last executing test programs: 3m23.772234188s ago: executing program 2 (id=116): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) keyctl$set_timeout(0xf, 0x0, 0x6) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b, 0x0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001100)={@fallback=r3, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000000180), &(0x7f0000001080), 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@fallback, 0xffffffffffffffff, 0x24, 0x2028, 0xffffffffffffffff, @void, @void, @value=r2, @void, r4}, 0x20) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x37, 0x4, 0x0, @void, @value=r5, @void, @void, r4}, 0x20) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 3m20.418109337s ago: executing program 4 (id=127): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r2, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r1, 0x0, 0x0}, 0x20) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x6, 0x2}}}}, 0x11) memfd_create(0x0, 0x4) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") waitid(0x2, 0x0, 0x0, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) 3m19.222390733s ago: executing program 2 (id=130): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10167, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 3m17.632196092s ago: executing program 4 (id=133): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x47d, &(0x7f0000000ec0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xbc) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000080), 0x80, 0x63c, &(0x7f0000001bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000500)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x3}, 0x4}}, 0x80, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) 3m15.449392417s ago: executing program 4 (id=139): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="0030d700000061"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m14.494700595s ago: executing program 3 (id=141): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) 3m12.136875485s ago: executing program 2 (id=143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m11.918427011s ago: executing program 3 (id=146): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 3m10.426323981s ago: executing program 3 (id=150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd", 0x12}, {&(0x7f00000004c0)="b700000001", 0x5}, {&(0x7f00000003c0)}], 0x3) 3m10.019727814s ago: executing program 2 (id=152): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000002600)='binder\x00', 0x2200892, 0x0) munlock(&(0x7f000038b000/0x1000)=nil, 0x1000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) 3m9.836870686s ago: executing program 3 (id=153): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) recvfrom(r3, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0) 3m9.055687136s ago: executing program 4 (id=155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 3m8.706130211s ago: executing program 4 (id=157): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 3m7.775547895s ago: executing program 3 (id=159): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(0x0, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$netlink(0x10, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 3m7.649480913s ago: executing program 5 (id=160): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 3m7.512843325s ago: executing program 3 (id=161): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r2, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r1, 0x0, 0x0}, 0x20) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x6, 0x2}}}}, 0x11) memfd_create(0x0, 0x4) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") waitid(0x2, 0x0, 0x0, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) 3m7.390046006s ago: executing program 5 (id=162): socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7ee}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x3, 0x20000000, 0x80800001, 0x8001}, 0x81}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xac}}, 0x0) socket(0x2, 0x80805, 0x0) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0x1000, 0x0) 3m6.184055575s ago: executing program 5 (id=163): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) fsetxattr(0xffffffffffffffff, &(0x7f0000000100)=@random={'osx.', ':{\x00'}, 0x0, 0x0, 0x2) write$P9_RLERRORu(r0, &(0x7f0000000100)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 3m5.921118313s ago: executing program 5 (id=164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m5.401764798s ago: executing program 2 (id=166): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r1 = syz_io_uring_setup(0x49e, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000480)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 3m5.222711755s ago: executing program 5 (id=167): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6eb, &(0x7f0000001180)="$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") r1 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000000)={'xfrm0\x00', 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffc, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0) 3m5.076605437s ago: executing program 2 (id=168): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00@\x00N']) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000040)={[{}]}) 3m3.445025322s ago: executing program 5 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="04000004080000000000000000000100"/28], 0x50) socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x120, 0x20}, {0xffffffff80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x800, 0x0, 0xfffffffffffffff1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 3m3.38540195s ago: executing program 4 (id=172): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) 2m45.416896234s ago: executing program 32 (id=169): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, 0x0, 0x0}, 0x94) r3 = socket(0x8000000010, 0x2, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xfeffffffffffff) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x40045532, &(0x7f0000003f80)=""/4086) write(r3, &(0x7f00000003c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710d74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243", 0xd0) 2m45.246207045s ago: executing program 33 (id=170): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4f8a, 