last executing test programs:
15m53.676504696s ago: executing program 5 (id=3460):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
15m53.491628556s ago: executing program 5 (id=3461):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
shutdown(r1, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
15m52.524695794s ago: executing program 5 (id=3469):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0xffe)
15m52.171772671s ago: executing program 5 (id=3471):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
open(&(0x7f0000000000)='./file0\x00', 0x105000, 0x8)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
15m51.70008959s ago: executing program 5 (id=3477):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x80)
15m51.349912669s ago: executing program 5 (id=3481):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
shutdown(r1, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
15m50.944097199s ago: executing program 32 (id=3481):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
shutdown(r1, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
13m45.84830182s ago: executing program 3 (id=4642):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0)
close(r1)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@local, @loopback, 0x0, 0x4, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010101]}, 0x20)
r2 = socket(0x10, 0x80003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg2\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069193800000000008510000002000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, r3}, 0x59)
close(0xffffffffffffffff)
13m45.452721036s ago: executing program 3 (id=4647):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2003, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@usrjquota}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x101}}, {@noblock_validity}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, 0x0)
13m44.754449808s ago: executing program 3 (id=4653):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x40}}, 0x0)
13m44.377090305s ago: executing program 3 (id=4658):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000000280)=ANY=[], 0x9, 0xc21, &(0x7f0000001e80)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2014c7f, 0x0)
13m43.858321501s ago: executing program 3 (id=4666):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
13m42.828294355s ago: executing program 3 (id=4670):
openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
13m42.234025496s ago: executing program 33 (id=4670):
openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
13m16.980931203s ago: executing program 2 (id=4849):
unshare(0x22020600)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="53479998c303f424101e4884d308928e", 0x10)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40042, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x4)
13m16.605010455s ago: executing program 2 (id=4854):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc000000000000000000000000000000fc00000000000000000000000000000001000000000000000a0060", @ANYRES32=0xee01, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r0, 0x0, 0x4000)
13m16.282985038s ago: executing program 2 (id=4860):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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")
mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x327603a, 0x0)
13m15.062559668s ago: executing program 2 (id=4867):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@errors_remount}, {@inode_readahead_blks}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r0 = openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x5, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x7, 0x1, 0x0, r0}]}, 0x0, 0xa3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1a158c0, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file2\x00', &(0x7f0000000900)={0x404000, 0x68, 0x1}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
move_mount(r0, &(0x7f0000000700)='./file0/file0\x00', r4, &(0x7f0000000940)='./file0/../file0\x00', 0x0)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
sendfile(r2, r1, 0x0, 0x80000000)
13m13.634383177s ago: executing program 2 (id=4874):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x0)
r4 = creat(&(0x7f0000000200)='./file0\x00', 0x0)
close(r4)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
close(0xffffffffffffffff)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r7 = dup(r6)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0)
r8 = dup(r5)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r8}})
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
13m12.884972232s ago: executing program 2 (id=4881):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)={[{@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x800}}, {@nodecompose}, {@type={'type', 0x3d, "f268d651"}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6b2, &(0x7f0000000280)="$eJzs3U+IHFkdB/BvdSY96QjZ2X/ZKEKGDSy6wWQmzZoIwkYRySFI0Mteh2SyGTLJLpNZyS5iOuoqePIke/CwIvGwIoiIsJ4W17MgePGUe8CbhxzUkfrTMz0znUlPkpkedz8fqK73+r1671e/VFV3V2foAJ9a517L/l6KnDt+/mZZv3unu3j3Tvdav5xkMkkrmahXKTpJ8XFyNvWSz5ZPNsMVD5rnlXsfFhPvfdCtaxPNUvVvbbXdJkN79pIDq5V9Sabr4r9HHnbTeNVSjXNxbbxHVKzGXSbsWD9xMG4rm/TWGlsP3Xz08xbYs27Vr5ubTCUHU7+6lu8D0lwdHn5lGIfOutqW16beTscCAAAAO2/oZ/lBT93P/dzMod0JBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Zivo3A4tmafXL0yn6v//fHvhN/faYw31M716uVt9+atyBAAAAAAAAAMBjOXo/93Mzh/r1laL6zv/FqvJc9fiZvJUbmc9STuRm5rKc5SxlNsnUwEDtm3PLy0uzm7f8ecotV1ZWbjVbnhq65an1cfU2Bjrsfxps6gQAAAAAAAAAn1o/yLm17/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAvKJJ99apanuuXp9KaSHIgSbuYXu3eHmuwj6UO/aNxhwEAAAC751Dx37qwUlSf+Q9Xn/sP5K1cz3IWspzFzOdSdS+g/ujc+luvu3j3TvdauWwe8Gv/3Nb81Yip7z0Mn3mm6vH86hbn8s18J8cznQtZykK+m7ksZz7T+UZVmkuRqebuxdTdO530Y90c79l1tQsbYzs6UC7jO1JF0snlLFSxncjFdj/0VtPvyMBsf2wnG2a8XWaneLUxYo4uNetyj37WrPeGqWrP969mZKbJfZmNpwfzvjn32zxONs40m9bqPajn1mYpqxtneqScH2zWu5Drbd5KW5+J3k/LWv/oO7x1zpMv/v3PF660rl+9cvnG8b1zGD2ijcdEdyATL4yUicUyE73HyMSBx4n/yWk32aivotu7Wr5YbXsoC/lW3silzOd0ZjKbM5nJV3Iq3ZwayOvzW+e1Otda2zvXjn2hKXSS/KRZ76rJBzWUeX16IK+DV7qpqm3wmbUsPTNClop2hmfpH0NDmfhcUyjn+OHAK874bczE7EAmnt06E7/8z0qSG4vXry5dmXtzxPleatblafvu+mv0r57IDm1fs7vl8fJM+Y9VVn6cdUdH2fZsv21DvtrNNy4TzWDr2tqpzue67WFnajnS4dvDRqrbXhg6S7dqOzLQtu5dTt7I4uq7EAD2rFYOvnyw3bnX+Wvn/c6POlc65w98ffLM5Ofb2f+XiT/t+13r162vFi/n/Xw/h8YdKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBLcePudq3OLi/NLe7CQ1gidf5vRB7w9tKmfivqZ9k7vVz3ZR78Ze3qfaKF/IE1udUT9PskW47THEXwnyc5OcXS0zpnYhV2ezJCm86vPdJLWajxJru6RH7gDdsLJ5Wtvnrzx9jtfWrg29/r86/PXT505/erp7pdnb528vLA4P1M/jjtKYCdsfF8KAAAAAAAAAAAA7H278VcWQ6YtemPYVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/07nXsr+XIrMzJ2bK+t073cVy6ZfXek4kaSUpvpcUHydnUy+ZGhiueNA8r9z78BcvvfdBd22siX7/1obt/vCvlZVt7kWvWTKdZF+zfrjJkca7ODBeb5uB1YrVPSwTdqyfOBi3/wUAAP//0koEbg==")
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000a00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2110804, &(0x7f0000000a80)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}}, 0x1, 0x0, &(0x7f0000000c40))
13m11.818709431s ago: executing program 34 (id=4881):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)={[{@nobarrier}, {@uid}, {@umask={'umask', 0x3d, 0x800}}, {@nodecompose}, {@type={'type', 0x3d, "f268d651"}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6b2, &(0x7f0000000280)="$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")
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000a00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2110804, &(0x7f0000000a80)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}}, 0x1, 0x0, &(0x7f0000000c40))
1m36.556830147s ago: executing program 4 (id=7541):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r2}, 0x10)
close(r1)
1m34.63967116s ago: executing program 4 (id=7545):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0xc0884123, 0x40944f9c780000)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/timers\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000001600)=0xfffffffe, 0x4)
lseek(r0, 0x164, 0x0)
1m33.489002018s ago: executing program 4 (id=7550):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x18, 0x0, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x4000040)
r5 = socket$key(0xf, 0x3, 0x2)
r6 = dup3(r5, r3, 0x0)
sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r8 = dup(r7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000a40)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PTP_EXTTS_REQUEST2(r8, 0x40383d0c, &(0x7f0000000040)={0x20000b, 0x9})
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
1m31.139032162s ago: executing program 4 (id=7554):
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0xf, 0x2}, 0x10)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200020000", 0x1c)
1m24.086011276s ago: executing program 4 (id=7566):
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
epoll_create1(0x0)
lseek(r0, 0x339, 0x0)
1m21.327634758s ago: executing program 4 (id=7573):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2111, 0x0, &(0x7f0000000100), 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
44.58653806s ago: executing program 6 (id=7642):
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r0, 0x0, 0x0, 'syz1\x00', 0x0})
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002500)='fdinfo/4\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
read$FUSE(r2, &(0x7f0000002540)={0x2020}, 0x2020)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r4 = add_key(0x0, 0x0, &(0x7f0000000040)='B', 0x1, 0xfffffffffffffffe)
keyctl$revoke(0x3, r4)
r5 = add_key$user(&(0x7f0000001440), &(0x7f0000001480)={'syz', 0x3}, &(0x7f00000014c0)='^', 0x1, 0xfffffffffffffffe)
keyctl$search(0xa, r5, &(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, r4)
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)={[{@shortad}, {@partition={'partition', 0x3d, 0x5}}, {@noadinicb}, {@uid}, {@gid}, {@volume={'volume', 0x3d, 0x6}}]}, 0x1, 0x489, &(0x7f0000000580)="$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")
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1000000026075a315f3c39a106fb0363"], 0x10}, 0x1, 0x0, 0x0, 0x20004001}, 0x90)
41.358234568s ago: executing program 6 (id=7645):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x4)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x564})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r2, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd502000000090001"], 0x7c}}, 0x0)
38.242192491s ago: executing program 6 (id=7652):
bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="01000000d8000000000000000000000014000000", @ANYRES32, @ANYBLOB="00000000fb07000000000008070000002316b0ebb76f9280269088424432000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000016c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4, 0x2fd, &(0x7f0000001700)="$eJzs3c1rE0EYx/Fn89IkrTU9iIgoDBVEkS5NwJsHi7QgBpS2EVpB2NqthmyTkoRARGwPglfPHnrwKIIo3ryIeO3Fv8C3Wy+9WaG4stlNmjfXtBjb2u/n0Ez3md/uZHfSlyFs1i89WcwuRKUqJHVDEpCg116R8x9WP5+een/E/V6pibHpRFKpgIjcevBi+F1p4Oabo28jsjZ0e30j+W3t1LTIz+l7ElCZosrZtjLUXD5f0pzwfKaY1ZW6YZlG0VSZXNEslLy6MWeZasHKLy1VlJGbH+xfKpjFojJyFZU1K6qUV6VCRRl3jUxO6bquBvsF1YtVE2iraX7B9PNN25YN27btyIrYtu30/mG7RW82rNQ6h73HyF8aNfaBluvv27dtKgV7OTL8C5t2qOvrj/+P+/r/8pTrfzhNzcxeG0ulxieVioosPi6ny2n30a1/GpCMWGLK6uSF2S1x5ohHNOfrxNXU+KiqGpKzi8tefrmcdn85jC14+YTEnb9TGvJSyyfcvPLyTnC5nA5Lf2M+KXE51jmfrOUl0HD8Pjl3piGvS1w+3pG8WDIvTnY7/zCh1JXrKdU8/li1HwAAAAAAAAAAB5Gu6rbX7zWZee2WY7oeqb7jo16POZudfm6H+vr6qMRlq/P6/Gjz+r63vh6Sk6G9fOYAAAAAABwexcr9rGFZZqE3jeCzmM8hwiLiNEQeDTuD8d3hcW/E3R29T0TaS0GxtG6fcuyie7yXk97ApJcnqtaI+p8En0bTm/GzhvUq5JVi0ikV2NEEGOnreOajBU16On+aGtJNZ4nubmJHup5arQ1tq7blRMc+tvbn/diGFXa3NFxB39TlHb0cftuItp6oka/ufi2fHxrf60t8AAAAAA6Qhn+cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAHtnVzcNq9+1vLon3EfHtt2Rr/Zx47vsPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYB/6FQAA///unawr")
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x0, r0, 0x5, 0xfffffffffffffffd, 0x5, 0x1})
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1000024)
inotify_rm_watch(r1, r6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000140)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x8}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xbc, &(0x7f00000003c0)=""/188, 0x0, 0x3, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
fcntl$setown(r3, 0x8, r4)
close(0xffffffffffffffff)
creat(&(0x7f0000000280)='./file0\x00', 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="61153c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf630000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf664e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386ba3b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f44fc00b69151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a299fa176018054e9149a1c9d20a809ce3000000000000000000000000f6fad8476470bf4bb79d2ba2c0f7147577466f4229b364d6900ad22583c0ec630ea0c6177ad88014b074d88fea473d5ef91ed786bbd3371f0dfcc5ccf4aa82927192aa94fe70a261f1899e1f2f62d50b027f7e7cac8fe3691aa323e71d5e479d466512d1df57633a9006016322978a795431c745f0502e37b8884c368a3f9d5c05a7fb5bd25d95442d09f79c5bd656dccb450cb19c6df406ffcfc414334021df3e4654f84f10070846d3b06795445f79b1f0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
36.176924365s ago: executing program 6 (id=7653):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x2)
35.251737656s ago: executing program 6 (id=7654):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e225e0004fcff", 0x58}], 0x1)
33.768419743s ago: executing program 6 (id=7663):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x4)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x564})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r2, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd502000000090001"], 0x7c}}, 0x0)
31.335903161s ago: executing program 35 (id=7663):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x4)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x564})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r2, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd502000000090001"], 0x7c}}, 0x0)
15.744921035s ago: executing program 7 (id=7714):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf090000000000005509010000"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001e00)=@newtaction={0x14, 0x30, 0x200, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x44080)
r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
dup3(r6, r7, 0x0)
14.538652459s ago: executing program 7 (id=7716):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0)
setreuid(0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000240))
13.363789777s ago: executing program 0 (id=7718):
syz_emit_ethernet(0x22, &(0x7f0000000bc0)={@link_local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x9, 0x14, 0x65, 0x0, 0x7, 0x88, 0x0, @empty, @multicast1}}}}}, 0x0)
13.224546949s ago: executing program 7 (id=7719):
userfaultfd(0x80001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000})
13.051966788s ago: executing program 0 (id=7720):
r0 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept(r0, 0x0, 0x0)
12.683972226s ago: executing program 7 (id=7722):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="340000001900150000000000e99e6f5f0a00000002020000000000001800098014000000"], 0x34}], 0x1}, 0x0)
12.656514958s ago: executing program 0 (id=7723):
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
capset(0x0, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(0xffffffffffffffff, 0x0)
11.121698881s ago: executing program 0 (id=7725):
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = inotify_init1(0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
inotify_add_watch(r0, 0x0, 0x10000a0)
sched_setaffinity(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
waitid(0x2, r1, 0x0, 0x80000000, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000ec0)=""/4096, 0x1000)
chdir(&(0x7f0000004340)='./file0\x00')
