {0x3, [{@none, 0x2, 0x0, "f45808", 0x199, 0x40, "0fb7aaa62c065532acde724e6406df063dd37d5ded05a7be3cacafe66aa736bb759777ea84c1709044e42984abb604c7031bd2d46abfdaf961f0e75b074ec643381b327e310d3d7425aad0da02cb26d45ee9f6518322c2ec6d251a5669e3e1eb644174e91b880b2599dd83677a01e8c7b892f938735533794f85ac34db245782618ac40cdc753dcf02a02e5ce2b4f37e6369dbf143e667f38d608e74c657185e535162bbf7cd7b828097f9025dbbee6a7df412ae62b3c0d42db7fffd8f78cd56b4a4d20fc17ef526e98f08b29059c4657f56688f9ad4498a3215a113c0db86514dec91cd03d9d5f96710b675c031f11e"}, {@none, 0x3, 0x8, "63d9ff", 0x3, 0x9f, "7dbe22ff0f00fc44ea6d1aec274c8968917697e62edc322898c618f3fb5e491f9e8adff68d373fb0734adfc545389458b825340c8c8f5c492078d00adc867641fcb0351732cefa32848d5e44c43df47371c93da4cdff225f61b624958bd6668dc99425d17452bb3e5dbe078b3a7451e54dc0c2587964a6886f01d4e5784f8f72466d7b66c8f914cf3a4b3b61cd721e36df2e08fec18c94317d8bb53ef342ff391f7034a4f3639116e19551aac5539c313ea03737d2c1404121a85b892b08815abf97626ad4e6a9b0d00d9a74e409486f8ea349fdba0cb4757dbcea513381c76a1c3d6e79f0d14e3a27d93b600168eebe"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xd2, 0x9, "8a54c3", 0x33, 0x0, "dba74559adde41e078484e9f387a109a0520c9f59f1d3c9fac7a118a24988d673e37ce8ccef7862cdffa1d7d6066471ca7831aeb3d20e729b78a4adeac6c80e8933e4a011072d15fcfe4620aacd245cc5e5b50016ede784d559561b836e5c308740b523d9024b9b77f9d51db558ee477509a28b06bc2f0787bb8dbeda3e4aa3d1762352c5c15886251caea2fb1af87e76e9729578474233bf840c98d40147e5b9739727ee5956ab2f56bb12147ed75fcccb20c8d9345679c0ca03ad687d80cb2c18ef347722461d189b1f1486d43ea431403af86d22a25140beafb7169473d849429ca7e5d006d6b2dcf600e469486a4"}]}}}, 0x2fe) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)="0451a0511bb7bacc0c19f1f84add290d1577bd3f9fd9b2ab6fa51d139058", 0x1e) chdir(0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x10, [0x8000, 0x0, 0xf, 0x7, 0x80, 0xa4e6, 0x7, 0x7f, 0x20000806, 0x5, 0x8, 0x5f, 0x9, 0x4, 0x7, 0xffffff03, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x3, 0x242, 0x0, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xfff, 0x2000a, 0x2e72, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x190, 0x4, 0x40], [0x10000007, 0x9, 0x8000012f, 0x100, 0x5, 0xfffffff3, 0x129432e6, 0x2, 0xf9, 0xc2, 0x2bf, 0xf7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x4, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0xfffffffc, 0x400, 0x401, 0x2006, 0xfffffffe, 0xff, 0x5, 0x1000005, 0xa7, 0xd, 0x4e0, 0x2, 0x204, 0xb, 0x4, 0x9, 0x8, 0xcd, 0x6, 0x47, 0x8000, 0x1, 0xfe000040, 0xffff, 0x2, 0x4, 0x9, 0xffffffff, 0x3, 0x3d, 0x11, 0x2, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x418, 0x4, 0x5, 0xfffffffe, 0x53fc9239, 0x8d2, 0x9, 0x5, 0x0, 0x3, 0x205, 0xb, 0x4, 0x5, 0x0, 0x0, 0x1ef, 0x5, 0x2, 0x86, 0x3, 0x9, 0x3e7, 0x1, 0x5, 0x2, 0x2, 0x2, 0x20000008, 0xf, 0x6d02, 0xb4, 0x38, 0x4000, 0x200, 0x84, 0x3, 0x404, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x3, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x5, 0x4, 0x400001, 0xa, 0x0, 0xff, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x29], [0x9, 0x1, 0xb, 0xb, 0x5, 0x937, 0xc, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x25, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0x31a0, 0x80010000, 0x5, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x1, 0x40, 0x8, 0x30b1d693, 0xa1f, 0x3, 0x7, 0x8000, 0x6c1b, 0x0, 0x4, 0x75, 0xb1e, 0xda, 0x200, 0x8, 0x100fff]}, 0x45c) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) futex(0x0, 0xd, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x1, 0x0) 2.748246499s ago: executing program 1 (id=6902): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r1, &(0x7f0000005240)={0x2020}, 0x2020) 2.68650968s ago: executing program 9 (id=6903): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 2.536977112s ago: executing program 1 (id=6904): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000003"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd62, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000014002b80080003000800000008000100", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x88000}, 0x0) 2.531139632s ago: executing program 9 (id=6905): r0 = fsopen(&(0x7f0000000040)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, 0x0, &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) 2.366767175s ago: executing program 9 (id=6906): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000090280500140012800b0001006c6f7770616e00000400028008000500"], 0x44}}, 0x0) 2.258322296s ago: executing program 4 (id=6907): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{0x0}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) 2.234290037s ago: executing program 1 (id=6908): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)}, {&(0x7f00000001c0)="32d177d1fcf51533a11527465c39bfd8a27ca81cd092a37f69c3f44011ae92fc3c8c98f3b8cf9b86", 0x28}], 0x2, &(0x7f0000003600)=ANY=[@ANYBLOB="18000000000000002900000037000000ff000000200000001800"], 0x30}}], 0x1, 0x50d41de21d476b07) 2.084331009s ago: executing program 1 (id=6909): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000600)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000240)="1a329ffa", 0x4}], 0x1, 0x0, 0x0, 0x48040}, 0x1) 1.932691211s ago: executing program 4 (id=6910): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ctinfo={0x30, 0xf, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x74}}, 0x40080) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB], 0x4c}}, 0x4000804) 1.920256611s ago: executing program 9 (id=6911): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x669, &(0x7f0000000dc0)="$eJzs3c1vHGcdB/DvrDd2Ni3BTZM2oEq1GgkQFolf5IK5EBBCPlSoKgfOVuI0VjZpsV3kVog6vF576B9QDr4gTkjcIxUOXODWG/KxEhKXXjCnRTs7a6/XL10njb1pP59o9nmeeWae+T2/2Zl9saIN8IW1MJn6gxRZmHxlvd3e2pxtbm3O3u3Wk4wl2UjqSWpJiv+2Wq0Pk+tJsTNM0Vfu8/7y/GsffbL1cadVr5Zy+9pR+/WpttvoW73RXTeRZKQqH8Ge8W488njFTuTXk1ypSjh1Z5K09vjZ35/e6enROGjvsycSI/B4FZ3XzX3Gk3PVhd5+H9B95a2dbHSDGxtwu/53EAAAAPCkGeQz8Je3s5314vwJhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfCxu7v/9fVEutW59I0f39/9FqXar6cHnxeJs/eFxxAAAAAAAAAMAJenE721nP+W67VZR/83+pbFwsH5/KW1nNUlZyNetZzFrWspLpJOM9A42uL66trUwPsOfMgXvOfEqgY1XZ+GzmDQAAAAAAAACfM7/Kwu7f/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYBgUyUinSHG/Z/V4avUkZ5OMtldsJP/s1p9kD047AAAAADgBY8l21nO+224VuZjkufI7gLN5K/eyluWspZml3Cy/F+h86q9tbc42tzZn77aX/eN+/z/HCqMcMZ3vHg4+8uVyi0ZuZblcczU38kaauZlauWfb5Sqe7qh9cd1vx1R8rzJgZDersj3z96pyn3ePNdnDHPPLlPEyI2d2MjJVxdbOxjPdM3PwGTrm2ek/0nRqO8Fe7DvS6N7JPFTOz1Vlez6/Oyznp6I/EzM9z77njs558vW//OmnU1V9eKY0mJGqbJWPjf2ZmO3JxPODZOJ2896d27dWJ5+0TOwzVWbi0k57IT/KTzKZibyalSzn51nMWpYykR+WtcXq5Bc9l/whmbq+p/Xqp0UyWj1DOyfreDG9VO57Psv5cd7IzSzl5fLfTKbz7cxlLvM9Z/jS0We4vOprh1z1rS8dGPyVb1SVRpLfV+VwaOf1mZ689t5zx8u+3jW7WbowQJaOeW+sf7WqtI/x66ocDv2ZmO7JxLNHZ+IP5W1ltXnvzsrtxTcHO9yF96pK+zr6bTIxPDeS9vPlQvtkla29z45237MH9k2XfRd3+mr7+i7t9HWu1I1Dr9TR6j3c/pFmyr7nD+ybLfsu9/Qd9H4LgKF37pvnRhv/bvyj8UHjN43bjVfO/mDsO2MvjObMX898tz418rXaC8Wf80F+ufv5HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHirb79zZ7HZXFrpq7RarXcP6RqwUq+O8JC7P0IlE/96qn3kA7q6P2d2gvF85enk5OY+rJX/tVqtak1xyDZ//NvQJKpVGYrUnVLl9O5JwMm4tnb3zWurb7/zreW7i68vvb50b35ubn5qfu7l2Wu3lptLU53H044SeBx2X/RPOxIAAAAAAAAAAABgUCfx3wlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAk21hMvUHKTI9dXWq3d7anG22l259d8t6klqS4hdJ8WFyPZ0l4z3DFYcd5/3l+dc++mTr492x6t3ta0ftN5iNaslEkpFOef+zGu9GVR6pOGoKxc4M2wm70k0cnLb/BwAA//+o5gZ+") open(&(0x7f0000000140)='./file1\x00', 0x1e3042, 0x9c) gettid() creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x635, &(0x7f0000000000)="$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") r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000000)=@chain) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000d80)={[{@grpquota}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@uid_lt}, {@obj_type={'obj_type', 0x3d, '+'}}, {@fsname={'fsname', 0x3d, '@@'}}, {@hash}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@measure}, {@appraise_type}, {@context={'context', 0x3d, 'user_u'}}, {@fowner_eq}]}, 0x1, 0x569, &(0x7f0000000800)="$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") ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$evdev(&(0x7f0000000d80), 0x597, 0x301601) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x6040004) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x12, 0xfffff030}, {0x6, 0x0, 0x3, 0x4}]}, 0x10) 1.662255905s ago: executing program 4 (id=6912): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r1, &(0x7f0000005240)={0x2020}, 0x2020) 1.416788159s ago: executing program 4 (id=6913): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) 1.142377373s ago: executing program 4 (id=6914): ioperm(0x0, 0x33, 0x3) futex(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x3) fremovexattr(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$KVM_VCPU(&(0x7f0000f3d000/0x4000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) syz_usbip_server_init(0x0) syz_emit_vhci(&(0x7f0000000880)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x2fb}, {0x3, [{@none, 0x2, 0x0, "f45808", 0x199, 0x40, "0fb7aaa62c065532acde724e6406df063dd37d5ded05a7be3cacafe66aa736bb759777ea84c1709044e42984abb604c7031bd2d46abfdaf961f0e75b074ec643381b327e310d3d7425aad0da02cb26d45ee9f6518322c2ec6d251a5669e3e1eb644174e91b880b2599dd83677a01e8c7b892f938735533794f85ac34db245782618ac40cdc753dcf02a02e5ce2b4f37e6369dbf143e667f38d608e74c657185e535162bbf7cd7b828097f9025dbbee6a7df412ae62b3c0d42db7fffd8f78cd56b4a4d20fc17ef526e98f08b29059c4657f56688f9ad4498a3215a113c0db86514dec91cd03d9d5f96710b675c031f11e"}, {@none, 0x3, 0x8, "63d9ff", 0x3, 0x9f, "7dbe22ff0f00fc44ea6d1aec274c8968917697e62edc322898c618f3fb5e491f9e8adff68d373fb0734adfc545389458b825340c8c8f5c492078d00adc867641fcb0351732cefa32848d5e44c43df47371c93da4cdff225f61b624958bd6668dc99425d17452bb3e5dbe078b3a7451e54dc0c2587964a6886f01d4e5784f8f72466d7b66c8f914cf3a4b3b61cd721e36df2e08fec18c94317d8bb53ef342ff391f7034a4f3639116e19551aac5539c313ea03737d2c1404121a85b892b08815abf97626ad4e6a9b0d00d9a74e409486f8ea349fdba0cb4757dbcea513381c76a1c3d6e79f0d14e3a27d93b600168eebe"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xd2, 0x9, "8a54c3", 0x33, 0x0, "dba74559adde41e078484e9f387a109a0520c9f59f1d3c9fac7a118a24988d673e37ce8ccef7862cdffa1d7d6066471ca7831aeb3d20e729b78a4adeac6c80e8933e4a011072d15fcfe4620aacd245cc5e5b50016ede784d559561b836e5c308740b523d9024b9b77f9d51db558ee477509a28b06bc2f0787bb8dbeda3e4aa3d1762352c5c15886251caea2fb1af87e76e9729578474233bf840c98d40147e5b9739727ee5956ab2f56bb12147ed75fcccb20c8d9345679c0ca03ad687d80cb2c18ef347722461d189b1f1486d43ea431403af86d22a25140beafb7169473d849429ca7e5d006d6b2dcf600e469486a4"}]}}}, 0x2fe) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)="0451a0511bb7bacc0c19f1f84add290d1577bd3f9fd9b2ab6fa51d139058", 0x1e) chdir(0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x10, [0x8000, 0x0, 0xf, 0x7, 0x80, 0xa4e6, 0x7, 0x7f, 0x20000806, 0x5, 0x8, 0x5f, 0x9, 0x4, 0x7, 0xffffff03, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x3, 0x242, 0x0, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xfff, 0x2000a, 0x2e72, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x190, 0x4, 0x40], [0x10000007, 0x9, 0x8000012f, 0x100, 0x5, 0xfffffff3, 0x129432e6, 0x2, 0xf9, 0xc2, 0x2bf, 0xf7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x4, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0xfffffffc, 0x400, 0x401, 0x2006, 0xfffffffe, 0xff, 0x5, 0x1000005, 0xa7, 0xd, 0x4e0, 0x2, 0x204, 0xb, 0x4, 0x9, 0x8, 0xcd, 0x6, 0x47, 0x8000, 0x1, 0xfe000040, 0xffff, 0x2, 0x4, 0x9, 0xffffffff, 0x3, 0x3d, 0x11, 0x2, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x418, 0x4, 0x5, 0xfffffffe, 0x53fc9239, 0x8d2, 0x9, 0x5, 0x0, 0x3, 0x205, 0xb, 0x4, 0x5, 0x0, 0x0, 0x1ef, 0x5, 0x2, 0x86, 0x3, 0x9, 0x3e7, 0x1, 0x5, 0x2, 0x2, 0x2, 0x20000008, 0xf, 0x6d02, 0xb4, 0x38, 0x4000, 0x200, 0x84, 0x3, 0x404, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x3, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x5, 0x4, 0x400001, 0xa, 0x0, 0xff, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x29], [0x9, 0x1, 0xb, 0xb, 0x5, 0x937, 0xc, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x25, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0x31a0, 0x80010000, 0x5, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x1, 0x40, 0x8, 0x30b1d693, 0xa1f, 0x3, 0x7, 0x8000, 0x6c1b, 0x0, 0x4, 0x75, 0xb1e, 0xda, 0x200, 0x8, 0x100fff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) futex(0x0, 0xd, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x1, 0x0) 1.084334444s ago: executing program 1 (id=6915): syz_emit_ethernet(0x3a, &(0x7f0000001980)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x80000000, 0x4}}}}}}, 0x0) 811.546608ms ago: executing program 9 (id=6916): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001c40)="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", 0x4a1}, {&(0x7f0000000100)="aa3d375025bc5e5b22402c6bc2b74d05557866776adbe43f0b87154fb9ccb967587c784994ee8b2b6822efc7f5d8b6498f0c7bd3df443b29475108699ab2dc772583b8de74fd4eff96bdeac758d85aac80928ff807a27624831c36caa3250460ce26adc9f1cc83e58d21abd5fafce3212e7d76b915a0b55b6d2e46ecff544879ec590032ae88298e2dbc1c6716283b544f9ef21650df51ef5fa6c60b5b2aa2a8726747286f2b7701ac1577449e25db02a1cda6eec796beb384a7", 0xba}], 0x2}}], 0x1, 0x8010) shutdown(r0, 0x1) 803.589208ms ago: executing program 1 (id=6917): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) 0s ago: executing program 9 (id=6918): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f, 0x10, 0x0, @void, @value}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r2, 0x4) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r1, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.1.4789'. [ 1493.218803][ T786] usb 8-1: USB disconnect, device number 43 [ 1493.615308][T26077] loop7: detected capacity change from 0 to 1024 [ 1493.910771][T14483] hfsplus: b-tree write err: -5, ino 4 [ 1494.006664][T14211] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1494.249147][T14211] usb 2-1: config 0 has no interfaces? [ 1494.288511][T14211] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1494.306074][T14211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.522270][T14211] usb 2-1: Product: syz [ 1494.526651][T14211] usb 2-1: Manufacturer: syz [ 1494.531333][T14211] usb 2-1: SerialNumber: syz [ 1494.597494][T14211] usb 2-1: config 0 descriptor?? [ 1494.721464][T26088] loop7: detected capacity change from 0 to 1024 [ 1494.729338][T26088] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1494.778334][T26088] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1495.283920][T26096] netlink: 'syz.9.4800': attribute type 4 has an invalid length. [ 1495.469358][T20670] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1495.715797][ T42] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 1495.915857][ T42] usb 10-1: Using ep0 maxpacket: 32 [ 1495.951802][ T42] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1495.997115][ T42] usb 10-1: config 0 has no interface number 0 [ 1496.036468][ T42] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1496.064686][ T42] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.099095][ T42] usb 10-1: Product: syz [ 1496.119100][ T42] usb 10-1: Manufacturer: syz [ 1496.164144][ T42] usb 10-1: SerialNumber: syz [ 1496.199597][ T42] usb 10-1: config 0 descriptor?? [ 1496.226394][ T42] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1496.251557][ T42] usb 10-1: selecting invalid altsetting 1 [ 1496.290148][ T42] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1496.331817][ T42] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1496.383576][ T42] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1496.409249][ T42] usb 10-1: media controller created [ 1496.432244][T26093] usb 10-1: dvb_usb_ce6230: I2C read not implemented [ 1496.525979][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1496.582580][T26093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1496.653886][T26093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1496.782639][ T42] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1496.800905][ T42] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1496.833274][ T42] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1496.851056][T26105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1496.862185][ T786] usb 2-1: USB disconnect, device number 21 [ 1496.868430][T26105] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1496.905298][T26105] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1496.918606][T26105] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1496.937253][T26105] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1496.950460][T26105] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1497.171870][ T42] usb 10-1: USB disconnect, device number 68 [ 1497.744840][T14211] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1497.979820][T14483] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.005166][T14211] usb 2-1: Using ep0 maxpacket: 16 [ 1498.033451][T26103] chnl_net:caif_netlink_parms(): no params data found [ 1498.052864][T14211] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 1498.104015][T14211] usb 2-1: config 0 has no interface number 0 [ 1498.136268][T14211] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 1498.269696][T14211] usb 2-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1498.280013][T14211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.288413][T14211] usb 2-1: Product: syz [ 1498.292722][T14211] usb 2-1: Manufacturer: syz [ 1498.297964][T14211] usb 2-1: SerialNumber: syz [ 1498.316167][T14211] usb 2-1: config 0 descriptor?? [ 1498.365322][T26110] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1498.393426][T14483] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.619214][T14483] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.686148][T26103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.716026][T26103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.752917][T26103] bridge_slave_0: entered allmulticast mode [ 1498.786702][T26103] bridge_slave_0: entered promiscuous mode [ 1498.900042][T14483] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.931907][T26103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.950469][T26103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.990676][T26103] bridge_slave_1: entered allmulticast mode [ 1499.029947][T26103] bridge_slave_1: entered promiscuous mode [ 1499.074566][ T5775] Bluetooth: hci4: command tx timeout [ 1499.232223][T26103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1499.286488][T26103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1499.492135][T26103] team0: Port device team_slave_0 added [ 1499.617495][T26103] team0: Port device team_slave_1 added [ 1499.726336][T26103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1499.735054][T26126] loop7: detected capacity change from 0 to 512 [ 1499.738821][T26103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1499.779386][T26126] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1499.792265][T26103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1499.809864][T26103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.819375][T26126] EXT4-fs (loop7): 1 truncate cleaned up [ 1499.826917][T26126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1499.853660][T26103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1499.902284][T26103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1499.919564][T26126] EXT4-fs error (device loop7): ext4_map_blocks:608: inode #2: block 3: comm syz.7.4809: lblock 1 mapped to illegal pblock 3 (length 1) [ 1499.924260][T14483] tipc: Left network mode [ 1500.028636][T20670] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1500.209420][T26103] hsr_slave_0: entered promiscuous mode [ 1500.222417][T26103] hsr_slave_1: entered promiscuous mode [ 1500.233321][T26103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1500.267606][T26103] Cannot create hsr debugfs directory [ 1500.277538][T26132] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4810'. [ 1500.301094][T26135] loop9: detected capacity change from 0 to 1024 [ 1500.418501][ T42] usb 2-1: USB disconnect, device number 22 [ 1500.516367][ T33] hfsplus: b-tree write err: -5, ino 4 [ 1500.543420][T26132] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4810'. [ 1500.555488][T26138] loop1: detected capacity change from 0 to 512 [ 1500.590515][T26138] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1500.606915][T26138] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.4813: corrupted in-inode xattr: invalid ea_ino [ 1500.636079][T26138] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.4813: couldn't read orphan inode 15 (err -117) [ 1500.700779][T26138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1500.878666][T26138] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.4813: bg 0: block 127: padding at end of block bitmap is not set [ 1500.997217][T26146] loop7: detected capacity change from 0 to 128 [ 1501.077318][T26146] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1501.141956][T26146] ext4 filesystem being mounted at /319/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1501.153870][ T5775] Bluetooth: hci4: command tx timeout [ 1501.168445][T15418] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1501.573993][T26146] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1501.788962][T26146] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1501.881050][T20670] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1502.088669][T26175] loop7: detected capacity change from 0 to 1764 [ 1503.232293][ T5775] Bluetooth: hci4: command tx timeout [ 1503.872280][T14483] hsr_slave_0: left promiscuous mode [ 1503.950767][T14483] hsr_slave_1: left promiscuous mode [ 1504.059816][T14483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1504.082721][T14483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1504.130715][T14483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1504.151980][T14483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1504.166032][T14483] bridge_slave_1: left allmulticast mode [ 1504.172874][T14483] bridge_slave_1: left promiscuous mode [ 1504.178854][T14483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.198777][T14483] bridge_slave_0: left allmulticast mode [ 1504.219083][T14483] bridge_slave_0: left promiscuous mode [ 1504.225996][T14483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.277975][T14483] veth1_macvtap: left promiscuous mode [ 1504.289546][T14483] veth0_macvtap: left promiscuous mode [ 1504.298584][T14483] veth1_vlan: left promiscuous mode [ 1504.304656][T14483] veth0_vlan: left promiscuous mode [ 1505.311021][ T5775] Bluetooth: hci4: command tx timeout [ 1505.871912][T14483] team0 (unregistering): Port device team_slave_1 removed [ 1506.088842][T14483] team0 (unregistering): Port device team_slave_0 removed [ 1506.134572][T26209] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1506.190198][T14483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1506.299965][T14483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1506.489558][T26212] loop7: detected capacity change from 0 to 1764 [ 1508.623124][T26221] loop7: detected capacity change from 0 to 1024 [ 1508.949688][T26221] hfsplus: unable to find HFS+ superblock [ 1509.595914][T26227] loop1: detected capacity change from 0 to 512 [ 1509.624325][T26227] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1509.654394][T26227] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.4835: corrupted in-inode xattr: invalid ea_ino [ 1509.730743][T26227] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.4835: couldn't read orphan inode 15 (err -117) [ 1509.816153][T26227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1509.844814][T26231] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4836'. [ 1509.959408][T15418] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1510.632985][T14483] bond0 (unregistering): Released all slaves [ 1511.301297][T26103] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1511.375168][T26247] loop9: detected capacity change from 0 to 128 [ 1511.381204][T26247] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1511.401389][T26247] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1511.778782][T26103] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1511.916659][T26103] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1512.025576][T26103] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1512.085098][ T1106] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1512.326445][T26253] loop9: detected capacity change from 0 to 1764 [ 1512.686852][T26103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1513.165744][T26103] 8021q: adding VLAN 0 to HW filter on device team0 [ 1513.302961][T26222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.310319][T26222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1513.369207][T26222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.376526][T26222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1513.608624][T26103] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1514.422032][T26103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1514.455557][T26280] loop9: detected capacity change from 0 to 1024 [ 1514.608755][T14483] hfsplus: b-tree write err: -5, ino 4 [ 1514.615250][T26103] veth0_vlan: entered promiscuous mode [ 1514.661166][T26103] veth1_vlan: entered promiscuous mode [ 1514.804756][T26284] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4846'. [ 1514.838608][T26103] veth0_macvtap: entered promiscuous mode [ 1514.868760][T26103] veth1_macvtap: entered promiscuous mode [ 1514.960507][T26103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1514.980639][T26103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.010376][T26103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1515.021369][T26103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.031767][T26103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1515.056076][T26103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.078523][T26103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1515.101817][T26103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1515.120058][T26289] loop1: detected capacity change from 0 to 1764 [ 1515.136182][T26103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.156390][T26103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1515.188987][T26103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.346114][T26103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1515.405436][T26103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.438772][T26103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1515.460911][T26103] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.583197][T26103] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.779322][T26103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.922571][T26103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.436170][T14483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.473631][T14483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.556021][T26222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.579915][T26222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.584562][T26296] netlink: 'syz.9.4850': attribute type 4 has an invalid length. [ 1517.161100][T26303] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1517.177972][ T5775] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260 [ 1517.784798][T14211] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 1518.297357][T26311] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4852'. [ 1518.306528][T26311] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4852'. [ 1518.371997][T14211] usb 10-1: Using ep0 maxpacket: 32 [ 1518.391974][T26312] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1518.429053][T14211] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1518.493575][T14211] usb 10-1: config 0 has no interface number 0 [ 1518.555096][T14211] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1518.618541][T14211] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.674459][T14211] usb 10-1: Product: syz [ 1518.702361][T14211] usb 10-1: Manufacturer: syz [ 1518.733191][T14211] usb 10-1: SerialNumber: syz [ 1518.774908][T14211] usb 10-1: config 0 descriptor?? [ 1518.826251][T26315] loop2: detected capacity change from 0 to 1764 [ 1518.920984][T14211] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1518.938670][T14211] usb 10-1: selecting invalid altsetting 1 [ 1518.944833][T14211] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1518.960170][T14211] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1518.999605][T14211] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1519.026824][T14211] usb 10-1: media controller created [ 1519.083387][T26317] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4855'. [ 1519.113676][T26318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.117682][T14211] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1519.254598][T26318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1519.803798][ T786] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1520.003778][ T786] usb 8-1: Using ep0 maxpacket: 32 [ 1520.035641][ T786] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 1520.061055][ T786] usb 8-1: config 0 has no interface number 0 [ 1520.079984][ T786] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1520.119392][ T786] usb 8-1: config 0 interface 85 has no altsetting 0 [ 1520.134518][T26319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1520.181381][ T786] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1520.215061][ T786] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.237828][ T786] usb 8-1: Product: syz [ 1520.242106][ T786] usb 8-1: Manufacturer: syz [ 1520.264616][T14211] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1520.267502][ T786] usb 8-1: SerialNumber: syz [ 1520.280701][T14211] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1520.312015][ T786] usb 8-1: config 0 descriptor?? [ 1520.527761][T14211] usb 10-1: USB disconnect, device number 69 [ 1520.583406][ T786] appletouch 8-1:0.85: Failed to read mode from device. [ 1520.609504][ T786] appletouch: probe of 8-1:0.85 failed with error -5 [ 1520.802081][ T786] usb 8-1: USB disconnect, device number 44 [ 1521.546641][T26335] loop7: detected capacity change from 0 to 1024 [ 1521.586370][T26335] EXT4-fs: Ignoring removed nobh option [ 1521.592026][T26335] EXT4-fs: inline encryption not supported [ 1521.632096][T26335] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1521.664086][T26105] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1521.675863][T26105] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1521.688889][T26105] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1521.702044][T26335] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.4862: bad orphan inode 32767 [ 1521.716840][T26105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1521.722386][T26335] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1521.744639][T26105] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1521.752707][T26105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1521.891545][ T27] kauditd_printk_skb: 62 callbacks suppressed [ 1521.891562][ T27] audit: type=1800 audit(1750311981.495:310): pid=26335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4862" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 1521.951667][ T27] audit: type=1326 audit(1750311981.495:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26343 comm="syz.1.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931738e929 code=0x7ffc0000 [ 1521.991789][ T27] audit: type=1326 audit(1750311981.495:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26343 comm="syz.1.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931738e929 code=0x7ffc0000 [ 1522.032855][ T27] audit: type=1326 audit(1750311981.505:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26343 comm="syz.1.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f931738e929 code=0x7ffc0000 [ 1522.098334][ T27] audit: type=1326 audit(1750311981.505:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26343 comm="syz.1.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931738e929 code=0x7ffc0000 [ 1522.117048][ T1106] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.171793][ T27] audit: type=1326 audit(1750311981.505:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26343 comm="syz.1.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f931738e929 code=0x7ffc0000 [ 1522.210392][T20670] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1522.221824][ T27] audit: type=1326 audit(1750311981.505:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26343 comm="syz.1.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931738e929 code=0x7ffc0000 [ 1522.271611][ T27] audit: type=1326 audit(1750311981.505:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26343 comm="syz.1.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931738e929 code=0x7ffc0000 [ 1522.450974][ T1106] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.499486][T26348] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4865'. [ 1522.615007][ T1106] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.030875][T26357] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1523.385713][ T1106] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.628254][T26337] chnl_net:caif_netlink_parms(): no params data found [ 1523.762108][ T786] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1523.807111][T26366] loop2: detected capacity change from 0 to 1024 [ 1523.872526][ T5775] Bluetooth: hci1: command tx timeout [ 1523.944268][T14483] hfsplus: b-tree write err: -5, ino 4 [ 1524.000845][ T786] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1524.027870][ T786] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1524.138829][ T786] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1524.148131][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.239601][T26362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1524.354833][ T786] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1524.575950][ T1106] tipc: Left network mode [ 1524.581491][T26337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.638903][T26337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.674711][T26337] bridge_slave_0: entered allmulticast mode [ 1524.718105][T26337] bridge_slave_0: entered promiscuous mode [ 1525.065805][T26337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.087704][T26337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.100644][T26337] bridge_slave_1: entered allmulticast mode [ 1525.113891][T26337] bridge_slave_1: entered promiscuous mode [ 1525.627087][T26337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1525.686532][T26337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1525.940893][ T5775] Bluetooth: hci1: command tx timeout [ 1526.190221][T26337] team0: Port device team_slave_0 added [ 1526.326847][T26393] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1526.408284][T26337] team0: Port device team_slave_1 added [ 1526.780389][T14211] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1526.983545][T14211] usb 8-1: Using ep0 maxpacket: 16 [ 1526.999097][T14211] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1527.031528][T14211] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1527.069777][T14211] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1527.117961][T26337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1527.125207][T14211] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1527.142677][T26337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1527.168805][T14211] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.188567][T14211] usb 8-1: config 0 descriptor?? [ 1527.219071][T26337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1527.421020][T26337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1527.455139][T26337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1527.519780][T26337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1527.644515][T14211] usbhid 8-1:0.0: can't add hid device: -71 [ 1527.678688][T14211] usbhid: probe of 8-1:0.0 failed with error -71 [ 1527.721846][T14211] usb 8-1: USB disconnect, device number 45 [ 1528.069572][ T5775] Bluetooth: hci1: command tx timeout [ 1528.563867][T26337] hsr_slave_0: entered promiscuous mode [ 1528.619958][T26337] hsr_slave_1: entered promiscuous mode [ 1528.860260][ T42] usb 2-1: USB disconnect, device number 23 [ 1529.246845][T26416] loop1: detected capacity change from 0 to 1024 [ 1529.813934][T26430] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1529.838892][ T5775] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260 [ 1529.849255][T18430] hfsplus: b-tree write err: -5, ino 4 [ 1530.098800][ T5775] Bluetooth: hci1: command tx timeout [ 1530.340297][ T1106] hsr_slave_0: left promiscuous mode [ 1530.412050][ T1106] hsr_slave_1: left promiscuous mode [ 1530.468921][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1530.496590][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1530.552331][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1530.576861][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1530.598032][ T1106] bridge_slave_1: left allmulticast mode [ 1530.648326][ T1106] bridge_slave_1: left promiscuous mode [ 1530.655716][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.789042][ T1106] bridge_slave_0: left allmulticast mode [ 1530.794770][ T1106] bridge_slave_0: left promiscuous mode [ 1530.840965][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1531.014753][ T1106] veth1_macvtap: left promiscuous mode [ 1531.030917][ T1106] veth0_macvtap: left promiscuous mode [ 1531.036676][ T1106] veth1_vlan: left promiscuous mode [ 1531.062837][ T1106] veth0_vlan: left promiscuous mode [ 1531.075829][T26444] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1531.462780][T26450] loop1: detected capacity change from 0 to 512 [ 1531.635396][T26450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1531.677789][ T42] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1531.740251][T26450] ext4 filesystem being mounted at /566/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1531.937958][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 1531.949176][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1531.982320][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1531.998054][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1532.022070][ T42] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1532.037179][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.292908][ T42] usb 3-1: config 0 descriptor?? [ 1532.351526][T15418] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1532.623561][T26459] loop1: detected capacity change from 0 to 256 [ 1533.739251][ T1106] team_slave_1 (unregistering): left promiscuous mode [ 1533.771490][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 1533.887673][ T1106] team_slave_0 (unregistering): left promiscuous mode [ 1533.898331][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 1534.030122][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1534.039681][ T1106] bond_slave_1 (unregistering): left promiscuous mode [ 1534.217183][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1534.233908][ T1106] bond_slave_0 (unregistering): left promiscuous mode [ 1534.364281][T26468] loop7: detected capacity change from 0 to 128 [ 1534.394828][T26466] loop1: detected capacity change from 0 to 1024 [ 1534.462673][T19831] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1536.290973][ T27] audit: type=1326 audit(1750311995.892:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26483 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931738e929 code=0x7ffc0000 [ 1536.339972][ T27] audit: type=1326 audit(1750311995.892:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26483 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931738e929 code=0x7ffc0000 [ 1536.432765][ T27] audit: type=1326 audit(1750311995.892:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26483 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f931738e929 code=0x7ffc0000 [ 1536.470379][ T27] audit: type=1326 audit(1750311995.892:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26483 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931738e929 code=0x7ffc0000 [ 1536.501987][ T27] audit: type=1326 audit(1750311995.892:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26483 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931738e929 code=0x7ffc0000 [ 1536.534717][ T27] audit: type=1326 audit(1750311995.892:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26483 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f931738e929 code=0x7ffc0000 [ 1536.568041][ T27] audit: type=1326 audit(1750311995.892:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26483 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931738e929 code=0x7ffc0000 [ 1536.675444][ T27] audit: type=1326 audit(1750311995.892:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26483 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931738e929 code=0x7ffc0000 [ 1536.779593][ T27] audit: type=1326 audit(1750311995.892:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26483 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f931738e929 code=0x7ffc0000 [ 1536.866041][ T27] audit: type=1326 audit(1750311995.892:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26483 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931738e929 code=0x7ffc0000 [ 1537.220476][ T1106] bond0 (unregistering): Released all slaves [ 1537.532724][T26480] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4894'. [ 1537.793007][ T42] usbhid 3-1:0.0: can't add hid device: -32 [ 1537.805492][ T42] usbhid: probe of 3-1:0.0 failed with error -32 [ 1537.851743][ T42] usb 3-1: USB disconnect, device number 12 [ 1539.012774][T26513] loop2: detected capacity change from 0 to 1024 [ 1539.046666][T26513] hfsplus: session requires an argument [ 1539.063527][T26513] hfsplus: unable to parse mount options [ 1539.108416][T26514] loop7: detected capacity change from 0 to 1764 [ 1539.533605][T26513] snd_dummy snd_dummy.0: control 0:9:195:ÿÿÿÿ£:53367 is already present [ 1539.753118][T26523] syz_tun: entered allmulticast mode [ 1539.764831][T26523] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1540.305239][T26534] loop2: detected capacity change from 0 to 512 [ 1541.550788][T26534] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.4906: casefold flag without casefold feature [ 1541.629164][T26533] loop7: detected capacity change from 0 to 2048 [ 1541.660106][T26534] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.4906: couldn't read orphan inode 15 (err -117) [ 1541.723053][T26337] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1541.745745][T26534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1541.783620][T26337] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1541.803966][T26533] loop7: p1 < > p3 [ 1541.861010][T26337] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1541.914998][T26533] loop7: p3 size 134217728 extends beyond EOD, truncated [ 1541.941371][T26337] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1542.065074][T26103] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.796011][T26337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1542.995184][T26337] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.220908][T18430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.228231][T18430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1543.274816][T18430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.282085][T18430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1543.364254][T26558] loop1: detected capacity change from 0 to 1764 [ 1544.006044][T26562] syz.7.4911: attempt to access beyond end of device [ 1544.006044][T26562] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1544.039922][T26337] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1544.111974][T26337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1544.494849][T26569] loop1: detected capacity change from 0 to 1024 [ 1544.572906][T26569] EXT4-fs: Ignoring removed nobh option [ 1544.605457][T26569] EXT4-fs: inline encryption not supported [ 1544.652624][T26569] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1544.741038][T26569] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.4913: bad orphan inode 32767 [ 1544.776102][T26569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1545.066617][T26337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1545.084273][T15418] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1545.378822][T26588] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4914'. [ 1545.389215][T26588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4914'. [ 1546.108921][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.115640][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.217604][T26337] veth0_vlan: entered promiscuous mode [ 1546.236493][T26337] veth1_vlan: entered promiscuous mode [ 1546.250067][T26611] loop2: detected capacity change from 0 to 1764 [ 1546.339792][T26613] loop7: detected capacity change from 0 to 1024 [ 1546.348243][T26613] EXT4-fs: Ignoring removed nobh option [ 1546.364137][T26613] EXT4-fs: inline encryption not supported [ 1546.377213][T26613] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1546.459599][T26337] veth0_macvtap: entered promiscuous mode [ 1546.489000][T26337] veth1_macvtap: entered promiscuous mode [ 1546.549813][T26613] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.4921: bad orphan inode 32767 [ 1546.618920][T26613] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1546.686771][T26337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.804989][T26337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.901156][T26337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.973695][T26337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.983688][T26337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1547.104832][T26337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.116900][T26337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1547.128797][T26337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1547.139706][T26337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.149643][T26337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1547.184846][T26337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.232957][T26337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1547.269999][T26337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.320588][T26337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1547.331132][T20670] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1547.380689][T26337] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.454326][T26337] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.513908][T26337] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.522822][T26337] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.713816][T26634] loop7: detected capacity change from 0 to 4096 [ 1547.730798][T26634] EXT4-fs: Ignoring removed i_version option [ 1547.780443][T26634] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1547.831263][T26634] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1548.103226][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.165260][T26641] loop1: detected capacity change from 0 to 1024 [ 1548.170183][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.178958][T26641] hfsplus: session requires an argument [ 1548.179020][T26641] hfsplus: unable to parse mount options [ 1548.321114][T20670] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1548.341184][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.349081][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.818551][T26655] loop2: detected capacity change from 0 to 1764 [ 1550.415674][T26688] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4941'. [ 1550.876479][T26700] loop9: detected capacity change from 0 to 1764 [ 1550.976238][T26705] loop2: detected capacity change from 0 to 1024 [ 1551.173944][T26705] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 1551.268096][T26705] hfsplus: xattr searching failed [ 1551.326008][T26705] syz.2.4946: attempt to access beyond end of device [ 1551.326008][T26705] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 1551.478472][T26705] Buffer I/O error on dev loop2, logical block 458752, async page read [ 1551.539677][T26705] hfsplus: unable to mark blocks free: error -5 [ 1551.575516][T26705] hfsplus: can't free extent [ 1552.604169][T26739] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1552.645376][ T5775] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260 [ 1553.912703][T26752] loop9: detected capacity change from 0 to 256 [ 1554.104207][T26752] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1554.645360][T26756] loop9: detected capacity change from 0 to 1764 [ 1555.615969][ T5819] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1555.819013][ T5819] usb 10-1: config 0 has an invalid interface number: 255 but max is 0 [ 1555.839203][ T5819] usb 10-1: config 0 has no interface number 0 [ 1555.845491][ T5819] usb 10-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1555.911549][ T5819] usb 10-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1555.959473][ T5819] usb 10-1: config 0 interface 255 has no altsetting 0 [ 1555.975955][ T5819] usb 10-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1556.000736][ T5819] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.032011][ T5819] usb 10-1: config 0 descriptor?? [ 1556.069689][ T5819] ums-realtek 10-1:0.255: USB Mass Storage device detected [ 1556.213103][T26787] loop7: detected capacity change from 0 to 512 [ 1556.322678][ T5819] usb 10-1: USB disconnect, device number 70 [ 1556.364027][T26787] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1556.431793][T26787] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1557.098230][T26811] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1557.322113][T20670] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1557.400441][T26813] loop9: detected capacity change from 0 to 1024 [ 1557.458759][T26813] ext4: Bad value for 'max_batch_time' [ 1558.294543][T13367] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 1558.368177][T26827] loop2: detected capacity change from 0 to 4096 [ 1558.389977][T26827] EXT4-fs: Ignoring removed mblk_io_submit option [ 1558.473327][T26827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1558.515963][T13367] usb 10-1: Using ep0 maxpacket: 32 [ 1558.543469][T13367] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 1558.582582][T13367] usb 10-1: config 0 has no interface number 0 [ 1558.614562][T13367] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1558.659708][T26827] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 1558.667607][T13367] usb 10-1: config 0 interface 85 has no altsetting 0 [ 1558.670756][T13367] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1558.714328][T13367] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.740346][T13367] usb 