last executing test programs: 1m53.789191673s ago: executing program 1 (id=68): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x1001) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001540), 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f00000001c0)={{0xe0, 0x4}, 0x1, 0xf, 0x4, {0x0, 0x41}, 0x2, 0xfffffffd}) write$cgroup_pid(r4, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x6) 1m49.049258507s ago: executing program 1 (id=74): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'bridge0\x00', {}, 0x3d}) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r6 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) write$tcp_mem(r6, &(0x7f0000000100)={0x0, 0x2d, 0x0, 0xa, 0x0, 0x2c}, 0x48) socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000100)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0xc004811}, 0x4010) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x0, 0x6}) 1m38.351269075s ago: executing program 1 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f000052e000/0x4000)=nil, 0x4000, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019c80)=""/102400, 0x19000) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_create1(0x0) epoll_create1(0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[], 0x124}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) 1m36.763318846s ago: executing program 1 (id=81): getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f00000005c0)={[{@minixdf}, {@quota}, {@usrjquota}, {@noauto_da_alloc}, {@prjquota}], [{@uid_lt={'uid<', r0}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000000c0)=0x639) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x22048, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(r6, r6) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) fsmount(r7, 0x0, 0x0) 1m34.627466916s ago: executing program 1 (id=84): getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f00000005c0)={[{@minixdf}, {@quota}, {@usrjquota}, {@noauto_da_alloc}, {@prjquota}], [{@uid_lt={'uid<', r0}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c000000"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000000c0)=0x639) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x22048, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(r6, r6) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) fsmount(r7, 0x0, 0x0) 1m23.679284561s ago: executing program 1 (id=91): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@empty}, 0x14) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYRES8], 0x20}, 0x1, 0x0, 0x0, 0x88c5}, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0xffffffff, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x848, &(0x7f0000000c80)={[{@journal_dev={'journal_dev', 0x3d, 0x10}}, {@quota}, {@quota}, {@inlinecrypt}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f0000001040)="$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") fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14337f, 0x0) flock(r5, 0x5) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1m8.094331728s ago: executing program 32 (id=91): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@empty}, 0x14) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYRES8], 0x20}, 0x1, 0x0, 0x0, 0x88c5}, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0xffffffff, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x848, &(0x7f0000000c80)={[{@journal_dev={'journal_dev', 0x3d, 0x10}}, {@quota}, {@quota}, {@inlinecrypt}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f0000001040)="$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") fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14337f, 0x0) flock(r5, 0x5) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 25.458912024s ago: executing program 0 (id=134): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000200)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x0, 0x10, 0x53, {0x53, 0x5, "42473712b179b56558c7e06116e5cdb2d73961be9e2b90cfd1f79591281fb405249709a84ffecdc8425c45dbb03e1162570522016d82bff064679a7484bcebc66568c44e66368ce5c36ccd2b6628437aca"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x20, 0x1e, 0x65, "b830d88f4ac867899cab3ebe8af0a40d5aaff17b740730eef6e1982320c4931fa69ff7d68192ba66ae58e4c1124655b0e5e53ac88c88da096b29717e9dc1ea9870485aafd27afcaef7e09cdc2cc6366cea2475fd1d4de110e3a932cc74ee340104ef05bcc7"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x0, 0x5, 0x4, 0x97d, 0xc96, 0x4, 0x1000, 0x2, 0x5, 0x5, 0x2}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e01020301"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 23.038255423s ago: executing program 2 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f000052e000/0x4000)=nil, 0x4000, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019c80)=""/102400, 0x19000) r3 = socket$alg(0x26, 0x5, 0x0) r4 = signalfd4(r3, &(0x7f0000000040)={[0x10001]}, 0x8, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd32", 0xb) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0xc0002011}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) 21.398868936s ago: executing program 2 (id=137): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0xb4, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1a86, 0x752d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x3c, 0x30, 0x7, {0x8, 0xb, 0x1, 0x2, 0x1, 0x63, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x2f, 0x8}, [@power_domain={0x9, 0x24, 0x10, 0x6, 0xff1d, 0x40, 0x3}, @output_terminal={0x13, 0x24, 0x3, 0x5, 0x100, 0x3, 0x1, 0x2, 0x1, 0x3, 0x6, 0x90}, @processing_unit={0x9, 0x24, 0x9, 0x3, 0x3, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0x4, 0x3, {0xa, 0x25, 0x25, 0x3, 0x3, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x9, 0x5, 0x85, "33a0083ee4c2"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8, 0x8, 0x6a, {0xa, 0x25, 0x25, 0xfffffffd, 0x7}}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x300, 0x3, 0x3, 0x0, 0xff, 0x2}, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x40, "20854e8c4b94a5715f8227fd4236ff070000000000001c9d3f45f2e89c1cffa964866b4b54712851c8825a2f8de125e3470c50febcb7566c61ba4ffbb8c84e5b"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x1, 0x29, "05a801b45da5ced93c89848801aa761ef4bcc1d16f7c392cd6882f000000000000136dd8fcffc2735e"}, 0x0}) 19.682223261s ago: executing program 4 (id=100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pread64(r1, &(0x7f0000000d40)=""/4096, 0x1000, 0xe) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, &(0x7f00000000c0)}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) getresgid(&(0x7f0000000100), &(0x7f0000000280), &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpgrp(0x0) sched_setaffinity(r4, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x7fffffff, 0x100000000, 0x1000045, 0x10000, 0xb, 0xf, 0xfffffffffffffffd, 0x4, 0xab], 0x8000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18.169779981s ago: executing program 3 (id=138): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050000000040a71e070900000000000109022400010000800009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00)'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x1, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904", @ANYRES16=r0], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000140)={0x0, 0x0, 0x9f, "860472e009cfbced0ba93b9cd915a65e43bb6237ffbd081475671e08ccb5bbea6c58c86afd4b91506802539f4c3b0d7253ac66b40f1d318237c6af3da78c0a40c3de44867c724f1f8d7a5860bcc612fcdbbddceb271eb4fe0c58000000000000000810eb81b3c18412fb1ff25e121e1266628bb786e6f442940e24e5e43a74688e2d1bef078cb57ad3cb82c3b5095cd5fa7ca63dc4c0f3ed2c10ff3129ca18"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="db18562cfa77425d1ceb85926b86b88a63a18bcfdc45a12311fd88581ec96f294cbbe094c4288942916c081c3890e9bffc248b0ffdc72c1b5e356262f068cf3240eaeb731462ee22a48013aa8522d7c649dab94156ca0265a75b885a844194ff33d31d056d26ad51d0e4b8d24a5e639340689eec5c78a7d39d1089747e5a8cbe9ce9a8377de5b49ec992d5620e6bb4a54550ba838945fcc46c6ac3c6af6c7150c798fd4193837cae553322a33f9f2edd457a6ae61423e4cd4900d769bdd379f9501737285a0284de02a4bc2431ceb2b129fea9607a0b62ffb5d7a66a3253da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESHEX], 0x0) 16.499829155s ago: executing program 2 (id=139): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x1001) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001540), 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f00000001c0)={{0xe0, 0x4}, 0x1, 0xf, 0x4, {0x0, 0x41}, 0x2, 0xfffffffd}) write$cgroup_pid(r5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x6) 16.414650758s ago: executing program 0 (id=140): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, "0100"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821c"}, @local=@item_4={0x3, 0x2, 0x0, "8b923659"}, @local=@item_4={0x3, 0x2, 0x0, "e800dfa9"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) r1 = syz_usb_connect$midi(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000800)={0x1c, &(0x7f00000002c0)={0x40, 0x1, 