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newsa={0x154, 0x10, 0x713, 0x0, 0x25dfdbfb, {{@in=@private=0xa010101, @in6=@local, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2f}, {@in=@rand_addr=0x6, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}, @encap={0x1c, 0x4, {0x3, 0x4e22, 0x4e21, @in6=@remote}}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x0)
mount(&(0x7f0000000100)=@sg0, &(0x7f0000000180)='./bus\x00', 0x0, 0x2088000, 0x0)
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@shortname_mixed}, {@rodir}, {@fat=@errors_remount}, {@shortname_lower}, {@fat=@dos1xfloppy}, {@shortname_win95}, {@uni_xlate}, {@numtail}, {@numtail}, {@shortname_winnt}, {@fat=@errors_continue}, {@uni_xlate}, {@uni_xlate}, {@fat=@nfs}, {@utf8}, {@rodir}, {@numtail}, {@shortname_winnt}, {@fat=@nfs}, {@utf8no}, {@rodir}, {@shortname_mixed}]}, 0x1, 0x2a3, &(0x7f0000000180)="$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")
8.856954959s ago: executing program 1 (id=7727):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x8, &(0x7f0000000240)={[{@mb_optimize_scan}, {@test_dummy_encryption_v1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@block_validity}, {@quota}, {@data_journal}, {@resgid}, {@errors_remount}, {@nobarrier}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x20000}}, {@block_validity}, {@resgid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x47e, &(0x7f0000001140)="$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")
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e80), 0x80141, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000380)={0xff, 0x4f}, 0x2)
chdir(&(0x7f0000000540)='./cgroup\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x80080, 0x0)
getdents64(r3, &(0x7f0000000040)=""/41, 0x29)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
8.046059536s ago: executing program 0 (id=7728):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt(r0, 0x1, 0x1, &(0x7f0000000080)=""/127, &(0x7f0000000000)=0x7f)
r1 = syz_open_procfs(0x0, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={0x0, 0x6})
ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x60341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6b)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x68, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x92b8, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x8800)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, 0xffffffffffffffff, 0x1d, 0x0, @void}, 0x10)
pwritev(r3, 0x0, 0x0, 0x5, 0x101)
6.893110652s ago: executing program 1 (id=7730):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
5.666800341s ago: executing program 1 (id=7731):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, 0x0, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000180)=0x1, 0x4)
recvmmsg(r6, &(0x7f0000000040), 0x0, 0x45833af92e4a19fe, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
connect$inet6(r7, 0x0, 0x0)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
3.872503994s ago: executing program 1 (id=7732):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000024c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010)
2.479142975s ago: executing program 8 (id=7734):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
2.363368641s ago: executing program 8 (id=7735):
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
capset(0x0, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(0xffffffffffffffff, 0x0)
1.499916895s ago: executing program 8 (id=7736):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x40281, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0x2000009)
sendfile(r0, r1, 0x0, 0x6)
mknod(&(0x7f0000000080)='./bus\x00', 0x20, 0x104)
r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
tee(r2, r3, 0x4, 0x0)
1.233077927s ago: executing program 8 (id=7737):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x40, 0x4}, {0xc, 0x5}}}}, 0x11)
clock_settime(0xfffffffb, &(0x7f0000000040)={0x77359400})
statx(r1, &(0x7f0000000300)='./cgroup\x00', 0x1000, 0x2, &(0x7f0000006900))
630.904089ms ago: executing program 7 (id=7738):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
chdir(&(0x7f0000000100)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
518.871724ms ago: executing program 1 (id=7739):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x4a800, 0x0)
fchdir(r0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020)
405.910411ms ago: executing program 7 (id=7740):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x6b, 0xd5, 0xcd, 0x20, 0x66b, 0x2206, 0x57e3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x70, 0x6, 0x0, 0x9, [{{0x9, 0x4, 0x11, 0x4, 0x0, 0x74, 0x51, 0x83}}]}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f0000000a80)={0x14, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000007bc0)={0x44, &(0x7f0000007940)={0x20, 0x6, 0x1, "b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fdatasync(0xffffffffffffffff)
285.30708ms ago: executing program 0 (id=7741):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, 0x0, 0x0}, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)={0x0, 0x16, 0x3, "94c078"}, 0x0, 0x0})
254.343417ms ago: executing program 8 (id=7742):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x9, 0x1a1300)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0)
181.09312ms ago: executing program 1 (id=7743):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0)
setreuid(0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000240))
0s ago: executing program 8 (id=7744):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0xfff)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8)
close(r1)
kernel console output (not intermixed with test programs):
alid bInterval 0, changing to 7
[ 829.658594][T18437] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 829.668743][T18437] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 829.702069][T18437] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 829.711179][T18437] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 829.764444][T18437] usb 7-1: config 0 descriptor??
[ 830.944963][T18437] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[ 830.981914][T18437] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[ 830.999648][T18437] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[ 831.017704][T18437] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[ 831.046670][T18437] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[ 831.068635][T18437] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[ 831.086347][T18437] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[ 831.111947][T18437] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[ 831.145673][T18437] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[ 831.194955][T18437] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[ 831.226778][T18437] HID 045e:07da: Invalid code 65791 type 1
[ 831.258598][T18437] HID 045e:07da: Invalid code 768 type 1
[ 831.292550][T18437] HID 045e:07da: Invalid code 769 type 1
[ 831.347038][T18437] HID 045e:07da: Invalid code 770 type 1
[ 831.382178][T18437] HID 045e:07da: Invalid code 771 type 1
[ 832.315738][T18437] HID 045e:07da: Invalid code 772 type 1
[ 832.321479][T18437] HID 045e:07da: Invalid code 773 type 1
[ 832.340361][T18437] HID 045e:07da: Invalid code 774 type 1
[ 832.346245][T18437] HID 045e:07da: Invalid code 775 type 1
[ 832.352117][T18437] HID 045e:07da: Invalid code 776 type 1
[ 832.371759][T18437] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.001E/input/input25
[ 833.409298][T18437] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[ 833.425111][T18437] usb 7-1: USB disconnect, device number 27
[ 834.672885][ T7599] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 834.871940][ T7599] usb 1-1: Using ep0 maxpacket: 8
[ 834.888276][ T7599] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 834.914605][ T7599] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 834.927160][ T7599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 834.953081][ T7599] usb 1-1: Product: syz
[ 834.977676][ T7599] usb 1-1: Manufacturer: syz
[ 834.988332][ T7599] usb 1-1: SerialNumber: syz
[ 835.004150][T22249] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 835.239408][ T7599] usb 1-1: bad CDC descriptors
[ 835.282302][ T7599] usb 1-1: USB disconnect, device number 30
[ 837.873119][T22287] input: syz0 as /devices/virtual/input/input26
[ 842.596983][T22339] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6373'.
[ 844.662549][T20428] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 846.781927][T20428] usb 1-1: Using ep0 maxpacket: 8
[ 847.805135][T20428] usb 1-1: device descriptor read/all, error -71
[ 848.657143][T22377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6385'.
[ 850.856132][T22405] netem: incorrect gi model size
[ 850.893400][T22405] netem: change failed
[ 856.744862][ T5850] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[ 856.756695][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: kworker/u9:8 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0
[ 856.756744][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 856.756771][ T5850] Workqueue: hci5 hci_rx_work
[ 856.756831][ T5850] Call Trace:
[ 856.756842][ T5850] <TASK>
[ 856.756856][ T5850] dump_stack_lvl+0x16c/0x1f0
[ 856.756906][ T5850] sysfs_warn_dup+0x7f/0xa0
[ 856.756956][ T5850] sysfs_create_dir_ns+0x24d/0x2b0
[ 856.757007][ T5850] ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 856.757058][ T5850] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 856.757125][ T5850] ? kobject_add_internal+0x12d/0x990
[ 856.757181][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 856.757245][ T5850] ? do_raw_spin_unlock+0x172/0x230
[ 856.757286][ T5850] kobject_add_internal+0x2c8/0x990
[ 856.757347][ T5850] kobject_add+0x16f/0x240
[ 856.757399][ T5850] ? __pfx_kobject_add+0x10/0x10
[ 856.757450][ T5850] ? class_to_subsys+0x3e/0x160
[ 856.757507][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 856.757573][ T5850] ? do_raw_spin_unlock+0x172/0x230
[ 856.757611][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 856.757680][ T5850] ? kobject_put+0xab/0x5a0
[ 856.757732][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 856.757806][ T5850] device_add+0x289/0x1a70
[ 856.757859][ T5850] ? __pfx_dev_set_name+0x10/0x10
[ 856.757920][ T5850] ? __pfx_device_add+0x10/0x10
[ 856.757974][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 856.758036][ T5850] ? mgmt_send_event_skb+0x2f2/0x460
[ 856.758104][ T5850] hci_conn_add_sysfs+0x17e/0x230
[ 856.758169][ T5850] le_conn_complete_evt+0x107f/0x1da0
[ 856.758233][ T5850] ? __pfx_lock_release+0x10/0x10
[ 856.758289][ T5850] ? __pfx_le_conn_complete_evt+0x10/0x10
[ 856.758344][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 856.758406][ T5850] ? __mutex_lock+0x1cc/0xb10
[ 856.758461][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 856.758532][ T5850] hci_le_conn_complete_evt+0x23c/0x370
[ 856.758598][ T5850] hci_le_meta_evt+0x2e5/0x5d0
[ 856.758656][ T5850] ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 856.758725][ T5850] hci_event_packet+0x669/0x1180
[ 856.758779][ T5850] ? __pfx_hci_le_meta_evt+0x10/0x10
[ 856.758839][ T5850] ? __pfx_hci_event_packet+0x10/0x10
[ 856.758899][ T5850] ? hci_send_to_monitor+0x37/0x470
[ 856.758960][ T5850] ? hci_send_to_monitor+0x308/0x470
[ 856.759031][ T5850] hci_rx_work+0x2c5/0x16b0
[ 856.759091][ T5850] ? process_one_work+0x921/0x1ba0
[ 856.759152][ T5850] process_one_work+0x9c8/0x1ba0
[ 856.759221][ T5850] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 856.759280][ T5850] ? __pfx_process_one_work+0x10/0x10
[ 856.759333][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 856.759408][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 856.759471][ T5850] ? assign_work+0x1a0/0x250
[ 856.759526][ T5850] worker_thread+0x6c8/0xf00
[ 856.759592][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 856.759655][ T5850] ? __kthread_parkme+0x148/0x220
[ 856.759699][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 856.759763][ T5850] ? __pfx_worker_thread+0x10/0x10
[ 856.759819][ T5850] kthread+0x3b2/0x750
[ 856.759868][ T5850] ? __pfx_kthread+0x10/0x10
[ 856.759914][ T5850] ? lock_acquire+0x2f/0xb0
[ 856.759975][ T5850] ? __pfx_kthread+0x10/0x10
[ 856.760025][ T5850] ret_from_fork+0x48/0x80
[ 856.760077][ T5850] ? __pfx_kthread+0x10/0x10
[ 856.760125][ T5850] ret_from_fork_asm+0x1a/0x30
[ 856.760192][ T5850] </TASK>
[ 856.760317][ T5850] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 857.114672][ T5850] Bluetooth: hci5: failed to register connection device
[ 858.132282][ T7583] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 858.521900][ T7583] usb 1-1: Using ep0 maxpacket: 8
[ 858.531103][ T7583] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 858.553028][ T7583] usb 1-1: config 7 has an invalid interface number: 79 but max is 0
[ 858.564016][ T7583] usb 1-1: config 7 has no interface number 0
[ 858.574561][ T7583] usb 1-1: New USB device found, idVendor=12d1, idProduct=62c3, bcdDevice=f4.41
[ 858.591929][ T7583] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 858.600093][ T7583] usb 1-1: Product: syz
[ 858.632071][ T7587] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 858.640081][ T7583] usb 1-1: Manufacturer: syz
[ 858.654935][ T7583] usb 1-1: SerialNumber: syz
[ 858.813113][ T7587] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 858.833016][ T7587] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 858.854814][ T7587] usb 2-1: config 0 descriptor??
[ 858.891687][ T7583] option 1-1:7.79: GSM modem (1-port) converter detected
[ 858.923470][ T7583] usb 1-1: USB disconnect, device number 33
[ 858.931310][ T7583] option 1-1:7.79: device disconnected
[ 859.783379][ T7587] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[ 859.816798][ T7587] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 859.845106][ T7587] [drm:udl_init] *ERROR* Selecting channel failed
[ 859.927397][ T7587] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[ 859.960901][ T7587] [drm] Initialized udl on minor 2
[ 859.999122][ T7587] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 860.061722][ T7587] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 860.105907][ T7583] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 860.119013][ T7587] usb 2-1: USB disconnect, device number 27
[ 860.162168][ T7583] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 863.792393][T21969] Bluetooth: hci5: command 0x0406 tx timeout
[ 867.822602][T22639] netlink: 71 bytes leftover after parsing attributes in process `syz.4.6477'.
[ 868.211973][ T7587] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[ 868.387055][ T7587] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 868.666449][ T7587] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 868.704715][ T7587] usb 8-1: config 0 descriptor??
[ 868.712105][ T7587] cp210x 8-1:0.0: cp210x converter detected
[ 869.806014][ T7587] usb 8-1: cp210x converter now attached to ttyUSB0
[ 869.855325][ T7587] usb 8-1: USB disconnect, device number 16
[ 869.893986][ T7587] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 869.957465][ T7587] cp210x 8-1:0.0: device disconnected
[ 870.042120][T20428] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 870.214594][T20428] usb 9-1: Using ep0 maxpacket: 16
[ 870.229538][T20428] usb 9-1: config 0 has an invalid interface number: 107 but max is 0
[ 870.249500][T20428] usb 9-1: config 0 has no interface number 0
[ 870.277424][T20428] usb 9-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 48, changing to 9
[ 870.318729][T20428] usb 9-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8240, setting to 1024
[ 870.359416][T20428] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[ 870.421740][T20428] usb 9-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[ 870.456292][T20428] usb 9-1: Product: syz
[ 870.487087][T20428] usb 9-1: Manufacturer: syz
[ 870.495112][T20428] usb 9-1: SerialNumber: syz
[ 871.134706][T20428] usb 9-1: config 0 descriptor??