10-1: Product: syz [ 1558.758000][T13367] usb 10-1: Manufacturer: syz [ 1558.762742][T13367] usb 10-1: SerialNumber: syz [ 1558.803789][T26103] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1558.817478][T13367] usb 10-1: config 0 descriptor?? [ 1558.988513][T26834] loop2: detected capacity change from 0 to 1024 [ 1559.030908][T26834] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1559.054441][T26834] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 1559.062384][T13367] appletouch 10-1:0.85: Failed to read mode from device. [ 1559.082456][T13367] appletouch: probe of 10-1:0.85 failed with error -5 [ 1559.100576][T26834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1559.340779][T26103] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1559.487858][T13367] usb 10-1: USB disconnect, device number 71 [ 1559.932314][T26842] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1559.942933][ T5775] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260 [ 1560.497880][T26845] loop9: detected capacity change from 0 to 1024 [ 1560.558676][T26845] EXT4-fs: Ignoring removed nobh option [ 1560.643787][T26845] EXT4-fs: inline encryption not supported [ 1560.675512][T26850] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4978'. [ 1560.686191][T26850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4978'. [ 1560.719356][T26845] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1560.991821][T26845] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.4980: bad orphan inode 32767 [ 1561.136222][T26845] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1561.404556][T26337] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1561.569880][T26859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4984'. [ 1561.610347][T26859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4984'. [ 1561.727765][T26863] loop7: detected capacity change from 0 to 1024 [ 1561.810902][T26863] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1562.459743][T20670] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1562.867250][T26878] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1562.878560][ T5775] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260 [ 1563.375657][T26881] loop7: detected capacity change from 0 to 2048 [ 1563.551787][T26881] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 1563.573219][T26881] UDF-fs: Scanning with blocksize 512 failed [ 1563.656987][T26881] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1565.133323][T26893] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4996'. [ 1565.281658][T26896] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4994'. [ 1565.322938][T26896] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4994'. [ 1565.840178][T19331] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1565.932970][T26908] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1566.092513][T19331] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 1566.101152][T19331] usb 2-1: config 0 has no interface number 0 [ 1566.107450][T19331] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1566.126558][T19331] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1566.137278][T19331] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1566.150625][T19331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.185050][T19331] usb 2-1: config 0 descriptor?? [ 1566.218016][T19331] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input29 [ 1566.445791][T19331] usb 2-1: USB disconnect, device number 24 [ 1566.560982][T26920] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5005'. [ 1566.859461][T26925] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5007'. [ 1568.775558][T26952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5017'. [ 1568.889170][T12794] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1569.108805][T12794] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.159288][T12794] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1569.223652][T12794] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1569.265810][T12794] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1569.305607][T12794] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1569.316202][T12794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.325153][T12794] usb 3-1: Product: syz [ 1569.344101][T12794] usb 3-1: Manufacturer: syz [ 1569.351479][T12794] usb 3-1: SerialNumber: syz [ 1569.392763][T12794] cdc_ncm 3-1:1.0: skipping garbage [ 1569.599213][T26949] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1570.156497][T26105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1570.195595][T26105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1570.206016][T26105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1570.215607][T26105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1570.227736][T26105] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1570.228950][T12794] cdc_ncm 3-1:1.0: bind() failure [ 1570.241715][T26222] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.250476][T12794] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1570.253300][T26105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1570.271402][T12794] cdc_ncm 3-1:1.1: bind() failure [ 1570.330977][T12794] usb 3-1: USB disconnect, device number 13 [ 1570.458155][T26222] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.581192][T26222] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.051960][T26222] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.986781][T26963] chnl_net:caif_netlink_parms(): no params data found [ 1572.086254][T26978] loop9: detected capacity change from 0 to 256 [ 1572.200977][T26978] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1572.216161][T26982] loop2: detected capacity change from 0 to 1024 [ 1572.223671][T26982] EXT4-fs: Ignoring removed nobh option [ 1572.229443][T26982] EXT4-fs: inline encryption not supported [ 1572.236444][T26982] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1572.333399][T26982] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.5026: bad orphan inode 32767 [ 1572.378502][T26982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1572.398982][ T5775] Bluetooth: hci0: command tx timeout [ 1572.492822][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1572.492838][ T27] audit: type=1800 audit(1750312032.120:329): pid=26982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5026" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 1572.615658][T26103] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1572.653484][T26963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1572.687635][T26963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.695024][T26963] bridge_slave_0: entered allmulticast mode [ 1572.794237][T26963] bridge_slave_0: entered promiscuous mode [ 1572.867883][T26963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.875142][T26963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.903724][T26963] bridge_slave_1: entered allmulticast mode [ 1572.917000][T26963] bridge_slave_1: entered promiscuous mode [ 1572.933380][T26222] tipc: Left network mode [ 1573.132487][T26997] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1573.210407][T26963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1573.239723][T26963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1573.397982][T26963] team0: Port device team_slave_0 added [ 1573.576246][T26963] team0: Port device team_slave_1 added [ 1574.262226][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1574.463645][T27008] loop9: detected capacity change from 0 to 512 [ 1574.476441][T26963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1574.486417][ T5775] Bluetooth: hci0: command tx timeout [ 1574.516268][T26963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1574.542816][T26963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1574.549259][T27008] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1574.564706][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1574.610711][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.648064][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1574.655534][T27008] EXT4-fs (loop9): 1 truncate cleaned up [ 1574.658871][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1574.680675][T26963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1574.698885][T27008] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1574.721907][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1574.723843][T26963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1574.757052][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.767888][T27015] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5034'. [ 1574.775218][T26963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1574.797382][ T9] usb 3-1: config 0 descriptor?? [ 1575.090330][T27020] loop7: detected capacity change from 0 to 2048 [ 1575.103376][T26337] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.122854][T27020] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1575.142936][T26963] hsr_slave_0: entered promiscuous mode [ 1575.219147][T26963] hsr_slave_1: entered promiscuous mode [ 1575.227213][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1575.233296][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 1575.296461][T26963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1575.301772][ T9] usb 3-1: USB disconnect, device number 14 [ 1575.324522][T26963] Cannot create hsr debugfs directory [ 1575.567626][T27029] loop7: detected capacity change from 0 to 1764 [ 1575.622080][T19831] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1576.565542][ T5775] Bluetooth: hci0: command tx timeout [ 1577.009278][T26222] hsr_slave_0: left promiscuous mode [ 1577.029925][T26222] hsr_slave_1: left promiscuous mode [ 1577.045780][T26222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1577.053706][T26222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1577.074566][T26222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1577.083477][T26222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1577.134872][T26222] bridge_slave_1: left allmulticast mode [ 1577.181362][T26222] bridge_slave_1: left promiscuous mode [ 1577.191619][T26222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.214592][T26222] bridge_slave_0: left allmulticast mode [ 1577.222951][T26222] bridge_slave_0: left promiscuous mode [ 1577.236974][T26222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.291540][T26222] veth1_macvtap: left promiscuous mode [ 1577.302687][T26222] veth0_macvtap: left promiscuous mode [ 1577.310922][T26222] veth1_vlan: left promiscuous mode [ 1577.318008][T26222] veth0_vlan: left promiscuous mode [ 1578.634733][ T5775] Bluetooth: hci0: command tx timeout [ 1579.713457][T27060] loop2: detected capacity change from 0 to 16 [ 1579.751927][T27060] erofs: (device loop2): mounted with root inode @ nid 36. [ 1580.146782][T27066] xt_hashlimit: max too large, truncated to 1048576 [ 1581.474502][T27078] loop9: detected capacity change from 0 to 1024 [ 1582.282632][ T786] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1582.618128][ T786] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.737113][ T786] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1583.110250][ T786] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1583.212632][ T786] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1583.290832][ T786] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1583.305529][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.349430][ T786] usb 3-1: Product: syz [ 1583.354464][ T786] usb 3-1: Manufacturer: syz [ 1583.359113][ T786] usb 3-1: SerialNumber: syz [ 1583.407349][ T786] cdc_ncm 3-1:1.0: skipping garbage [ 1583.605863][T27076] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1583.740285][T26222] team0 (unregistering): Port device team_slave_1 removed [ 1583.918981][T26222] team0 (unregistering): Port device team_slave_0 removed [ 1584.049101][ T786] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 1584.069235][ T786] cdc_ncm 3-1:1.0: bind() failure [ 1584.089172][T26222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1584.099564][ T786] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1584.107332][ T786] cdc_ncm 3-1:1.1: bind() failure [ 1584.136782][ T786] usb 3-1: USB disconnect, device number 15 [ 1584.141544][T14211] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 1584.378689][T26222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1584.775530][T27094] loop2: detected capacity change from 0 to 1024 [ 1584.818049][T14211] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1584.849749][T27094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1584.867584][T27094] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1584.930488][T14211] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1584.933395][T27094] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz.2.5056: path /58/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 1585.011150][T14211] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1585.043030][T26103] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1585.123912][T14211] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.743973][T27092] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1585.784889][T14211] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1585.945787][T27101] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1585.980748][ T5775] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260 [ 1587.282282][T27106] loop7: detected capacity change from 0 to 1024 [ 1587.620580][ T48] hfsplus: b-tree write err: -5, ino 4 [ 1588.470037][T27110] loop7: detected capacity change from 0 to 1024 [ 1588.511750][T27112] loop2: detected capacity change from 0 to 128 [ 1588.584805][T27112] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1588.712322][T27112] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1588.752613][T26222] bond0 (unregistering): Released all slaves [ 1588.781383][T27110] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1588.935837][ T27] audit: type=1800 audit(1750312048.558:330): pid=27112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5061" name="file0" dev="loop2" ino=12 res=0 errno=0 [ 1589.048678][T26103] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1589.074794][T20670] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1591.244125][T14211] usb 10-1: USB disconnect, device number 72 [ 1591.456513][T27132] loop2: detected capacity change from 0 to 8 [ 1591.602548][T27132] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1591.651534][T27132] SQUASHFS error: Failed to read block 0x1c0: -5 [ 1591.702772][T27132] SQUASHFS error: Unable to read metadata cache entry [1be] [ 1592.959771][T27153] syz_tun: entered allmulticast mode [ 1592.967788][T14211] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1593.189305][T14211] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.252282][T14211] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1593.473601][T14211] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1593.713504][T14211] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1593.850400][T26963] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1593.891985][T14211] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1593.932909][T14211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.966915][T26963] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1593.989217][T14211] usb 3-1: Product: syz [ 1593.993480][T14211] usb 3-1: Manufacturer: syz [ 1594.027631][T26963] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1594.034540][T14211] usb 3-1: SerialNumber: syz [ 1594.050749][T14211] cdc_ncm 3-1:1.0: skipping garbage [ 1594.070079][T26963] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1594.251103][T27147] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1594.344132][T26963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1594.394551][T26963] 8021q: adding VLAN 0 to HW filter on device team0 [ 1594.460841][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.468104][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1594.469566][ T5819] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 1594.594670][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.601966][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1594.687763][T14211] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 1594.724481][T14211] cdc_ncm 3-1:1.0: bind() failure [ 1594.731500][ T5819] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1594.764789][T14211] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1594.772950][ T5819] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1594.789908][T14211] cdc_ncm 3-1:1.1: bind() failure [ 1594.799223][ T5819] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1594.815367][T14211] usb 3-1: USB disconnect, device number 16 [ 1594.821950][ T5819] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.986223][T27167] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1595.049921][ T5819] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1595.227821][T27177] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1595.873535][T26963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1596.602035][T26963] veth0_vlan: entered promiscuous mode [ 1596.705360][T26963] veth1_vlan: entered promiscuous mode [ 1596.952976][T26963] veth0_macvtap: entered promiscuous mode [ 1597.000912][T27200] loop2: detected capacity change from 0 to 1024 [ 1597.007753][T26963] veth1_macvtap: entered promiscuous mode [ 1597.094245][T26963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.148768][T26963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.179306][T26963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.208943][T26963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.221162][T26963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.237723][T26963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.267737][T26963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1597.295200][T26222] hfsplus: b-tree write err: -5, ino 4 [ 1597.345644][T26963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1597.450588][T26963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.485850][T26963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1597.515775][T26963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.539204][T26963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1597.563589][T26963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.616170][T26963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1597.678280][T26963] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.725012][T26963] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.753613][T26963] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.778126][T26963] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.468016][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.534349][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.716977][T13660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.740582][T13660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.969511][T14211] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 1599.835489][T14211] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.884100][T14211] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1600.049024][T14211] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1600.120656][T14211] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1600.194358][T14211] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1600.194383][T14211] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.194399][T14211] usb 8-1: Product: syz [ 1600.194410][T14211] usb 8-1: Manufacturer: syz [ 1600.194444][T14211] usb 8-1: SerialNumber: syz [ 1600.199429][T14211] cdc_ncm 8-1:1.0: skipping garbage [ 1600.413237][T27218] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1600.517357][ T42] usb 10-1: USB disconnect, device number 73 [ 1600.734282][ T27] audit: type=1326 audit(1750312060.384:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27240 comm="syz.9.5087" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf04b8e929 code=0x0 [ 1600.815721][T14211] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS [ 1600.837445][T14211] cdc_ncm 8-1:1.0: bind() failure [ 1600.862605][T14211] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1600.891454][T14211] cdc_ncm 8-1:1.1: bind() failure [ 1600.907393][T14211] usb 8-1: USB disconnect, device number 46 [ 1601.007256][T27231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1602.033842][ T27] audit: type=1326 audit(1750312061.675:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27259 comm="syz.2.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4a78e929 code=0x7ffc0000 [ 1602.242582][ T27] audit: type=1326 audit(1750312061.675:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27259 comm="syz.2.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4a78e929 code=0x7ffc0000 [ 1602.264955][ C0] vkms_vblank_simulate: vblank timer overrun [ 1602.271820][ T27] audit: type=1326 audit(1750312061.675:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27259 comm="syz.2.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d4a78e929 code=0x7ffc0000 [ 1602.294157][ C0] vkms_vblank_simulate: vblank timer overrun [ 1602.336210][ T27] audit: type=1326 audit(1750312061.675:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27259 comm="syz.2.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4a78e929 code=0x7ffc0000 [ 1602.436711][ T27] audit: type=1326 audit(1750312061.685:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27259 comm="syz.2.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7d4a78e929 code=0x7ffc0000 [ 1602.529119][ T27] audit: type=1326 audit(1750312061.685:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27259 comm="syz.2.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4a78e929 code=0x7ffc0000 [ 1602.577556][ T27] audit: type=1326 audit(1750312061.685:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27259 comm="syz.2.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f7d4a78e929 code=0x7ffc0000 [ 1602.640155][ T27] audit: type=1326 audit(1750312061.685:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27259 comm="syz.2.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4a78e929 code=0x7ffc0000 [ 1602.715846][ T27] audit: type=1326 audit(1750312061.685:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27259 comm="syz.2.5089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4a78e929 code=0x7ffc0000 [ 1602.741007][T27277] loop9: detected capacity change from 0 to 1764 [ 1602.803848][T19831] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1603.925940][T27287] loop9: detected capacity change from 0 to 16 [ 1603.982561][T27287] erofs: (device loop9): mounted with root inode @ nid 36. [ 1604.037282][T27290] loop2: detected capacity change from 0 to 1764 [ 1604.257420][T27293] 9pnet_fd: Insufficient options for proto=fd [ 1605.234504][T27301] loop9: detected capacity change from 0 to 256 [ 1605.263341][T27301] FAT-fs (loop9): Unrecognized mount option "uni_xla=0" or missing value [ 1605.298505][T27298] loop2: detected capacity change from 0 to 2048 [ 1605.342580][T27301] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5098'. [ 1605.378182][T27301] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5098'. [ 1605.409025][T27298] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1605.472976][T27304] loop1: detected capacity change from 0 to 512 [ 1605.537432][T27304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1605.812527][T27298] loop2: detected capacity change from 2048 to 0 [ 1605.882392][T26963] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1605.932313][ T1106] loop: Write error at byte offset 9223372036855500287, length 512. [ 1605.985540][ C0] I/O error, dev loop2, sector 1415 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1605.995361][ C0] Buffer I/O error on dev loop2, logical block 1415, lost sync page write [ 1606.004044][T27311] UDF-fs: warning (device loop2): udf_update_inode: IO error syncing udf inode [00000587] [ 1606.131673][T26103] syz-executor: attempt to access beyond end of device [ 1606.131673][T26103] loop2: rw=0, sector=1437, nr_sectors = 1 limit=0 [ 1606.195035][T26103] syz-executor: attempt to access beyond end of device [ 1606.195035][T26103] loop2: rw=0, sector=1437, nr_sectors = 1 limit=0 [ 1606.366901][T26103] syz-executor: attempt to access beyond end of device [ 1606.366901][T26103] loop2: rw=2049, sector=128, nr_sectors = 1 limit=0 [ 1606.381757][T27331] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1606.391621][T27323] loop9: detected capacity change from 0 to 1764 [ 1606.437306][T26103] Buffer I/O error on dev loop2, logical block 128, lost sync page write [ 1606.484178][T22287] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1607.915389][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.927574][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.004278][T14483] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.753210][T12794] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1609.894013][T14483] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.921449][ T9] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1610.138705][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1610.155695][T14483] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.205979][ T9] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 1610.238560][ T9] usb 8-1: config 0 has no interface number 0 [ 1610.247236][ T9] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1610.278924][ T9] usb 8-1: config 0 interface 85 has no altsetting 0 [ 1610.302440][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1610.311995][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.314653][T14483] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.320542][ T9] usb 8-1: Product: syz [ 1610.335224][ T9] usb 8-1: Manufacturer: syz [ 1610.358666][ T9] usb 8-1: SerialNumber: syz [ 1610.381430][ T9] usb 8-1: config 0 descriptor?? [ 1610.846104][T27369] loop1: detected capacity change from 0 to 1764 [ 1611.021072][ T9] appletouch 8-1:0.85: Geyser mode initialized. [ 1611.073357][ T9] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.85/input/input30 [ 1611.457029][ T9] usb 8-1: USB disconnect, device number 47 [ 1611.468923][ T9] appletouch 8-1:0.85: input: appletouch disconnected [ 1611.604270][T27376] Device name cannot be null; rc = [-22] [ 1612.249562][T27375] loop9: detected capacity change from 0 to 1764 [ 1612.397364][T22287] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1612.433895][T27379] loop7: detected capacity change from 0 to 16 [ 1612.463375][T27379] erofs: (device loop7): mounted with root inode @ nid 36. [ 1612.609901][T27382] 9pnet_fd: Insufficient options for proto=fd [ 1613.292571][T26105] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1613.308831][T26105] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1613.322008][T26105] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1613.330368][T26105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1613.346734][T26105] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1613.358947][T26105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1613.367591][T27392] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1613.397584][T26105] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 1614.394899][T27413] loop7: detected capacity change from 0 to 1764 [ 1615.024180][T27388] chnl_net:caif_netlink_parms(): no params data found [ 1615.109110][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1615.109127][ T27] audit: type=1326 audit(1750312074.761:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27421 comm="syz.9.