0x79, "b1c8a61a66b559e6097cfc6883e64b489017031b9ff7527a34996820b0e52059520d5613e31a616465ba23cbe960a9a1904f432b455729ac60409a818b6e737831ac0a6fb600e355223abd1df9bf060f8018f93f25308b9a4816f3212a95e5b0683f52a5af2334b92498d995861a00618f3fec107599c3213c"}, 0x0, &(0x7f00000007c0)={0x21, 0x0, 0x1, "fe"}}) 16.308629131s ago: executing program 4 (id=141): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'bridge0\x00', {}, 0x3d}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r5 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) write$tcp_mem(r5, &(0x7f0000000100)={0x0, 0x2d, 0x0, 0xa, 0x0, 0x2c}, 0x48) socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000100)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0xc004811}, 0x4010) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x0, 0x6}) 14.918279246s ago: executing program 2 (id=142): socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x100010, 0xffffffffffffffff, 0x83b0d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_RANDOM_ADDR={{0xba}, 0x6}}}, 0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) read(r4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) 12.33623646s ago: executing program 0 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f000052e000/0x4000)=nil, 0x4000, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) epoll_create1(0x0) epoll_create1(0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 12.173915185s ago: executing program 2 (id=144): r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 11.067824432s ago: executing program 0 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f000052e000/0x4000)=nil, 0x4000, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019c80)=""/102400, 0x19000) r3 = socket$alg(0x26, 0x5, 0x0) r4 = signalfd4(r3, &(0x7f0000000040)={[0x10001]}, 0x8, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) 10.944868925s ago: executing program 3 (id=146): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x16c}}, 0x44000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000007c0)=ANY=[], 0x210) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000001380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2048c5, &(0x7f0000001400)=ANY=[@ANYRES16=r4, @ANYRESHEX=0xee00, @ANYBLOB="2c73686f72746e616d653d77696e6e742c726f6469722c757365667265652c756e695f786c6174653d312c756e695f786c6174653d302c757365667265652c73686f72746e616d651cb452969e69f07760a6127eba3d6d697865642c64656275672c73686f72746e616d653d6d697865642c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c00"], 0x1, 0x2b4, &(0x7f0000000e40)="$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") r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r5, &(0x7f0000000480)="1c0000001a009b8a140000003b00000000000000000200000000", 0x1a) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x65010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x0, 0xffff, 0x8000, 0x2, 0x0, 0x0, 0x6}, {0x0, 0x1, 0x20000, 0x1000280000000, 0x95, 0xffffffffffff281a, 0x7, 0x5}, {0x0, 0x0, 0x0, 0x10000}, 0x8, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@private1, 0xfffffffc, 0x33}, 0xa, @in=@multicast1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x9, 0x8}}, 0xe8) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r7, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x144}, 0x0) 9.781004613s ago: executing program 3 (id=147): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0xf11, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x4) open(0x0, 0x2000, 0x18) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000b675bc82850000002d000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5}, 0xc) 8.578217302s ago: executing program 3 (id=148): syz_open_dev$char_usb(0xc, 0xb4, 0x81) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d70102030109021200"], 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGPHYS(r3, 0x8028c003, &(0x7f0000000800)) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000440)=""/216, 0xd8) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.378816369s ago: executing program 4 (id=149): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x13) syz_usb_disconnect(r0) r2 = syz_usb_connect$uac1(0x2, 0x8a, &(0x7f0000000400)=ANY=[], 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x44, 0x43, 0x5f, 0x10, 0x695c, 0x3829, 0x42d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x8, 0x30, 0x8, "", [{{0x9, 0x4, 0x8f, 0x4, 0x0, 0x66, 0x81, 0x57}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(0xffffffffffffffff, 0xf9, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x7, 0x1, 0x3, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf2, 0x10, 0x5, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x2, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xf1, 0xb, 0x7}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x1, 0x63, 0x9, 0xff, 0x81}, 0x25, &(0x7f00000000c0)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x1f7, 0xf00, 0x7ff, [0xc000, 0xff3f00, 0x30, 0xb6c122da5cbe8aef, 0xff0060]}]}, 0x4, [{0x8, &(0x7f0000000100)=@string={0x8, 0x3, "e3b105452425"}}, {0x9c, &(0x7f0000000200)=@string={0x9c, 0x3, "fc2e9befa621e6c387b13208b5cbe7e32feb1b1559c61ed2e542e462e72d20e6f55efe08fe563cc9ea64f7a0611be76189f25b4a4cf488a1c214763b8f78a7929dae049c02cc4fb7e0b93b373b7fda962baada25b9b3adcfc98069284787d00903b586e1ee55a04244fed6974dc1fd8f5ccc63e8e4ede537533ec5ed0853957c284ed1de5cd50cc5acaaa00da5df6670be7e902376e95c5b7e9e"}}, {0xb7, &(0x7f00000002c0)=@string={0xb7, 0x3, "557d4193e379823123d1b861af3697489b1afdc7150cefc0d36a39b0eb9d58fedab25a93184076458f84c3b2b0e56ec79d3ffc625b4984a24cbd90f9abf620c7fe292b3f12740b27a906bbb7197404a10375d21493e010eaefa70fda0d851d3ecff4abff13b8538b6175af84a6c22f81af9823014c8cc8a68999a8291dbc14419d056d80c5a249eb4b91b425b89a88b27f425d0f70d4b951992d90bdbcc5ab9d7b877f6c791724d0fe2e7934c1e5a5f3172b64d160"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x416}}]}) 5.888158599s ago: executing program 0 (id=150): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x6, "00000000528d"}, 0x0, 0x0, 0x0, 0x0}) 3.330771063s ago: executing program 4 (id=151): syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001a80)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x20004040) r1 = getpgrp(0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x1001) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) gettid() r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$vsock_stream(0x28, 0x1, 0x28) syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x827f00) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x6}) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r5, 0x5501) 2.208599669s ago: executing program 4 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740), 0x0, 0x2004001) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b45, 0x8000000000001) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.132959662s ago: executing program 2 (id=153): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000000)={0x0, 0x6}, 0x0, 0x0}) 1.618051878s ago: executing program 3 (id=154): getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f00000005c0)={[{@minixdf}, {@quota}, {@usrjquota}, {@noauto_da_alloc}, {@prjquota}], [{@uid_lt={'uid<', r0}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000000a002000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c000000"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000000c0)=0x639) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x22048, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(r6, r6) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) fsmount(r7, 0x0, 0x0) 1.539117121s ago: executing program 0 (id=155): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109025f0003010300f40904000000010100000a240103000302010209040100000102"], 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x21, &(0x7f0000000000)=ANY=[@ANYBLOB="0100"]) 0s ago: executing program 3 (id=156): getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f00000005c0)={[{@minixdf}, {@quota}, {@usrjquota}, {@noauto_da_alloc}, {@prjquota}], [{@uid_lt={'uid<', r0}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000000c0)=0x639) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x22048, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(r6, r6) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) fsmount(r7, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.87' (ED25519) to the list of known hosts. [ 69.498041][ T5766] cgroup: Unknown subsys name 'net' [ 