[ 871.153108][T20428] keyspan 9-1:0.107: Keyspan 4 port adapter converter detected
[ 871.463348][T20428] keyspan 9-1:0.107: found no endpoint descriptor for endpoint 81
[ 871.482879][T20428] keyspan 9-1:0.107: found no endpoint descriptor for endpoint 1
[ 871.522127][T20428] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[ 871.560694][T20428] keyspan 9-1:0.107: found no endpoint descriptor for endpoint 2
[ 871.599423][T20428] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[ 871.643420][T20428] keyspan 9-1:0.107: found no endpoint descriptor for endpoint 4
[ 871.682507][T20428] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[ 871.714797][T20428] keyspan 9-1:0.107: found no endpoint descriptor for endpoint 6
[ 871.748615][T20428] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[ 872.558403][ T7599] usb 9-1: USB disconnect, device number 9
[ 872.613622][ T7599] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[ 872.662221][ T7599] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[ 872.846406][ T7599] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[ 872.884943][ T7599] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[ 872.922552][ T7599] keyspan 9-1:0.107: device disconnected
[ 874.997140][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 875.012255][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 876.492176][ T7599] usb 7-1: new full-speed USB device number 28 using dummy_hcd
[ 876.697060][ T7599] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 876.749544][ T7599] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 876.819887][ T7599] usb 7-1: config 0 interface 0 has no altsetting 0
[ 877.479256][ T7599] usb 7-1: New USB device found, idVendor=047f, idProduct=c058, bcdDevice= 0.00
[ 877.501874][ T7599] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 877.523755][ T7599] usb 7-1: config 0 descriptor??
[ 878.545848][ T7600] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[ 878.556442][ T7599] plantronics 0003:047F:C058.001F: collection stack underflow
[ 878.592020][ T7599] plantronics 0003:047F:C058.001F: item 0 0 0 12 parsing failed
[ 878.618922][ T7599] plantronics 0003:047F:C058.001F: parse failed
[ 878.641269][ T7599] plantronics 0003:047F:C058.001F: probe with driver plantronics failed with error -22
[ 878.706607][ T7599] usb 7-1: USB disconnect, device number 28
[ 878.738997][ T7600] usb 5-1: config 9 has an invalid interface number: 74 but max is 0
[ 878.776368][ T7600] usb 5-1: config 9 has no interface number 0
[ 878.878581][ T7600] usb 5-1: New USB device found, idVendor=0846, idProduct=1100, bcdDevice=85.47
[ 878.943692][ T7600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 878.971869][ T7600] usb 5-1: Product: syz
[ 878.976184][ T7600] usb 5-1: Manufacturer: syz
[ 878.980805][ T7600] usb 5-1: SerialNumber: syz
[ 879.029060][ T7600] cp210x 5-1:9.74: cp210x converter detected
[ 879.258100][ T7600] cp210x 5-1:9.74: failed to get vendor val 0x370b size 1: -32
[ 879.286470][ T7600] cp210x 5-1:9.74: querying part number failed
[ 879.310803][ T7600] usb 5-1: cp210x converter now attached to ttyUSB0
[ 880.551972][ T7583] usb 7-1: new full-speed USB device number 29 using dummy_hcd
[ 881.157222][T20428] usb 5-1: USB disconnect, device number 25
[ 881.169135][T20428] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 881.179254][T20428] cp210x 5-1:9.74: device disconnected
[ 881.220785][ T7583] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 881.703881][ T7583] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 881.723264][ T7583] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 881.743298][ T7583] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 881.751358][ T7583] usb 7-1: SerialNumber: syz
[ 881.798330][ T7583] usb 7-1: 0:2 : does not exist
[ 881.811965][ T7583] usb 7-1: unit 255 not found!
[ 882.030768][T20428] usb 7-1: USB disconnect, device number 29
[ 886.762293][ T7583] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[ 886.972232][ T7583] usb 7-1: Using ep0 maxpacket: 16
[ 887.026382][ T7583] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 887.122340][ T7583] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 887.226545][ T7583] usb 7-1: config 0 interface 0 has no altsetting 0
[ 887.267158][ T7583] usb 7-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00
[ 887.332181][ T7583] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 887.373255][ T7583] usb 7-1: config 0 descriptor??
[ 887.733650][T18437] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 887.824993][ T7583] hid (null): report_id 704644096 is invalid
[ 887.849798][ T7583] hid-generic 0003:060B:430A.0020: unexpected long global item
[ 887.868509][ T7583] hid-generic 0003:060B:430A.0020: probe with driver hid-generic failed with error -22
[ 887.971971][T18437] usb 2-1: Using ep0 maxpacket: 32
[ 887.998841][T18437] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[ 888.042983][T18437] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[ 888.091982][T18437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 888.111951][T18437] usb 2-1: Product: syz
[ 888.116262][T18437] usb 2-1: Manufacturer: syz
[ 888.141299][T18437] usb 2-1: SerialNumber: syz
[ 888.147190][ T7583] usb 7-1: USB disconnect, device number 30
[ 888.160217][T18437] usb 2-1: config 0 descriptor??
[ 888.176345][T22843] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 888.218079][T18437] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 888.488256][ T7583] usb 2-1: USB disconnect, device number 28
[ 899.762255][ T5896] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 899.932104][ T5896] usb 9-1: Using ep0 maxpacket: 16
[ 900.031903][ T5896] usb 9-1: config 0 has an invalid interface number: 29 but max is 0
[ 900.282107][ T5896] usb 9-1: config 0 has no interface number 0
[ 900.298493][ T5896] usb 9-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16
[ 900.340246][ T5896] usb 9-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024
[ 900.422014][ T5896] usb 9-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[ 900.496039][ T5896] usb 9-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0
[ 900.546016][ T5896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 900.606975][ T5896] usb 9-1: Product: syz
[ 900.611225][ T5896] usb 9-1: Manufacturer: syz
[ 900.672784][ T5896] usb 9-1: SerialNumber: syz
[ 900.702921][ T5896] usb 9-1: config 0 descriptor??
[ 900.732256][T22975] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 900.762356][T22975] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 900.951975][ T7587] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 901.142064][ T7587] usb 5-1: Using ep0 maxpacket: 8
[ 901.182532][ T7587] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 901.222081][ T7587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 901.265359][ T7587] usb 5-1: config 0 descriptor??
[ 901.485589][ T7587] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 902.943780][T18437] usb 9-1: USB disconnect, device number 10
[ 903.594542][T23018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6605'.
[ 903.637887][ T7587] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 903.665597][ T7587] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[ 903.732813][ T7587] asix 5-1:0.0: probe with driver asix failed with error -71
[ 903.822206][ T7587] usb 5-1: USB disconnect, device number 26
[ 905.040913][T23040] binfmt_misc: register: failed to install interpreter file ./file2
[ 907.982034][ T7587] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 908.418329][ T7587] usb 2-1: Using ep0 maxpacket: 8
[ 908.447101][ T7587] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 908.474565][ T7587] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 908.514786][ T7587] usb 2-1: config 1 has no interface number 1
[ 908.555724][ T7587] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 908.596996][ T7587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 908.627817][ T7587] usb 2-1: Product: syz
[ 908.655036][ T7587] usb 2-1: Manufacturer: syz
[ 908.659720][ T7587] usb 2-1: SerialNumber: syz
[ 908.827049][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6631'.
[ 908.861961][T23088] netlink: 'syz.0.6631': attribute type 2 has an invalid length.
[ 908.932885][ T7587] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[ 908.971561][ T7587] usb 2-1: 2:1 : sample bitwidth 76 in over sample bytes 2
[ 908.992439][ T7587] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[ 909.035604][ T7587] usb 2-1: USB disconnect, device number 29
[ 910.011978][T18437] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 910.302124][T18437] usb 5-1: Using ep0 maxpacket: 16
[ 910.334901][T18437] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 910.351993][T18437] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 910.375929][T18437] usb 5-1: Product: syz
[ 910.393223][T18437] usb 5-1: Manufacturer: syz
[ 910.419830][T23123] netlink: 'syz.8.6644': attribute type 2 has an invalid length.
[ 910.867690][T18437] usb 5-1: SerialNumber: syz
[ 910.974579][T18437] r8152-cfgselector 5-1: Unknown version 0x0000
[ 910.980925][T18437] r8152-cfgselector 5-1: config 0 descriptor??
[ 911.595338][T18437] r8152-cfgselector 5-1: USB disconnect, device number 27
[ 912.501927][T18437] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[ 912.673690][T18437] usb 8-1: config 0 has an invalid interface number: 64 but max is 0
[ 912.691962][T18437] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[ 912.726884][T18437] usb 8-1: config 0 has no interface number 0
[ 912.759861][T18437] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[ 912.789400][T18437] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 912.812105][T18437] usb 8-1: Product: syz
[ 912.824775][T18437] usb 8-1: Manufacturer: syz
[ 912.829402][T18437] usb 8-1: SerialNumber: syz
[ 912.865213][T18437] usb 8-1: config 0 descriptor??
[ 912.991937][ T5896] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 913.204408][ T5896] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 913.221868][ T5896] usb 5-1: config 1 has no interface number 0
[ 913.242023][ T5896] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 913.564709][ T5896] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 913.584700][ T5896] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 913.909096][T18437] usb 8-1: USB disconnect, device number 17
[ 913.982843][ T5896] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 914.266543][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 914.292900][ T5896] usb 5-1: Product: syz
[ 914.307522][ T5896] usb 5-1: Manufacturer: syz
[ 914.321335][ T5896] usb 5-1: SerialNumber: syz
[ 915.312298][ T5896] cdc_ncm 5-1:1.1: bind() failure
[ 915.952409][ T5896] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[ 916.167784][ T5896] usb 9-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 916.217997][ T5896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 916.289784][ T5896] usb 9-1: config 0 descriptor??
[ 916.332929][ T5896] ums-realtek 9-1:0.0: USB Mass Storage device detected
[ 917.555779][ T7599] usb 5-1: USB disconnect, device number 28
[ 917.640912][ T5896] usb 9-1: USB disconnect, device number 11
[ 920.241989][T23232] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6680'.
[ 920.680444][T23243] sch_tbf: burst 28 is lower than device lo mtu (65550) !
[ 921.199065][T23258] fuse: Bad value for 'fd'
[ 925.402367][T23284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6698'.
[ 926.117326][T18437] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[ 928.181889][T18437] usb 7-1: Using ep0 maxpacket: 32
[ 928.222408][T20428] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 929.494236][T18437] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 929.539455][T18437] usb 7-1: can't read configurations, error -71
[ 930.507653][T23346] veth0_to_team: entered promiscuous mode
[ 930.611992][T23346] veth0_to_team: entered allmulticast mode
[ 931.299036][T23365] netlink: 11324 bytes leftover after parsing attributes in process `syz.7.6734'.
[ 936.667661][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 936.681486][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 939.592908][T20428] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 939.784558][T20428] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[ 939.940895][T20428] usb 1-1: config 0 has no interface number 0
[ 940.079797][T20428] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 940.273346][T20428] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 940.287358][T20428] usb 1-1: config 0 interface 255 has no altsetting 0
[ 940.294622][T20428] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 940.304004][T20428] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 940.343402][T20428] usb 1-1: config 0 descriptor??
[ 940.367652][T20428] ums-realtek 1-1:0.255: USB Mass Storage device detected
[ 940.378911][T23460] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6770'.
[ 940.433734][ T7600] kernel write not supported for file /snd/seq (pid: 7600 comm: kworker/0:13)
[ 940.562398][T20428] usb 1-1: USB disconnect, device number 34
[ 947.041894][ T5850] Bluetooth: hci2: ACL packet for unknown connection handle 200
[ 947.662486][ T7599] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 947.873304][ T7599] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 947.918773][ T7599] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 947.944078][ T7599] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 947.971962][ T7599] usb 9-1: Product: syz
[ 947.982510][ T7599] usb 9-1: Manufacturer: syz
[ 948.002351][ T7599] usb 9-1: SerialNumber: syz
[ 948.869075][T23598] 9pnet_fd: p9_fd_create_tcp (23598): problem connecting socket to 127.0.0.1
[ 949.671485][ T7599] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 949.697265][ T7599] cdc_ncm 9-1:1.0: setting rx_max = 16384
[ 949.880077][ T7599] cdc_ncm 9-1:1.0: setting tx_max = 16384
[ 949.963246][ T7599] cdc_ncm 9-1:1.0 eth9: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[ 950.058543][ T7599] usb 9-1: USB disconnect, device number 12
[ 950.249207][ T7599] cdc_ncm 9-1:1.0 eth9: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP)
[ 951.281991][ T7599] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 951.323172][ T29] kauditd_printk_skb: 156 callbacks suppressed
[ 951.323197][ T29] audit: type=1326 audit(1739351501.359:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23635 comm="syz.6.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf778cde9 code=0x7ffc0000
[ 951.430398][ T29] audit: type=1326 audit(1739351501.389:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23635 comm="syz.6.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf778cde9 code=0x7ffc0000
[ 951.493908][ T7599] usb 9-1: Using ep0 maxpacket: 32
[ 951.511891][ T29] audit: type=1326 audit(1739351501.399:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23635 comm="syz.6.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7cf778cde9 code=0x7ffc0000
[ 951.523244][ T7599] usb 9-1: config 0 has an invalid interface number: 194 but max is 0
[ 951.568069][ T7599] usb 9-1: config 0 has no interface number 0
[ 951.610087][ T29] audit: type=1326 audit(1739351501.399:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23635 comm="syz.6.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7cf778ce23 code=0x7ffc0000
[ 951.692495][ T29] audit: type=1326 audit(1739351501.409:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23635 comm="syz.6.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7cf778b89f code=0x7ffc0000
[ 951.801971][ T29] audit: type=1326 audit(1739351501.409:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23635 comm="syz.6.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7cf778ce77 code=0x7ffc0000
[ 951.882082][ T7599] usb 9-1: config 0 interface 194 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 951.911979][ T7599] usb 9-1: config 0 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[ 952.158749][ T7599] usb 9-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice=bc.5a
[ 952.197058][ T7599] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 952.300971][ T7599] usb 9-1: Product: syz
[ 952.385222][ T7599] usb 9-1: Manufacturer: syz
[ 952.389910][ T7599] usb 9-1: SerialNumber: syz
[ 952.416162][ T7599] usb 9-1: config 0 descriptor??