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1615.143776][ T27] audit: type=1326 audit(1750312074.761:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27421 comm="syz.9.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1615.167323][ T27] audit: type=1326 audit(1750312074.761:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27421 comm="syz.9.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1615.191380][ T27] audit: type=1326 audit(1750312074.761:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27421 comm="syz.9.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1615.214824][ T27] audit: type=1326 audit(1750312074.761:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27421 comm="syz.9.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1615.267330][ T27] audit: type=1326 audit(1750312074.761:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27421 comm="syz.9.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1615.297214][ T27] audit: type=1326 audit(1750312074.801:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27421 comm="syz.9.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1615.344923][ T27] audit: type=1326 audit(1750312074.801:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27421 comm="syz.9.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1615.373586][T14483] hsr_slave_0: left promiscuous mode [ 1615.373963][ T27] audit: type=1326 audit(1750312074.801:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27421 comm="syz.9.5129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1615.403805][T14483] hsr_slave_1: left promiscuous mode [ 1615.421568][T14483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1615.426500][T27393] Bluetooth: hci2: command tx timeout [ 1615.434195][T14483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1615.450907][T14483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1615.461789][T14483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1615.474093][T14483] bridge_slave_1: left allmulticast mode [ 1615.482686][T14483] bridge_slave_1: left promiscuous mode [ 1615.495287][T14483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.566759][T14483] bridge_slave_0: left allmulticast mode [ 1615.584499][T14483] bridge_slave_0: left promiscuous mode [ 1615.731440][T14483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.839958][T14483] veth1_macvtap: left promiscuous mode [ 1615.845747][T14483] veth0_macvtap: left promiscuous mode [ 1615.851461][T14483] veth1_vlan: left promiscuous mode [ 1615.856947][T14483] veth0_vlan: left promiscuous mode [ 1615.996398][T27441] loop7: detected capacity change from 0 to 1764 [ 1616.732942][T27454] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1616.810937][T27393] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 1617.504140][T27393] Bluetooth: hci2: command tx timeout [ 1617.624809][T19331] usb 10-1: new full-speed USB device number 74 using dummy_hcd [ 1617.849012][T19331] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1617.889872][T19331] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1617.936987][T19331] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1617.962998][T19331] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1617.997333][T27462] loop1: detected capacity change from 0 to 1764 [ 1618.003693][T19331] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1618.003726][T19331] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.003748][T19331] usb 10-1: Product: syz [ 1618.003763][T19331] usb 10-1: Manufacturer: syz [ 1618.003779][T19331] usb 10-1: SerialNumber: syz [ 1618.079976][T19331] cdc_ncm 10-1:1.0: skipping garbage [ 1618.295101][T27457] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1619.129282][T27457] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1619.179615][T14483] team0 (unregistering): Port device team_slave_1 removed [ 1619.311770][T14483] team0 (unregistering): Port device team_slave_0 removed [ 1619.372038][T19331] cdc_ncm 10-1:1.0: bind() failure [ 1619.393195][T19331] cdc_ncm: probe of 10-1:1.1 failed with error -71 [ 1619.415573][T19331] cdc_mbim: probe of 10-1:1.1 failed with error -71 [ 1619.439207][T19331] usbtest: probe of 10-1:1.1 failed with error -71 [ 1619.446586][T14483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1619.451441][T19331] usb 10-1: USB disconnect, device number 74 [ 1619.584229][T27393] Bluetooth: hci2: command tx timeout [ 1619.596197][T14483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1620.172841][T27475] loop1: detected capacity change from 0 to 1024 [ 1620.190284][ T27] audit: type=1326 audit(1750312079.844:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27469 comm="syz.9.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1620.230187][ T27] audit: type=1326 audit(1750312079.844:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27469 comm="syz.9.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1620.262600][ T27] audit: type=1326 audit(1750312079.844:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27469 comm="syz.9.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1620.306935][ T27] audit: type=1326 audit(1750312079.844:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27469 comm="syz.9.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1620.330471][ T27] audit: type=1326 audit(1750312079.844:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27469 comm="syz.9.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1620.331122][ T1124] hfsplus: b-tree write err: -5, ino 4 [ 1620.352965][ T27] audit: type=1326 audit(1750312079.844:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27469 comm="syz.9.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1620.353017][ T27] audit: type=1326 audit(1750312079.844:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27469 comm="syz.9.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1620.353071][ T27] audit: type=1326 audit(1750312079.844:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27469 comm="syz.9.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1621.720582][T27393] Bluetooth: hci2: command tx timeout [ 1621.940252][T14483] bond0 (unregistering): Released all slaves [ 1622.171114][T27487] loop1: detected capacity change from 0 to 512 [ 1622.236861][T19831] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1622.543214][T27388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.550601][T27388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.570217][T27388] bridge_slave_0: entered allmulticast mode [ 1622.598917][T27388] bridge_slave_0: entered promiscuous mode [ 1622.636739][T27388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.666502][T27388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.717894][T27388] bridge_slave_1: entered allmulticast mode [ 1622.752445][T27388] bridge_slave_1: entered promiscuous mode [ 1622.759104][T27503] Device name cannot be null; rc = [-22] [ 1623.017811][T27510] loop7: detected capacity change from 0 to 1024 [ 1623.049274][T27388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1623.122395][T27388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1623.142228][ T786] usb 10-1: new full-speed USB device number 75 using dummy_hcd [ 1623.362487][ T786] usb 10-1: device descriptor read/64, error -71 [ 1623.400130][T27388] team0: Port device team_slave_0 added [ 1623.423458][T27388] team0: Port device team_slave_1 added [ 1623.631885][ T786] usb 10-1: new full-speed USB device number 76 using dummy_hcd [ 1623.820339][ T27] audit: type=1326 audit(1750312083.475:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27519 comm="syz.7.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1623.844054][ T786] usb 10-1: device descriptor read/64, error -71 [ 1623.964229][ T786] usb usb10-port1: attempt power cycle [ 1623.977591][ T27] audit: type=1326 audit(1750312083.475:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27519 comm="syz.7.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1624.040317][T27388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1624.064345][T27388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1624.118180][T27388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1624.183169][T27388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1624.212417][T27388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1624.245765][T27388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1624.249465][T27532] netlink: 'syz.1.5159': attribute type 1 has an invalid length. [ 1624.265293][T27532] netlink: 'syz.1.5159': attribute type 2 has an invalid length. [ 1624.273866][T27532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5159'. [ 1624.431461][ T786] usb 10-1: new full-speed USB device number 77 using dummy_hcd [ 1624.608509][ T786] usb 10-1: device descriptor read/8, error -71 [ 1624.694417][T27388] hsr_slave_0: entered promiscuous mode [ 1624.731663][T27540] loop1: detected capacity change from 0 to 1764 [ 1624.746138][T27388] hsr_slave_1: entered promiscuous mode [ 1624.784179][T27388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1624.809991][T27388] Cannot create hsr debugfs directory [ 1624.998714][ T786] usb 10-1: new full-speed USB device number 78 using dummy_hcd [ 1625.062214][ T786] usb 10-1: device descriptor read/8, error -71 [ 1625.993093][ T786] usb usb10-port1: unable to enumerate USB device [ 1627.231661][T27549] loop7: detected capacity change from 0 to 128 [ 1627.816833][T27549] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1628.012839][T27549] ext4 filesystem being mounted at /418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1628.346013][T20670] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1631.846658][T27586] loop7: detected capacity change from 0 to 1764 [ 1631.870643][T27588] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5168'. [ 1631.880544][T27588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5168'. [ 1633.700887][T27388] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1633.740019][T27388] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1633.767466][T27388] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1633.798735][T27388] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1634.091006][T27388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1634.145302][T27388] 8021q: adding VLAN 0 to HW filter on device team0 [ 1634.210095][T27146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1634.217356][T27146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1634.259096][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 1634.266429][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1634.761921][T27626] loop7: detected capacity change from 0 to 1764 [ 1634.881416][T27630] loop1: detected capacity change from 0 to 16 [ 1634.928416][T27630] erofs: (device loop1): mounted with root inode @ nid 36. [ 1635.099251][T12794] kernel write not supported for file /input/event2 (pid: 12794 comm: kworker/0:0) [ 1635.324715][T27388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1635.504021][T27638] loop1: detected capacity change from 0 to 1024 [ 1635.858561][T27644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5183'. [ 1636.104026][T27654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5185'. [ 1636.185592][T13367] usb 8-1: new full-speed USB device number 48 using dummy_hcd [ 1636.395826][T13367] usb 8-1: device descriptor read/64, error -71 [ 1636.511375][T27388] veth0_vlan: entered promiscuous mode [ 1636.553867][T27388] veth1_vlan: entered promiscuous mode [ 1636.633529][T27669] loop9: detected capacity change from 0 to 16 [ 1636.650832][T27388] veth0_macvtap: entered promiscuous mode [ 1636.680555][T27388] veth1_macvtap: entered promiscuous mode [ 1636.695329][T13367] usb 8-1: new full-speed USB device number 49 using dummy_hcd [ 1636.744931][T27388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1636.748392][T27669] erofs: (device loop9): mounted with root inode @ nid 36. [ 1636.775140][T27388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1636.807038][T27388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1636.842295][T27388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1636.861245][T27388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1636.885557][T27388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1636.885829][T27673] 9pnet_fd: Insufficient options for proto=fd [ 1636.902438][T13367] usb 8-1: device descriptor read/64, error -71 [ 1636.907688][T27388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1636.946009][T27388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1636.969676][T27388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1637.000052][T27388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1637.025197][T27388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1637.045129][T13367] usb usb8-port1: attempt power cycle [ 1637.045391][T27388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1637.095279][T27388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1637.117117][T27388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1637.168016][T27388] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.177219][T27388] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.195989][T27388] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.208482][T27388] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.484939][T13367] usb 8-1: new full-speed USB device number 50 using dummy_hcd [ 1637.494196][T27146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1637.517781][T27681] loop9: detected capacity change from 0 to 1764 [ 1637.525910][T27146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1637.557247][T13367] usb 8-1: device descriptor read/8, error -71 [ 1637.595951][T13660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1637.606425][T13660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1637.844763][T13367] usb 8-1: new full-speed USB device number 51 using dummy_hcd [ 1637.939007][T13367] usb 8-1: device descriptor read/8, error -71 [ 1638.123774][T13367] usb usb8-port1: unable to enumerate USB device [ 1638.876993][T27693] loop4: detected capacity change from 0 to 1764 [ 1639.553980][T27710] loop7: detected capacity change from 0 to 16 [ 1639.642142][T27710] erofs: (device loop7): mounted with root inode @ nid 36. [ 1639.793293][T27713] 9pnet_fd: Insufficient options for proto=fd [ 1640.968213][T27725] loop7: detected capacity change from 0 to 1764 [ 1642.256353][T27699] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1642.358572][T27393] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1642.432741][T19331] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1642.526551][T27745] loop4: detected capacity change from 0 to 128 [ 1642.601572][T27745] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1642.652321][T19331] usb 2-1: device descriptor read/64, error -71 [ 1642.675993][T27745] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1642.928628][T19331] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1643.132500][T19331] usb 2-1: device descriptor read/64, error -71 [ 1643.272495][T19331] usb usb2-port1: attempt power cycle [ 1643.693114][T19331] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1643.753539][T19331] usb 2-1: device descriptor read/8, error -71 [ 1643.910932][T27765] loop7: detected capacity change from 0 to 16 [ 1643.975483][T27765] erofs: (device loop7): mounted with root inode @ nid 36. [ 1644.031636][T19331] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1644.095889][T19331] usb 2-1: device descriptor read/8, error -71 [ 1644.148234][T27768] 9pnet_fd: Insufficient options for proto=fd [ 1644.241817][T19331] usb usb2-port1: unable to enumerate USB device [ 1644.667679][T27775] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1644.772103][T27393] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 1645.402247][T27393] Bluetooth: hci1: command 0x0406 tx timeout [ 1645.420800][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 1645.420816][ T27] audit: type=1326 audit(1750312105.086:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27778 comm="syz.7.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1645.559622][ T27] audit: type=1326 audit(1750312105.086:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27778 comm="syz.7.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1645.810706][ T27] audit: type=1326 audit(1750312105.126:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27778 comm="syz.7.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1645.886954][ T27] audit: type=1326 audit(1750312105.126:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27778 comm="syz.7.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1645.930830][ T27] audit: type=1326 audit(1750312105.126:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27778 comm="syz.7.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1646.010541][ T27] audit: type=1326 audit(1750312105.146:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27778 comm="syz.7.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1646.047818][T27790] loop4: detected capacity change from 0 to 1024 [ 1646.072382][ T27] audit: type=1326 audit(1750312105.146:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27778 comm="syz.7.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1646.107499][T27790] EXT4-fs: Ignoring removed orlov option [ 1646.140829][T27790] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1646.157010][ T27] audit: type=1326 audit(1750312105.146:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27778 comm="syz.7.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1646.235655][T27790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1646.362036][ T27] audit: type=1326 audit(1750312106.037:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27792 comm="syz.7.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1646.440609][ T27] audit: type=1326 audit(1750312106.067:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27792 comm="syz.7.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1646.554317][T27388] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1646.636493][T27806] loop1: detected capacity change from 0 to 1764 [ 1647.982434][T27823] loop4: detected capacity change from 0 to 512 [ 1648.011365][T27823] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1648.048569][T27825] loop1: detected capacity change from 0 to 16 [ 1648.064713][T27823] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.5220: corrupted in-inode xattr: bad e_name length [ 1648.107510][T27825] erofs: (device loop1): mounted with root inode @ nid 36. [ 1648.122028][T27823] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.5220: couldn't read orphan inode 15 (err -117) [ 1648.191336][T27823] EXT4-fs (loop4): mounted filesystem 00000004-0000-0000-0000-000000060000 r/w without journal. Quota mode: writeback. [ 1648.275900][T27829] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5221'. [ 1648.410634][T27388] EXT4-fs (loop4): unmounting filesystem 00000004-0000-0000-0000-000000060000. [ 1648.561783][T27836] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1648.674804][T27838] loop4: detected capacity change from 0 to 1024 [ 1648.755631][T27842] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5224'. [ 1649.167501][T27850] loop1: detected capacity change from 0 to 1764 [ 1649.179077][T27722] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 1649.552982][T27722] usb 10-1: Using ep0 maxpacket: 16 [ 1649.580965][T27722] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1649.638141][T27864] Device name cannot be null; rc = [-22] [ 1650.218832][T27722] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1650.229138][T27722] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1650.242208][T27722] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1650.251447][T27722] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.263359][T27722] usb 10-1: config 0 descriptor?? [ 1650.776374][T27722] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0012/input/input31 [ 1651.681422][T27877] loop7: detected capacity change from 0 to 8 [ 1651.759757][T27722] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1651.849494][T27722] usb 10-1: USB disconnect, device number 79 [ 1652.165366][T27883] loop1: detected capacity change from 0 to 16 [ 1652.199649][T27880] fido_id[27880]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1652.226328][T27883] erofs: (device loop1): mounted with root inode @ nid 36. [ 1652.797300][T19331] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1652.818543][T27892] loop9: detected capacity change from 0 to 1024 [ 1652.993410][T19331] usb 8-1: Using ep0 maxpacket: 32 [ 1653.034191][T19331] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 1653.060183][T19331] usb 8-1: config 0 has no interface number 0 [ 1653.066426][T19331] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1653.141580][T19331] usb 8-1: config 0 interface 85 has no altsetting 0 [ 1653.218649][T19331] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1653.246879][T19331] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.287327][T19331] usb 8-1: Product: syz [ 1653.291610][T19331] usb 8-1: Manufacturer: syz [ 1653.296247][T19331] usb 8-1: SerialNumber: syz [ 1653.351618][T19331] usb 8-1: config 0 descriptor?? [ 1654.386457][T19331] appletouch 8-1:0.85: Geyser mode initialized. [ 1654.459068][T19331] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.85/input/input32 [ 1654.642444][T19331] usb 8-1: USB disconnect, device number 52 [ 1654.739409][T19331] appletouch 8-1:0.85: input: appletouch disconnected [ 1655.331531][T27917] loop9: detected capacity change from 0 to 1024 [ 1655.725020][T27146] hfsplus: b-tree write err: -5, ino 4 [ 1656.889517][T27946] raw_sendmsg: syz.1.5247 forgot to set AF_INET. Fix it! [ 1657.114975][T27943] loop9: detected capacity change from 0 to 2048 [ 1657.171058][T27943] EXT4-fs (loop9): cluster size (2048) smaller than block size (4096) [ 1657.481464][T27957] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5248'. [ 1658.006367][T27967] loop4: detected capacity change from 0 to 1024 [ 1658.060904][T27975] loop1: detected capacity change from 0 to 1024 [ 1658.136367][T27975] EXT4-fs: Ignoring removed orlov option [ 1658.170660][T27975] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 0 [ 1658.490485][ T1106] hfsplus: b-tree write err: -5, ino 4 [ 1659.691519][T27994] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1659.809606][T20671] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 1660.849039][T28001] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5258'. [ 1660.995261][T28003] loop4: detected capacity change from 0 to 1764 [ 1661.027309][T28005] loop9: detected capacity change from 0 to 1024 [ 1663.365834][T28019] loop9: detected capacity change from 0 to 1024 [ 1663.577788][ T48] hfsplus: b-tree write err: -5, ino 4 [ 1663.578247][T28025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5264'. [ 1664.392526][T28036] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1664.608720][T20671] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1665.474374][T28049] loop9: detected capacity change from 0 to 1764 [ 1666.571210][T28062] Device name cannot be null; rc = [-22] [ 1666.899496][T28053] loop4: detected capacity change from 0 to 1024 [ 1667.649548][T28053] hfsplus: xattr search failed [ 1668.917712][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.928079][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.236491][T28079] loop9: detected capacity change from 0 to 1764 [ 1669.671779][T28083] loop4: detected capacity change from 0 to 256 [ 1669.759004][T28083] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1670.113444][T28083] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1670.232374][T28089] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5278'. [ 1670.396439][T28083] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1670.933500][T28100] loop9: detected capacity change from 0 to 512 [ 1670.956527][T28100] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1670.977179][T28100] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1671.477512][T28108] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1671.490373][T20671] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 1672.187732][T28100] EXT4-fs (loop9): 1 truncate cleaned up [ 1672.279858][T28100] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1672.884172][T28130] loop4: detected capacity change from 0 to 1024 [ 1672.945375][T28130] EXT4-fs: Ignoring removed oldalloc option [ 1673.055939][T28130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1673.171872][T28100] fscrypt (loop9): Error allocating 'xts(aes)' transform: -4 [ 1673.204136][T28136] loop1: detected capacity change from 0 to 1764 [ 1673.322276][T27388] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1673.373037][T26337] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1674.107774][T28142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1676.330835][T28182] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1676.345796][T20671] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 1677.629670][T28181] syz.7.5295: attempt to access beyond end of device [ 1677.629670][T28181] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1677.738771][T28194] loop9: detected capacity change from 0 to 2048 [ 1677.829735][T28194] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 1677.884461][T28194] UDF-fs: Scanning with blocksize 512 failed [ 1678.152465][T28194] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1678.291818][T28203] loop1: detected capacity change from 0 to 16 [ 1678.374121][T28203] erofs: (device loop1): mounted with root inode @ nid 36. [ 1678.790914][T28208] loop4: detected capacity change from 0 to 1764 [ 1680.340587][T28223] loop4: detected capacity change from 0 to 128 [ 1680.516781][T28223] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1680.631893][T28223] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1680.654100][T28212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1680.928473][T27388] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1683.146859][T28263] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5311'. [ 1683.156993][T28263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5311'. [ 1683.845397][ T786] kernel write not supported for file /input/event2 (pid: 786 comm: kworker/0:2) [ 1684.055914][T28271] loop4: detected capacity change from 0 to 512 [ 1684.092945][T28271] EXT4-fs: Ignoring removed nobh option [ 1684.101924][T28271] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1684.154316][T28271] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1684.203399][T28271] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1684.369949][T28271] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #2: comm syz.4.5314: Directory hole found for htree leaf block 0 [ 1684.433875][T28271] EXT4-fs (loop4): Remounting filesystem read-only [ 1684.622477][T27388] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1684.679731][T28285] loop1: detected capacity change from 0 to 1024 [ 1684.762523][T28285] ext4: Bad value for 'barrier' [ 1685.822028][T28308] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5322'. [ 1685.831345][T28308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5322'. [ 1685.934089][T28289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1686.782784][T28318] loop7: detected capacity change from 0 to 128 [ 1686.833843][T28318] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1686.870831][T28318] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1686.950891][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 1686.950908][ T27] audit: type=1800 audit(1750312146.647:388): pid=28318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5326" name="file1" dev="loop7" ino=104 res=0 errno=0 [ 1687.399933][T14005] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 1687.671778][T14005] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1687.735247][ T27] audit: type=1326 audit(1750312147.427:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28336 comm="syz.4.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a0f8e929 code=0x7ffc0000 [ 1687.758847][T14005] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1687.779494][T14005] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1687.795014][ T27] audit: type=1326 audit(1750312147.427:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28336 comm="syz.4.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a0f8e929 code=0x7ffc0000 [ 1687.847579][T14005] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1687.857059][ T27] audit: type=1326 audit(1750312147.467:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28336 comm="syz.4.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa0a0f8e929 code=0x7ffc0000 [ 1687.857121][ T27] audit: type=1326 audit(1750312147.467:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28336 comm="syz.4.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a0f8e929 code=0x7ffc0000 [ 1687.965978][ T27] audit: type=1326 audit(1750312147.467:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28336 comm="syz.4.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a0f8e929 code=0x7ffc0000 [ 1688.008582][ T27] audit: type=1326 audit(1750312147.467:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28336 comm="syz.4.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fa0a0f8e929 code=0x7ffc0000 [ 1688.035026][T14005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.068001][T14005] usb 2-1: Product: syz [ 1688.078688][T14005] usb 2-1: Manufacturer: syz [ 1688.083730][ T27] audit: type=1326 audit(1750312147.467:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28336 comm="syz.4.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a0f8e929 code=0x7ffc0000 [ 1688.121678][ T27] audit: type=1326 audit(1750312147.467:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28336 comm="syz.4.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a0f8e929 code=0x7ffc0000 [ 1688.156669][T14005] usb 2-1: SerialNumber: syz [ 1688.182702][ T27] audit: type=1326 audit(1750312147.467:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28336 comm="syz.4.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fa0a0f8e929 code=0x7ffc0000 [ 1688.226404][T14005] cdc_ncm 2-1:1.0: skipping garbage [ 1688.246644][T14005] cdc_ncm 2-1:1.0: skipping garbage [ 1688.280583][T14005] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1688.300944][T14005] cdc_ncm 2-1:1.0: bind() failure [ 1689.172809][T28359] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5334'. [ 1690.199328][T12337] usb 2-1: USB disconnect, device number 30 [ 1692.625168][T28428] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5351'. [ 1692.634549][T28428] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5351'. [ 1692.847204][T14005] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 1693.259278][T14005] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.329192][T14005] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1693.343313][T14005] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1693.377627][T14005] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1693.407023][T14005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.427495][T14005] usb 2-1: Product: syz [ 1693.438756][T14005] usb 2-1: Manufacturer: syz [ 1693.463575][T14005] usb 2-1: SerialNumber: syz [ 1693.501721][T14005] cdc_ncm 2-1:1.0: skipping garbage [ 1693.532382][T14005] cdc_ncm 2-1:1.0: skipping garbage [ 1693.548847][T14005] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1693.573999][T14005] cdc_ncm 2-1:1.0: bind() failure [ 1694.966700][T28462] loop7: detected capacity change from 0 to 512 [ 1694.993006][T28462] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1695.858774][T19331] usb 2-1: USB disconnect, device number 31 [ 1696.520785][T28490] fuse: Bad value for 'fd' [ 1696.539722][T28490] fuse: Bad value for 'fd' [ 1696.659629][T20671] Bluetooth: hci0: command 0x0406 tx timeout [ 1697.006890][T28502] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1697.023379][T27393] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 1697.600217][T28509] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1697.904676][ T42] usb 10-1: new full-speed USB device number 80 using dummy_hcd [ 1698.154627][T19331] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1698.312135][ T42] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1698.323788][ T42] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1698.354568][T19331] usb 8-1: Using ep0 maxpacket: 16 [ 1698.475625][T19331] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1698.592838][T19331] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1698.705436][T19331] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1698.867448][T19331] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1698.903142][T19331] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.950947][T19331] usb 8-1: config 0 descriptor?? [ 1699.054219][ T42] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1699.071071][ T42] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1699.090054][ T42] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.099098][ T42] usb 10-1: Product: syz [ 1699.103418][ T42] usb 10-1: Manufacturer: syz [ 1699.108258][ T42] usb 10-1: SerialNumber: syz [ 1699.135634][ T42] cdc_ncm 10-1:1.0: skipping garbage [ 1699.141017][ T42] cdc_ncm 10-1:1.0: skipping garbage [ 1699.146729][ T42] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 1699.153672][ T42] cdc_ncm 10-1:1.0: bind() failure [ 1699.382899][T28544] fuse: Bad value for 'fd' [ 1699.397988][T28544] fuse: Bad value for 'fd' [ 1699.415142][T19331] usbhid 8-1:0.0: can't add hid device: -71 [ 1699.421223][T19331] usbhid: probe of 8-1:0.0 failed with error -71 [ 1699.446905][T19331] usb 8-1: USB disconnect, device number 53 [ 1699.620067][T28551] loop4: detected capacity change from 0 to 1024 [ 1699.631739][T28551] EXT4-fs: Ignoring removed mblk_io_submit option [ 1699.658148][T28551] EXT4-fs: Ignoring removed orlov option [ 1699.667857][T28551] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1699.677835][T28551] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1699.696728][T28551] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 1699.709037][T28551] EXT4-fs error (device loop4): __ext4_iget:5047: inode #2: block 127754: comm syz.4.5380: invalid block [ 1699.723988][T28551] EXT4-fs (loop4): no journal found [ 1699.733798][T28551] EXT4-fs (loop4): can't get journal size [ 1699.748027][T28551] EXT4-fs error (device loop4): __ext4_iget:5047: inode #2: block 127754: comm syz.4.5380: invalid block [ 1699.768100][T28551] EXT4-fs (loop4): get root inode failed [ 1699.781961][T28551] EXT4-fs (loop4): mount failed [ 1700.197309][T28569] loop7: detected capacity change from 0 to 1764 [ 1700.355620][T19831] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1700.476182][T28574] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1700.489935][T27393] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 1701.191763][ T42] usb 10-1: USB disconnect, device number 80 [ 1701.878719][T28598] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1702.116823][T28604] loop1: detected capacity change from 0 to 1764 [ 1703.484927][T14005] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1703.507566][T28579] syz.4.5386: attempt to access beyond end of device [ 1703.507566][T28579] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1703.741809][T14005] usb 8-1: Using ep0 maxpacket: 16 [ 1703.758738][T14005] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1703.797350][T14005] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1703.839793][T14005] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1703.871960][T14005] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1703.881186][T14005] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.904365][T14005] usb 8-1: config 0 descriptor?? [ 1704.385670][T28629] loop1: detected capacity change from 0 to 1024 [ 1704.437648][T14005] usbhid 8-1:0.0: can't add hid device: -71 [ 1704.465318][T28629] EXT4-fs: Ignoring removed orlov option [ 1704.501690][T14005] usbhid: probe of 8-1:0.0 failed with error -71 [ 1704.548325][T28629] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1704.602158][T14005] usb 8-1: USB disconnect, device number 54 [ 1704.677951][T28629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1705.176703][T26963] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1706.091678][T28653] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1706.101197][T28647] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5401'. [ 1706.110201][T28647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5401'. [ 1706.205772][T28654] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1707.000385][T27393] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 1707.150768][T28656] netlink: 'syz.9.5402': attribute type 4 has an invalid length. [ 1707.207945][T28664] loop7: detected capacity change from 0 to 1764 [ 1707.402015][T19831] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1708.093473][T19331] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 1708.107444][T28672] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1708.367422][T19331] usb 10-1: Using ep0 maxpacket: 32 [ 1708.378723][T19331] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1708.403212][T19331] usb 10-1: config 0 has no interface number 0 [ 1708.426812][T19331] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1708.459620][T19331] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.478460][T19331] usb 10-1: Product: syz [ 1708.498584][T19331] usb 10-1: Manufacturer: syz [ 1708.508729][T19331] usb 10-1: SerialNumber: syz [ 1708.530497][T19331] usb 10-1: config 0 descriptor?? [ 1708.551208][T19331] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1708.559609][ T42] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1708.575443][T19331] usb 10-1: selecting invalid altsetting 1 [ 1708.603617][T19331] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1708.665559][T19331] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1708.709485][T19331] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1708.738419][T19331] usb 10-1: media controller created [ 1708.759635][T28656] usb 10-1: dvb_usb_ce6230: I2C read not implemented [ 1708.769464][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 1708.780970][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.793697][T28656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1708.823154][T28656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1708.833710][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1708.836131][T19331] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1708.865066][T28689] loop1: detected capacity change from 0 to 2048 [ 1708.874444][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1708.905156][T28689] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 1708.946277][ T42] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1708.989111][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.994733][T19331] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1709.009358][T28689] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1709.024551][ T42] usb 5-1: config 0 descriptor?? [ 1709.047671][T19331] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1709.073725][T19331] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1709.299539][T19331] usb 10-1: USB disconnect, device number 81 [ 1709.459974][ T42] usbhid 5-1:0.0: can't add hid device: -71 [ 1709.466064][ T42] usbhid: probe of 5-1:0.0 failed with error -71 [ 1709.522008][ T42] usb 5-1: USB disconnect, device number 12 [ 1710.465795][T28716] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1710.479482][T27393] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 1711.191418][T28720] loop7: detected capacity change from 0 to 1024 [ 1711.208012][ T9] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 1711.249525][T28720] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1711.326085][T28697] syz.1.5410: attempt to access beyond end of device [ 1711.326085][T28697] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1711.427868][ T9] usb 10-1: device descriptor read/64, error -71 [ 1712.417756][ T9] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 1712.727352][ T9] usb 10-1: device descriptor read/64, error -71 [ 1712.853101][ T9] usb usb10-port1: attempt power cycle [ 1713.137033][T19331] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1713.317112][ T9] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 1713.359287][T19331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1713.382988][T19331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1713.443914][T19331] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1713.486796][T19331] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1713.489038][T28745] loop7: detected capacity change from 0 to 1764 [ 1713.542125][T19331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.615783][ T9] usb 10-1: device descriptor read/8, error -71 [ 1713.628510][T19331] usb 5-1: config 0 descriptor?? [ 1713.921700][T27393] Bluetooth: hci0: unexpected event for opcode 0x0402 [ 1714.143063][T19331] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x2 [ 1714.171308][T19331] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1714.196401][T19331] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1714.216448][T19331] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1714.234145][T19331] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1714.249103][T19331] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1714.266163][T19331] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1714.284011][T19331] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1714.302853][T19331] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 1714.346871][T19331] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1714.393826][T19331] usb 5-1: USB disconnect, device number 13 [ 1714.538466][T28762] fido_id[28762]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1715.019804][T28771] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1715.036534][T20671] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 1716.508515][T28785] loop1: detected capacity change from 0 to 256 [ 1716.703362][T28785] loop1: detected capacity change from 0 to 512 [ 1716.778210][T28785] ext2: Unknown parameter 'smackfsroot' [ 1717.241601][T28807] loop4: detected capacity change from 0 to 2048 [ 1717.293947][T28807] EXT4-fs (loop4): cluster size (2048) smaller than block size (4096) [ 1717.354883][T19331] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1717.571722][T19331] usb 8-1: device descriptor read/64, error -71 [ 1717.864726][T19331] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1718.208793][T19331] usb 8-1: device descriptor read/64, error -71 [ 1718.332024][T28820] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1718.405338][T27393] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 1718.954614][T19331] usb usb8-port1: attempt power cycle [ 1719.309520][T28828] loop1: detected capacity change from 0 to 1764 [ 1719.508962][T19331] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1720.462280][T28836] loop4: detected capacity change from 0 to 1764 [ 1720.965601][T28843] Device name cannot be null; rc = [-22] [ 1721.229774][T27393] Bluetooth: hci1: unexpected event for opcode 0x2028 [ 1721.256562][T19331] usb 8-1: device descriptor read/8, error -71 [ 1721.540987][T28855] fuse: Bad value for 'fd' [ 1721.558191][T28853] loop7: detected capacity change from 0 to 2048 [ 1721.583821][T28855] fuse: Bad value for 'fd' [ 1721.594324][T28853] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1721.707896][T28853] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1721.976636][T28853] EXT4-fs error (device loop7): empty_inline_dir:1849: inode #12: block 9: comm syz.7.5445: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 1722.075880][T28866] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1722.091324][T27393] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1722.721406][T28853] EXT4-fs (loop7): Remounting filesystem read-only [ 1722.744832][T28853] EXT4-fs warning (device loop7): empty_inline_dir:1856: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 1722.840904][T20670] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1724.107716][T28886] loop9: detected capacity change from 0 to 1024 [ 1725.338818][T28900] loop7: detected capacity change from 0 to 1764 [ 1725.480869][T19331] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1725.760976][T19331] usb 5-1: device descriptor read/64, error -71 [ 1725.844370][T28909] Device name cannot be null; rc = [-22] [ 1726.050856][T19331] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1726.220635][T19331] usb 5-1: device descriptor read/64, error -71 [ 1726.280677][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1726.450737][T19331] usb usb5-port1: attempt power cycle [ 1726.662570][T28923] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1726.743648][T27393] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1726.911208][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1727.234495][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1727.252779][T19331] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1727.282623][ T9] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1727.333029][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.388164][ T9] usb 2-1: Product: syz [ 1727.408410][ T9] usb 2-1: Manufacturer: syz [ 1727.423651][ T9] usb 2-1: SerialNumber: syz [ 1727.446167][ T9] usb 2-1: config 0 descriptor?? [ 1727.460632][T28911] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1727.497690][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input33 [ 1727.579915][ T786] usb 8-1: new full-speed USB device number 59 using dummy_hcd [ 1727.803826][ T786] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.919568][ T786] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1727.969968][ T786] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1727.992880][T27722] usb 2-1: USB disconnect, device number 32 [ 1727.993049][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1728.076013][ T786] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1728.107117][ T786] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.137549][ T786] usb 8-1: Product: syz [ 1728.149601][ T786] usb 8-1: Manufacturer: syz [ 1728.154379][ T786] usb 8-1: SerialNumber: syz [ 1728.235498][ T786] cdc_ncm 8-1:1.0: skipping garbage [ 1728.451309][T28939] loop9: detected capacity change from 0 to 1764 [ 1728.859396][T19331] usb 5-1: device descriptor read/8, error -71 [ 1729.071016][T28949] loop9: detected capacity change from 0 to 128 [ 1729.099468][T28949] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1729.261118][ T786] cdc_ncm 8-1:1.0: bind() failure [ 1729.289592][ T786] cdc_ncm: probe of 8-1:1.1 failed with error -71 [ 1729.315782][ T786] cdc_mbim: probe of 8-1:1.1 failed with error -71 [ 1729.338504][ T786] usbtest: probe of 8-1:1.1 failed with error -71 [ 1729.383139][ T786] usb 8-1: USB disconnect, device number 59 [ 1730.015979][T28948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1730.369350][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.376145][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.734172][T28967] loop7: detected capacity change from 0 to 1764 [ 1732.083654][T28994] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1732.121824][T27393] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 1732.525318][T29002] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5477'. [ 1732.855851][T29006] loop7: detected capacity change from 0 to 1764 [ 1732.951766][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1732.951808][ T27] audit: type=1326 audit(1750312192.650:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.9.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1733.167007][ T27] audit: type=1326 audit(1750312192.650:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.9.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1733.201318][ T27] audit: type=1326 audit(1750312192.650:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.9.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1733.633715][T29012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1733.710861][ T27] audit: type=1326 audit(1750312192.650:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.9.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1733.856247][ T27] audit: type=1326 audit(1750312192.650:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.9.5480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf04b8e929 code=0x7ffc0000 [ 1735.493798][T29030] loop1: detected capacity change from 0 to 1764 [ 1735.847677][ T27] audit: type=1326 audit(1750312195.562:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.7.