0x4) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) sendmmsg$unix(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x4090}}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2m45.040399332s ago: executing program 34 (id=168): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00@\x00N']) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000040)={[{}]}) 2m44.912944379s ago: executing program 35 (id=161): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r2, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r1, 0x0, 0x0}, 0x20) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x6, 0x2}}}}, 0x11) memfd_create(0x0, 0x4) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") waitid(0x2, 0x0, 0x0, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) 2m44.806459096s ago: executing program 36 (id=172): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) 2m44.644510887s ago: executing program 37 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="04000004080000000000000000000100"/28], 0x50) socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x120, 0x20}, {0xffffffff80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x800, 0x0, 0xfffffffffffffff1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 52.027414241s ago: executing program 9 (id=383): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 50.429884594s ago: executing program 9 (id=388): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = syz_io_uring_setup(0x49e, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 46.956223803s ago: executing program 9 (id=390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}}], {0x14}}, 0x3c}}, 0x24040884) 45.58910837s ago: executing program 9 (id=395): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3000000000000000840000", @ANYRESDEC], 0x30, 0x41}, 0x4000800) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 42.868172755s ago: executing program 9 (id=397): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) memfd_create(0x0, 0x0) r1 = getpgrp(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) openat(0xffffffffffffffff, 0x0, 0x408241, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) 40.144557401s ago: executing program 9 (id=400): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff}, 0x28) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000000c0)=r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20, 0x1) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 23.204623662s ago: executing program 38 (id=400): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff}, 0x28) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000000c0)=r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20, 0x1) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 16.788791569s ago: executing program 7 (id=448): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}}, 0x800) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000280607ee622", 0x2e}], 0x1}, 0x40000c4) 16.192584071s ago: executing program 8 (id=449): gettid() r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r1, &(0x7f00000001c0)=""/156, 0x9c) 16.047132459s ago: executing program 7 (id=450): syz_mount_image$fuse(0x0, &(0x7f00000030c0)='./file2\x00', 0x60, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip_tables_names\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0x2, 0x2f}, 0x40}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r1], 0x40}}, 0x48010) 15.50456473s ago: executing program 7 (id=453): socket$alg(0x26, 0x5, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) socket$inet6(0xa, 0x4, 0x84) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 15.27558478s ago: executing program 6 (id=454): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, 0x0) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 13.168765611s ago: executing program 0 (id=455): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x2000000000000021, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 13.060295721s ago: executing program 8 (id=457): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) fsetxattr(0xffffffffffffffff, &(0x7f0000000100)=@random={'osx.', ':{\x00'}, 0x0, 0x0, 0x2) write$P9_RLERRORu(r0, &(0x7f0000000100)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 12.81942229s ago: executing program 0 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x80010, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e000108000740"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x40) pselect6(0x40, &(0x7f0000000040)={0x1, 0x8, 0x81, 0xe4f, 0x0, 0x1c580000000000, 0x1, 0x6}, 0x0, &(0x7f0000000140)={0x9, 0x4, 0xff, 0x5, 0x3, 0x800, 0x94, 0xfff}, &(0x7f0000000180), &(0x7f0000000340)={&(0x7f00000001c0)={[0x8]}, 0x8}) 12.802729161s ago: executing program 8 (id=459): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) 12.341833093s ago: executing program 7 (id=461): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="3100fe00bf3f9f8008000a00", @ANYRES32=0x0, @ANYBLOB="3c001280110001006272696467655f736c617665000000f423000580080022"], 0x64}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r3, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x80, 0x6, @broadcast}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0x2, 0x8d, 0x4, 0x2, 0x6, 0x3, 0x19, 0x2a, 0x25b, 0x408, 0x4, 0x20, 0x1, 0x5, 0x9, 0x200}, [{0x70000000, 0x3, 0x1, 0x40002d, 0x7, 0x15e, 0x8001, 0x5}]}, 0xb1) close(0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001042abd7000ffdbdb2507000000", @ANYRES32, @ANYBLOB="0400250a0a0002f7aaaaaaaaaaaa0000"], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4800) syz_usb_connect(0x5, 0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001d4f86540d804830047da010203010902380001020840b3090400b201020201940524"], 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x80002, &(0x7f00000000c0)=']\\\x00') 11.82817086s ago: executing program 0 (id=462): socket(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7ee}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x3, 0x20000000, 0x80800001, 0x8001}, 0x81}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xac}}, 0x0) 11.710079415s ago: executing program 8 (id=463): fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) timerfd_create(0x8, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) semctl$SEM_STAT(0x0, 