[ 952.425639][T23625] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 952.445671][T23625] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 952.689176][ T7599] asix 9-1:0.194 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 952.731899][ T29] audit: type=1326 audit(1739351501.409:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23635 comm="syz.6.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7cf778b750 code=0x7ffc0000
[ 952.780898][ T7599] asix 9-1:0.194: probe with driver asix failed with error -71
[ 952.798151][ T29] audit: type=1326 audit(1739351501.409:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23635 comm="syz.6.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7cf778ba4a code=0x7ffc0000
[ 952.841225][ T29] audit: type=1326 audit(1739351501.409:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23635 comm="syz.6.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf778cde9 code=0x7ffc0000
[ 952.882461][ T7599] usb 9-1: USB disconnect, device number 13
[ 952.943857][ T29] audit: type=1326 audit(1739351501.429:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23635 comm="syz.6.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7cf778cde9 code=0x7ffc0000
[ 954.041984][T22619] Bluetooth: hci2: command 0x0405 tx timeout
[ 959.095442][ T29] kauditd_printk_skb: 5 callbacks suppressed
[ 959.095469][ T29] audit: type=1800 audit(1739351509.129:226): pid=23718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6870" name="file1" dev="tmpfs" ino=1808 res=0 errno=0
[ 959.426413][T23723] fuse: Bad value for 'fd'
[ 962.672101][T20428] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 963.112760][T20428] usb 1-1: Using ep0 maxpacket: 16
[ 963.910840][T20428] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 963.929986][T20428] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 963.968169][T20428] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 964.041975][T20428] usb 1-1: config 1 has no interface number 1
[ 964.048341][T20428] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 964.120127][T20428] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 964.572048][T20428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 964.580126][T20428] usb 1-1: Product: syz
[ 964.600475][T20428] usb 1-1: Manufacturer: syz
[ 964.632474][T20428] usb 1-1: SerialNumber: syz
[ 964.923906][T20428] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 965.032666][T20428] usb 1-1: USB disconnect, device number 35
[ 965.295523][T23800] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[ 968.278775][T23836] block device autoloading is deprecated and will be removed.
[ 968.286671][ T7600] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 968.553531][ T7600] usb 2-1: Using ep0 maxpacket: 16
[ 968.572515][ T7600] usb 2-1: config 0 has an invalid interface number: 29 but max is 0
[ 968.580756][ T7600] usb 2-1: config 0 has no interface number 0
[ 968.758088][ T7600] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16
[ 968.888890][ T7600] usb 2-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 968.910357][ T7600] usb 2-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0
[ 968.920206][ T7600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 968.928714][ T7600] usb 2-1: Product: syz
[ 968.933694][ T7600] usb 2-1: Manufacturer: syz
[ 968.938434][ T7600] usb 2-1: SerialNumber: syz
[ 968.963446][ T7600] usb 2-1: config 0 descriptor??
[ 968.969307][T23832] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 969.048345][T23859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6918'.
[ 971.163088][ T7587] usb 2-1: USB disconnect, device number 31
[ 974.194246][T23927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 974.202181][T23927] IPv6: NLM_F_CREATE should be set when creating new route
[ 976.582109][T20428] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 976.773708][T20428] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 976.829807][T20428] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 977.153669][T20428] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[ 977.212035][T20428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 977.237783][T20428] usb 2-1: Product: syz
[ 977.245339][T20428] usb 2-1: Manufacturer: syz
[ 977.251544][T20428] usb 2-1: SerialNumber: syz
[ 977.294737][T20428] r8152-cfgselector 2-1: Unknown version 0x0000
[ 977.302080][T20428] r8152-cfgselector 2-1: config 0 descriptor??
[ 978.391012][ T7600] r8152-cfgselector 2-1: USB disconnect, device number 32
[ 980.197245][T23998] block device autoloading is deprecated and will be removed.
[ 980.220400][T24007] block device autoloading is deprecated and will be removed.
[ 980.272330][T24007] loop8: detected capacity change from 0 to 1024
[ 980.279451][T24007] EXT4-fs: Ignoring removed nobh option
[ 980.512926][T24007] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 980.575372][T24007] EXT4-fs error (device loop8): ext4_ext_check_inode:524: inode #11: comm syz.8.6967: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[ 980.622243][T24007] EXT4-fs error (device loop8): ext4_orphan_get:1392: comm syz.8.6967: couldn't read orphan inode 11 (err -117)
[ 980.653738][T24007] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 980.721889][T24013] EXT4-fs error (device loop8): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set
[ 980.775837][T24015] netlink: 720 bytes leftover after parsing attributes in process `syz.1.6970'.
[ 980.857822][T24015] veth6: entered promiscuous mode
[ 980.869026][T24015] veth6: entered allmulticast mode
[ 982.013319][T18246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 985.466821][T24054] loop8: detected capacity change from 0 to 512
[ 985.474093][T24054] ext3: Unknown parameter 'nouser_xattr'
[ 988.002103][ T7599] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 988.032280][ T5896] usb 7-1: new full-speed USB device number 33 using dummy_hcd
[ 988.194490][ T7599] usb 5-1: Using ep0 maxpacket: 16
[ 988.204475][ T7599] usb 5-1: config 1 has an invalid interface number: 82 but max is 0
[ 988.224309][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 988.256533][ T7599] usb 5-1: config 1 has no interface number 0
[ 988.271949][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 988.282327][ T7599] usb 5-1: config 1 interface 82 has no altsetting 0
[ 989.145122][ T5896] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[ 989.162470][ T7599] usb 5-1: New USB device found, idVendor=04f2, idProduct=aff7, bcdDevice=2d.82
[ 989.182164][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4
[ 989.190223][ T5896] usb 7-1: SerialNumber: syz
[ 989.195118][ T7599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 989.211815][ T7599] usb 5-1: Product: syz
[ 989.216030][ T7599] usb 5-1: Manufacturer: syz
[ 989.220651][ T7599] usb 5-1: SerialNumber: syz
[ 989.229569][ T5896] usb 7-1: config 0 descriptor??
[ 989.245899][ T5896] usb 7-1: Found UVC 0.00 device <unnamed> (10c4:ea90)
[ 989.272975][ T5896] usb 7-1: No valid video chain found.
[ 989.474941][ T5896] usb 7-1: USB disconnect, device number 33
[ 989.512119][ T7599] usb 5-1: USB disconnect, device number 29
[ 990.713686][T24105] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6997'.
[ 991.337804][ T29] audit: type=1326 audit(1739351541.369:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24098 comm="syz.0.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508e58cde9 code=0x7fc00000
[ 991.499267][ T29] audit: type=1326 audit(1739351541.399:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24098 comm="syz.0.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f508e58cde9 code=0x7fc00000
[ 991.582093][ T29] audit: type=1326 audit(1739351541.399:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24098 comm="syz.0.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508e58cde9 code=0x7fc00000
[ 991.605328][ T29] audit: type=1326 audit(1739351541.399:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24098 comm="syz.0.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508e58cde9 code=0x7fc00000
[ 991.628621][ T29] audit: type=1326 audit(1739351541.399:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24098 comm="syz.0.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508e58cde9 code=0x7fc00000
[ 991.652071][ T29] audit: type=1326 audit(1739351541.399:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24098 comm="syz.0.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508e58cde9 code=0x7fc00000
[ 992.123147][ T29] audit: type=1326 audit(1739351541.399:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24098 comm="syz.0.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508e58cde9 code=0x7fc00000
[ 992.427156][ T29] audit: type=1326 audit(1739351541.399:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24098 comm="syz.0.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508e58cde9 code=0x7fc00000
[ 992.851089][T24132] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 992.858432][T24132] IPv6: NLM_F_CREATE should be set when creating new route
[ 992.873915][T24130] block device autoloading is deprecated and will be removed.
[ 996.391331][T24172] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7014'.
[ 997.723969][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 997.740556][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 997.802116][ T5896] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[ 997.880221][T24194] input: syz0 as /devices/virtual/input/input29
[ 998.004845][T24196] block device autoloading is deprecated and will be removed.
[ 998.024496][ T5896] usb 7-1: Using ep0 maxpacket: 8
[ 998.029931][ T5896] usb 7-1: config 4 has an invalid interface number: 244 but max is 0
[ 998.029966][ T5896] usb 7-1: config 4 has no interface number 0
[ 998.030000][ T5896] usb 7-1: config 4 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7
[ 998.030038][ T5896] usb 7-1: config 4 interface 244 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[ 998.030129][ T5896] usb 7-1: config 4 interface 244 has no altsetting 0
[ 998.037680][ T5896] usb 7-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa
[ 998.037716][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 998.037745][ T5896] usb 7-1: Product: syz
[ 998.037766][ T5896] usb 7-1: Manufacturer: syz
[ 998.037788][ T5896] usb 7-1: SerialNumber: syz
[ 998.266376][ T5896] ipheth 7-1:4.244: Unable to find endpoints
[ 998.283792][ T5896] usb 7-1: USB disconnect, device number 34
[ 1003.233576][T24259] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7046'.
[ 1005.302408][T24279] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7053'.
[ 1007.408708][T24306] block device autoloading is deprecated and will be removed.
[ 1008.635514][ T5850] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[ 1008.646226][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: kworker/u9:8 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0
[ 1008.646273][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1008.646298][ T5850] Workqueue: hci2 hci_rx_work
[ 1008.646357][ T5850] Call Trace:
[ 1008.646368][ T5850] <TASK>
[ 1008.646381][ T5850] dump_stack_lvl+0x16c/0x1f0
[ 1008.646429][ T5850] sysfs_warn_dup+0x7f/0xa0
[ 1008.646478][ T5850] sysfs_create_dir_ns+0x24d/0x2b0
[ 1008.646528][ T5850] ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1008.646579][ T5850] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1008.646655][ T5850] ? kobject_add_internal+0x12d/0x990
[ 1008.646711][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.646775][ T5850] ? do_raw_spin_unlock+0x172/0x230
[ 1008.646816][ T5850] kobject_add_internal+0x2c8/0x990
[ 1008.646877][ T5850] kobject_add+0x16f/0x240
[ 1008.646929][ T5850] ? __pfx_kobject_add+0x10/0x10
[ 1008.646980][ T5850] ? class_to_subsys+0x3e/0x160
[ 1008.647037][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.647099][ T5850] ? do_raw_spin_unlock+0x172/0x230
[ 1008.647137][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.647200][ T5850] ? kobject_put+0xab/0x5a0
[ 1008.647252][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.647325][ T5850] device_add+0x289/0x1a70
[ 1008.647378][ T5850] ? __pfx_dev_set_name+0x10/0x10
[ 1008.647438][ T5850] ? __pfx_device_add+0x10/0x10
[ 1008.647490][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.647552][ T5850] ? mgmt_send_event_skb+0x2f2/0x460
[ 1008.647622][ T5850] hci_conn_add_sysfs+0x17e/0x230
[ 1008.647691][ T5850] le_conn_complete_evt+0x107f/0x1da0
[ 1008.647754][ T5850] ? __pfx_lock_release+0x10/0x10
[ 1008.647809][ T5850] ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1008.647866][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.647927][ T5850] ? __mutex_lock+0x1cc/0xb10
[ 1008.647982][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.648053][ T5850] hci_le_conn_complete_evt+0x23c/0x370
[ 1008.648119][ T5850] hci_le_meta_evt+0x2e5/0x5d0
[ 1008.648176][ T5850] ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1008.648239][ T5850] hci_event_packet+0x669/0x1180
[ 1008.648293][ T5850] ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1008.648353][ T5850] ? __pfx_hci_event_packet+0x10/0x10
[ 1008.648404][ T5850] ? __entry_text_end+0x1020c5/0x1020c9
[ 1008.648465][ T5850] ? mark_held_locks+0x9f/0xe0
[ 1008.648521][ T5850] ? kcov_remote_start+0x3cf/0x6e0
[ 1008.648581][ T5850] ? lockdep_hardirqs_on+0x7c/0x110
[ 1008.648622][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.648702][ T5850] hci_rx_work+0x2c5/0x16b0
[ 1008.648762][ T5850] ? process_one_work+0x921/0x1ba0
[ 1008.648822][ T5850] process_one_work+0x9c8/0x1ba0
[ 1008.648891][ T5850] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1008.648950][ T5850] ? __pfx_process_one_work+0x10/0x10
[ 1008.649003][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.649078][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.649141][ T5850] ? assign_work+0x1a0/0x250
[ 1008.649195][ T5850] worker_thread+0x6c8/0xf00
[ 1008.649262][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.649326][ T5850] ? __kthread_parkme+0x148/0x220
[ 1008.649363][ T5850] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.649427][ T5850] ? __pfx_worker_thread+0x10/0x10
[ 1008.649482][ T5850] kthread+0x3b2/0x750
[ 1008.649531][ T5850] ? __pfx_kthread+0x10/0x10
[ 1008.649577][ T5850] ? lock_acquire+0x2f/0xb0
[ 1008.649639][ T5850] ? __pfx_kthread+0x10/0x10
[ 1008.649695][ T5850] ret_from_fork+0x48/0x80
[ 1008.649748][ T5850] ? __pfx_kthread+0x10/0x10
[ 1008.649798][ T5850] ret_from_fork_asm+0x1a/0x30
[ 1008.649865][ T5850] </TASK>
[ 1008.651677][ T5850] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1008.982323][T24333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7072'.