69.643640][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.294574][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.681565][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.688226][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.013649][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.023750][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.031810][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.040072][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.057826][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.065784][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.074636][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.084733][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.092266][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.105606][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.114376][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.114460][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.129618][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.129897][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.139021][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.151734][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.152269][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.159903][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.176210][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.177373][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.191204][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.201997][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.210772][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.221416][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.648153][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 73.718783][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 73.764024][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 73.809822][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 73.903205][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.910476][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.918150][ T5779] bridge_slave_0: entered allmulticast mode [ 73.924953][ T5779] bridge_slave_0: entered promiscuous mode [ 73.953448][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.960704][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.968313][ T5779] bridge_slave_1: entered allmulticast mode [ 73.975079][ T5779] bridge_slave_1: entered promiscuous mode [ 74.070628][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.077841][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.085018][ T5780] bridge_slave_0: entered allmulticast mode [ 74.093107][ T5780] bridge_slave_0: entered promiscuous mode [ 74.101109][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.108614][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.115763][ T5783] bridge_slave_0: entered allmulticast mode [ 74.123026][ T5783] bridge_slave_0: entered promiscuous mode [ 74.131547][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.138944][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.146200][ T5783] bridge_slave_1: entered allmulticast mode [ 74.153818][ T5783] bridge_slave_1: entered promiscuous mode [ 74.162942][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.175481][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.182795][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.190064][ T5778] bridge_slave_0: entered allmulticast mode [ 74.197060][ T5778] bridge_slave_0: entered promiscuous mode [ 74.205571][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.212938][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.220156][ T5778] bridge_slave_1: entered allmulticast mode [ 74.227715][ T5778] bridge_slave_1: entered promiscuous mode [ 74.234567][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.242049][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.249426][ T5780] bridge_slave_1: entered allmulticast mode [ 74.256277][ T5780] bridge_slave_1: entered promiscuous mode [ 74.272833][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.332513][ T5779] team0: Port device team_slave_0 added [ 74.342032][ T5779] team0: Port device team_slave_1 added [ 74.361160][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.384232][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.406259][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.420182][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.431601][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.462874][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.483620][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.490927][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.517448][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.561045][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.569947][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.596236][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.617324][ T5778] team0: Port device team_slave_0 added [ 74.635673][ T5778] team0: Port device team_slave_1 added [ 74.652222][ T5783] team0: Port device team_slave_0 added [ 74.661902][ T5780] team0: Port device team_slave_0 added [ 74.688941][ T5783] team0: Port device team_slave_1 added [ 74.695378][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.702385][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.729007][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.742801][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.750024][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.776600][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.789317][ T5780] team0: Port device team_slave_1 added [ 74.869169][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.876165][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.902826][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.921451][ T5779] hsr_slave_0: entered promiscuous mode [ 74.928673][ T5779] hsr_slave_1: entered promiscuous mode [ 74.935945][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.945566][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.972132][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.991717][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.998872][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.025139][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.040220][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.047411][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.073813][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.111520][ T5778] hsr_slave_0: entered promiscuous mode [ 75.118645][ T5778] hsr_slave_1: entered promiscuous mode [ 75.124793][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.132668][ T5778] Cannot create hsr debugfs directory [ 75.197254][ T5789] Bluetooth: hci2: command tx timeout [ 75.261108][ T5780] hsr_slave_0: entered promiscuous mode [ 75.268373][ T5780] hsr_slave_1: entered promiscuous mode [ 75.274710][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.283022][ T5789] Bluetooth: hci1: command tx timeout [ 75.286766][ T5780] Cannot create hsr debugfs directory [ 75.289202][ T5782] Bluetooth: hci3: command tx timeout [ 75.293936][ T5796] Bluetooth: hci0: command tx timeout [ 75.324797][ T5783] hsr_slave_0: entered promiscuous mode [ 75.331927][ T5783] hsr_slave_1: entered promiscuous mode [ 75.338350][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.346000][ T5783] Cannot create hsr debugfs directory [ 75.707423][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.727255][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.740932][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.752018][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.800517][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.813336][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.837411][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.849825][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.932567][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.945549][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.974642][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.985592][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.090144][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.101340][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.113860][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.123897][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.196188][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.226239][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.299286][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.321078][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.328469][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.348202][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.360449][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.367665][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.402091][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.409374][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.427572][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.434817][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.452963][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.525212][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.548953][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.595991][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.603206][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.622583][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.639334][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.662675][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.670108][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.702155][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.709513][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.765971][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.773219][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.094178][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.142054][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.265189][ T5778] veth0_vlan: entered promiscuous mode [ 77.280595][ T5796] Bluetooth: hci2: command tx timeout [ 77.332986][ T5779] veth0_vlan: entered promiscuous mode [ 77.350044][ T5779] veth1_vlan: entered promiscuous mode [ 77.357149][ T5796] Bluetooth: hci3: command tx timeout [ 77.362784][ T5796] Bluetooth: hci1: command tx timeout [ 77.368752][ T5796] Bluetooth: hci0: command tx timeout [ 77.399820][ T5778] veth1_vlan: entered promiscuous mode [ 77.437504][ T5779] veth0_macvtap: entered promiscuous mode [ 77.460578][ T5779] veth1_macvtap: entered promiscuous mode [ 77.513686][ T5778] veth0_macvtap: entered promiscuous mode [ 77.530919][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.543132][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.554514][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.564483][ T5778] veth1_macvtap: entered promiscuous mode [ 77.610426][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.632535][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.644118][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.656947][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.669265][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.681896][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.690999][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.700005][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.721664][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.735298][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.748552][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.810593][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.821330][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.830641][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.841140][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.871036][ T5780] veth0_vlan: entered promiscuous mode [ 77.889383][ T5783] veth0_vlan: entered promiscuous mode [ 77.936137][ T5780] veth1_vlan: entered promiscuous mode [ 77.997700][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.007573][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.020877][ T5783] veth1_vlan: entered promiscuous mode [ 78.058499][ T4093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.082245][ T4093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.128120][ T5780] veth0_macvtap: entered promiscuous mode [ 78.166292][ T5783] veth0_macvtap: entered promiscuous mode [ 78.188986][ T5780] veth1_macvtap: entered promiscuous mode [ 78.200149][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.214779][ T5783] veth1_macvtap: entered promiscuous mode [ 78.224894][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.323034][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.341271][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.366322][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.370228][ T5796] Bluetooth: to_multiplier 33895 > 3200 [ 78.382529][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.396054][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.422843][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.460209][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.472028][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.488486][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.522095][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.534089][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.553441][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.564989][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.576022][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.586404][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.597187][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.603218][ T5848] sctp: [Deprecated]: syz.0.6 (pid 5848) Use of struct sctp_assoc_value in delayed_ack socket option. [ 78.603218][ T5848] Use struct sctp_sack_info instead [ 78.609355][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.635066][ T4093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.644884][ T4093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.660939][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.673081][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.683908][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.693029][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.730802][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.750841][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.761137][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.776412][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.792561][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.807728][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.825964][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.839938][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.852087][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.861396][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.880488][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.160072][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.182670][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.274464][ T5853] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 79.357523][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.367358][ T5796] Bluetooth: hci2: command tx timeout [ 79.382265][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.437212][ T5796] Bluetooth: hci1: command tx timeout [ 79.438156][ T5789] Bluetooth: hci3: command tx timeout [ 79.443058][ T5796] Bluetooth: hci0: command tx timeout [ 79.508158][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.530168][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.550667][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.571711][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.891550][ T5860] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 79.967504][ T5861] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 81.446493][ T5789] Bluetooth: hci2: command tx timeout [ 81.516950][ T5782] Bluetooth: hci0: command tx timeout [ 81.517017][ T5796] Bluetooth: hci1: command tx timeout [ 81.522563][ T5789] Bluetooth: hci3: command tx timeout [ 81.818850][ T5874] syz.3.12[5874]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 81.912978][ T5874] loop3: detected capacity change from 0 to 1024 [ 83.598723][ T5789] Bluetooth: hci3: command tx timeout [ 83.686212][ T5887] loop1: detected capacity change from 0 to 2048 [ 83.788595][ T5887] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.702973][ T4093] hfsplus: b-tree write err: -5, ino 25 [ 84.738041][ T4093] hfsplus: b-tree write err: -5, ino 4 [ 84.743860][ T4093] hfsplus: b-tree write err: -5, ino 2 [ 87.446447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 87.504974][ T3066] cfg80211: failed to load regulatory.db [ 89.596671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 91.382939][ T5927] loop0: detected capacity change from 0 to 1024 [ 91.499212][ T5929] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.509982][ T42] hfsplus: b-tree write err: -5, ino 25 [ 92.566584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.160967][ T5940] input: syz0 as /devices/virtual/input/input5 [ 93.931456][ T42] hfsplus: b-tree write err: -5, ino 4 [ 94.024534][ T42] hfsplus: b-tree write err: -5, ino 2 [ 94.285569][ T5950] loop3: detected capacity change from 0 to 512 [ 94.348578][ T5950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.456689][ T5950] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.123491][ T5962] loop1: detected capacity change from 0 to 8 [ 95.152751][ T5964] loop0: detected capacity change from 0 to 128 [ 95.160525][ T5964] ext4: Unknown parameter 'uid<00000000000000000000' [ 95.177637][ T5962] squashfs: Unknown parameter 'þ' [ 95.254532][ T5967] Zero length message leads to an empty skb [ 99.445006][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.493203][ T5977] loop0: detected capacity change from 0 to 1024 [ 101.033036][ T5983] input: syz0 as /devices/virtual/input/input6 [ 102.396753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 102.634126][ T5048] hfsplus: b-tree write err: -5, ino 25 [ 102.676713][ T5048] hfsplus: b-tree write err: -5, ino 4 [ 102.682371][ T5048] hfsplus: b-tree write err: -5, ino 2 [ 103.636985][ T5991] input: syz0 as /devices/virtual/input/input7 [ 