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1735.871346][T29043] Device name cannot be null; rc = [-22] [ 1736.071515][ T27] audit: type=1326 audit(1750312195.562:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.7.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1736.151689][T29049] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1736.225886][T27393] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1736.910751][ T27] audit: type=1326 audit(1750312195.762:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.7.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1736.945441][ T27] audit: type=1326 audit(1750312195.762:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.7.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1737.120287][ T27] audit: type=1326 audit(1750312195.762:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29041 comm="syz.7.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1737.516989][T27393] Bluetooth: hci2: command 0x0406 tx timeout [ 1739.168722][T29071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5496'. [ 1739.224172][ T5819] usb 10-1: new full-speed USB device number 86 using dummy_hcd [ 1739.451578][ T5819] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1739.517717][ T5819] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1739.669353][ T5819] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1739.710367][ T27] audit: type=1326 audit(1750312199.413:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29079 comm="syz.7.5500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1739.783061][ T5819] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1739.801155][ T27] audit: type=1326 audit(1750312199.413:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29079 comm="syz.7.5500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1739.836803][ T27] audit: type=1326 audit(1750312199.423:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29079 comm="syz.7.5500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1739.852778][ T5819] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1739.893940][ T5819] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.902105][ T5819] usb 10-1: Product: syz [ 1739.943801][ T5819] usb 10-1: Manufacturer: syz [ 1739.948572][ T5819] usb 10-1: SerialNumber: syz [ 1739.948673][ T27] audit: type=1326 audit(1750312199.423:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29079 comm="syz.7.5500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1740.008929][T29084] loop7: detected capacity change from 0 to 1764 [ 1740.011957][ T5819] cdc_ncm 10-1:1.0: skipping garbage [ 1740.023607][ T27] audit: type=1326 audit(1750312199.453:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29079 comm="syz.7.5500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1740.081038][T20671] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 1740.431897][T29087] Device name cannot be null; rc = [-22] [ 1741.033254][ T5819] cdc_ncm 10-1:1.0: bind() failure [ 1741.065302][ T5819] cdc_ncm: probe of 10-1:1.1 failed with error -71 [ 1741.089651][ T5819] cdc_mbim: probe of 10-1:1.1 failed with error -71 [ 1741.122074][ T5819] usbtest: probe of 10-1:1.1 failed with error -71 [ 1741.155218][ T5819] usb 10-1: USB disconnect, device number 86 [ 1741.435665][T29109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5507'. [ 1741.483517][ T27] audit: type=1326 audit(1750312201.194:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29108 comm="syz.7.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1741.601529][ T27] audit: type=1326 audit(1750312201.204:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29108 comm="syz.7.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1741.702653][ T27] audit: type=1326 audit(1750312201.204:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29108 comm="syz.7.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1741.777891][T29113] loop1: detected capacity change from 0 to 1764 [ 1741.805885][ T27] audit: type=1326 audit(1750312201.204:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29108 comm="syz.7.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5bb8e929 code=0x7ffc0000 [ 1741.865885][T29121] loop9: detected capacity change from 0 to 1764 [ 1742.308045][T29128] Device name cannot be null; rc = [-22] [ 1742.439725][T29131] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1742.525324][T20671] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 1743.669354][T29147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5520'. [ 1743.780252][T28390] IPVS: starting estimator thread 0... [ 1743.902103][T29152] IPVS: using max 19 ests per chain, 45600 per kthread [ 1743.966395][T20671] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 1744.208121][T29158] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1745.342921][T29166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1745.574154][T29184] loop1: detected capacity change from 0 to 1764 [ 1745.991790][T29192] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5530'. [ 1748.667536][T29229] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5540'. [ 1749.292329][T29224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1750.951794][T29265] loop1: detected capacity change from 0 to 1764 [ 1751.993790][T29278] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5551'. [ 1752.051690][T29261] syz.4.5546: attempt to access beyond end of device [ 1752.051690][T29261] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1752.466010][T29291] fuse: Bad value for 'group_id' [ 1752.513404][T29291] fuse: Bad value for 'group_id' [ 1754.415358][T29310] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5559'. [ 1754.733134][T29323] fuse: Bad value for 'group_id' [ 1754.777152][T29323] fuse: Bad value for 'group_id' [ 1756.334140][T29355] fuse: Bad value for 'group_id' [ 1756.349305][T29355] fuse: Bad value for 'group_id' [ 1756.650605][T29364] loop4: detected capacity change from 0 to 1764 [ 1757.934302][T29392] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5585'. [ 1758.324394][T13367] usb 8-1: new full-speed USB device number 60 using dummy_hcd [ 1758.766043][T13367] usb 8-1: config 0 has no interfaces? [ 1758.818586][T13367] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1758.910794][T13367] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.125811][T13367] usb 8-1: Product: syz [ 1759.570195][T13367] usb 8-1: Manufacturer: syz [ 1759.628139][T13367] usb 8-1: SerialNumber: syz [ 1759.644659][T29405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1759.805225][T13367] usb 8-1: config 0 descriptor?? [ 1760.183260][T29423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5595'. [ 1761.830298][T29444] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5605'. [ 1761.842336][ T27] audit: type=1326 audit(1750312221.575:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29446 comm="syz.4.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a0f8e929 code=0x7ffc0000 [ 1761.864731][ C1] vkms_vblank_simulate: vblank timer overrun [ 1761.880350][T29445] loop1: detected capacity change from 0 to 1764 [ 1761.954694][ T27] audit: type=1326 audit(1750312221.575:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29446 comm="syz.4.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a0f8e929 code=0x7ffc0000 [ 1762.012728][T19831] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1762.062770][ T27] audit: type=1326 audit(1750312221.595:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29446 comm="syz.4.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fa0a0f8e929 code=0x7ffc0000 [ 1762.085156][ C1] vkms_vblank_simulate: vblank timer overrun [ 1762.872740][ T27] audit: type=1326 audit(1750312221.595:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29446 comm="syz.4.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a0f8e929 code=0x7ffc0000 [ 1762.953417][ T27] audit: type=1326 audit(1750312221.595:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29446 comm="syz.4.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a0f8e929 code=0x7ffc0000 [ 1763.290269][ T786] usb 8-1: USB disconnect, device number 60 [ 1763.365586][T28390] IPVS: starting estimator thread 0... [ 1763.512055][T29465] IPVS: using max 16 ests per chain, 38400 per kthread [ 1763.574194][T29472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5615'. [ 1764.489584][T29479] loop4: detected capacity change from 0 to 1764 [ 1764.723037][T19831] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1765.011098][T29491] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1765.370952][T27393] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1765.838309][T29506] fuse: Unknown parameter 'grou00000000000000000000' [ 1765.884036][T29506] fuse: Unknown parameter 'grou00000000000000000000' [ 1765.941565][T29508] netlink: 'syz.4.5626': attribute type 4 has an invalid length. [ 1766.207490][T29513] loop7: detected capacity change from 0 to 1764 [ 1766.360946][T13367] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1766.640874][T13367] usb 5-1: Using ep0 maxpacket: 32 [ 1766.867687][T13367] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1767.095508][T13367] usb 5-1: config 0 has no interface number 0 [ 1767.106821][T13367] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1767.116997][T13367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.138179][T13367] usb 5-1: Product: syz [ 1767.150006][T13367] usb 5-1: Manufacturer: syz [ 1767.154739][T13367] usb 5-1: SerialNumber: syz [ 1767.222548][T29520] Device name cannot be null; rc = [-22] [ 1767.852160][T13367] usb 5-1: config 0 descriptor?? [ 1768.198218][T13367] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1768.324140][T29505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.357507][T13367] usb 5-1: selecting invalid altsetting 1 [ 1768.373388][T13367] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1768.392147][T29505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.464086][T13367] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1768.549835][T13367] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1768.558228][T13367] usb 5-1: media controller created [ 1768.674628][T13367] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1768.759970][T13367] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1768.767124][T13367] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1768.785146][T13367] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1768.934616][T13367] usb 5-1: USB disconnect, device number 18 [ 1768.957329][T19835] udevd[19835]: setting owner of /dev/bus/usb/005/018 to uid=0, gid=0 failed: No such file or directory [ 1769.055247][T29545] fuse: Unknown parameter 'grou00000000000000000000' [ 1769.068592][T29545] fuse: Unknown parameter 'grou00000000000000000000' [ 1769.139165][T14005] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1769.486548][T14005] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1769.531562][T14005] usb 8-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1770.327248][T14005] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1770.390055][T14005] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1770.399550][T14005] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.445220][T14005] usb 8-1: Quirk or no altest; falling back to MIDI 1.0 [ 1770.547464][T29555] loop4: detected capacity change from 0 to 1764 [ 1770.614111][T19831] udevd[19831]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1770.618687][T14005] snd-usb-audio: probe of 8-1:27.0 failed with error -2 [ 1771.035545][T29564] Device name cannot be null; rc = [-22] [ 1771.058036][T20671] Bluetooth: hci2: command 0x0406 tx timeout [ 1772.017078][T29571] fuse: Unknown parameter 'grou00000000000000000000' [ 1772.039480][T29571] fuse: Unknown parameter 'grou00000000000000000000' [ 1772.286496][T29575] netlink: 'syz.9.5647': attribute type 4 has an invalid length. [ 1772.577252][T13367] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 1772.687816][T12794] usb 8-1: USB disconnect, device number 61 [ 1772.783618][T13367] usb 10-1: Using ep0 maxpacket: 32 [ 1772.804631][T13367] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1772.823393][T13367] usb 10-1: config 0 has no interface number 0 [ 1772.852939][T13367] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1772.896339][T13367] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.917354][T13367] usb 10-1: Product: syz [ 1772.921700][T13367] usb 10-1: Manufacturer: syz [ 1772.928555][T13367] usb 10-1: SerialNumber: syz [ 1772.936783][T13367] usb 10-1: config 0 descriptor?? [ 1772.952072][T13367] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1772.962015][T13367] usb 10-1: selecting invalid altsetting 1 [ 1772.970637][T13367] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1773.010698][T13367] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1773.022262][T13367] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1773.031355][T13367] usb 10-1: media controller created [ 1773.110723][T13367] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1773.193288][T29575] usb 10-1: dvb_usb_ce6230: I2C read not implemented [ 1773.869216][T29575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.958246][T29575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.306771][T13367] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1774.314063][T13367] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1774.572805][T29597] fuse: Unknown parameter 'group_i00000000000000000000' [ 1774.593885][T29597] fuse: Unknown parameter 'group_i00000000000000000000' [ 1775.246568][T12794] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1775.426810][T13367] usb 10-1: USB disconnect, device number 87 [ 1775.470751][T12794] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.507695][T12794] usb 8-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1775.552206][T12794] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1775.586004][T12794] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1775.618823][T12794] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.671839][T12794] usb 8-1: Quirk or no altest; falling back to MIDI 1.0 [ 1775.764419][T12794] snd-usb-audio: probe of 8-1:27.0 failed with error -2 [ 1775.813945][T19831] udevd[19831]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1775.980841][T29625] fuse: Unknown parameter 'group_i00000000000000000000' [ 1776.012490][T29625] fuse: Unknown parameter 'group_i00000000000000000000' [ 1776.950267][T27393] Bluetooth: hci2: command 0x0406 tx timeout [ 1777.518937][T29657] fuse: Unknown parameter 'group_i00000000000000000000' [ 1777.546617][T29657] fuse: Unknown parameter 'group_i00000000000000000000' [ 1778.135460][T13367] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1778.305270][T12337] usb 8-1: USB disconnect, device number 62 [ 1778.334632][T13367] usb 5-1: Using ep0 maxpacket: 32 [ 1778.351624][T13367] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1778.414740][T13367] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1778.423881][T13367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.471168][T13367] usb 5-1: Product: syz [ 1778.494502][T13367] usb 5-1: Manufacturer: syz [ 1778.506263][T13367] usb 5-1: SerialNumber: syz [ 1778.517699][T13367] usb 5-1: config 0 descriptor?? [ 1778.523818][T29664] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1778.567519][T13367] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input34 [ 1778.575179][T29679] fuse: Unknown parameter 'group_id00000000000000000000' [ 1778.605558][T29679] fuse: Unknown parameter 'group_id00000000000000000000' [ 1779.095517][T20671] Bluetooth: hci2: command 0x0406 tx timeout [ 1779.126932][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1779.137055][T12337] usb 5-1: USB disconnect, device number 19 [ 1780.469425][T29709] fuse: Unknown parameter 'group_id00000000000000000000' [ 1780.484429][T29709] fuse: Unknown parameter 'group_id00000000000000000000' [ 1780.873090][T13985] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 1781.681361][T13985] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1781.732298][T13985] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1781.779798][T13985] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1781.872593][T13985] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1781.893211][T27393] Bluetooth: hci2: command 0x0406 tx timeout [ 1781.923821][T13985] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.956337][T13985] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1781.973542][T13985] usb 10-1: invalid MIDI out EP 0 [ 1782.315798][T19831] udevd[19831]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1782.442799][T13985] snd-usb-audio: probe of 10-1:27.0 failed with error -22 [ 1783.105518][T29737] fuse: Unknown parameter 'group_id00000000000000000000' [ 1783.115265][T29737] fuse: Unknown parameter 'group_id00000000000000000000' [ 1783.125113][T29724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1784.240619][T13367] usb 10-1: USB disconnect, device number 88 [ 1784.368926][T29759] fuse: Bad value for 'user_id' [ 1784.375944][T29759] fuse: Bad value for 'user_id' [ 1785.169852][T29781] fuse: Bad value for 'user_id' [ 1785.201916][T29781] fuse: Bad value for 'user_id' [ 1785.341091][T20671] Bluetooth: hci2: command 0x0406 tx timeout [ 1785.602264][T29768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1785.933305][T29804] netlink: 'syz.7.5735': attribute type 4 has an invalid length. [ 1785.977621][T29807] fuse: Bad value for 'user_id' [ 1785.986963][T29807] fuse: Bad value for 'user_id' [ 1786.230917][T13367] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1786.465930][T13367] usb 8-1: Using ep0 maxpacket: 32 [ 1786.518217][T13367] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1786.542534][T13367] usb 8-1: config 0 has no interface number 0 [ 1786.588566][T13367] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1786.620648][T13367] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.629189][T13367] usb 8-1: Product: syz [ 1786.668109][T13367] usb 8-1: Manufacturer: syz [ 1786.677596][T13367] usb 8-1: SerialNumber: syz [ 1786.684454][T29815] loop9: detected capacity change from 0 to 1764 [ 1786.701768][T13367] usb 8-1: config 0 descriptor?? [ 1786.738909][T13367] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1786.910959][T13367] usb 8-1: selecting invalid altsetting 1 [ 1786.916777][T13367] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1786.939051][T13367] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1786.951543][T13367] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1786.960770][T13367] usb 8-1: media controller created [ 1786.985029][T13367] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1787.046489][T29822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.077361][T29822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.133127][T13367] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1788.156135][T13367] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1789.062580][T12794] usb 8-1: USB disconnect, device number 63 [ 1789.666700][T29862] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5757'. [ 1789.979502][T29867] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1790.113244][T20671] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 1790.174144][T29865] loop4: detected capacity change from 0 to 1764 [ 1791.273206][T29886] Device name cannot be null; rc = [-22] [ 1791.416643][T29889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5765'. [ 1791.735944][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.742730][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.882806][T29896] loop7: detected capacity change from 0 to 1764 [ 1792.238203][T29901] Device name cannot be null; rc = [-22] [ 1792.324915][T29899] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1792.334867][T20671] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 1792.982368][T29909] netlink: 892 bytes leftover after parsing attributes in process `syz.9.5773'. [ 1793.294980][T29917] loop4: detected capacity change from 0 to 1764 [ 1793.377606][T13985] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1793.586925][T13985] usb 8-1: Using ep0 maxpacket: 32 [ 1793.607950][T13985] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1793.643267][T13985] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1793.663300][T13985] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.675500][T13985] usb 8-1: Product: syz [ 1793.682406][T13985] usb 8-1: Manufacturer: syz [ 1793.691269][T13985] usb 8-1: SerialNumber: syz [ 1793.701511][T13985] usb 8-1: config 0 descriptor?? [ 1793.710582][T29911] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1793.731970][T13985] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input35 [ 1793.900803][T29928] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5781'. [ 1794.042019][T14208] usb 8-1: USB disconnect, device number 64 [ 1794.042113][ C0] usbtouchscreen 8-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1794.525063][T29938] loop9: detected capacity change from 0 to 1764 [ 1795.270682][T29951] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1796.085301][T29959] Device name cannot be null; rc = [-22] [ 1796.506095][T29962] fuse: Bad value for 'fd' [ 1796.520292][T29962] fuse: Bad value for 'fd' [ 1796.521903][T29964] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1796.945412][T28390] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1796.992483][T29978] loop1: detected capacity change from 0 to 1764 [ 1797.175064][T28390] usb 8-1: Using ep0 maxpacket: 16 [ 1797.184135][T28390] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1797.224933][T28390] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1797.245371][T28390] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1797.284916][T28390] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1797.294040][T28390] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.355992][T28390] usb 8-1: config 0 descriptor?? [ 1797.995484][T28390] usbhid 8-1:0.0: can't add hid device: -71 [ 1798.001683][T28390] usbhid: probe of 8-1:0.0 failed with error -71 [ 1798.048858][T28390] usb 8-1: USB disconnect, device number 65 [ 1798.587685][T29997] loop1: detected capacity change from 0 to 1764 [ 1799.271211][T30013] loop4: detected capacity change from 0 to 1764 [ 1799.363058][T28390] IPVS: starting estimator thread 0... [ 1799.473882][T30020] IPVS: using max 17 ests per chain, 40800 per kthread [ 1799.613108][T30021] Device name cannot be null; rc = [-22] [ 1799.727976][T28390] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 1799.956715][T30024] Device name cannot be null; rc = [-22] [ 1800.251732][T28390] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1800.277144][T30031] fuse: Invalid rootmode [ 1800.282329][T30031] fuse: Invalid rootmode [ 1800.354104][T28390] usb 10-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1800.463567][T28390] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1800.472775][T28390] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.747519][T28390] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1800.818964][T28390] usb 10-1: invalid MIDI out EP 0 [ 1801.226324][T28390] snd-usb-audio: probe of 10-1:27.0 failed with error -22 [ 1801.770279][T30055] loop4: detected capacity change from 0 to 1764 [ 1802.106916][T30057] Device name cannot be null; rc = [-22] [ 1802.555278][T13367] usb 10-1: USB disconnect, device number 89 [ 1802.968119][T30062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5823'. [ 1802.991066][T30062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5823'. [ 1803.867938][T30082] loop9: detected capacity change from 0 to 1764 [ 1804.191898][T30089] Device name cannot be null; rc = [-22] [ 1804.281722][T13985] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 1804.343726][T30094] fuse: Bad value for 'rootmode' [ 1804.386292][T30094] fuse: Bad value for 'rootmode' [ 1804.413333][T30098] netlink: 860 bytes leftover after parsing attributes in process `syz.4.5839'. [ 1804.516274][T13985] usb 2-1: config 0 has no interfaces? [ 1804.600204][T13985] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1804.663993][T13985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.770290][T13985] usb 2-1: Product: syz [ 1804.776658][T13985] usb 2-1: Manufacturer: syz [ 1804.781402][T13985] usb 2-1: SerialNumber: syz [ 1804.788388][T13985] usb 2-1: config 0 descriptor?? [ 1805.309337][T30099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1806.776353][T30123] netlink: 772 bytes leftover after parsing attributes in process `syz.9.5848'. [ 1807.720160][T30127] fuse: Unknown parameter 'use00000000000000000000' [ 1807.757208][T30127] fuse: Unknown parameter 'use00000000000000000000' [ 1807.836950][T30129] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5850'. [ 1807.989978][T14005] usb 2-1: USB disconnect, device number 33 [ 1809.014218][T30143] netlink: 676 bytes leftover after parsing attributes in process `syz.4.5856'. [ 1809.322121][T30154] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5861'. [ 1809.858630][T14005] usb 8-1: new full-speed USB device number 66 using dummy_hcd [ 1810.158041][T14005] usb 8-1: config 0 has no interfaces? [ 1810.200641][T14005] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1810.249181][T14005] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.327552][T14005] usb 8-1: Product: syz [ 1810.346579][T14005] usb 8-1: Manufacturer: syz [ 