[ 1008.983757][ T5850] Bluetooth: hci2: failed to register connection device
[ 1010.085560][T12703] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1010.206398][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1010.217248][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1010.226356][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1010.237127][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1010.247295][ T5850] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1010.261998][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1012.755782][T12703] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1012.861983][T18355] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1013.034817][T18355] usb 2-1: Using ep0 maxpacket: 32
[ 1013.051360][T18355] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1013.068936][T12703] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1013.112384][T18355] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1013.144178][T18355] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1013.162100][T18355] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1013.191173][T18355] usb 2-1: Product: syz
[ 1013.203893][T18355] usb 2-1: Manufacturer: syz
[ 1013.243646][T18355] hub 2-1:4.0: USB hub found
[ 1013.302625][T12703] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1013.322350][ T5850] Bluetooth: hci3: command tx timeout
[ 1013.497907][T18355] hub 2-1:4.0: config failed, can't read hub descriptor (err -22)
[ 1013.627947][T18355] usb 2-1: USB disconnect, device number 33
[ 1015.027815][T12703] bridge_slave_1: left allmulticast mode
[ 1015.061870][T12703] bridge_slave_1: left promiscuous mode
[ 1015.082956][T12703] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1015.153198][T12703] bridge_slave_0: left allmulticast mode
[ 1015.200097][T12703] bridge_slave_0: left promiscuous mode
[ 1015.214378][T12703] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1015.392001][ T5850] Bluetooth: hci3: command tx timeout
[ 1016.111937][T22619] Bluetooth: hci2: command 0x0405 tx timeout
[ 1017.931939][T22619] Bluetooth: hci3: command tx timeout
[ 1020.251948][T22619] Bluetooth: hci3: command tx timeout
[ 1021.792350][T12703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1021.822295][T12703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1021.834147][T12703] bond0 (unregistering): Released all slaves
[ 1022.068239][T12703] bond1 (unregistering): (slave veth3): Releasing active interface
[ 1022.089855][T12703] bond1 (unregistering): Released all slaves
[ 1022.319367][T12703] bond2 (unregistering): (slave veth5): Releasing active interface
[ 1022.341135][T12703] bond2 (unregistering): Released all slaves
[ 1022.554788][T24347] chnl_net:caif_netlink_parms(): no params data found
[ 1025.153262][T24347] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1025.181122][T24347] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1025.211684][T24347] bridge_slave_0: entered allmulticast mode
[ 1025.234444][T24347] bridge_slave_0: entered promiscuous mode
[ 1025.258365][T24347] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1025.271911][T24347] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1025.301716][T24347] bridge_slave_1: entered allmulticast mode
[ 1025.309355][T24347] bridge_slave_1: entered promiscuous mode
[ 1025.429358][T24347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1025.459554][T24347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1025.698458][T12703] hsr_slave_0: left promiscuous mode
[ 1025.704964][T22619] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[ 1025.715771][T22619] CPU: 1 UID: 0 PID: 22619 Comm: kworker/u9:1 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0
[ 1025.715818][T22619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1025.715844][T22619] Workqueue: hci0 hci_rx_work
[ 1025.715917][T22619] Call Trace:
[ 1025.715929][T22619] <TASK>
[ 1025.715942][T22619] dump_stack_lvl+0x16c/0x1f0
[ 1025.715993][T22619] sysfs_warn_dup+0x7f/0xa0
[ 1025.716044][T22619] sysfs_create_dir_ns+0x24d/0x2b0
[ 1025.716096][T22619] ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1025.716147][T22619] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1025.716217][T22619] ? kobject_add_internal+0x12d/0x990
[ 1025.716273][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1025.716339][T22619] ? do_raw_spin_unlock+0x172/0x230
[ 1025.716379][T22619] kobject_add_internal+0x2c8/0x990
[ 1025.716442][T22619] kobject_add+0x16f/0x240
[ 1025.716495][T22619] ? __pfx_kobject_add+0x10/0x10
[ 1025.716547][T22619] ? class_to_subsys+0x3e/0x160
[ 1025.716605][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1025.716668][T22619] ? do_raw_spin_unlock+0x172/0x230
[ 1025.716707][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1025.716771][T22619] ? kobject_put+0xab/0x5a0
[ 1025.716824][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1025.716907][T22619] device_add+0x289/0x1a70
[ 1025.716962][T22619] ? __pfx_dev_set_name+0x10/0x10
[ 1025.717023][T22619] ? __pfx_device_add+0x10/0x10
[ 1025.717078][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1025.717142][T22619] ? mgmt_send_event_skb+0x2f2/0x460
[ 1025.717212][T22619] hci_conn_add_sysfs+0x17e/0x230
[ 1025.717277][T22619] le_conn_complete_evt+0x107f/0x1da0
[ 1025.717343][T22619] ? __pfx_lock_release+0x10/0x10
[ 1025.717399][T22619] ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1025.717455][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1025.717519][T22619] ? __mutex_lock+0x1cc/0xb10
[ 1025.717574][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1025.717650][T22619] hci_le_conn_complete_evt+0x23c/0x370
[ 1025.717715][T22619] hci_le_meta_evt+0x2e5/0x5d0
[ 1025.717774][T22619] ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1025.717838][T22619] hci_event_packet+0x669/0x1180
[ 1025.717893][T22619] ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1025.717961][T22619] ? __pfx_hci_event_packet+0x10/0x10
[ 1025.718013][T22619] ? __entry_text_end+0x1020c5/0x1020c9
[ 1025.718076][T22619] ? mark_held_locks+0x9f/0xe0
[ 1025.718134][T22619] ? kcov_remote_start+0x3cf/0x6e0
[ 1025.718196][T22619] ? lockdep_hardirqs_on+0x7c/0x110
[ 1025.718238][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1025.718314][T22619] hci_rx_work+0x2c5/0x16b0
[ 1025.718375][T22619] ? process_one_work+0x921/0x1ba0
[ 1025.718436][T22619] process_one_work+0x9c8/0x1ba0
[ 1025.718506][T22619] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1025.718566][T22619] ? __pfx_process_one_work+0x10/0x10
[ 1025.718620][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1025.718696][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1025.718759][T22619] ? assign_work+0x1a0/0x250
[ 1025.718814][T22619] worker_thread+0x6c8/0xf00
[ 1025.718881][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1025.718952][T22619] ? __kthread_parkme+0x148/0x220
[ 1025.718990][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1025.719054][T22619] ? __pfx_worker_thread+0x10/0x10
[ 1025.719111][T22619] kthread+0x3b2/0x750
[ 1025.719160][T22619] ? __pfx_kthread+0x10/0x10
[ 1025.719207][T22619] ? lock_acquire+0x2f/0xb0
[ 1025.719271][T22619] ? __pfx_kthread+0x10/0x10
[ 1025.719321][T22619] ret_from_fork+0x48/0x80
[ 1025.719375][T22619] ? __pfx_kthread+0x10/0x10
[ 1025.719424][T22619] ret_from_fork_asm+0x1a/0x30
[ 1025.719492][T22619] </TASK>
[ 1025.719518][T22619] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1026.084681][T12703] hsr_slave_1: left promiscuous mode
[ 1026.084766][T22619] Bluetooth: hci0: failed to register connection device
[ 1026.121836][T12703] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1026.129451][T12703] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1026.145233][T12703] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1026.161192][T12703] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1026.206685][T12703] veth1_macvtap: left promiscuous mode
[ 1026.212349][T12703] veth0_macvtap: left promiscuous mode
[ 1026.218160][T12703] veth1_vlan: left promiscuous mode
[ 1026.225563][T12703] veth0_vlan: left promiscuous mode
[ 1028.105609][T12703] team0 (unregistering): Port device team_slave_1 removed
[ 1028.161491][T12703] team0 (unregistering): Port device team_slave_0 removed
[ 1028.616791][T24347] team0: Port device team_slave_0 added
[ 1028.628437][T24347] team0: Port device team_slave_1 added
[ 1028.903956][T24347] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1028.910970][T24347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1029.849334][T24347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1030.076237][T24347] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1030.084004][T24347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1030.110946][T24347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1032.898248][ T5850] Bluetooth: hci0: command 0x0406 tx timeout
[ 1034.168407][T24347] hsr_slave_0: entered promiscuous mode
[ 1034.232721][T24347] hsr_slave_1: entered promiscuous mode
[ 1034.238827][T24347] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1034.298722][T24347] Cannot create hsr debugfs directory
[ 1036.813755][ T7587] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 1037.156573][ T7587] usb 1-1: Using ep0 maxpacket: 32
[ 1037.412865][ T7587] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[ 1037.475195][ T7587] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[ 1037.536671][ T7587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1037.597267][ T7587] usb 1-1: Product: syz
[ 1037.601510][ T7587] usb 1-1: Manufacturer: syz
[ 1037.645750][ T7587] usb 1-1: SerialNumber: syz
[ 1037.963182][ T7587] usb 1-1: config 0 descriptor??
[ 1037.972201][T24570] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1037.995252][ T7587] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 1038.524176][ T7587] usb 1-1: USB disconnect, device number 36
[ 1041.020909][T24347] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1043.322590][T24347] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1043.376429][T24347] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1044.445128][T24347] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1045.007279][T24347] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1046.008153][ T7599] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[ 1046.034226][T24347] 8021q: adding VLAN 0 to HW filter on device team0
[ 1046.915455][T24347] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1046.941962][T24347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1046.982067][ T7599] usb 8-1: Using ep0 maxpacket: 16
[ 1047.011947][ T7599] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1047.031465][T12714] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1047.038751][T12714] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1047.052050][ T7599] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1047.065656][T12714] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1047.072868][T12714] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1047.164612][ T7599] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1047.329207][T24653] cgroup: Unknown subsys name 'cpuset'
[ 1047.336436][ T7599] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1047.483032][ T7599] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1047.832918][ T7599] usb 8-1: config 0 descriptor??
[ 1048.062050][ T7599] usbhid 8-1:0.0: can't add hid device: -71
[ 1048.068466][ T7599] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1048.100965][ T7599] usb 8-1: USB disconnect, device number 18
[ 1049.406115][T24347] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1053.127653][T24347] veth0_vlan: entered promiscuous mode
[ 1053.168311][T24347] veth1_vlan: entered promiscuous mode
[ 1054.405587][T24347] veth0_macvtap: entered promiscuous mode
[ 1054.445315][T24347] veth1_macvtap: entered promiscuous mode
[ 1056.505500][T24347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1056.528489][T18355] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 1056.528738][T24347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1057.097730][T24347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1057.152051][T24347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1057.188515][T24347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1057.239808][T24347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1057.271152][T24347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1057.312726][T24347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1057.334060][T24347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1058.317710][T24347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1058.327694][T24347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1058.354596][T24347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1058.649949][T24347] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1058.916627][T24347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1059.055120][T24347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1059.118057][T24347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1060.112620][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 1060.118987][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 1060.141804][T24347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1060.151706][T24347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1061.181795][T24347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1061.241848][T24347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1061.271927][T24347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1061.311867][T24347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1061.336697][T24347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1061.371820][T24347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1061.409054][T24347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.888562][T24347] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1063.977427][T24347] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.032054][T24347] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.079378][T24347] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.132013][T24347] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1065.274861][T24176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1065.315400][T24176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1065.389847][T24176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1065.413242][T24176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1078.772158][ T7599] usb 9-1: new full-speed USB device number 14 using dummy_hcd
[ 1079.467488][ T7599] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1079.539862][ T7599] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1079.739790][ T7599] usb 9-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00
[ 1079.783603][ T7599] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1079.824367][ T7599] usb 9-1: config 0 descriptor??
[ 1079.832313][T24821] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1082.057209][ T7599] logitech-hidpp-device 0003:046D:C087.0021: hidraw0: USB HID v0.00 Device [HID 046d:c087] on usb-dummy_hcd.8-1/input0
[ 1082.704792][ T7590] usb 9-1: USB disconnect, device number 14
[ 1082.951886][ T7599] usb 7-1: new full-speed USB device number 35 using dummy_hcd
[ 1084.070798][ T7599] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1085.059853][ T7599] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1085.141194][ T7599] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1086.111992][ T7599] usb 7-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[ 1086.121102][ T7599] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1086.872977][ T7599] usb 7-1: config 0 descriptor??
[ 1087.230987][ T7599] usb 7-1: can't set config #0, error -71
[ 1087.238540][T24855] input: syz1 as /devices/virtual/input/input31
[ 1087.979095][ T7599] usb 7-1: USB disconnect, device number 35
[ 1090.410438][ T5896] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1091.594274][ T5896] usb 9-1: Using ep0 maxpacket: 32
[ 1091.601664][ T5896] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1091.620917][ T5896] usb 9-1: config 7 has an invalid interface number: 128 but max is 0
[ 1091.630541][ T5896] usb 9-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[ 1091.650932][ T5896] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1091.681970][ T5896] usb 9-1: config 7 has no interface number 0
[ 1091.691504][ T5896] usb 9-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7
[ 1091.731802][ T5896] usb 9-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32
[ 1091.771909][ T5896] usb 9-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11
[ 1091.844835][ T5896] usb 9-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 1091.929534][ T5896] usb 9-1: config 7 interface 128 has no altsetting 0
[ 1091.982400][ T5896] usb 9-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13
[ 1092.025195][ T5896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1092.067142][ T5896] usb 9-1: Product: syz
[ 1092.558183][ T5896] usb 9-1: Manufacturer: syz
[ 1092.578455][ T5896] usb 9-1: SerialNumber: syz
[ 1092.637352][ T5896] usb 9-1: can't set config #7, error -71
[ 1092.686864][ T5896] usb 9-1: USB disconnect, device number 15
[ 1093.802338][T24914] dccp_invalid_packet: P.Data Offset(10) too large
[ 1095.297032][T22619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1095.315826][T22619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1095.325411][T22619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1095.335822][T22619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1095.343862][T22619] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1095.352904][T22619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1096.298756][ T7590] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[ 1096.346906][T24923] chnl_net:caif_netlink_parms(): no params data found
[ 1096.482441][ T7590] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1096.545760][ T7590] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1096.848038][ T7590] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1097.404960][T22619] Bluetooth: hci6: command tx timeout
[ 1097.839546][ T7590] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[ 1098.089137][ T7590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1098.253729][ T7590] usb 5-1: config 0 descriptor??
[ 1098.283946][T24923] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1098.292319][T24923] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1098.342212][T24923] bridge_slave_0: entered allmulticast mode
[ 1098.370307][T24923] bridge_slave_0: entered promiscuous mode
[ 1098.441674][T24923] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1098.487564][T24923] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1098.518157][T24923] bridge_slave_1: entered allmulticast mode
[ 1098.531877][ T7599] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1098.577405][T24923] bridge_slave_1: entered promiscuous mode
[ 1098.681845][ T7599] usb 1-1: Using ep0 maxpacket: 8
[ 1098.699437][ T7599] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1098.728490][ T7590] saitek 0003:06A3:0621.0022: unbalanced collection at end of report description
[ 1098.731430][ T7599] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1098.758645][ T7590] saitek 0003:06A3:0621.0022: parse failed
[ 1098.791915][ T7599] usb 1-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00
[ 1098.791971][ T7590] saitek 0003:06A3:0621.0022: probe with driver saitek failed with error -22
[ 1098.827983][ T7599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1098.842813][T24923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1098.897024][ T7599] usb 1-1: config 0 descriptor??