105.366575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.436733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.637389][ T6007] loop2: detected capacity change from 0 to 128 [ 109.647639][ T6007] ext4: Unknown parameter 'uid<00000000000000000000' [ 110.309230][ T6010] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 112.636695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 114.048399][ T6017] loop0: detected capacity change from 0 to 8 [ 114.127677][ T6017] squashfs: Unknown parameter 'þ' [ 115.196806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 115.606441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 116.584217][ T6027] input: syz0 as /devices/virtual/input/input8 [ 117.810798][ T6033] loop3: detected capacity change from 0 to 1024 [ 117.811926][ T6032] loop2: detected capacity change from 0 to 512 [ 118.141726][ T6032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.355349][ T6032] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.958107][ T5048] hfsplus: b-tree write err: -5, ino 25 [ 118.963979][ T5048] hfsplus: b-tree write err: -5, ino 4 [ 118.986589][ T5048] hfsplus: b-tree write err: -5, ino 2 [ 119.742071][ T6043] input: syz0 as /devices/virtual/input/input9 [ 120.176443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 121.070063][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.711023][ T6055] loop2: detected capacity change from 0 to 128 [ 123.739237][ T6055] ext4: Unknown parameter 'uid<00000000000000000000' [ 124.336247][ T6058] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 126.888235][ T6068] loop0: detected capacity change from 0 to 1024 [ 127.054128][ T6068] ======================================================= [ 127.054128][ T6068] WARNING: The mand mount option has been deprecated and [ 127.054128][ T6068] and is ignored by this kernel. Remove the mand [ 127.054128][ T6068] option from the mount to silence this warning. [ 127.054128][ T6068] ======================================================= [ 127.501455][ T6068] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 127.501455][ T6068] [ 129.119587][ T6077] input: syz0 as /devices/virtual/input/input10 [ 132.083601][ T6086] loop1: detected capacity change from 0 to 512 [ 132.372865][ T6086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.472622][ T6086] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.477404][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.483774][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.897013][ T6095] loop0: detected capacity change from 0 to 1024 [ 135.300789][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.032698][ T11] hfsplus: b-tree write err: -5, ino 25 [ 136.057362][ T11] hfsplus: b-tree write err: -5, ino 4 [ 136.083876][ T11] hfsplus: b-tree write err: -5, ino 2 [ 138.377566][ T6120] loop0: detected capacity change from 0 to 1024 [ 138.410352][ T6120] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 138.410352][ T6120] [ 140.919082][ T6128] input: syz0 as /devices/virtual/input/input11 [ 141.991686][ T6130] loop3: detected capacity change from 0 to 128 [ 142.027807][ T6130] ext4: Unknown parameter 'uid<00000000000000000000' [ 142.606781][ T6133] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 146.491782][ T6143] loop3: detected capacity change from 0 to 512 [ 146.658343][ T6143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.796566][ T6143] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.679272][ T6166] loop1: detected capacity change from 0 to 128 [ 152.706501][ T6166] ext4: Unknown parameter 'uid<00000000000000000000' [ 152.771717][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.848729][ T6168] loop0: detected capacity change from 0 to 1024 [ 152.890099][ T6168] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 152.890099][ T6168] [ 153.456728][ T6171] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 156.758352][ T6179] input: syz0 as /devices/virtual/input/input12 [ 158.603895][ T6181] loop2: detected capacity change from 0 to 512 [ 158.638919][ T6181] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.878123][ T28] audit: type=1800 audit(1780376323.944:2): pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.79" name="bus" dev="loop2" ino=1048593 res=0 errno=0 [ 163.636271][ T6201] loop1: detected capacity change from 0 to 128 [ 163.678696][ T6201] ext4: Unknown parameter 'uid<00000000000000000000' [ 164.454773][ T6204] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 167.193445][ T6210] loop3: detected capacity change from 0 to 128 [ 167.227567][ T6210] ext4: Unknown parameter 'uid<00000000000000000000' [ 167.309852][ T5787] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.865048][ T6213] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 170.472180][ T6220] input: syz0 as /devices/virtual/input/input13 [ 171.564536][ T6224] loop1: detected capacity change from 0 to 512 [ 171.656144][ T6222] syzkaller0: entered promiscuous mode [ 171.662991][ T6222] syzkaller0: entered allmulticast mode [ 171.670502][ T6224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.751338][ T6224] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.798613][ T6230] loop3: detected capacity change from 0 to 1024 [ 171.852258][ T6230] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 171.852258][ T6230] [ 181.056603][ T6268] loop3: detected capacity change from 0 to 128 [ 181.085613][ T6268] ext4: Unknown parameter 'uid<00000000000000000000' [ 181.665441][ T6271] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 182.991580][ T6235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.527692][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.569459][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.588210][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.598767][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.608385][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 183.674461][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.798479][ T1144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.807113][ T6278] input: syz0 as /devices/virtual/input/input14 [ 185.044809][ T1144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.432075][ T1144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.618970][ T1144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.061891][ T5796] Bluetooth: hci0: command tx timeout [ 187.690770][ T6275] chnl_net:caif_netlink_parms(): no params data found [ 189.039895][ T6301] loop2: detected capacity change from 0 to 128 [ 189.080917][ T6301] ext4: Unknown parameter 'uid<00000000000000000000' [ 189.116430][ T5796] Bluetooth: hci0: command tx timeout [ 189.706783][ T6307] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 192.147862][ T5789] Bluetooth: hci0: command tx timeout [ 192.309415][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.366594][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.373887][ T6275] bridge_slave_0: entered allmulticast mode [ 192.427952][ T6275] bridge_slave_0: entered promiscuous mode [ 192.512970][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.533981][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.556827][ T6275] bridge_slave_1: entered allmulticast mode [ 192.564412][ T6275] bridge_slave_1: entered promiscuous mode [ 193.497980][ T6325] input: syz0 as /devices/virtual/input/input15 [ 194.246606][ T5789] Bluetooth: hci0: command tx timeout [ 194.430405][ T6275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.488236][ T6275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.563563][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.570213][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.808158][ T6275] team0: Port device team_slave_0 added [ 194.857947][ T6275] team0: Port device team_slave_1 added [ 195.018935][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.025992][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.136680][ T6275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.208100][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.215218][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.331197][ T6275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.433641][ T6275] hsr_slave_0: entered promiscuous mode [ 196.667808][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 196.674101][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 196.681772][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 196.740426][ T6275] hsr_slave_1: entered promiscuous mode [ 196.836660][ T6275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.844390][ T6275] Cannot create hsr debugfs directory [ 200.795874][ T1144] hsr_slave_0: left promiscuous mode [ 200.868186][ T1144] hsr_slave_1: left promiscuous mode [ 200.874802][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.906798][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.967475][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.975322][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.018167][ T1144] bridge_slave_1: left