1810.365365][T14005] usb 8-1: SerialNumber: syz [ 1810.421101][T14005] usb 8-1: config 0 descriptor?? [ 1810.498374][T30180] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5871'. [ 1811.348086][T27393] Bluetooth: hci2: command 0x0406 tx timeout [ 1811.528899][T30188] netlink: 772 bytes leftover after parsing attributes in process `syz.9.5872'. [ 1812.397715][T30204] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5880'. [ 1813.817350][T30212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5883'. [ 1814.320423][T20671] Bluetooth: hci2: command 0x0406 tx timeout [ 1814.853894][T30228] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5890'. [ 1814.971987][T28390] usb 8-1: USB disconnect, device number 66 [ 1815.285560][T30238] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5893'. [ 1817.058426][T30262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5904'. [ 1817.165162][T27393] Bluetooth: hci2: command 0x0406 tx timeout [ 1817.513497][T30265] loop4: detected capacity change from 0 to 1764 [ 1817.945934][T30274] Device name cannot be null; rc = [-22] [ 1817.999751][T20671] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1818.018700][T20671] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1818.032716][T20671] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1818.048725][T20671] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1818.061711][T20671] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1818.071506][T20671] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1818.524939][ T48] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.736414][ T48] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.864803][ T48] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.080522][ T48] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.356813][T30306] loop4: detected capacity change from 0 to 1764 [ 1819.384134][T14005] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 1819.603830][T14005] usb 10-1: Using ep0 maxpacket: 32 [ 1819.653028][T14005] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1819.673407][T30271] chnl_net:caif_netlink_parms(): no params data found [ 1819.721471][T14005] usb 10-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1819.813165][T14005] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.996298][T14005] usb 10-1: Product: syz [ 1820.052088][T14005] usb 10-1: Manufacturer: syz [ 1820.103970][T14005] usb 10-1: SerialNumber: syz [ 1820.193635][T20671] Bluetooth: hci3: command tx timeout [ 1820.265588][T14005] usb 10-1: config 0 descriptor?? [ 1820.272540][T30299] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1820.376636][T14005] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input36 [ 1820.605276][ T786] usb 10-1: USB disconnect, device number 90 [ 1820.605441][ C1] usbtouchscreen 10-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1820.706169][T30317] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5925'. [ 1821.051689][T30271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1821.063057][T30271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.078571][T30271] bridge_slave_0: entered allmulticast mode [ 1821.133757][T30271] bridge_slave_0: entered promiscuous mode [ 1821.284143][T30271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1821.354542][T30338] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5927'. [ 1821.363805][T30338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5927'. [ 1821.455371][T30271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.642882][T30271] bridge_slave_1: entered allmulticast mode [ 1821.841239][T30271] bridge_slave_1: entered promiscuous mode [ 1822.158788][T30271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1822.241162][T30350] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5932'. [ 1822.273427][T20671] Bluetooth: hci3: command tx timeout [ 1822.311771][T30271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1822.501692][T30357] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5935'. [ 1822.690075][T30271] team0: Port device team_slave_0 added [ 1822.810032][T30271] team0: Port device team_slave_1 added [ 1823.198637][T30271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1823.216106][T30271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1823.259421][T30271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1823.274272][T30271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1823.281283][T30271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1823.307562][T30271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1823.985122][T30385] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5942'. [ 1824.347693][T30271] hsr_slave_0: entered promiscuous mode [ 1824.353645][T20671] Bluetooth: hci3: command tx timeout [ 1824.385565][T30271] hsr_slave_1: entered promiscuous mode [ 1824.407837][T30271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1824.420563][T30271] Cannot create hsr debugfs directory [ 1824.427479][T30397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5946'. [ 1825.124178][ T48] hsr_slave_0: left promiscuous mode [ 1825.135288][ T48] hsr_slave_1: left promiscuous mode [ 1825.149360][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1825.158460][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1825.174348][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1825.206136][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1825.309731][ T48] bridge_slave_1: left allmulticast mode [ 1825.373320][ T48] bridge_slave_1: left promiscuous mode [ 1825.455738][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.614989][ T48] bridge_slave_0: left allmulticast mode [ 1825.686035][ T48] bridge_slave_0: left promiscuous mode [ 1825.755996][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1825.872523][ T48] veth1_macvtap: left promiscuous mode [ 1825.885797][ T48] veth0_macvtap: left promiscuous mode [ 1825.896475][ T48] veth1_vlan: left promiscuous mode [ 1825.905747][ T48] veth0_vlan: left promiscuous mode [ 1826.431100][T20671] Bluetooth: hci3: command tx timeout [ 1827.016940][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1827.105571][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1827.173913][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1827.249075][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1828.103648][ T48] bond0 (unregistering): Released all slaves [ 1828.888153][T30453] netlink: 676 bytes leftover after parsing attributes in process `syz.9.5961'. [ 1829.843573][ T48] IPVS: stop unused estimator thread 0... [ 1830.569071][T30486] netlink: 208 bytes leftover after parsing attributes in process `syz.9.5971'. [ 1830.865380][T30271] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1830.913757][T30271] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1830.981495][T30271] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1831.025019][T30271] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1831.356807][T30271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1831.419684][T30271] 8021q: adding VLAN 0 to HW filter on device team0 [ 1831.461128][T26222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1831.468454][T26222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1831.539909][T26222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1831.547181][T26222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1831.815474][T30519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5984'. [ 1832.489048][T30540] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5988'. [ 1832.498442][T30540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5988'. [ 1833.027689][T30271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1833.486994][ T5819] usb 10-1: new full-speed USB device number 91 using dummy_hcd [ 1833.512971][T30556] netlink: 208 bytes leftover after parsing attributes in process `syz.4.5992'. [ 1833.751148][ T5819] usb 10-1: config 0 has no interfaces? [ 1833.867265][ T5819] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1833.918096][ T5819] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.962917][ T5819] usb 10-1: Product: syz [ 1833.992066][T30568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5994'. [ 1834.006621][ T5819] usb 10-1: Manufacturer: syz [ 1834.020429][ T5819] usb 10-1: SerialNumber: syz [ 1834.046551][ T5819] usb 10-1: config 0 descriptor?? [ 1834.213671][T30271] veth0_vlan: entered promiscuous mode [ 1834.317129][T30271] veth1_vlan: entered promiscuous mode [ 1834.326857][T29094] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1834.488213][T30271] veth0_macvtap: entered promiscuous mode [ 1834.519004][T30271] veth1_macvtap: entered promiscuous mode [ 1834.542439][T29094] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1834.542495][T29094] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1834.542527][T29094] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1834.542545][T29094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.582671][T30570] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1834.592693][T29094] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1834.659817][T30271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1834.659843][T30271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1834.659857][T30271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1834.659872][T30271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1834.659896][T30271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1834.659912][T30271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1834.661689][T30271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1834.873360][T30271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1835.058588][T30271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.139379][T30271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1835.181053][T30271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.210516][T30271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1835.248690][T30271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.291868][T30271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1835.375193][T30271] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.410541][T30271] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.472410][T30271] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.511487][T30271] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.892594][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1835.934434][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1836.042883][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1836.072673][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1837.906061][T14005] usb 10-1: USB disconnect, device number 91 [ 1838.314702][T19331] usb 2-1: USB disconnect, device number 34 [ 1838.646553][T30625] loop1: detected capacity change from 0 to 1764 [ 1838.751975][T30629] loop9: detected capacity change from 0 to 1764 [ 1839.004574][T30632] netlink: 'syz.7.6007': attribute type 72 has an invalid length. [ 1839.012483][T30632] netlink: 'syz.7.6007': attribute type 8 has an invalid length. [ 1839.300512][T30636] Device name cannot be null; rc = [-22] [ 1840.507560][T30669] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6014'. [ 1840.517853][T30669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6014'. [ 1841.429407][T30677] loop9: detected capacity change from 0 to 1764 [ 1841.547042][T30679] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6019'. [ 1841.592782][T14005] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 1842.648555][T14005] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1842.688653][T14005] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1842.719055][T14005] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1842.752201][T14005] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.852839][T30673] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1842.874258][T14005] usb 8-1: Quirk or no altest; falling back to MIDI 1.0 [ 1844.103601][T30714] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6026'. [ 1844.112820][T30714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6026'. [ 1844.913076][ T786] usb 8-1: USB disconnect, device number 67 [ 1844.926114][T30717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6028'. [ 1845.204129][T30723] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6029'. [ 1846.468427][T30748] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6039'. [ 1846.708262][T30756] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6042'. [ 1847.130096][ T786] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 1847.342388][ T786] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1847.381394][ T786] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1847.438504][ T786] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1847.539992][ T786] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.574253][T30760] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1847.682125][ T786] usb 8-1: Quirk or no altest; falling back to MIDI 1.0 [ 1847.889628][T29094] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1848.079442][T29094] usb 2-1: device descriptor read/64, error -71 [ 1848.359474][T29094] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1848.519198][T29094] usb 2-1: device descriptor read/64, error -71 [ 1848.649878][T29094] usb usb2-port1: attempt power cycle [ 1849.099094][T29094] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1849.161947][T29094] usb 2-1: device descriptor read/8, error -71 [ 1849.478955][T29094] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1849.699177][T29094] usb 2-1: device descriptor read/8, error -71 [ 1849.830737][T29094] usb usb2-port1: unable to enumerate USB device [ 1850.117063][T30797] netlink: 108 bytes leftover after parsing attributes in process `syz.9.6056'. [ 1850.173403][ T786] usb 8-1: USB disconnect, device number 68 [ 1852.033069][T30833] loop1: detected capacity change from 0 to 1764 [ 1852.390670][T30841] Device name cannot be null; rc = [-22] [ 1853.148272][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.155235][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.390846][T30872] tipc: Started in network mode [ 1854.418725][T30872] tipc: Node identity 4, cluster identity 4711 [ 1854.424978][T30872] tipc: Node number set to 4 [ 1855.651639][T30898] netlink: 676 bytes leftover after parsing attributes in process `syz.4.6096'. [ 1855.660852][T30898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6096'. [ 1856.960856][T30914] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6100'. [ 1856.970264][T30914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6100'. [ 1858.504581][T14005] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 1858.705087][T30916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1858.727912][T14005] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1858.792890][T14005] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1858.826935][T14005] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1858.837515][T14005] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.859670][T30917] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1858.899031][T14005] usb 8-1: Quirk or no altest; falling back to MIDI 1.0 [ 1858.911872][T30929] netlink: 676 bytes leftover after parsing attributes in process `syz.9.6106'. [ 1858.921728][T30929] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6106'. [ 1861.174838][T30955] netlink: 208 bytes leftover after parsing attributes in process `syz.9.6115'. [ 1863.409517][T30978] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6123'. [ 1863.453999][T30979] netlink: 208 bytes leftover after parsing attributes in process `syz.9.6124'. [ 1863.768946][ T42] usb 8-1: USB disconnect, device number 69 [ 1865.752021][T31015] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6136'. [ 1865.846884][T31019] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6138'. [ 1867.408434][T31044] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6148'. [ 1868.810222][T31057] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6153'. [ 1870.091677][T31081] loop1: detected capacity change from 0 to 1764 [ 1870.587826][T31085] Device name cannot be null; rc = [-22] [ 1871.908962][T31101] tipc: Started in network mode [ 1871.917808][T31101] tipc: Node identity 4, cluster identity 4711 [ 1871.924260][T31101] tipc: Node number set to 4 [ 1872.076438][T31100] syz.7.6170 (31100) used greatest stack depth: 17960 bytes left [ 1872.327901][T31107] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6174'. [ 1872.644459][T31113] loop4: detected capacity change from 0 to 1764 [ 1873.035173][T31118] Device name cannot be null; rc = [-22] [ 1873.801011][T31122] loop7: detected capacity change from 0 to 1764 [ 1873.846140][T31126] tipc: Started in network mode [ 1873.854107][T31126] tipc: Node identity 4, cluster identity 4711 [ 1873.863404][T31126] tipc: Node number set to 4 [ 1874.138456][T31131] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6183'. [ 1875.003431][T31136] loop4: detected capacity change from 0 to 1764 [ 1875.017119][T31139] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6185'. [ 1875.338156][T31141] Device name cannot be null; rc = [-22] [ 1876.158680][T31162] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6196'. [ 1877.335192][T31179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6201'. [ 1877.358512][T31178] loop7: detected capacity change from 0 to 1764 [ 1877.662292][T31187] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6205'. [ 1877.704013][T31186] Device name cannot be null; rc = [-22] [ 1877.991394][T31193] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6206'. [ 1878.000765][T31193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6206'. [ 1878.636696][T31194] loop9: detected capacity change from 0 to 1764 [ 1879.396266][T31209] veth0: entered promiscuous mode [ 1879.465336][T31209] veth0: left promiscuous mode [ 1879.779572][T31219] loop9: detected capacity change from 0 to 1764 [ 1880.125738][T31225] Device name cannot be null; rc = [-22] [ 1880.858202][T31231] loop4: detected capacity change from 0 to 1764 [ 1881.364091][T31240] Device name cannot be null; rc = [-22] [ 1881.833581][T31244] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6228'. [ 1882.052426][T14005] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1882.191923][T31255] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6231'. [ 1882.315680][T14005] usb 2-1: config 0 has no interfaces? [ 1882.564511][T14005] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1882.592543][T14005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.637711][T14005] usb 2-1: Product: syz [ 1882.645299][T14005] usb 2-1: Manufacturer: syz [ 1882.656457][T14005] usb 2-1: SerialNumber: syz [ 1882.676043][T14005] usb 2-1: config 0 descriptor?? [ 1882.918133][T31242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6226'. [ 1883.366325][T31269] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6239'. [ 1884.518923][T31277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1884.800173][T13367] usb 2-1: USB disconnect, device number 39 [ 1886.320040][T31330] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6263'. [ 1886.795380][T31346] tipc: Started in network mode [ 1886.803797][T31346] tipc: Node identity 4, cluster identity 4711 [ 1886.817402][T31346] tipc: Node number set to 4 [ 1886.817795][T31344] loop4: detected capacity change from 0 to 1764 [ 1887.556943][T31356] Device name cannot be null; rc = [-22] [ 1888.164346][T31366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6278'. [ 1889.632714][T31392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6287'. [ 1889.940298][T31400] veth0: entered promiscuous mode [ 1889.971489][T31400] veth0: left promiscuous mode [ 1890.687354][T31421] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1890.698372][T20671] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 1890.914944][T31431] veth0: entered promiscuous mode [ 1890.945377][T31431] veth0: left promiscuous mode [ 1891.419852][T31442] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6304'. [ 1891.429256][T31442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6304'. [ 1892.325222][T31447] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6308'. [ 1892.433015][T31451] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1894.480584][T31490] veth0: entered promiscuous mode [ 1894.517801][T31490] veth0: left promiscuous mode [ 1894.534149][T31494] veth1_macvtap: left promiscuous mode [ 1895.820838][T31519] veth0: entered promiscuous mode [ 1895.838964][T31519] veth0: left promiscuous mode [ 1897.510713][T31551] netlink: 712 bytes leftover after parsing attributes in process `syz.9.6351'. [ 1897.759365][T31554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6353'. [ 1897.794732][T13985] usb 8-1: new full-speed USB device number 70 using dummy_hcd [ 1898.843842][T13985] usb 8-1: config 0 has no interfaces? [ 1898.981801][T13985] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1899.148646][T13985] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.158030][T13985] usb 8-1: Product: syz [ 1899.162256][T13985] usb 8-1: Manufacturer: syz [ 1899.167399][T13985] usb 8-1: SerialNumber: syz [ 1899.185407][T13985] usb 8-1: config 0 descriptor?? [ 1899.441308][T31549] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6350'. [ 1899.653375][T31578] netlink: 712 bytes leftover after parsing attributes in process `syz.1.6362'. [ 1899.973865][T12794] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1900.348926][T12794] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1900.372298][T12794] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1900.384148][T12794] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1900.402953][T12794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.420409][T31579] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1900.452754][T12794] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1901.598796][ T42] usb 8-1: USB disconnect, device number 70 [ 1903.282214][T13985] usb 5-1: USB disconnect, device number 20 [ 1903.345955][T31603] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6370'. [ 1903.636327][T31608] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6372'. [ 1903.959930][T31618] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6375'. [ 1904.944999][T31634] veth1_macvtap: left promiscuous mode [ 1905.019399][T31636] loop4: detected capacity change from 0 to 1764 [ 1905.361132][T31644] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6378'. [ 1905.370253][T31644] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6378'. [ 1905.434769][T31646] Device name cannot be null; rc = [-22] [ 1906.455995][T31655] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 1906.942159][T31663] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1906.991213][T20671] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1908.037276][T31670] loop7: detected capacity change from 0 to 1764 [ 1908.143748][T31672] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1908.240977][T20671] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1908.856815][T31676] loop9: detected capacity change from 0 to 1764 [ 1909.160243][T31682] Device name cannot be null; rc = [-22] [ 1910.107838][T31692] loop7: detected capacity change from 0 to 1764 [ 1910.449096][T31697] Device name cannot be null; rc = [-22] [ 1910.804059][T31703] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6403'. [ 1910.813476][T31703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6403'. [ 1911.558724][T31709] loop1: detected capacity change from 0 to 1764 [ 1911.651842][T31712] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1911.701678][T20671] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1913.010469][T31720] loop4: detected capacity change from 0 to 1764 [ 1913.408005][T31729] Device name cannot be null; rc = [-22] [ 1914.555633][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.564521][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.266018][T13985] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1915.424747][T31753] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6416'. [ 1915.434575][T31753] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6416'. [ 1915.486133][T13985] usb 5-1: Using ep0 maxpacket: 32 [ 1915.783720][T13985] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1915.814101][T13985] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1915.833148][T13985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.844002][T13985] usb 5-1: Product: syz [ 1915.856671][T13985] usb 5-1: Manufacturer: syz [ 1915.861352][T13985] usb 5-1: SerialNumber: syz [ 1915.887056][T13985] usb 5-1: config 0 descriptor?? [ 1915.893511][T31751] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1915.903476][T31755] loop1: detected capacity change from 0 to 1764 [ 1915.937525][T13985] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input37 [ 1916.355425][T13985] usb 5-1: USB disconnect, device number 21 [ 1916.361463][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1919.773728][T31793] loop7: detected capacity change from 0 to 1764 [ 1920.157582][T31795] Device name cannot be null; rc = [-22] [ 1922.898131][T31815] loop4: detected capacity change from 0 to 1764 [ 1923.005871][ T5142] udevd[5142]: worker [19831] terminated by signal 33 (Unknown signal 33) [ 1923.017252][ T5142] udevd[5142]: worker [19831] failed while handling '/devices/virtual/block/loop4' [ 1923.344010][T31828] Device name cannot be null; rc = [-22] [ 1925.037747][T31857] loop1: detected capacity change from 0 to 1764 [ 1925.126241][T31858] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1926.434882][T31867] Device name cannot be null; rc = [-22] [ 1926.451810][T31868] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1926.579171][T20671] Bluetooth: hci3: unexpected event 0x2f length: 763 > 260 [ 1929.002407][T31926] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1929.029891][T31870] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1930.574893][T31958] netlink: 'syz.7.6487': attribute type 4 has an invalid length. [ 1931.322084][T31971] loop7: detected capacity change from 0 to 1764 [ 1931.675410][T31987] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6493'. [ 1931.685034][T31987] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6493'. [ 1932.290692][T31990] Device name cannot be null; rc = [-22] [ 1933.412827][T32020] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1933.606094][T32023] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6510'. [ 1933.615459][T32023] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6510'. [ 1933.754689][T31870] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1933.963586][T32028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6513'. [ 1934.230820][T32036] veth1_macvtap: left promiscuous mode [ 1935.207541][T32061] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6524'. [ 1935.216747][T32061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6524'. [ 1935.505782][T19331] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1935.669812][T32065] loop9: detected capacity change from 0 to 1764 [ 1935.797007][T19331] usb 2-1: config 0 has no interfaces? [ 1935.846047][T19331] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1935.884570][T19331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.945495][T19331] usb 2-1: Product: syz [ 1935.949830][T19331] usb 2-1: Manufacturer: syz [ 1935.954744][T19331] usb 2-1: SerialNumber: syz [ 1935.987689][T19331] usb 2-1: config 0 descriptor?? [ 1936.216429][T32072] loop7: detected capacity change from 0 to 1764 [ 1936.703578][T32079] Device name cannot be null; rc = [-22] [ 1938.720965][ T5819] usb 2-1: USB disconnect, device number 40 [ 1938.852217][T32103] loop7: detected capacity change from 0 to 1764 [ 1939.570903][T32115] Device name cannot be null; rc = [-22] [ 1939.823553][T32117] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1940.773711][T32128] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6552'. [ 1940.782793][T32128] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6552'. [ 1941.472730][T12794] usb 10-1: new full-speed USB device number 92 using dummy_hcd [ 1941.490247][T32144] loop1: detected capacity change from 0 to 1764 [ 1941.771729][T12794] usb 10-1: config 0 has no interfaces? [ 1941.873486][T32148] Device name cannot be null; rc = [-22] [ 1942.522816][T27393] Bluetooth: hci3: command 0x0406 tx timeout [ 1942.597727][T12794] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1942.647906][T12794] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.684338][T12794] usb 10-1: Product: syz [ 1942.688669][T12794] usb 10-1: Manufacturer: syz [ 1942.700293][T12794] usb 10-1: SerialNumber: syz [ 1942.708182][T12794] usb 10-1: config 0 descriptor?? [ 1942.964962][T32154] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6562'. [ 1943.072071][T32156] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1944.627766][T32170] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1944.706651][T31870] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 1945.905222][T32180] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6574'. [ 1946.093803][T13985] usb 10-1: USB disconnect, device number 92 [ 1946.299710][T32186] netlink: 'syz.9.6576': attribute type 4 has an invalid length. [ 1946.381187][T32186] netlink: 'syz.9.6576': attribute type 4 has an invalid length. [ 1946.403407][T32188] loop4: detected capacity change from 0 to 1764 [ 1946.753408][T32193] Device name cannot be null; rc = [-22] [ 1946.886871][T32201] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6583'. [ 1947.012007][T32203] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6584'. [ 1947.356992][T32207] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1947.596755][T32210] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1948.035356][T31870] Bluetooth: hci3: unexpected event 0x2f length: 763 > 260 [ 1948.667512][T32225] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6594'. [ 1948.770469][T32232] loop4: detected capacity change from 0 to 1764 [ 1949.139335][T32240] Device name cannot be null; rc = [-22] [ 1949.415712][T32244] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1949.430373][T31870] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 1950.710329][T32264] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1951.351600][T32266] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6605'. [ 1951.502599][T32272] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6606'. [ 1952.284713][T32303] netlink: 'syz.9.6614': attribute type 4 has an invalid length. [ 1952.498415][T32310] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6618'. [ 1952.645579][T32312] loop1: detected capacity change from 0 to 1764 [ 1952.985348][T32320] Device name cannot be null; rc = [-22] [ 1953.053505][T32324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6624'. [ 1954.332635][T32336] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6628'. [ 1954.428175][T32342] netlink: 'syz.7.6632': attribute type 4 has an invalid length. [ 1954.739004][T32349] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1954.756921][T31870] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1955.451309][T31870] block nbd7: Receive control failed (result -32) [ 1956.506839][T32367] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6639'. [ 1956.751981][T32373] loop1: detected capacity change from 0 to 1764 [ 1956.760696][T32376] netlink: 'syz.7.6642': attribute type 4 has an invalid length. [ 1957.115974][T31870] block nbd9: Receive control failed (result -32) [ 1957.560834][T32395] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1958.181490][T31870] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1958.448245][T32403] netlink: 'syz.1.6653': attribute type 4 has an invalid length. [ 1958.824760][T32413] nbd: nbd9 already in use [ 1958.873598][T32416] loop7: detected capacity change from 0 to 1764 [ 1959.347469][T32430] netlink: 'syz.9.6664': attribute type 4 has an invalid length. [ 1959.764558][T32434] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1960.402833][T31870] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1960.678353][T32448] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6670'. [ 1961.199219][T32458] loop9: detected capacity change from 0 to 1764 [ 1961.453844][T32459] Device name cannot be null; rc = [-22] [ 1961.542721][T19331] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 1961.742967][T19331] usb 8-1: Using ep0 maxpacket: 32 [ 1961.763206][T19331] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1961.788773][T19331] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1961.798059][T19331] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.811359][T19331] usb 8-1: Product: syz [ 1961.816055][T19331] usb 8-1: Manufacturer: syz [ 1961.820831][T19331] usb 8-1: SerialNumber: syz [ 1961.835178][T19331] usb 8-1: config 0 descriptor?? [ 1961.841090][T32456] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1961.885910][T19331] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input38 [ 1962.245713][T14005] usb 8-1: USB disconnect, device number 71 [ 1962.245762][ C0] usbtouchscreen 8-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1963.158121][T32484] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1963.183415][T31870] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 1964.306246][T32496] block nbd1: NBD_DISCONNECT [ 1964.335976][T32496] block nbd1: Disconnected due to user request. [ 1964.353477][T32496] block nbd1: shutting down sockets [ 1964.619309][T32505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6692'. [ 1964.703464][T32506] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6691'. [ 1964.713117][T32506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6691'. [ 1966.333574][T32525] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1966.407491][T31870] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 1967.320316][T32532] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6703'. [ 1967.547661][T32537] netlink: 88 bytes leftover after parsing attributes in process `syz.9.6705'. [ 1968.469232][T32555] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6710'. [ 1968.478255][T32555] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6710'. [ 1968.982584][T32565] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6714'. [ 1969.109958][T32568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6717'. [ 1969.159330][T32570] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6718'. [ 1969.268416][T32573] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1969.282225][T27393] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1969.478990][T27393] Bluetooth: hci3: command 0x0406 tx timeout [ 1970.809042][T32586] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6723'. [ 1970.818237][T32586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6723'. [ 1971.306044][T32601] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6729'. [ 1971.796537][T32619] block nbd9: NBD_DISCONNECT [ 1972.025715][T32620] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1972.239947][T32619] block nbd9: Send disconnect failed -32 [ 1972.262325][T27393] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 1972.275739][T32624] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6736'. [ 1972.292276][T32624] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6736'. [ 1972.401027][T32619] block nbd9: shutting down sockets [ 1973.017431][T32635] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6740'. [ 1973.128853][T32640] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6743'. [ 1973.145063][T32642] netlink: 'syz.4.6744': attribute type 4 has an invalid length. [ 1974.080507][T32658] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6751'. [ 1974.369693][T32665] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6748'. [ 1974.379003][T32665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6748'. [ 1974.936140][T32668] netlink: 'syz.7.6754': attribute type 4 has an invalid length. [ 1975.156743][T31870] Bluetooth: hci3: command 0x0406 tx timeout [ 1975.530372][T32693] netlink: 'syz.4.6765': attribute type 4 has an invalid length. [ 1975.585835][T12794] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 1975.788881][T12794] usb 10-1: Using ep0 maxpacket: 16 [ 1975.801445][T12794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1975.813039][T12794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1975.823283][T12794] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1975.840136][T12794] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1975.896371][T32697] __nla_validate_parse: 1 callbacks suppressed [ 1975.896436][T32697] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6766'. [ 1975.912025][T32697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6766'. [ 1975.939344][T12794] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.967839][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.979393][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.070796][T12794] usb 10-1: config 0 descriptor?? [ 1976.775926][T12794] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1976.801887][T12794] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1976.821703][T12794] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1976.837856][T12794] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1976.841408][T32707] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6770'. [ 1976.850470][T12794] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1976.870196][T12794] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1976.879174][T12794] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1976.893328][T12794] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1976.901044][T12794] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1976.930461][T12794] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1976.965120][T12794] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1976.988567][T12794] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0014/input/input39 [ 1978.659280][T31870] Bluetooth: hci3: command 0x0406 tx timeout [ 1978.666360][T32702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1978.704761][T12794] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1978.781256][T12794] usb 10-1: USB disconnect, device number 93 [ 1978.848989][T32716] netlink: 'syz.9.6774': attribute type 4 has an invalid length. [ 1978.892327][T32717] fido_id[32717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1979.544457][T32737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6784'. [ 1979.862223][T32745] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6788'. [ 1980.088979][T32752] loop7: detected capacity change from 0 to 8 [ 1980.130078][T32752] SQUASHFS error: Unable to read inode 0x127 [ 1980.227314][T32754] loop9: detected capacity change from 0 to 256 [ 1980.251506][T22287] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1980.261995][T32754] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1980.316589][T32754] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1980.673066][T32754] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1981.281197][T32766] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6780'. [ 1981.621015][ T316] netlink: 'syz.1.6802': attribute type 4 has an invalid length. [ 1981.648542][ T317] loop7: detected capacity change from 0 to 1764 [ 1981.970770][ T320] Device name cannot be null; rc = [-22] [ 1982.132187][ T326] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6806'. [ 1982.256775][ T330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6808'. [ 1982.397993][ T335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6810'. [ 1982.877295][ T350] netlink: 88 bytes leftover after parsing attributes in process `syz.9.6817'. [ 1982.926213][ T352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6818'. [ 1983.212746][ T364] loop7: detected capacity change from 0 to 1764 [ 1984.411581][ T370] Device name cannot be null; rc = [-22] [ 1984.556283][ T377] loop4: detected capacity change from 0 to 8 [ 1984.570178][ T377] SQUASHFS error: Unable to read inode 0x127 [ 1984.676084][T22287] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1985.359749][ T383] loop7: detected capacity change from 0 to 1764 [ 1985.829615][ T397] Device name cannot be null; rc = [-22] [ 1986.743541][ T401] loop1: detected capacity change from 0 to 1764 [ 1986.940686][ T406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6840'. [ 1987.172974][ T408] Device name cannot be null; rc = [-22] [ 1987.738471][ T411] netlink: 'syz.7.6841': attribute type 4 has an invalid length. [ 1988.170283][ T424] loop4: detected capacity change from 0 to 1764 [ 1988.288333][ T430] loop9: detected capacity change from 0 to 1024 [ 1988.304671][ T430] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 1988.326050][ T430] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1988.361895][ T430] EXT4-fs (loop9): invalid journal inode [ 1988.549400][ T430] EXT4-fs (loop9): can't get journal size [ 1988.632015][ T435] Device name cannot be null; rc = [-22] [ 1989.139393][ T430] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1989.343647][ T430] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 64: comm syz.9.6850: path /499/file0: bad entry in directory: rec_len is too small for name_len - offset=0, inode=11, rec_len=12, size=1024 fake=0 [ 1989.381430][ T430] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 73: comm syz.9.6850: path /499/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=83886080, rec_len=0, size=1024 fake=0 [ 1989.460628][ T440] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6852'. [ 1989.500365][ T442] netlink: 'syz.1.6854': attribute type 4 has an invalid length. [ 1989.570313][T26337] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1989.929627][ T458] loop7: detected capacity change from 0 to 164 [ 1989.962688][ T458] Unable to read rock-ridge attributes [ 1990.008754][ T460] loop1: detected capacity change from 0 to 1764 [ 1990.708300][ T469] Device name cannot be null; rc = [-22] [ 1990.904988][ T471] Unable to read rock-ridge attributes [ 1991.455842][ T471] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1991.463650][ T470] Unable to read rock-ridge attributes [ 1991.479247][ T470] syz.7.6859: attempt to access beyond end of device [ 1991.479247][ T470] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1991.494207][ T470] syz.7.6859: attempt to access beyond end of device [ 1991.494207][ T470] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1991.508040][ T27] audit: type=1800 audit(1750312451.359:424): pid=470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6859" name="file0" dev="loop7" ino=1862 res=0 errno=0 [ 1991.627070][T30271] Unable to read rock-ridge attributes [ 1991.696868][T30271] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1991.757062][T30271] Unable to read rock-ridge attributes [ 1991.794052][T30271] Unable to read rock-ridge attributes [ 1991.848132][T30271] Unable to read rock-ridge attributes [ 1991.855028][T30271] Unable to read rock-ridge attributes [ 1991.885352][T30271] Unable to read rock-ridge attributes [ 1991.898430][ T477] netlink: 'syz.1.6865': attribute type 4 has an invalid length. [ 1991.919392][T30271] Unable to read rock-ridge attributes [ 1991.925334][T30271] Unable to read rock-ridge attributes [ 1991.935651][T30271] ISOFS: unable to read i-node block [ 1991.954441][T30271] Unable to read rock-ridge attributes [ 1991.976941][T30271] ISOFS: unable to read i-node block [ 1992.421429][ T489] loop4: detected capacity change from 0 to 1764 [ 1992.800402][ T497] Device name cannot be null; rc = [-22] [ 1993.521032][ T503] netlink: 'syz.1.6878': attribute type 4 has an invalid length. [ 1994.293422][T27393] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1994.308068][T27393] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1994.314211][ T519] loop9: detected capacity change from 0 to 1764 [ 1994.327560][T27393] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1994.339688][T27393] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1994.347903][T27393] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1994.355467][T27393] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1994.594343][ T529] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1994.622896][T27393] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 1994.811135][ T531] Device name cannot be null; rc = [-22] [ 1995.294978][ T534] netlink: 'syz.1.6888': attribute type 4 has an invalid length. [ 1995.549670][ T542] loop9: detected capacity change from 0 to 164 [ 1995.579933][ T542] Unable to read rock-ridge attributes [ 1995.697129][ T524] chnl_net:caif_netlink_parms(): no params data found [ 1995.962541][ T524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1995.980126][ T524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1995.988150][ T524] bridge_slave_0: entered allmulticast mode [ 1995.997857][ T524] bridge_slave_0: entered promiscuous mode [ 1996.026468][ T561] netlink: 'syz.4.6897': attribute type 4 has an invalid length. [ 1996.066403][ T524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1996.073797][ T524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1996.081329][ T524] bridge_slave_1: entered allmulticast mode [ 1996.088961][ T524] bridge_slave_1: entered promiscuous mode [ 1996.143669][ T524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1996.160556][ T524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1996.325434][ T524] team0: Port device team_slave_0 added [ 1996.345006][ T524] team0: Port device team_slave_1 added [ 1996.520967][ T524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1996.529834][ T524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1996.570388][ T524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1996.637769][ T570] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1996.652354][T27393] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 1996.986876][T27393] Bluetooth: hci3: command tx timeout [ 1997.138701][ T524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1997.187565][ T524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1997.234970][ T524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1997.374198][ T524] hsr_slave_0: entered promiscuous mode [ 1997.383946][ T524] hsr_slave_1: entered promiscuous mode [ 1997.392408][ T524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1997.401057][ T524] Cannot create hsr debugfs directory [ 1998.019188][ T590] netlink: 'syz.4.6907': attribute type 4 has an invalid length. [ 1998.239991][ T601] loop9: detected capacity change from 0 to 1024 [ 1998.247625][ T602] netlink: 'syz.4.6910': attribute type 1 has an invalid length. [ 1999.064248][T27393] Bluetooth: hci3: command tx timeout [ 1999.298434][ T624] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1999.312301][T27393] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 2000.045252][ T628] netlink: 'syz.1.6917': attribute type 4 has an invalid length. [ 2000.473769][ T638] netlink: 'syz.9.6919': attribute type 1 has an invalid length. [ 2000.565760][ T642] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6920'. [ 2000.574932][ T642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6920'. [ 2001.132125][ T524] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2001.142862][T27393] Bluetooth: hci3: command tx timeout [ 2001.284273][ T524] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2001.328771][ T524] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2001.367550][ T524] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2001.433391][ T651] loop1: detected capacity change from 0 to 1024 [ 2001.648658][ T524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2001.700138][ T524] 8021q: adding VLAN 0 to HW filter on device team0 [ 2001.724692][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 2001.731912][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2001.767669][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 2001.774942][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2002.250228][ T524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2002.608392][ T524] veth0_vlan: entered promiscuous mode [ 2002.630883][ T524] veth1_vlan: entered promiscuous mode [ 2002.698698][ T524] veth0_macvtap: entered promiscuous mode [ 2002.713760][ T524] veth1_macvtap: entered promiscuous mode [ 2002.750509][ T524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2002.770738][ T524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2002.780874][ T524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2002.792288][ T524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2002.804679][ T524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2002.815246][ T524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2002.827297][ T524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2002.838303][ T524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2002.850415][ T524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2002.867795][ T524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2002.878788][ T524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2002.889713][ T524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2002.902647][ T524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2002.912969][ T524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2002.923969][ T524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2002.934387][ T524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2002.945256][ T524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2002.957230][ T524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2002.972361][ T524] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2002.981154][ T524] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2002.991342][ T524] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2003.002569][ T524] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2003.129882][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2003.157534][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2003.191319][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2003.211412][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2003.222659][T27393] Bluetooth: hci3: command tx timeout [ 2003.393203][ T700] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6876'. [ 2037.368765][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.377218][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.780754][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.790087][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2121.322871][T31870] Bluetooth: hci3: command 0x0406 tx timeout [ 2160.188472][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.195034][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.598765][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.605632][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.007399][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.014111][ T1283] ieee802154 phy1 wpan1: encryption failed: -22