[ 1098.944039][T24923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1099.063458][ T5896] usb 5-1: USB disconnect, device number 30
[ 1099.261581][T24923] team0: Port device team_slave_0 added
[ 1099.347621][T24923] team0: Port device team_slave_1 added
[ 1099.378502][ T7599] wacom 0003:056A:032F.0023: unknown main item tag 0x0
[ 1099.491852][T22619] Bluetooth: hci6: command tx timeout
[ 1100.269800][ T7599] wacom 0003:056A:032F.0023: unknown main item tag 0x0
[ 1100.282387][ T7599] wacom 0003:056A:032F.0023: unknown main item tag 0x0
[ 1100.289306][ T7599] wacom 0003:056A:032F.0023: unknown main item tag 0x0
[ 1100.298369][ T7599] wacom 0003:056A:032F.0023: unknown main item tag 0x0
[ 1100.312599][ T7599] wacom 0003:056A:032F.0023: hidraw0: USB HID v0.f9 Device [HID 056a:032f] on usb-dummy_hcd.0-1/input0
[ 1100.349230][ T7599] usb 1-1: USB disconnect, device number 38
[ 1100.618674][T24923] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1100.665890][T24923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1100.964452][T24923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1100.977466][T24923] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1100.985515][T24923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1101.011578][T24923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1102.011125][T22619] Bluetooth: hci6: command tx timeout
[ 1102.267024][T24923] hsr_slave_0: entered promiscuous mode
[ 1102.273904][T24923] hsr_slave_1: entered promiscuous mode
[ 1102.288040][T24923] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1102.323921][T24923] Cannot create hsr debugfs directory
[ 1102.368327][ T29] audit: type=1326 audit(1739351652.399:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25006 comm="syz.7.7272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d97d28fb9 code=0x7ffc0000
[ 1102.390969][ C1] vkms_vblank_simulate: vblank timer overrun
[ 1102.704874][ T29] audit: type=1326 audit(1739351652.399:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25006 comm="syz.7.7272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d97d8cde9 code=0x7ffc0000
[ 1102.727319][ C1] vkms_vblank_simulate: vblank timer overrun
[ 1102.734698][ T29] audit: type=1326 audit(1739351652.399:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25006 comm="syz.7.7272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d97d28fb9 code=0x7ffc0000
[ 1102.756981][ C1] vkms_vblank_simulate: vblank timer overrun
[ 1102.812110][ T29] audit: type=1326 audit(1739351652.399:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25006 comm="syz.7.7272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d97d8cde9 code=0x7ffc0000
[ 1103.681978][ T29] audit: type=1326 audit(1739351652.439:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25006 comm="syz.7.7272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d97d28fb9 code=0x7ffc0000
[ 1103.818159][ T29] audit: type=1326 audit(1739351652.439:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25006 comm="syz.7.7272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d97d28fb9 code=0x7ffc0000
[ 1103.840591][ C1] vkms_vblank_simulate: vblank timer overrun
[ 1103.911809][ T29] audit: type=1326 audit(1739351652.439:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25006 comm="syz.7.7272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d97d8cde9 code=0x7ffc0000
[ 1104.033102][T22619] Bluetooth: hci6: command tx timeout
[ 1104.085405][ T29] audit: type=1326 audit(1739351652.439:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25006 comm="syz.7.7272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d97d8cde9 code=0x7ffc0000
[ 1104.107924][ C1] vkms_vblank_simulate: vblank timer overrun
[ 1104.115360][ T29] audit: type=1326 audit(1739351652.439:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25006 comm="syz.7.7272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d97d28fb9 code=0x7ffc0000
[ 1104.138424][ T29] audit: type=1326 audit(1739351652.439:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25006 comm="syz.7.7272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d97d8cde9 code=0x7ffc0000
[ 1104.160838][ C1] vkms_vblank_simulate: vblank timer overrun
[ 1104.612314][T25018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1107.253848][T24923] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1107.413702][ T29] kauditd_printk_skb: 20 callbacks suppressed
[ 1107.413731][ T29] audit: type=1326 audit(1739351657.439:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25032 comm="syz.4.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279158cde9 code=0x7ffc0000
[ 1107.536118][ T29] audit: type=1326 audit(1739351657.439:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25032 comm="syz.4.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279158cde9 code=0x7ffc0000
[ 1107.618745][T24923] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1107.631401][ T29] audit: type=1326 audit(1739351657.449:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25032 comm="syz.4.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f279158cde9 code=0x7ffc0000
[ 1107.974565][ T29] audit: type=1326 audit(1739351657.449:268): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=25032 comm="syz.4.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279158cde9 code=0x7ffc0000
[ 1108.002813][ T29] audit: type=1326 audit(1739351657.449:269): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=25032 comm="syz.4.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279158cde9 code=0x7ffc0000
[ 1108.072141][ T29] audit: type=1326 audit(1739351657.499:270): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=25032 comm="syz.4.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f279158cde9 code=0x7ffc0000
[ 1108.706929][ T29] audit: type=1326 audit(1739351657.499:271): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=25032 comm="syz.4.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279158cde9 code=0x7ffc0000
[ 1108.986012][ T29] audit: type=1326 audit(1739351657.499:272): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=25032 comm="syz.4.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279158cde9 code=0x7ffc0000
[ 1109.031860][ T29] audit: type=1326 audit(1739351657.499:273): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=25032 comm="syz.4.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f279158cde9 code=0x7ffc0000
[ 1109.056835][T24923] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1109.105381][ T29] audit: type=1326 audit(1739351657.499:274): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=25032 comm="syz.4.7283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279158cde9 code=0x7ffc0000
[ 1109.245401][T24923] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1110.351943][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1110.721887][ T7587] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 1111.471230][ T7587] usb 5-1: Using ep0 maxpacket: 32
[ 1111.489226][ T7587] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1111.509779][ T7587] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1111.593319][T25080] fuse: Bad value for 'fd'
[ 1111.605525][ T7587] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1112.372102][ T7587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1112.456667][T24923] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1112.457070][ T7587] usb 5-1: config 0 descriptor??
[ 1112.538073][T24923] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1112.607685][T24923] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1112.715693][T24923] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1115.778063][T24923] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1116.823543][ T7582] usb 5-1: USB disconnect, device number 31
[ 1116.856995][T24923] 8021q: adding VLAN 0 to HW filter on device team0
[ 1117.016827][T12693] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1117.024061][T12693] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1117.139926][T22619] Bluetooth: hci4: ACL packet for unknown connection handle 200
[ 1117.164641][T12693] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1117.171965][T12693] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1117.593496][T24923] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1117.604321][T24923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1117.709523][T25119] fuse: Bad value for 'fd'
[ 1120.721963][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 1120.732312][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 1123.305275][T24923] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1123.501192][T24923] veth0_vlan: entered promiscuous mode
[ 1123.584920][T24923] veth1_vlan: entered promiscuous mode
[ 1123.877797][T24923] veth0_macvtap: entered promiscuous mode
[ 1123.990154][T24923] veth1_macvtap: entered promiscuous mode
[ 1124.783732][T24923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1124.851445][T24923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1124.902021][T24923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1124.939770][T24923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1124.971880][T20428] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1124.991211][T24923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1125.272544][T24923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1125.312034][T20428] usb 1-1: Using ep0 maxpacket: 32
[ 1125.325900][T20428] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1125.472560][T20428] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1125.615568][T20428] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1125.861367][T20428] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1125.903147][T20428] usb 1-1: config 0 descriptor??
[ 1126.141785][T24923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1126.179950][T24923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1126.231679][T24923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1126.551787][T24923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1126.574096][T24923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1127.335651][T24923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1127.411833][T24923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1127.481846][T24923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1127.529628][ T7582] usb 1-1: USB disconnect, device number 39
[ 1127.559051][T24923] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1127.608893][T24923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1127.880121][T24923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1127.901802][T24923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1127.930225][T24923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1128.002313][T25165] fuse: Bad value for 'fd'
[ 1128.014211][T24923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1128.137723][T24923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1128.242164][T24923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1128.394106][T24923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1128.535900][T24923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1128.571999][T24923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1128.612390][T24923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1128.661963][T24923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1128.686593][T24923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1128.722229][T24923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1128.763233][T24923] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1128.807290][T22619] Bluetooth: hci4: unexpected event for opcode 0x1003
[ 1128.848055][T24923] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.181926][T24923] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.190709][T24923] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1130.442223][T24923] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1135.339032][T12714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1135.339066][T12714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1135.591468][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1135.658284][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1136.224854][T25214] fuse: Bad value for 'fd'
[ 1138.117397][T22619] Bluetooth: hci3: command 0x0406 tx timeout
[ 1139.996592][T25236] 9pnet_fd: Insufficient options for proto=fd
[ 1142.390422][T25255] fuse: Bad value for 'fd'
[ 1149.673654][T22619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1149.698259][T22619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1149.706532][T22619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1149.715441][T22619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1149.723316][T22619] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1149.730728][T22619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1152.198388][T22619] Bluetooth: hci0: command tx timeout
[ 1152.910598][T25306] fuse: Bad value for 'fd'
[ 1154.383728][T22619] Bluetooth: hci0: command tx timeout
[ 1156.804963][T22619] Bluetooth: hci0: command tx timeout
[ 1157.724272][T19871] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1158.849324][T22619] Bluetooth: hci0: command tx timeout
[ 1160.330616][T25347] fuse: Bad value for 'fd'
[ 1160.349666][ T7587] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1160.542776][T19871] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1160.946017][ T7587] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1160.987937][ T7587] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1161.040453][ T7587] usb 2-1: config 0 descriptor??
[ 1161.095261][ T7587] cp210x 2-1:0.0: cp210x converter detected
[ 1161.721956][T19871] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1161.953064][ T7587] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1164.540018][ T7587] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71
[ 1164.602011][ T7587] cp210x 2-1:0.0: GPIO initialisation failed: -71
[ 1164.656449][ T7587] usb 2-1: cp210x converter now attached to ttyUSB0
[ 1164.736651][ T7587] usb 2-1: USB disconnect, device number 34
[ 1165.983501][ T7587] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1165.991630][ T7587] cp210x 2-1:0.0: device disconnected
[ 1168.609050][T19871] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1169.198439][ T7587] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[ 1171.103514][ T7587] usb 8-1: Using ep0 maxpacket: 16
[ 1171.404100][ T7587] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1171.422071][ T7587] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1171.433108][ T7587] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1172.421940][ T7587] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1173.193109][T25397] fuse: Bad value for 'fd'
[ 1173.396949][ T7587] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1174.843051][ T7587] usb 8-1: config 0 descriptor??
[ 1175.024379][ T7587] usb 8-1: can't set config #0, error -71
[ 1175.062613][T19871] bridge_slave_1: left allmulticast mode
[ 1175.068349][T19871] bridge_slave_1: left promiscuous mode
[ 1175.083280][ T7587] usb 8-1: USB disconnect, device number 19
[ 1175.131980][T19871] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1175.212692][T19871] bridge_slave_0: left allmulticast mode
[ 1176.162689][T19871] bridge_slave_0: left promiscuous mode
[ 1176.168502][T19871] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1181.282113][ T7587] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1181.837355][T25437] fuse: Bad value for 'fd'
[ 1182.432289][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 1182.438660][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 1182.676161][ T7587] usb 2-1: Using ep0 maxpacket: 16
[ 1182.695548][ T7587] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[ 1182.741765][ T7587] usb 2-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config
[ 1182.772208][ T7587] usb 2-1: config 0 has no interface number 0
[ 1182.807842][ T7587] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1182.822009][ T7587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1182.840684][ T7587] usb 2-1: Product: syz
[ 1182.847389][ T7587] usb 2-1: Manufacturer: syz
[ 1182.861911][ T7587] usb 2-1: SerialNumber: syz
[ 1182.874840][ T7587] usb 2-1: config 0 descriptor??
[ 1182.894467][ T7587] usb 2-1: Found UVC 0.00 device syz (046d:08f3)
[ 1182.912191][ T7587] usb 2-1: No valid video chain found.
[ 1184.460531][T17330] usb 2-1: USB disconnect, device number 35
[ 1186.471604][T25472] input: syz1 as /devices/virtual/input/input35
[ 1186.911273][T25478] fuse: Bad value for 'fd'
[ 1188.312309][T19871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1188.460482][T19871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1188.604169][T19871] bond0 (unregistering): Released all slaves
[ 1188.984390][ T7583] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[ 1189.035514][ T7583] hid-generic 0000:0000:0000.0024: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1189.302168][ T7582] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1189.519073][ T7582] usb 5-1: Using ep0 maxpacket: 16
[ 1189.594918][ T7582] usb 5-1: config 0 has no interfaces?
[ 1189.666207][ T7582] usb 5-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00
[ 1189.832355][ T7582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1189.852640][T19871] bond1 (unregistering): (slave veth3): Releasing active interface
[ 1189.873901][ T7582] usb 5-1: config 0 descriptor??