allmulticast mode [ 201.023876][ T1144] bridge_slave_1: left promiscuous mode [ 201.057869][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.099607][ T1144] bridge_slave_0: left allmulticast mode [ 201.105314][ T1144] bridge_slave_0: left promiscuous mode [ 201.127838][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.201287][ T1144] veth1_macvtap: left promiscuous mode [ 201.207760][ T1144] veth0_macvtap: left promiscuous mode [ 201.214225][ T1144] veth1_vlan: left promiscuous mode [ 201.256902][ T1144] veth0_vlan: left promiscuous mode [ 201.613521][ T6362] loop3: detected capacity change from 0 to 1024 [ 201.656938][ T6362] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 201.656938][ T6362] [ 208.210928][ T6382] input: syz0 as /devices/virtual/input/input16 [ 209.240259][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 210.711107][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 210.869597][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.001989][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.672106][ T1144] bond0 (unregistering): Released all slaves [ 213.149269][ T6392] syzkaller0: entered promiscuous mode [ 213.154834][ T6392] syzkaller0: entered allmulticast mode [ 213.719050][ T6275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 213.798145][ T6275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 213.829643][ T6275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 213.850781][ T6275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 214.583697][ T6417] loop3: detected capacity change from 0 to 1024 [ 214.599901][ T6417] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 214.599901][ T6417] [ 219.650274][ T6429] input: syz0 as /devices/virtual/input/input17 [ 222.283339][ T6415] warning: `syz.0.126' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 223.642001][ T6275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.711111][ T6275] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.744476][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.752449][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.763488][ T3066] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 223.826173][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.833545][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.977778][ T3066] usb 3-1: Using ep0 maxpacket: 32 [ 224.008541][ T3066] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 224.036506][ T3066] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 224.047030][ T3066] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 224.086436][ T3066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 224.096157][ T3066] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 224.157306][ T3066] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 224.193861][ T3066] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 224.221342][ T3066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.278257][ T3066] usb 3-1: config 0 descriptor?? [ 224.542956][ T6275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.576841][ T3066] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 224.622537][ T3066] usb 3-1: USB disconnect, device number 2 [ 224.666283][ T3066] usblp0: removed [ 228.049048][ T6275] veth0_vlan: entered promiscuous mode [ 228.082466][ T6275] veth1_vlan: entered promiscuous mode [ 228.163644][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 228.181276][ T6275] veth0_macvtap: entered promiscuous mode [ 228.214366][ T6275] veth1_macvtap: entered promiscuous mode [ 228.258215][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.295753][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.321392][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.342196][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.367805][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 228.379230][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.410666][ T9] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 228.421997][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.436353][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.457904][ T9] usb 1-1: Product: syz [ 228.463208][ T6275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.471172][ T9] usb 1-1: Manufacturer: syz [ 228.475824][ T9] usb 1-1: SerialNumber: syz [ 228.504528][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.528223][ T9] usb 1-1: config 0 descriptor?? [ 228.555422][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.576429][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.604494][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.634925][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.656458][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.678565][ T6275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.783687][ T6275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.814941][ T6275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.844795][ T6275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.881106][ T6275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.130634][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.147582][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.192528][ T6491] loop3: detected capacity change from 0 to 1024 [ 229.200784][ T6475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.226996][ T6475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.248068][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.255950][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.265060][ T6491] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 229.265060][ T6491] [ 229.267240][ T9] peak_usb 1-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 229.341554][ T9] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 229.355779][ T9] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 229.386567][ T5824] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 230.837983][ T6475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.860385][ T6475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.936027][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.967591][ T9] peak_usb: probe of 1-1:0.0 failed with error -22 [ 230.976656][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.026515][ T5824] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 231.052107][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.097699][ T5824] usb 3-1: config 0 descriptor?? [ 232.545942][ T5824] usb 3-1: can't set config #0, error -71 [ 232.556609][ T5824] usb 3-1: USB disconnect, device number 4 [ 232.643730][ T23] usb 1-1: USB disconnect, device number 2 [ 234.033983][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 234.316754][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 234.328437][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.352177][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.396503][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 234.436454][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 234.445658][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.503105][ T23] usb 1-1: config 0 descriptor?? [ 234.995625][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input18 [ 235.087852][ T23] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 235.096508][ T5822] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 235.174114][ T23] usb 1-1: USB disconnect, device number 3 [ 235.319643][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.346358][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.385080][ T5822] usb 4-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 235.419107][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.457668][ T5822] usb 4-1: config 0 descriptor?? [ 235.467504][ T6530] fido_id[6530]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 235.951225][ T5822] semitek 0003:1EA7:0907.0002: unknown main item tag 0x0 [ 236.575069][ T6526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.616859][ T6526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.636823][ T5793] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 236.696541][ T5822] semitek 0003:1EA7:0907.0002: unknown main item tag 0x0 [ 236.704244][ T5822] semitek 0003:1EA7:0907.0002: unknown main item tag 0x0 [ 236.846538][ T5822] semitek 0003:1EA7:0907.0002: unknown main item tag 0x0 [ 236.877389][ T5822] semitek 0003:1EA7:0907.0002: unknown main item tag 0x0 [ 236.895312][ T5822] semitek 0003:1EA7:0907.0002: unknown main item tag 0x0 [ 236.906086][ T5822] semitek 0003:1EA7:0907.0002: unknown main item tag 0x0 [ 236.937805][ T5822] semitek 0003:1EA7:0907.0002: hidraw0: USB HID v0.00 Device [HID 1ea7:0907] on usb-dummy_hcd.3-1/input0 [ 236.972422][ T5822] usb 4-1: USB disconnect, device number 2 [ 238.238842][ T6551] fido_id[6551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 238.361400][ T6557] loop3: detected capacity change from 0 to 128 [ 241.316522][ T5822] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 241.548767][ T5822] usb 5-1: Using ep0 maxpacket: 