[ 1189.903400][T19871] bond1 (unregistering): Released all slaves
[ 1189.978310][T25280] chnl_net:caif_netlink_parms(): no params data found
[ 1190.089813][T18437] usb 5-1: USB disconnect, device number 32
[ 1190.137274][T22619] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201'
[ 1190.149133][T22619] CPU: 0 UID: 0 PID: 22619 Comm: kworker/u9:1 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0
[ 1190.149182][T22619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1190.149209][T22619] Workqueue: hci6 hci_rx_work
[ 1190.149270][T22619] Call Trace:
[ 1190.149281][T22619] <TASK>
[ 1190.149296][T22619] dump_stack_lvl+0x16c/0x1f0
[ 1190.149346][T22619] sysfs_warn_dup+0x7f/0xa0
[ 1190.149398][T22619] sysfs_create_dir_ns+0x24d/0x2b0
[ 1190.149449][T22619] ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1190.149501][T22619] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1190.149571][T22619] ? kobject_add_internal+0x12d/0x990
[ 1190.149628][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1190.149693][T22619] ? do_raw_spin_unlock+0x172/0x230
[ 1190.149735][T22619] kobject_add_internal+0x2c8/0x990
[ 1190.149798][T22619] kobject_add+0x16f/0x240
[ 1190.149852][T22619] ? __pfx_kobject_add+0x10/0x10
[ 1190.149904][T22619] ? class_to_subsys+0x3e/0x160
[ 1190.149962][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1190.150032][T22619] ? do_raw_spin_unlock+0x172/0x230
[ 1190.150070][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1190.150135][T22619] ? kobject_put+0xab/0x5a0
[ 1190.150188][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1190.150263][T22619] device_add+0x289/0x1a70
[ 1190.150318][T22619] ? __pfx_dev_set_name+0x10/0x10
[ 1190.150380][T22619] ? __pfx_device_add+0x10/0x10
[ 1190.150435][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1190.150499][T22619] ? mgmt_send_event_skb+0x2f2/0x460
[ 1190.150569][T22619] hci_conn_add_sysfs+0x17e/0x230
[ 1190.150640][T22619] le_conn_complete_evt+0x107f/0x1da0
[ 1190.150707][T22619] ? __pfx_lock_release+0x10/0x10
[ 1190.150763][T22619] ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1190.150820][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1190.150884][T22619] ? __mutex_lock+0x1cc/0xb10
[ 1190.150939][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1190.151017][T22619] hci_le_conn_complete_evt+0x23c/0x370
[ 1190.151084][T22619] hci_le_meta_evt+0x2e5/0x5d0
[ 1190.151142][T22619] ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1190.151206][T22619] hci_event_packet+0x669/0x1180
[ 1190.151261][T22619] ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1190.151322][T22619] ? __pfx_hci_event_packet+0x10/0x10
[ 1190.151375][T22619] ? __entry_text_end+0x1020c5/0x1020c9
[ 1190.151437][T22619] ? mark_held_locks+0x9f/0xe0
[ 1190.151496][T22619] ? kcov_remote_start+0x3cf/0x6e0
[ 1190.151557][T22619] ? lockdep_hardirqs_on+0x7c/0x110
[ 1190.151601][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1190.151682][T22619] hci_rx_work+0x2c5/0x16b0
[ 1190.151743][T22619] ? process_one_work+0x921/0x1ba0
[ 1190.151806][T22619] process_one_work+0x9c8/0x1ba0
[ 1190.151876][T22619] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1190.151936][T22619] ? __pfx_process_one_work+0x10/0x10
[ 1190.151996][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1190.152072][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1190.152136][T22619] ? assign_work+0x1a0/0x250
[ 1190.152191][T22619] worker_thread+0x6c8/0xf00
[ 1190.152259][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1190.152323][T22619] ? __kthread_parkme+0x148/0x220
[ 1190.152362][T22619] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1190.152427][T22619] ? __pfx_worker_thread+0x10/0x10
[ 1190.152484][T22619] kthread+0x3b2/0x750
[ 1190.152534][T22619] ? __pfx_kthread+0x10/0x10
[ 1190.152581][T22619] ? lock_acquire+0x2f/0xb0
[ 1190.152644][T22619] ? __pfx_kthread+0x10/0x10
[ 1190.152695][T22619] ret_from_fork+0x48/0x80
[ 1190.152747][T22619] ? __pfx_kthread+0x10/0x10
[ 1190.152796][T22619] ret_from_fork_asm+0x1a/0x30
[ 1190.152863][T22619] </TASK>
[ 1190.498245][T22619] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1190.512793][T22619] Bluetooth: hci6: failed to register connection device
[ 1192.249204][T25280] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1192.258812][T25280] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1192.279395][T25280] bridge_slave_0: entered allmulticast mode
[ 1192.432166][T25280] bridge_slave_0: entered promiscuous mode
[ 1192.517583][T25280] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1192.541208][T25280] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1192.562405][T25280] bridge_slave_1: entered allmulticast mode
[ 1192.580437][T25280] bridge_slave_1: entered promiscuous mode
[ 1195.564176][T25280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1196.357770][T19871] hsr_slave_0: left promiscuous mode
[ 1196.368500][T19871] hsr_slave_1: left promiscuous mode
[ 1197.272958][T19871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1197.336665][T19871] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1197.388788][T19871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1197.451976][T19871] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1197.612603][T19871] veth1_macvtap: left promiscuous mode
[ 1197.618224][T19871] veth0_macvtap: left promiscuous mode
[ 1199.202213][T25584] fuse: Bad value for 'fd'
[ 1201.291835][ T7582] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1201.497668][ T7582] usb 5-1: Using ep0 maxpacket: 16
[ 1201.514429][ T7582] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[ 1201.531929][ T7582] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1201.589001][ T7582] usb 5-1: config 0 has no interface number 0
[ 1201.627529][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1201.635134][ T7582] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1201.647860][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1201.658165][ T7582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1201.667200][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1201.674615][ T7582] usb 5-1: Product: syz
[ 1201.685251][ T7582] usb 5-1: Manufacturer: syz
[ 1201.690422][ T7582] usb 5-1: SerialNumber: syz
[ 1201.696442][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1201.707005][ T7582] usb 5-1: config 0 descriptor??
[ 1201.712809][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1201.720618][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1201.733027][ T7582] usb 5-1: Found UVC 0.00 device syz (046d:08f3)
[ 1201.740324][ T7582] usb 5-1: No valid video chain found.
[ 1201.847221][T19871] team0 (unregistering): Port device team_slave_1 removed
[ 1201.958339][ T7582] usb 5-1: USB disconnect, device number 33
[ 1201.985507][T19871] team0 (unregistering): Port device team_slave_0 removed
[ 1203.210215][T25280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1203.831910][T22619] Bluetooth: hci4: command tx timeout
[ 1204.759374][T25622] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7470'.
[ 1204.864868][T25623] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7470'.
[ 1205.283456][T25638] fuse: Bad value for 'fd'
[ 1205.891845][ T5842] Bluetooth: hci4: command tx timeout
[ 1208.011809][ T5842] Bluetooth: hci4: command tx timeout
[ 1208.355983][T25602] chnl_net:caif_netlink_parms(): no params data found
[ 1209.839557][T25602] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1209.876843][T25602] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1209.963816][T25602] bridge_slave_0: entered allmulticast mode
[ 1210.032556][ T5842] Bluetooth: hci4: command tx timeout
[ 1210.181616][T25602] bridge_slave_0: entered promiscuous mode
[ 1210.220701][T25602] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1210.238180][T25602] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1210.252740][T25602] bridge_slave_1: entered allmulticast mode
[ 1210.259942][T25602] bridge_slave_1: entered promiscuous mode
[ 1210.551181][T25602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1210.772085][ T7599] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 1210.865092][T25602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1210.984056][T25689] fuse: Bad value for 'fd'
[ 1211.768829][T19871] bridge_slave_1: left allmulticast mode
[ 1211.781903][T19871] bridge_slave_1: left promiscuous mode
[ 1211.783752][ T7599] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10
[ 1211.802616][ T7599] usb 7-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00
[ 1211.812224][ T7599] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1211.818515][T19871] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1211.829372][ T7599] usb 7-1: config 0 descriptor??
[ 1211.905093][T19871] bridge_slave_0: left allmulticast mode
[ 1211.914398][T19871] bridge_slave_0: left promiscuous mode
[ 1211.957400][T19871] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1213.388161][ T7599] hid (null): usage index exceeded
[ 1213.444512][T25702] usb usb1: usbfs: process 25702 (syz.7.7494) did not claim interface 0 before use
[ 1213.459872][ T7599] wacom 0003:056A:0333.0025: ignoring exceeding usage max
[ 1213.503491][ T7599] wacom 0003:056A:0333.0025: ignoring exceeding usage max
[ 1213.566143][ T7599] wacom 0003:056A:0333.0025: usage index exceeded
[ 1213.584416][ T7599] wacom 0003:056A:0333.0025: item 0 0 2 2 parsing failed
[ 1213.632571][T19871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1213.641878][ T7599] wacom 0003:056A:0333.0025: parse failed
[ 1213.647781][ T7599] wacom 0003:056A:0333.0025: probe with driver wacom failed with error -22
[ 1213.700453][T19871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1213.712983][ T7599] usb 7-1: USB disconnect, device number 36
[ 1213.814523][T19871] bond0 (unregistering): Released all slaves
[ 1213.860402][ T29] kauditd_printk_skb: 1 callbacks suppressed
[ 1213.860427][ T29] audit: type=1326 audit(1739351763.889:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25713 comm="syz.4.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279158cde9 code=0x7ffc0000
[ 1213.973411][ T29] audit: type=1326 audit(1739351763.929:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25713 comm="syz.4.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279158cde9 code=0x7ffc0000
[ 1213.995820][ C0] vkms_vblank_simulate: vblank timer overrun
[ 1214.067268][ T29] audit: type=1326 audit(1739351763.929:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25713 comm="syz.4.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f279158cde9 code=0x7ffc0000
[ 1214.142360][T25602] team0: Port device team_slave_0 added
[ 1214.166193][ T29] audit: type=1326 audit(1739351763.929:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25713 comm="syz.4.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279158cde9 code=0x7ffc0000
[ 1214.193094][T25602] team0: Port device team_slave_1 added
[ 1214.810878][T25730] fuse: Bad value for 'fd'
[ 1215.486870][ T29] audit: type=1326 audit(1739351763.929:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25713 comm="syz.4.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279158cde9 code=0x7ffc0000
[ 1219.275761][T25602] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1219.326896][T25602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1219.375956][T25749] Bluetooth: MGMT ver 1.23
[ 1219.530796][T25602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1219.657864][T25602] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1219.689190][T25602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1219.887413][T25602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1219.958008][T22619] Bluetooth: hci6: command 0x0406 tx timeout
[ 1220.830784][T25602] hsr_slave_0: entered promiscuous mode
[ 1220.871063][T25602] hsr_slave_1: entered promiscuous mode
[ 1220.903941][T25602] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1220.954199][T25602] Cannot create hsr debugfs directory
[ 1221.533611][T25783] fuse: Bad value for 'fd'
[ 1222.416792][T25787] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7525'.
[ 1222.439188][T25793] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7525'.
[ 1225.347052][T25602] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1225.388766][T25602] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1225.443999][T25602] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1226.938791][T25602] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1228.184436][T25602] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1228.210281][T25602] 8021q: adding VLAN 0 to HW filter on device team0
[ 1228.227006][T12699] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1228.234262][T12699] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1228.263359][T12699] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1228.270537][T12699] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1229.445046][T25602] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1229.662524][T18355] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1229.827247][T18355] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1229.852713][T18355] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1229.897400][T18355] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1229.917065][T18355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1230.901794][T18355] usb 2-1: SerialNumber: syz
[ 1231.178000][T18355] usb 2-1: 0:2 : does not exist
[ 1231.221522][T25602] veth0_vlan: entered promiscuous mode
[ 1231.256608][T18355] usb 2-1: USB disconnect, device number 36
[ 1231.387399][T25602] veth1_vlan: entered promiscuous mode
[ 1231.570738][T25602] veth0_macvtap: entered promiscuous mode
[ 1231.642901][T25602] veth1_macvtap: entered promiscuous mode
[ 1232.153130][T25602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1232.168007][T25602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1232.221732][T25602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1232.419573][T25602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1232.488651][T25602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1232.521849][T25602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1232.567476][T25602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1232.608666][T25602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1232.639866][T25602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1233.880278][T25602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1233.901876][T17330] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[ 1233.997552][T25602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1234.096137][T25602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1234.167400][T17330] usb 7-1: Using ep0 maxpacket: 8
[ 1234.210059][T25602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1234.321915][T17330] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1234.357690][T25602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1234.403109][T25602] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1234.412501][T17330] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10
[ 1234.424538][T25602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1234.425822][T17330] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024
[ 1234.451610][T17330] usb 7-1: config 1 interface 0 has no altsetting 0
[ 1234.472126][T25602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1234.481286][T17330] usb 7-1: string descriptor 0 read error: -22
[ 1234.488621][T17330] usb 7-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40
[ 1234.503714][T17330] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1234.512188][T25602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1234.512222][T25602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1234.512252][T25602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1234.512282][T25602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1234.512312][T25602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1234.512340][T25602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1234.623295][T25873] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1234.716219][T25602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1234.740781][T25602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1234.800962][T25602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1234.831815][T25602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1234.871817][T25602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1235.881742][T25602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1236.883393][T25602] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1236.898485][T17330] appletouch 7-1:1.0: Failed to request geyser raw mode
[ 1236.906438][T17330] appletouch 7-1:1.0: probe with driver appletouch failed with error -5
[ 1236.918635][T17330] usb 7-1: USB disconnect, device number 37
[ 1237.684788][T25602] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1237.698985][T25895] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7562'.
[ 1237.742342][T25602] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1237.751121][T25602] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1237.807940][T25602] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1238.164824][T25895] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7562'.
[ 1238.980281][T25895] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check.
[ 1239.174551][T25901] ptrace attach of "./syz-executor exec"[25905] was attempted by "./syz-executor exec"[25901]
[ 1240.185701][T25910] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1240.732205][T19874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1241.613400][T19874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1241.661803][ T5896] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[ 1242.126795][ T5896] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1242.242372][ T5896] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1242.284241][T12708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1242.294912][T12708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1242.301176][ T5896] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1242.315016][ T5896] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1242.323173][ T5896] usb 8-1: SerialNumber: syz
[ 1242.558060][ T5896] usb 8-1: 0:2 : does not exist
[ 1242.990604][ T5896] usb 8-1: USB disconnect, device number 20
[ 1244.262337][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 1244.268718][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 1248.998895][T22619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1249.009055][T22619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1249.212104][T22619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1249.222837][T22619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1249.232208][T22619] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1249.242067][T22619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1250.028624][T25979] fuse: Bad value for 'fd'
[ 1250.922800][T12699] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1251.551784][T22619] Bluetooth: hci0: command tx timeout
[ 1253.294962][T12699] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1253.631978][T22619] Bluetooth: hci0: command tx timeout
[ 1253.898231][T12699] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1255.731780][T22619] Bluetooth: hci0: command tx timeout
[ 1257.292799][T12699] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1257.791860][T22619] Bluetooth: hci0: command tx timeout
[ 1262.112794][ T29] audit: type=1326 audit(1739351812.149:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26038 comm="syz.7.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d97d8cde9 code=0x7ffc0000
[ 1262.231747][ T29] audit: type=1326 audit(1739351812.149:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26038 comm="syz.7.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d97d8cde9 code=0x7ffc0000
[ 1262.264819][T12699] bridge_slave_1: left allmulticast mode
[ 1262.333180][ T29] audit: type=1326 audit(1739351812.189:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26038 comm="syz.7.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1d97d8cde9 code=0x7ffc0000
[ 1262.371795][T12699] bridge_slave_1: left promiscuous mode
[ 1262.377567][T12699] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1262.453549][ T29] audit: type=1326 audit(1739351812.219:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26038 comm="syz.7.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d97d8cde9 code=0x7ffc0000
[ 1262.503138][T12699] bridge_slave_0: left allmulticast mode
[ 1262.509508][T12699] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1262.798961][ T29] audit: type=1326 audit(1739351812.219:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26038 comm="syz.7.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d97d8cde9 code=0x7ffc0000
[ 1263.201790][ T29] audit: type=1326 audit(1739351812.229:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26038 comm="syz.7.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d97d8cde9 code=0x7ffc0000
[ 1263.264134][ T29] audit: type=1326 audit(1739351812.229:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26038 comm="syz.7.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d97d8cde9 code=0x7ffc0000
[ 1263.351867][ T29] audit: type=1326 audit(1739351812.229:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26038 comm="syz.7.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d97d8cde9 code=0x7ffc0000
[ 1263.419319][ T29] audit: type=1326 audit(1739351812.229:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26038 comm="syz.7.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f1d97d8cde9 code=0x7ffc0000
[ 1263.521952][ T29] audit: type=1326 audit(1739351812.229:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26038 comm="syz.7.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d97d8cde9 code=0x7ffc0000
[ 1268.162197][T26099] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7620'.