8 [ 241.568540][ T5822] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 241.576020][ T5822] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 241.606475][ T5822] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 241.625562][ T5822] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 243.171611][ T23] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 243.219514][ T5822] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 243.264261][ T5822] usb 5-1: config 168 interface 0 has no altsetting 0 [ 243.283962][ T5822] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 243.292939][ T5822] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 243.316482][ T5822] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 243.338254][ T5822] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 243.360863][ T23] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 243.366946][ T5822] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 243.399634][ T23] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 243.412123][ T5822] usb 5-1: config 168 interface 0 has no altsetting 0 [ 243.426426][ T5822] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 243.436515][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.439092][ T5822] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 243.478228][ T23] usb 3-1: Product: syz [ 243.482496][ T23] usb 3-1: Manufacturer: syz [ 243.486375][ T5822] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 243.506690][ T23] usb 3-1: SerialNumber: syz [ 243.526744][ T5822] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 243.532907][ T23] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 243.574719][ T5822] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 243.610128][ T5822] usb 5-1: config 168 interface 0 has no altsetting 0 [ 243.633136][ T5822] usb 5-1: string descriptor 0 read error: -22 [ 243.646017][ T5822] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 243.672610][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.692345][ T5822] adutux 5-1:168.0: interrupt endpoints not found [ 243.768545][ T23] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 243.818692][ T23] usb 3-1: USB disconnect, device number 5 [ 243.867385][ T5823] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 243.922375][ T787] usb 5-1: USB disconnect, device number 2 [ 244.058450][ T5823] usb 4-1: Using ep0 maxpacket: 32 [ 244.067149][ T5823] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 244.075695][ T5823] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 244.099984][ T5823] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 244.122926][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.143678][ T5823] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 244.164096][ T5823] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 244.197772][ T5823] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 244.222244][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.251736][ T5823] usb 4-1: config 0 descriptor?? [ 244.397131][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 244.426753][ T787] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 244.490294][ T5823] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 244.532754][ T5823] usb 4-1: USB disconnect, device number 3 [ 244.549645][ T5823] usblp0: removed [ 244.618810][ T23] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 244.642516][ T23] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 244.647022][ T787] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 244.653906][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.660851][ T787] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 244.673041][ T23] usb 3-1: Product: syz [ 244.679516][ T787] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 244.684965][ T23] usb 3-1: Manufacturer: syz [ 244.695013][ T787] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 244.706431][ T23] usb 3-1: SerialNumber: syz [ 244.716058][ T787] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 244.730587][ T787] usb 5-1: config 168 interface 0 has no altsetting 0 [ 244.735181][ T23] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 244.745464][ T787] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 244.755345][ T787] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 244.772968][ T787] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 244.784271][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 244.799994][ T787] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 244.818031][ T787] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 244.834346][ T787] usb 5-1: config 168 interface 0 has no altsetting 0 [ 244.848474][ T787] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 244.856627][ T787] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 244.871589][ T787] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 244.883868][ T787] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 244.898736][ T787] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 244.913752][ T787] usb 5-1: config 168 interface 0 has no altsetting 0 [ 244.924959][ T787] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 244.934215][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.943153][ T787] usb 5-1: Product: syz [ 244.947928][ T787] usb 5-1: Manufacturer: syz [ 244.952691][ T787] usb 5-1: SerialNumber: syz [ 244.976425][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 244.983978][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 244.994785][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 245.004129][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.030901][ T9] usb 1-1: config 0 descriptor?? [ 245.042059][ T6599] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 245.056651][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 245.062978][ T9] hub: probe of 1-1:0.0 failed with error -5 [ 245.072723][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 245.116922][ T5823] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 245.164653][ T6567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.176577][ T6567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.188348][ T6567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.197672][ T6567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.212037][ T787] adutux 5-1:168.0: interrupt endpoints not found [ 245.231566][ T787] usb 5-1: USB disconnect, device number 3 [ 245.309527][ T5823] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 245.318494][ T5823] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 245.328313][ T5823] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 245.344275][ T5823] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 245.354781][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.363303][ T5823] usb 4-1: Product: syz [ 245.367869][ T5823] usb 4-1: Manufacturer: syz [ 245.372597][ T5823] usb 4-1: SerialNumber: syz [ 245.382657][ T5823] usb 4-1: config 0 descriptor?? [ 245.393426][ T5823] hub 4-1:0.0: bad descriptor, ignoring hub [ 245.399529][ T5823] hub: probe of 4-1:0.0 failed with error -5 [ 245.592543][ T6586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.601724][ T6586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.615234][ T5823] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 245.648931][ T5823] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 245.658364][ T5823] dib0700: firmware download failed at 7 with -22 [ 245.783655][ T23] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 245.808489][ T23] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 246.750333][ T23] usb 3-1: media controller created [ 246.776802][ T6610] input: syz0 as /devices/virtual/input/input19 [ 246.876787][ T5823] usb 4-1: USB disconnect, device number 4 [ 246.901550][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.112238][ T23] usb 3-1: USB disconnect, device number 6 [ 247.516856][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 247.552080][ T6631] loop3: detected capacity change from 0 to 128 [ 247.577693][ T6631] ext4: Unknown parameter 'uid<00000000000000000000' [ 247.631713][ T3066] usb 1-1: USB disconnect, device number 4 [ 248.172855][ T6636] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 249.085660][ T23] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 249.122062][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.179970][ T23] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 249.207328][ T23] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 249.241483][ T23] usb 3-1: Manufacturer: syz [ 249.273260][ T23] usb 3-1: config 0 descriptor?? [ 249.476406][ T23] rc_core: IR keymap rc-hauppauge not found [ 249.500296][ T23] Registered IR keymap rc-empty [ 249.516555][ T3066] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 249.547857][ T23] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 249.560795][ T23] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 249.591535][ T23] ------------[ cut here ]------------ [ 249.598054][ T23] usb 3-1: BOGUS control dir, pipe 80000780 doesn't match bRequestType 28 [ 249.616589][ T23] WARNING: CPU: 1 PID: 23 at drivers/usb/core/urb.c:413 usb_submit_urb+0x10ac/0x17d0 [ 249.626624][ T23] Modules linked in: [ 249.630571][ T23] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 [ 249.638031][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.649356][ T23] Workqueue: usb_hub_wq hub_event [ 249.654543][ T23] RIP: 0010:usb_submit_urb+0x10ac/0x17d0 [ 249.660556][ T23] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 c0 7a 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 54 66 ed fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 249.680622][ T23] RSP: 0018:ffffc900001d6e00 EFLAGS: 00010246 [ 249.686969][ T23] RAX: dab788782b99d900 RBX: ffff8880781dad00 RCX: 0000000000100000 [ 249.695083][ T23] RDX: ffffc90017df2000 RSI: 0000000000076442 RDI: 0000000000076443 [ 249.703451][ T23] RBP: 1ffff1100614b8c8 R08: ffffc900001d6a07 R09: 1ffff9200003ad40 [ 249.711515][ T23] R10: dffffc0000000000 R11: fffff5200003ad41 R12: dffffc0000000000 [ 249.719834][ T23] R13: ffff888030a5c640 R14: 0000000080000780 R15: ffff88801a2efed8 [ 249.727999][ T23] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 249.737230][ T23] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.743858][ T23] CR2: 0000001b2e220ff8 CR3: 000000001ebe8000 CR4: 00000000003506e0 [ 249.753245][ T23] Call Trace: [ 249.756815][ T23] [ 249.759799][ T23] igorplugusb_probe+0x812/0xc60 [ 249.764908][ T23] usb_probe_interface+0x5c9/0xb20 [ 249.770172][ T23] ? usb_register_driver+0x3d0/0x3d0 [ 249.775504][ T23] really_probe+0x25b/0xb20 [ 249.780253][ T23] ? pm_runtime_barrier+0x14b/0x1c0 [ 249.785512][ T23] __driver_probe_device+0x1ef/0x390 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 249.790914][ T23] driver_probe_device+0x4f/0x420 [ 249.795995][ T23] __device_attach_driver+0x2ca/0x510 [ 249.801479][ T23] bus_for_each_drv+0x252/0x2e0 [ 249.806428][ T23] ? coredump_store+0x90/0x90 [ 249.811151][ T23] ? bus_find_device+0x300/0x300 [ 249.816148][ T23] __device_attach+0x2c2/0x420 [ 249.821059][ T23] ? device_attach+0x20/0x20 [ 249.825693][ T23] ? __kmem_cache_free+0xba/0x1e0 [ 249.830867][ T23] ? do_raw_spin_unlock+0x121/0x230 [ 249.836146][ T23] bus_probe_device+0x180/0x260 [ 249.841416][ T23] device_add+0x88e/0xc50 [ 249.845803][ T23] usb_set_configuration+0x1a79/0x20c0 [ 249.852779][ T23] usb_generic_driver_probe+0x8d/0x150 [ 249.859654][ T23] usb_probe_device+0x13d/0x270 [ 249.864563][ T23] ? usb_register_device_driver+0x230/0x230 [ 249.870898][ T23] really_probe+0x25b/0xb20 [ 249.875454][ T23] ? pm_runtime_barrier+0x14b/0x1c0 [ 249.880798][ T23] __driver_probe_device+0x1ef/0x390 [ 249.886142][ T23] driver_probe_device+0x4f/0x420 [ 249.891354][ T23] __device_attach_driver+0x2ca/0x510 [ 249.896857][ T23] bus_for_each_drv+0x252/0x2e0 [ 249.901751][ T23] ? coredump_store+0x90/0x90 [ 249.906515][ T23] ? bus_find_device+0x300/0x300 [ 249.911512][ T23] __device_attach+0x2c2/0x420 [ 249.916419][ T23] ? device_attach+0x20/0x20 [ 249.921049][ T23] ? __kmem_cache_free+0xba/0x1e0 [ 249.926163][ T23] ? do_raw_spin_unlock+0x121/0x230 [ 249.931657][ T23] bus_probe_device+0x180/0x260 [ 249.936750][ T23] device_add+0x88e/0xc50 [ 249.941170][ T23] usb_new_device+0xa3c/0x1660 [ 249.945998][ T23] ? usb_disconnect+0x8a0/0x8a0 [ 249.951086][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.957705][ T23] ? lockdep_hardirqs_on+0x98/0x150 [ 249.963060][ T23] hub_event+0x29bf/0x49f0 [ 249.968445][ T23] ? hub_post_resume+0x120/0x120 [ 249.973438][ T23] ? read_lock_is_recursive+0x20/0x20 [ 249.978969][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.984225][ T23] ? process_scheduled_works+0x96f/0x15d0 [ 249.990250][ T23] ? process_scheduled_works+0x96f/0x15d0 [ 249.996019][ T23] process_scheduled_works+0xa5d/0x15d0 [ 250.002006][ T23] ? worker_attach_to_pool+0x380/0x380 [ 250.007725][ T23] ? assign_work+0x3d2/0x5d0 [ 250.012374][ T23] worker_thread+0xa55/0xfc0 [ 250.017119][ T23] kthread+0x2fa/0x390 [ 250.021237][ T23] ? pr_cont_work+0x560/0x560 [ 250.025964][ T23] ? kthread_blkcg+0xd0/0xd0 [ 250.030677][ T23] ret_from_fork+0x48/0x80 [ 250.035165][ T23] ? kthread_blkcg+0xd0/0xd0 [ 250.039883][ T23] ret_from_fork_asm+0x11/0x20 [ 250.044753][ T23] [ 250.048083][ T23] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 250.055393][ T23] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 [ 250.062709][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.072884][ T23] Workqueue: usb_hub_wq hub_event [ 250.077959][ T23] Call Trace: [ 250.081269][ T23] [ 250.084238][ T23] dump_stack_lvl+0x18c/0x250 [ 250.088958][ T23] ? show_regs_print_info+0x20/0x20 [ 250.094215][ T23] ? load_image+0x420/0x420 [ 250.098810][ T23] panic+0x2dc/0x730 [ 250.102768][ T23] ? bpf_jit_dump+0xd0/0xd0 [ 250.107319][ T23] ? ret_from_fork_asm+0x11/0x20 [ 250.112278][ T23] __warn+0x2e0/0x470 [ 250.116274][ T23] ? usb_submit_urb+0x10ac/0x17d0 [ 250.121320][ T23] ? usb_submit_urb+0x10ac/0x17d0 [ 250.126358][ T23] report_bug+0x2be/0x4f0 [ 250.130711][ T23] ? usb_submit_urb+0x10ac/0x17d0 [ 250.135837][ T23] ? usb_submit_urb+0x10ac/0x17d0 [ 250.140872][ T23] ? usb_submit_urb+0x10ae/0x17d0 [ 250.145907][ T23] handle_bug+0xcf/0x120 [ 250.150200][ T23] exc_invalid_op+0x1a/0x50 [ 250.154723][ T23] asm_exc_invalid_op+0x1a/0x20 [ 250.159691][ T23] RIP: 0010:usb_submit_urb+0x10ac/0x17d0 [ 250.165365][ T23] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 c0 7a 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 54 66 ed fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 250.185075][ T23] RSP: 0018:ffffc900001d6e00 EFLAGS: 00010246 [ 250.191160][ T23] RAX: dab788782b99d900 RBX: ffff8880781dad00 RCX: 0000000000100000 [ 250.199143][ T23] RDX: ffffc90017df2000 RSI: 0000000000076442 RDI: 0000000000076443 [ 250.207155][ T23] RBP: 1ffff1100614b8c8 R08: ffffc900001d6a07 R09: 1ffff9200003ad40 [ 250.215132][ T23] R10: dffffc0000000000 R11: fffff5200003ad41 R12: dffffc0000000000 [ 250.223197][ T23] R13: ffff888030a5c640 R14: 0000000080000780 R15: ffff88801a2efed8 [ 250.231213][ T23] igorplugusb_probe+0x812/0xc60 [ 250.236176][ T23] usb_probe_interface+0x5c9/0xb20 [ 250.241314][ T23] ? usb_register_driver+0x3d0/0x3d0 [ 250.246606][ T23] really_probe+0x25b/0xb20 [ 250.251182][ T23] ? pm_runtime_barrier+0x14b/0x1c0 [ 250.256395][ T23] __driver_probe_device+0x1ef/0x390 [ 250.261724][ T23] driver_probe_device+0x4f/0x420 [ 250.266784][ T23] __device_attach_driver+0x2ca/0x510 [ 250.272173][ T23] bus_for_each_drv+0x252/0x2e0 [ 250.277031][ T23] ? coredump_store+0x90/0x90 [ 250.281716][ T23] ? bus_find_device+0x300/0x300 [ 250.286677][ T23] __device_attach+0x2c2/0x420 [ 250.291453][ T23] ? device_attach+0x20/0x20 [ 250.296047][ T23] ? __kmem_cache_free+0xba/0x1e0 [ 250.301087][ T23] ? do_raw_spin_unlock+0x121/0x230 [ 250.306316][ T23] bus_probe_device+0x180/0x260 [ 250.311216][ T23] device_add+0x88e/0xc50 [ 250.315565][ T23] usb_set_configuration+0x1a79/0x20c0 [ 250.321061][ T23] usb_generic_driver_probe+0x8d/0x150 [ 250.326533][ T23] usb_probe_device+0x13d/0x270 [ 250.331830][ T23] ? usb_register_device_driver+0x230/0x230 [ 250.337848][ T23] really_probe+0x25b/0xb20 [ 250.342372][ T23] ? pm_runtime_barrier+0x14b/0x1c0 [ 250.347582][ T23] __driver_probe_device+0x1ef/0x390 [ 250.352877][ T23] driver_probe_device+0x4f/0x420 [ 250.357981][ T23] __device_attach_driver+0x2ca/0x510 [ 250.363541][ T23] bus_for_each_drv+0x252/0x2e0 [ 250.368491][ T23] ? coredump_store+0x90/0x90 [ 250.373180][ T23] ? bus_find_device+0x300/0x300 [ 250.378152][ T23] __device_attach+0x2c2/0x420 [ 250.383189][ T23] ? device_attach+0x20/0x20 [ 250.387784][ T23] ? __kmem_cache_free+0xba/0x1e0 [ 250.393030][ T23] ? do_raw_spin_unlock+0x121/0x230 [ 250.398428][ T23] bus_probe_device+0x180/0x260 [ 250.403287][ T23] device_add+0x88e/0xc50 [ 250.407633][ T23] usb_new_device+0xa3c/0x1660 [ 250.412416][ T23] ? usb_disconnect+0x8a0/0x8a0 [ 250.417370][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.422608][ T23] ? lockdep_hardirqs_on+0x98/0x150 [ 250.427951][ T23] hub_event+0x29bf/0x49f0 [ 250.432445][ T23] ? hub_post_resume+0x120/0x120 [ 250.437539][ T23] ? read_lock_is_recursive+0x20/0x20 [ 250.442948][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.448178][ T23] ? process_scheduled_works+0x96f/0x15d0 [ 250.453924][ T23] ? process_scheduled_works+0x96f/0x15d0 [ 250.459668][ T23] process_scheduled_works+0xa5d/0x15d0 [ 250.465258][ T23] ? worker_attach_to_pool+0x380/0x380 [ 250.470824][ T23] ? assign_work+0x3d2/0x5d0 [ 250.475435][ T23] worker_thread+0xa55/0xfc0 [ 250.480067][ T23] kthread+0x2fa/0x390 [ 250.484143][ T23] ? pr_cont_work+0x560/0x560 [ 250.489004][ T23] ? kthread_blkcg+0xd0/0xd0 [ 250.493606][ T23] ret_from_fork+0x48/0x80 [ 250.498035][ T23] ? kthread_blkcg+0xd0/0xd0 [ 250.502640][ T23] ret_from_fork_asm+0x11/0x20 [ 250.507428][ T23] [ 250.510582][ T23] Kernel Offset: disabled [ 250.515043][ T23] Rebooting in 86400 seconds..