[ 1269.282725][ T7587] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 1269.358572][T12699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1269.371221][T12699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1269.383157][T12699] bond0 (unregistering): Released all slaves
[ 1269.456346][ T7587] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1269.480099][ T7587] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1269.499841][ T7587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1269.511834][ T7587] usb 2-1: Product: syz
[ 1269.516065][ T7587] usb 2-1: Manufacturer: syz
[ 1269.531043][ T7587] usb 2-1: SerialNumber: syz
[ 1269.579617][T12699] bond1 (unregistering): (slave veth3): Releasing active interface
[ 1269.603547][T12699] bond1 (unregistering): Released all slaves
[ 1271.815385][ T7587] cdc_ncm 2-1:1.0: bind() failure
[ 1271.826783][ T7587] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 1271.856088][ T7587] cdc_ncm 2-1:1.1: bind() failure
[ 1271.892927][ T7587] usb 2-1: USB disconnect, device number 37
[ 1271.932540][T12699] bond2 (unregistering): (slave veth5): Releasing active interface
[ 1271.964682][T12699] bond2 (unregistering): Released all slaves
[ 1272.021246][T26075] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7613'.
[ 1272.042333][T25961] chnl_net:caif_netlink_parms(): no params data found
[ 1274.808965][T25961] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1274.821828][T25961] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1274.838306][T25961] bridge_slave_0: entered allmulticast mode
[ 1274.867048][T25961] bridge_slave_0: entered promiscuous mode
[ 1274.917863][T25961] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1274.926210][T25961] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1274.937760][T25961] bridge_slave_1: entered allmulticast mode
[ 1274.960293][T25961] bridge_slave_1: entered promiscuous mode
[ 1275.888811][ T7583] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[ 1276.644094][T12699] hsr_slave_0: left promiscuous mode
[ 1276.986377][ T7583] usb 8-1: Using ep0 maxpacket: 32
[ 1276.997435][ T7583] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[ 1277.006700][ T7583] usb 8-1: config 0 has no interface number 0
[ 1277.025887][T12699] hsr_slave_1: left promiscuous mode
[ 1277.026786][ T7583] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1277.040577][ T7583] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1278.422597][T12699] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1278.430159][T12699] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1278.908026][ T7583] usb 8-1: Product: syz
[ 1278.915890][ T7583] usb 8-1: Manufacturer: syz
[ 1278.920533][ T7583] usb 8-1: SerialNumber: syz
[ 1279.376621][T12699] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1279.403263][ T7583] usb 8-1: config 0 descriptor??
[ 1279.422217][T12699] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1279.423772][ T7583] usb 8-1: can't set config #0, error -71
[ 1279.469827][ T7583] usb 8-1: USB disconnect, device number 21
[ 1279.740079][ T29] kauditd_printk_skb: 16 callbacks suppressed
[ 1279.740105][ T29] audit: type=1326 audit(1739351829.769:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26169 comm="syz.6.7642" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f495998cde9 code=0x0
[ 1281.090826][T12699] veth1_macvtap: left promiscuous mode
[ 1281.164904][T12699] veth0_macvtap: left promiscuous mode
[ 1281.238816][T12699] veth1_vlan: left promiscuous mode
[ 1281.275053][T12699] veth0_vlan: left promiscuous mode
[ 1287.088168][T12699] team0 (unregistering): Port device team_slave_1 removed
[ 1287.183164][T12699] team0 (unregistering): Port device team_slave_0 removed
[ 1288.086855][T25961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1288.099496][T25961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1288.827178][T25961] team0: Port device team_slave_0 added
[ 1288.854892][T25961] team0: Port device team_slave_1 added
[ 1290.668884][T25961] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1290.723111][T25961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1291.166191][T25961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1291.376209][T25961] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1291.397163][T25961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1291.507552][T25961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1291.795374][T25961] hsr_slave_0: entered promiscuous mode
[ 1291.835684][T25961] hsr_slave_1: entered promiscuous mode
[ 1291.910319][T25961] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1291.970593][T25961] Cannot create hsr debugfs directory
[ 1297.555317][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1297.595503][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1297.616415][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1297.635118][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1297.663123][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1297.680900][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1297.791987][T12699] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1297.978313][T12699] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1298.225501][T12699] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1298.925130][T12699] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1300.475249][T22619] Bluetooth: hci1: command tx timeout
[ 1302.513532][T22619] Bluetooth: hci1: command tx timeout
[ 1302.573297][T26284] chnl_net:caif_netlink_parms(): no params data found
[ 1302.826020][T25961] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1302.854341][T26333] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7698'.
[ 1302.882940][T26333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7698'.
[ 1302.884649][T25961] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1303.125404][T22619] Bluetooth: Wrong link type (-57)
[ 1303.139470][T12699] bridge_slave_1: left allmulticast mode
[ 1303.157363][T12699] bridge_slave_1: left promiscuous mode
[ 1303.176543][T12699] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1304.204738][T12699] bridge_slave_0: left allmulticast mode
[ 1304.227878][T12699] bridge_slave_0: left promiscuous mode
[ 1304.242992][T12699] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1305.056344][T22619] Bluetooth: hci1: command tx timeout
[ 1305.082233][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 1305.088589][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 1306.953753][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1306.969372][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1306.978473][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1306.989900][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1307.004991][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1307.013332][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1307.072640][T22619] Bluetooth: hci1: command tx timeout
[ 1307.197187][T12699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1307.214794][T12699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1307.243949][T12699] bond0 (unregistering): Released all slaves
[ 1307.273072][T25961] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1308.571905][T20428] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[ 1308.784047][T20428] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[ 1308.822112][T20428] usb 2-1: config 0 has no interface number 0
[ 1308.844324][T20428] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 12592, setting to 64
[ 1308.887442][T20428] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88
[ 1308.917951][T20428] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1308.961987][T20428] usb 2-1: Product: syz
[ 1309.073024][T22619] Bluetooth: hci3: command tx timeout
[ 1309.497152][T26284] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1309.510154][T26284] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1309.526421][T26284] bridge_slave_0: entered allmulticast mode
[ 1309.543553][T26284] bridge_slave_0: entered promiscuous mode
[ 1309.605962][T26284] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1309.633955][T26284] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1309.662024][T26284] bridge_slave_1: entered allmulticast mode
[ 1309.693136][T26284] bridge_slave_1: entered promiscuous mode
[ 1309.845916][T20428] usb 2-1: SerialNumber: syz
[ 1309.875727][T20428] usb 2-1: config 0 descriptor??
[ 1309.881848][T26381] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1309.980460][T26284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1310.048786][T26284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1310.314985][T20428] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1310.332143][T20428] usb 2-1: invalid MIDI in EP 0
[ 1310.470683][T20428] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -22
[ 1311.130738][T12699] hsr_slave_0: left promiscuous mode
[ 1311.149433][T20428] usb 2-1: USB disconnect, device number 38
[ 1311.152637][T22619] Bluetooth: hci3: command tx timeout
[ 1311.263161][T12699] hsr_slave_1: left promiscuous mode
[ 1311.347409][T12699] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1311.388396][T12699] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1311.485004][T12699] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1311.525180][T12699] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1311.927033][T12699] veth1_macvtap: left promiscuous mode
[ 1311.942019][T12699] veth0_macvtap: left promiscuous mode
[ 1311.947713][T12699] veth1_vlan: left promiscuous mode
[ 1311.964500][T12699] veth0_vlan: left promiscuous mode
[ 1314.130150][T22619] Bluetooth: hci3: command tx timeout
[ 1317.091692][T22619] Bluetooth: hci3: command tx timeout
[ 1319.990379][T12699] team0 (unregistering): Port device team_slave_1 removed
[ 1320.106501][T12699] team0 (unregistering): Port device team_slave_0 removed
[ 1321.921947][ T5842] Bluetooth: Wrong link type (-57)
[ 1322.389154][T26284] team0: Port device team_slave_0 added
[ 1322.517577][T26284] team0: Port device team_slave_1 added
[ 1322.802621][T26284] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1322.832821][T26284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1322.878121][T26284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1322.911203][T26284] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1322.929605][T26284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1322.962003][ T7582] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[ 1323.021990][T26284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1323.081916][T18355] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 1323.171275][ T7582] usb 8-1: Using ep0 maxpacket: 32
[ 1323.201327][T26478] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN NOPTI
[ 1323.214181][T26478] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f]
[ 1323.222619][T26478] CPU: 1 UID: 0 PID: 26478 Comm: syz.8.7744 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0
[ 1323.233418][T26478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1323.243494][T26478] RIP: 0010:__lock_acquire+0xe4/0x3c40
[ 1323.249003][T26478] Code: 08 84 d2 0f 85 15 14 00 00 44 8b 0d ca 30 cc 0e 45 85 c9 0f 84 b4 0e 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 96 2c 00 00 49 8b 04 24 48 3d a0 77 82 93 0f 84
[ 1323.268643][T26478] RSP: 0018:ffffc90017f07a18 EFLAGS: 00010016
[ 1323.274732][T26478] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 1323.282719][T26478] RDX: 0000000000000003 RSI: 1ffff92002fe0f55 RDI: 0000000000000018
[ 1323.290704][T26478] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001
[ 1323.298688][T26478] R10: ffffffff90625b17 R11: 0000000000000006 R12: 0000000000000018
[ 1323.306677][T26478] R13: ffff8880313a9e00 R14: 0000000000000000 R15: 0000000000000000
[ 1323.314665][T26478] FS: 00007f114f25d6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 1323.323614][T26478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1323.330214][T26478] CR2: 000000110c3edfdf CR3: 000000006257e000 CR4: 0000000000350ef0
[ 1323.338287][T26478] Call Trace:
[ 1323.341573][T26478] <TASK>
[ 1323.344514][T26478] ? die_addr+0x3b/0xa0
[ 1323.348708][T26478] ? exc_general_protection+0x155/0x230
[ 1323.354301][T26478] ? asm_exc_general_protection+0x26/0x30
[ 1323.360070][T26478] ? __lock_acquire+0xe4/0x3c40
[ 1323.364958][T26478] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1323.370639][T26478] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1323.376562][T26478] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1323.382357][T26478] ? find_held_lock+0x2d/0x110
[ 1323.387171][T26478] ? __pfx_mark_lock+0x10/0x10
[ 1323.392058][T26478] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1323.397737][T26478] ? __queue_work+0x431/0x1080
[ 1323.402540][T26478] ? __pfx_lock_release+0x10/0x10
[ 1323.407601][T26478] ? __pfx___lock_acquire+0x10/0x10
[ 1323.412841][T26478] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1323.418524][T26478] lock_acquire.part.0+0x11b/0x380
[ 1323.423672][T26478] ? add_wait_queue+0x45/0x230
[ 1323.428472][T26478] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1323.434146][T26478] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1323.439831][T26478] ? rcu_is_watching+0x12/0xc0
[ 1323.444616][T26478] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1323.450297][T26478] ? trace_lock_acquire+0x14e/0x1f0
[ 1323.455524][T26478] ? queue_work_on+0x9d/0x140
[ 1323.460241][T26478] ? add_wait_queue+0x45/0x230
[ 1323.465036][T26478] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1323.470716][T26478] ? lock_acquire+0x2f/0xb0
[ 1323.475259][T26478] ? add_wait_queue+0x45/0x230
[ 1323.480060][T26478] _raw_spin_lock_irqsave+0x3a/0x60
[ 1323.485309][T26478] ? add_wait_queue+0x45/0x230
[ 1323.490102][T26478] add_wait_queue+0x45/0x230
[ 1323.494730][T26478] virtio_transport_release+0x644/0xa40
[ 1323.500334][T26478] ? find_held_lock+0x2d/0x110
[ 1323.505130][T26478] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1323.510815][T26478] ? __pfx_virtio_transport_release+0x10/0x10
[ 1323.516931][T26478] ? __pfx_lock_release+0x10/0x10
[ 1323.521994][T26478] ? __pfx_woken_wake_function+0x10/0x10
[ 1323.527654][T26478] ? srso_alias_return_thunk+0x5/0xfbef5
[ 1323.533331][T26478] ? mark_held_locks+0x9f/0xe0
[ 1323.538129][T26478] ? __local_bh_enable_ip+0xa4/0x120
[ 1323.543460][T26478] __vsock_release+0x10c/0x580
[ 1323.548247][T26478] ? __pfx_down_write+0x10/0x10
[ 1323.553137][T26478] vsock_release+0x99/0x130
[ 1323.557661][T26478] __sock_release+0xb3/0x270
[ 1323.562292][T26478] ? __pfx_sock_close+0x10/0x10
[ 1323.567180][T26478] sock_close+0x1c/0x30
[ 1323.571546][T26478] __fput+0x402/0xb70
[ 1323.575561][T26478] __fput_sync+0xa1/0xc0
[ 1323.579831][T26478] __x64_sys_close+0x86/0x100
[ 1323.584536][T26478] do_syscall_64+0xcd/0x250
[ 1323.589076][T26478] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1323.595011][T26478] RIP: 0033:0x7f114e38cde9
[ 1323.599450][T26478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1323.619190][T26478] RSP: 002b:00007f114f25d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 1323.627637][T26478] RAX: ffffffffffffffda RBX: 00007f114e5a5fa0 RCX: 00007f114e38cde9
[ 1323.635631][T26478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 1323.643616][T26478] RBP: 00007f114e40e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1323.651604][T26478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1323.659589][T26478] R13: 0000000000000000 R14: 00007f114e5a5fa0 R15: 00007ffdce645dd8
[ 1323.667588][T26478] </TASK>
[ 1323.670611][T26478] Modules linked in:
[ 1323.674519][T26478] ---[ end trace 0000000000000000 ]---
[ 1323.679976][T26478] RIP: 0010:__lock_acquire+0xe4/0x3c40
[ 1323.685476][T26478] Code: 08 84 d2 0f 85 15 14 00 00 44 8b 0d ca 30 cc 0e 45 85 c9 0f 84 b4 0e 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 96 2c 00 00 49 8b 04 24 48 3d a0 77 82 93 0f 84
[ 1323.705109][T26478] RSP: 0018:ffffc90017f07a18 EFLAGS: 00010016
[ 1323.711195][T26478] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 1323.719177][T26478] RDX: 0000000000000003 RSI: 1ffff92002fe0f55 RDI: 0000000000000018
[ 1323.727161][T26478] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001
[ 1323.735142][T26478] R10: ffffffff90625b17 R11: 0000000000000006 R12: 0000000000000018
[ 1323.743129][T26478] R13: ffff8880313a9e00 R14: 0000000000000000 R15: 0000000000000000
[ 1323.751117][T26478] FS: 00007f114f25d6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 1323.760069][T26478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1323.766672][T26478] CR2: 000000110c3edfdf CR3: 000000006257e000 CR4: 0000000000350ef0
[ 1323.774664][T26478] Kernel panic - not syncing: Fatal exception
[ 1323.781007][T26478] Kernel Offset: disabled
[ 1323.785336][T26478] Rebooting in 86400 seconds..