0x4, 0x12, 0x0) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) 10.350934239s ago: executing program 6 (id=466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}}], {0x14}}, 0x68}}, 0x24040884) 9.627021099s ago: executing program 6 (id=468): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x6a76) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'erspan0\x00'}}, 0x1e) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x208402, 0x0, 0x0, 0x0, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) 9.464213944s ago: executing program 1 (id=469): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x2000000000000021, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8.948128018s ago: executing program 0 (id=470): gettid() r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r1, &(0x7f00000001c0)=""/156, 0x9c) 8.885888151s ago: executing program 1 (id=471): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000e00), 0x12) 8.8331421s ago: executing program 7 (id=472): socket$alg(0x26, 0x5, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) socket$inet6(0xa, 0x4, 0x84) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_io_uring_setup(0x641a, 0x0, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 6.628027119s ago: executing program 1 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x80010, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e000108000740"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x40) pselect6(0x40, &(0x7f0000000040)={0x1, 0x8, 0x81, 0xe4f, 0x0, 0x1c580000000000, 0x1, 0x6}, 0x0, &(0x7f0000000140)={0x9, 0x4, 0xff, 0x5, 0x3, 0x800, 0x94, 0xfff}, &(0x7f0000000180), &(0x7f0000000340)={&(0x7f00000001c0)={[0x8]}, 0x8}) 6.476896733s ago: executing program 0 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r6, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000680)={0x1f, 0x1, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) 5.427787178s ago: executing program 1 (id=475): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r1, &(0x7f00000001c0)=""/156, 0x9c) 4.475285606s ago: executing program 0 (id=476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x6}, {0xffff, 0xffff}, {0x9, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 4.433680455s ago: executing program 8 (id=477): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x80b81, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.398654639s ago: executing program 7 (id=478): syz_mount_image$fuse(0x0, &(0x7f00000030c0)='./file2\x00', 0x60, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip_tables_names\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r1], 0x40}}, 0x48010) 3.494052102s ago: executing program 1 (id=479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}}], {0x14}}, 0x68}}, 0x24040884) 3.37787651s ago: executing program 6 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2, 0xb}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r6, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) 2.95755065s ago: executing program 1 (id=481): socket(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7ee}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x3, 0x20000000, 0x80800001, 0x8001}, 0x81}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xac}}, 0x0) 2.178312636s ago: executing program 6 (id=482): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10167, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 325.628635ms ago: executing program 8 (id=483): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioprio_set$pid(0x3, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000000)=0x10001) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000080)={0x3ff, 0x7, 0x100000, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000003c0), 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0xcd0a, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000000000a0000010900010073797a310000000064000480500001800b0001007461726765740000400002802c0003007339f2f10455afb9fdd67abad09dfb78c7699c74e891a0c7000000000000000000000000000000000800024000000000080001004c454400100001800a000100696e6e65720000000900020073797a32"], 0xb8}, 0x1, 0x0, 0x0, 0x4040850}, 0x20040040) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101a02, 0x0) 0s ago: executing program 6 (id=484): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x354}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) kernel console output (not intermixed with test programs): 0:50:50 [ 96.023696][ T5907] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.394313][ T5907] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.478655][ T5907] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 96.525058][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.575180][ T5975] loop1: detected capacity change from 0 to 2048 [ 96.589451][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.608570][ T5907] usb 1-1: config 0 descriptor?? [ 96.625742][ T5975] ======================================================= [ 96.625742][ T5975] WARNING: The mand mount option has been deprecated and [ 96.625742][ T5975] and is ignored by this kernel. Remove the mand [ 96.625742][ T5975] option from the mount to silence this warning. [ 96.625742][ T5975] ======================================================= [ 96.667265][ T5907] pwc: Askey VC010 type 2 USB webcam detected. [ 96.669204][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.684987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 96.686089][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.702916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.711285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.721077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.744724][ T5975] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.755241][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.875382][ T4489] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.919490][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.941694][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.954092][ T4489] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.014593][ T4489] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.044414][ T4489] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.084860][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.110461][ T5907] pwc: recv_control_msg error -32 req 02 val 2b00 [ 97.113494][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.126411][ T5907] pwc: recv_control_msg error -32 req 02 val 2700 [ 97.138384][ T5907] pwc: recv_control_msg error -32 req 02 val 2c00 [ 97.158202][ T5907] pwc: recv_control_msg error -32 req 04 val 1000 [ 97.174801][ T5907] pwc: recv_control_msg error -32 req 04 val 1300 [ 97.187511][ T5907] pwc: recv_control_msg error -32 req 04 val 1400 [ 97.205473][ T5907] pwc: recv_control_msg error -32 req 02 val 2000 [ 97.222422][ T5978] loop2: detected capacity change from 0 to 1024 [ 97.226993][ T5907] pwc: recv_control_msg error -32 req 02 val 2100 [ 97.237598][ T5907] pwc: recv_control_msg error -32 req 04 val 1500 [ 97.250442][ T5978] hfsplus: bad catalog entry used to create inode [ 97.257855][ T5907] pwc: recv_control_msg error -32 req 02 val 2500 [ 97.271050][ T5978] hfsplus: failed to load root directory [ 97.288372][ T5907] pwc: recv_control_msg error -32 req 02 val 2400 [ 97.288860][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.451794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 97.489987][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.561884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.613686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 97.656431][ T5907] pwc: recv_control_msg error -32 req 02 val 2900 [ 97.689047][ T5907] pwc: recv_control_msg error -32 req 02 val 2800 [ 97.815600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.961992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.020038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 98.105996][ T5907] pwc: recv_control_msg error -71 req 04 val 1200 [ 98.245257][ T5907] pwc: Registered as video103. [ 98.276958][ T4489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.300815][ T5907] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 98.334957][ T4489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.373084][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.386219][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.391494][ T5907] usb 1-1: USB disconnect, device number 2 [ 98.619925][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.673742][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.082347][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.090930][ T6005] loop0: detected capacity change from 0 to 1024 [ 99.107313][ T6001] loop1: detected capacity change from 0 to 4096 [ 99.145031][ T6006] tipc: Started in network mode [ 99.151308][ T6005] hfsplus: bad catalog entry used to create inode [ 99.182594][ T6006] tipc: Node identity ca7f0b488046, cluster identity 4711 [ 99.191242][ T6001] EXT4-fs (loop1): Test dummy encryption mode enabled [ 99.202536][ T6005] hfsplus: failed to load root directory [ 99.242595][ T6001] EXT4-fs (loop1): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 99.274817][ T6006] tipc: Enabled bearer , priority 0 [ 99.293278][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 99.438270][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.469190][ T6001] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01c, mo2=0002] [ 99.483896][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.494903][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 99.508034][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 99.524283][ T6006] tipc: Resetting bearer [ 99.530104][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.570320][ T6010] syzkaller0: entered promiscuous mode [ 99.572260][ T6001] System zones: [ 99.595461][ T24] usb 4-1: config 0 descriptor?? [ 99.596470][ T6010] syzkaller0: entered allmulticast mode [ 99.632295][ T6001] 0-5 [ 99.684626][ T6001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.798661][ T6003] tipc: Resetting bearer [ 100.003478][ T6001] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 100.003704][ T6003] tipc: Disabling bearer [ 100.230275][ T6042] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.478411][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.510743][ T5970] tipc: Node number set to 1245252424 [ 101.627295][ T24] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0001/input/input6 [ 101.804495][ T24] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0001/input/input7 [ 102.353332][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 102.459941][ T24] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 103.044123][ T24] usb 4-1: USB disconnect, device number 2 [ 103.415403][ T6081] loop3: detected capacity change from 0 to 32768 [ 103.434969][ T6081] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.17 (6081) [ 103.537827][ T6081] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.548367][ T6081] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 103.623963][ T6085] loop5: detected capacity change from 0 to 1024 [ 103.887975][ T6080] fido_id[6080]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 104.763539][ T6081] BTRFS info (device loop3): enabling ssd optimizations [ 104.770510][ T6081] BTRFS info (device loop3): turning on async discard [ 104.777317][ T6081] BTRFS info (device loop3): enabling free space tree [ 104.817754][ T6085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.721850][ T792] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.887336][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.944901][ T792] usb 5-1: config 2 descriptor has 1 excess byte, ignoring [ 105.980338][ T5827] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 106.001114][ T792] usb 5-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.046149][ T792] usb 5-1: config 2 interface 0 has no altsetting 0 [ 106.065549][ T792] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 106.095981][ T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.131255][ T792] usb 5-1: Product: syz [ 106.156030][ T792] usb 5-1: Manufacturer: syz [ 106.160885][ T792] usb 5-1: SerialNumber: syz [ 106.228646][ T6125] loop5: detected capacity change from 0 to 512 [ 106.277888][ T6125] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.363590][ T6125] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 106.426803][ T6125] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.25: Invalid block bitmap block 0 in block_group 0 [ 106.488882][ T792] ims_pcu 5-1:2.0: Missing CDC union descriptor [ 106.522240][ T792] ims_pcu 5-1:2.0: probe with driver ims_pcu failed with error -22 [ 106.523257][ T6125] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 106.561452][ T792] usb 5-1: USB disconnect, device number 2 [ 106.644399][ T6125] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.25: attempt to clear invalid blocks 983261 len 1 [ 106.755733][ T6125] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.25: Invalid inode table block 0 in block_group 0 [ 106.772263][ T5813] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.807217][ T6125] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 106.844793][ T6125] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 106.915079][ T6125] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.25: Invalid inode table block 0 in block_group 0 [ 106.985564][ T6125] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 107.006119][ T5813] usb 4-1: device descriptor read/64, error -71 [ 107.027841][ T6125] EXT4-fs error (device loop5): ext4_truncate:4635: inode #11: comm syz.5.25: mark_inode_dirty error [ 107.069556][ T6125] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 107.100487][ T6125] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.25: Invalid inode table block 0 in block_group 0 [ 107.180938][ T6125] EXT4-fs (loop5): 1 truncate cleaned up [ 107.281789][ T5813] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.317397][ T6125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.481861][ T5813] usb 4-1: device descriptor read/64, error -71 [ 107.632208][ T5813] usb usb4-port1: attempt power cycle [ 108.462296][ T5813] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 108.632802][ T5813] usb 4-1: device descriptor read/8, error -71 [ 108.929177][ T5813] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 109.102388][ T5813] usb 4-1: device descriptor read/8, error -71 [ 109.238999][ T5813] usb usb4-port1: unable to enumerate USB device [ 109.987690][ T6152] loop2: detected capacity change from 0 to 4096 [ 110.232794][ T6159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.34'. [ 110.662172][ T791] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 111.102381][ T791] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 111.110871][ T791] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.161864][ T791] usb 1-1: config 0 has no interfaces? [ 111.200695][ T791] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 111.261738][ T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.330884][ T791] usb 1-1: config 0 descriptor?? [ 112.482398][ T6173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.38'. [ 112.746319][ T6178] loop1: detected capacity change from 0 to 1024 [ 112.781756][ T6178] hfsplus: bad catalog entry used to create inode [ 112.836122][ T6178] hfsplus: failed to load root directory [ 112.871779][ T792] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 113.548734][ T792] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 113.706917][ T792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.821691][ T792] usb 3-1: config 0 has no interfaces? [ 114.193769][ T792] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 114.241689][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.262668][ T792] usb 3-1: config 0 descriptor?? [ 115.031300][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.081911][ T5940] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.242944][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 115.251070][ T5940] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 115.260748][ T5940] usb 5-1: config 0 has no interface number 0 [ 115.287903][ T5940] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 115.348084][ T792] usb 1-1: USB disconnect, device number 3 [ 115.354415][ T5940] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 115.368292][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.545425][ T5940] usb 5-1: Product: syz [ 115.550435][ T5940] usb 5-1: Manufacturer: syz [ 115.555410][ T5940] usb 5-1: SerialNumber: syz [ 115.751066][ T6195] loop5: detected capacity change from 0 to 16 [ 116.310282][ T5940] usb 5-1: config 0 descriptor?? [ 116.352354][ T6191] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 116.388419][ T6195] erofs (device loop5): invalid checksum 0xde366481, 0xc32427af expected [ 116.636598][ T6191] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 116.853182][ T792] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.634723][ T792] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.646914][ T792] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 117.666940][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.718353][ T792] usb 1-1: config 0 descriptor?? [ 117.747831][ T792] pwc: Askey VC010 type 2 USB webcam detected. [ 117.906879][ T6211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.49'. [ 118.148020][ T791] usb 3-1: USB disconnect, device number 2 [ 118.168138][ T792] pwc: recv_control_msg error -32 req 02 val 2b00 [ 118.186482][ T792] pwc: recv_control_msg error -32 req 02 val 2700 [ 118.207092][ T5813] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 118.222606][ T792] pwc: recv_control_msg error -32 req 02 val 2c00 [ 118.284889][ T792] pwc: recv_control_msg error -32 req 04 val 1000 [ 118.299102][ T792] pwc: recv_control_msg error -32 req 04 val 1300 [ 118.307418][ T792] pwc: recv_control_msg error -32 req 04 val 1400 [ 118.322600][ T792] pwc: recv_control_msg error -32 req 02 val 2000 [ 118.332694][ T792] pwc: recv_control_msg error -32 req 02 val 2100 [ 118.340308][ T792] pwc: recv_control_msg error -32 req 04 val 1500 [ 118.354435][ T792] pwc: recv_control_msg error -32 req 02 val 2500 [ 118.382317][ T792] pwc: recv_control_msg error -32 req 02 val 2400 [ 118.396973][ T5813] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 118.421759][ T5813] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.491569][ T5813] usb 4-1: config 0 has no interfaces? [ 118.497412][ T5813] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 118.551286][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.592899][ T792] pwc: recv_control_msg error -32 req 02 val 2900 [ 118.605180][ T792] pwc: recv_control_msg error -32 req 02 val 2800 [ 118.643043][ T5813] usb 4-1: config 0 descriptor?? [ 118.643547][ T6218] loop5: detected capacity change from 0 to 1024 [ 118.773860][ T6218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.784581][ T5940] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 118.802953][ T5940] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 118.826542][ T792] pwc: recv_control_msg error -71 req 04 val 1200 [ 118.833786][ T5940] asix 5-1:0.188: probe with driver asix failed with error -71 [ 118.993021][ T5940] usb 5-1: USB disconnect, device number 3 [ 119.048984][ T792] pwc: Registered as video103. [ 119.110760][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.135364][ T792] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 119.281368][ T792] usb 1-1: USB disconnect, device number 4 [ 120.316970][ T6239] loop5: detected capacity change from 0 to 16 [ 120.870234][ T6239] erofs (device loop5): invalid checksum 0xde366481, 0xc32427af expected [ 122.821761][ T5920] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 123.012895][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 123.061755][ T5920] usb 6-1: Using ep0 maxpacket: 8 [ 123.102087][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.154934][ T5920] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 123.206932][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.283524][ T5920] usb 6-1: config 0 descriptor?? [ 123.324977][ T5920] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 124.211875][ T9] usb 4-1: USB disconnect, device number 7 [ 125.174035][ T5920] gspca_vc032x: reg_w err -110 [ 125.180262][ T5920] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 125.409018][ T5920] usb 6-1: USB disconnect, device number 2 [ 125.995446][ T6277] netlink: 40 bytes leftover after parsing attributes in process `syz.4.68'. [ 126.482125][ T6283] loop1: detected capacity change from 0 to 16 [ 126.506109][ T791] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.005838][ T6283] erofs (device loop1): invalid checksum 0xde366481, 0xc32427af expected [ 127.032387][ T6286] capability: warning: `syz.5.70' uses 32-bit capabilities (legacy support in use) [ 127.047323][ T6280] loop2: detected capacity change from 0 to 4096 [ 127.239638][ T791] usb 1-1: Using ep0 maxpacket: 8 [ 127.270532][ T791] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 127.422709][ T6286] program syz.5.70 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.961029][ T791] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 127.973581][ T791] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 127.985841][ T791] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 127.999750][ T791] usb 1-1: config 168 interface 0 has no altsetting 0 [ 128.007827][ T791] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 128.018481][ T791] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 128.030751][ T6280] EXT4-fs (loop2): Test dummy encryption mode enabled [ 128.030918][ T6280] EXT4-fs (loop2): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 128.050250][ T791] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 128.061999][ T791] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 128.071872][ T6280] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01c, mo2=0002] [ 128.075391][ T791] usb 1-1: config 168 interface 0 has no altsetting 0 [ 128.092365][ T791] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 128.103067][ T791] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 128.114853][ T791] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 128.157204][ T6280] System zones: 0-5 [ 128.186705][ T6280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.203312][ T791] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 128.222285][ T6296] netlink: 'syz.4.73': attribute type 10 has an invalid length. [ 128.315339][ T791] usb 1-1: config 168 interface 0 has no altsetting 0 [ 128.547764][ T5970] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.586678][ T791] usb 1-1: string descriptor 0 read error: -22 [ 129.214402][ T791] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 129.341128][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.402750][ T5970] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.419125][ T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.433412][ T6296] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 129.462308][ T5970] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 129.476454][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.489608][ T791] usb 1-1: can't set config #168, error -71 [ 129.518635][ T5970] usb 2-1: config 0 descriptor?? [ 129.524064][ T791] usb 1-1: USB disconnect, device number 5 [ 129.540575][ T5970] pwc: Askey VC010 type 2 USB webcam detected. [ 129.961823][ T5970] pwc: recv_control_msg error -32 req 02 val 2b00 [ 129.991424][ T5970] pwc: recv_control_msg error -32 req 02 val 2700 [ 129.999719][ T5970] pwc: recv_control_msg error -32 req 02 val 2c00 [ 130.019803][ T6306] loop0: detected capacity change from 0 to 64 [ 130.027043][ T6306] hfs: Bad value for 'umask' [ 130.032544][ T5970] pwc: recv_control_msg error -32 req 04 val 1000 [ 130.063205][ T5970] pwc: recv_control_msg error -32 req 04 val 1300 [ 130.134672][ T5970] pwc: recv_control_msg error -32 req 04 val 1400 [ 130.360479][ T6308] ubi31: attaching mtd0 [ 130.379505][ T6308] ubi31: scanning is finished [ 130.384721][ T6308] ubi31: empty MTD device detected [ 130.918513][ T5970] pwc: recv_control_msg error -32 req 02 val 2000 [ 130.957614][ T5970] pwc: recv_control_msg error -32 req 02 val 2100 [ 130.965294][ T5970] pwc: recv_control_msg error -32 req 04 val 1500 [ 131.036483][ T5970] pwc: recv_control_msg error -32 req 02 val 2500 [ 131.045162][ T6308] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 131.171974][ T5970] pwc: recv_control_msg error -32 req 02 val 2400 [ 131.401180][ T5970] pwc: recv_control_msg error -32 req 02 val 2600 [ 131.431448][ T5970] pwc: recv_control_msg error -32 req 02 val 2900 [ 131.835723][ T5970] pwc: recv_control_msg error -32 req 02 val 2800 [ 132.151833][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.158642][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.228551][ T5970] pwc: recv_control_msg error -71 req 04 val 1200 [ 132.250034][ T5970] pwc: Registered as video103. [ 132.294168][ T5970] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 132.410881][ T5970] usb 2-1: USB disconnect, device number 2 [ 132.642637][ T6322] Bluetooth: MGMT ver 1.23 [ 132.912239][ T791] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 133.217739][ T791] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.872580][ T791] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 133.884311][ T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.897747][ T791] usb 1-1: config 0 descriptor?? [ 133.906879][ T791] pwc: Askey VC010 type 2 USB webcam detected. [ 134.838315][ T6339] program syz.3.86 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.924837][ T791] pwc: recv_control_msg error -32 req 02 val 2b00 [ 134.982746][ T791] pwc: recv_control_msg error -32 req 02 val 2700 [ 135.003805][ T791] pwc: recv_control_msg error -32 req 02 val 2c00 [ 135.032785][ T791] pwc: recv_control_msg error -32 req 04 val 1000 [ 135.074976][ T791] pwc: recv_control_msg error -32 req 04 val 1300 [ 135.084447][ T6341] loop5: detected capacity change from 0 to 64 [ 135.094064][ T6341] hfs: Bad value for 'umask' [ 135.262958][ T791] pwc: recv_control_msg error -32 req 04 val 1400 [ 135.270841][ T791] pwc: recv_control_msg error -32 req 02 val 2000 [ 135.282691][ T791] pwc: recv_control_msg error -32 req 02 val 2100 [ 135.296156][ T791] pwc: recv_control_msg error -32 req 04 val 1500 [ 135.307770][ T791] pwc: recv_control_msg error -32 req 02 val 2500 [ 135.315535][ T791] pwc: recv_control_msg error -32 req 02 val 2400 [ 135.323146][ T791] pwc: recv_control_msg error -32 req 02 val 2600 [ 135.367107][ T791] pwc: recv_control_msg error -32 req 02 val 2900 [ 135.392363][ T6343] ubi31: attaching mtd0 [ 135.413901][ T6343] ubi31: scanning is finished [ 136.009655][ T791] pwc: recv_control_msg error -32 req 02 val 2800 [ 136.069980][ T6343] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 136.381527][ T791] pwc: recv_control_msg error -71 req 04 val 1200 [ 136.398543][ T791] pwc: Registered as video103. [ 136.415545][ T791] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 136.460319][ T791] usb 1-1: USB disconnect, device number 6 [ 136.471726][ T5970] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 136.601877][ T5920] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 136.671858][ T5970] usb 4-1: Using ep0 maxpacket: 8 [ 136.688651][ T5970] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 136.722348][ T5970] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 136.743687][ T6356] warning: `syz.4.91' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.762519][ T5970] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 136.778159][ T6356] netlink: 'syz.4.91': attribute type 10 has an invalid length. [ 136.782217][ T5920] usb 6-1: Using ep0 maxpacket: 32 [ 136.787397][ T5970] usb 4-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 136.811200][ T5970] usb 4-1: config 168 interface 0 has no altsetting 0 [ 136.813284][ T5920] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 136.822313][ T5970] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 136.841491][ T5970] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 136.866517][ T5920] usb 6-1: config 0 has no interface number 0 [ 136.870239][ T5970] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 136.891782][ T5920] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 136.893477][ T5970] usb 4-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 136.923682][ T5970] usb 4-1: config 168 interface 0 has no altsetting 0 [ 136.937222][ T5970] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 136.943998][ T5920] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 136.948251][ T5970] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 136.983018][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.991041][ T5920] usb 6-1: Product: syz [ 137.007525][ T5970] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 137.032050][ T5920] usb 6-1: Manufacturer: syz [ 137.046423][ T5970] usb 4-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 137.060352][ T5920] usb 6-1: SerialNumber: syz [ 137.281790][ T5970] usb 4-1: config 168 interface 0 has no altsetting 0 [ 137.288651][ T5920] usb 6-1: config 0 descriptor?? [ 137.289710][ T6352] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 137.297814][ T5970] usb 4-1: string descriptor 0 read error: -22 [ 137.307925][ T5970] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 137.331998][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.360148][ T6361] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 137.411101][ T5970] adutux 4-1:168.0: interrupt endpoints not found [ 137.431728][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 137.518982][ T6352] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 137.754012][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 137.798106][ T6369] wireguard0: entered promiscuous mode [ 137.804039][ T6369] wireguard0: entered allmulticast mode [ 137.905141][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.932971][ T9] usb 1-1: Product: syz [ 137.937201][ T9] usb 1-1: Manufacturer: syz [ 137.957126][ T9] usb 1-1: SerialNumber: syz [ 137.977093][ T5813] usb 4-1: USB disconnect, device number 8 [ 138.467074][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 138.606427][ T5834] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 138.638791][ T6376] tipc: Started in network mode [ 138.652540][ T5920] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 138.676720][ T6376] tipc: Node identity f26745b2066b, cluster identity 4711 [ 138.700983][ T5920] asix 6-1:0.188: probe with driver asix failed with error -32 [ 138.711164][ T6376] tipc: Enabled bearer , priority 0 [ 138.781976][ T6377] syzkaller0: entered promiscuous mode [ 138.787532][ T6377] syzkaller0: entered allmulticast mode [ 138.873555][ T6380] loop2: detected capacity change from 0 to 16 [ 138.896068][ T6380] erofs (device loop2): invalid checksum 0xde366481, 0xc32427af expected [ 139.711774][ T5834] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 139.719776][ T5834] ath9k_htc: Failed to initialize the device [ 139.751297][ T5920] usb 6-1: USB disconnect, device number 3 [ 139.811406][ T5834] usb 1-1: ath9k_htc: USB layer deinitialized [ 139.835446][ T9] tipc: Node number set to 4094444978 [ 139.907827][ T6379] tipc: Resetting bearer [ 139.946925][ T6375] tipc: Resetting bearer [ 140.135402][ T6375] tipc: Disabling bearer [ 140.232236][ T5940] usb 1-1: USB disconnect, device number 7 [ 140.327673][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.102'. [ 140.429466][ T6401] loop4: detected capacity change from 0 to 64 [ 140.438007][ T6401] hfs: Bad value for 'umask' [ 140.722556][ T6403] ubi31: attaching mtd0 [ 140.742664][ T6403] ubi31: scanning is finished [ 141.415952][ T6403] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 141.607192][ T6408] netlink: 16 bytes leftover after parsing attributes in process `syz.4.106'. [ 141.625632][ T6410] netlink: 'syz.3.105': attribute type 4 has an invalid length. [ 141.661578][ T6410] netlink: 17 bytes leftover after parsing attributes in process `syz.3.105'. [ 142.899216][ T6416] syz.0.108 uses obsolete (PF_INET,SOCK_PACKET) [ 143.531905][ T5834] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.732116][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 143.764419][ T5834] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 143.901261][ T6430] wireguard0: entered promiscuous mode [ 143.938699][ T6430] wireguard0: entered allmulticast mode [ 144.654145][ T5834] usb 5-1: config 0 has no interface number 0 [ 144.660381][ T5834] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 144.685471][ T5834] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 144.694862][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.719138][ T5834] usb 5-1: Product: syz [ 144.732125][ T5834] usb 5-1: Manufacturer: syz [ 144.736756][ T5834] usb 5-1: SerialNumber: syz [ 144.753433][ T5834] usb 5-1: config 0 descriptor?? [ 144.759535][ T6424] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 144.972598][ T6424] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 145.241119][ T6443] loop0: detected capacity change from 0 to 1024 [ 145.270696][ T6443] hfsplus: bad catalog entry used to create inode [ 145.277860][ T6443] hfsplus: failed to load root directory [ 146.136051][ T6454] netlink: 16 bytes leftover after parsing attributes in process `syz.5.119'. [ 146.266571][ T5834] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 146.323405][ T5834] asix 5-1:0.188: probe with driver asix failed with error -32 [ 146.395472][ T6456] loop3: detected capacity change from 0 to 16 [ 146.526722][ T6456] erofs (device loop3): mounted with root inode @ nid 36. [ 146.884426][ T6463] syz.3.120: attempt to access beyond end of device [ 146.884426][ T6463] loop3: rw=8388608, sector=34359739344, nr_sectors = 8 limit=16 [ 147.459948][ T5940] usb 5-1: USB disconnect, device number 4 [ 148.231067][ T6476] tipc: Started in network mode [ 148.270668][ T6476] tipc: Node identity 12d264ffed76, cluster identity 4711 [ 148.403292][ T6476] tipc: Enabled bearer , priority 0 [ 148.517783][ T6478] syzkaller0: entered promiscuous mode [ 148.584239][ T6478] syzkaller0: entered allmulticast mode [ 148.662238][ T6483] loop4: detected capacity change from 0 to 2048 [ 148.872012][ T6475] tipc: Resetting bearer [ 148.904511][ T6483] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.056046][ T6486] loop1: detected capacity change from 0 to 2048 [ 149.142725][ T6475] tipc: Disabling bearer [ 149.190769][ T6477] loop3: detected capacity change from 0 to 2048 [ 149.346089][ T6487] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.567571][ T31] audit: type=1800 audit(1770595346.463:2): pid=6491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.129" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 149.764714][ T6477] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.125132][ T6494] loop5: detected capacity change from 0 to 128 [ 150.156094][ T6487] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 150.187757][ T6487] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 150.219089][ T6487] Remounting filesystem read-only [ 150.235705][ T6494] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.263433][ T6494] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.274126][ T5829] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 150.632071][ T5940] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 150.833583][ T5940] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.911844][ T5940] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.995094][ T5940] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 151.049139][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 151.080482][ T5940] usb 6-1: SerialNumber: syz [ 151.303346][ T6500] loop4: detected capacity change from 0 to 512 [ 151.356876][ T6500] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 151.393219][ T5940] usb 6-1: skipping empty audio interface (v1) [ 151.482473][ T6500] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.133: Invalid block bitmap block 0 in block_group 0 [ 151.542841][ T5940] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 151.564410][ T5940] usb 6-1: USB disconnect, device number 4 [ 151.592368][ T6500] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 151.609384][ T6500] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.133: attempt to clear invalid blocks 983261 len 1 [ 151.660033][ T6500] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.133: Invalid inode table block 0 in block_group 0 [ 151.692269][ T6500] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 151.702466][ T6500] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 151.711547][ T6500] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.133: Invalid inode table block 0 in block_group 0 [ 151.957425][ T6120] udevd[6120]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.132814][ T6500] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 152.144232][ T6500] EXT4-fs error (device loop4): ext4_truncate:4635: inode #11: comm syz.4.133: mark_inode_dirty error [ 152.155904][ T6500] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 152.174152][ T6500] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.133: Invalid inode table block 0 in block_group 0 [ 152.188112][ T6500] EXT4-fs (loop4): 1 truncate cleaned up [ 152.198330][ T6500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.242871][ T5830] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.259325][ T6511] loop3: detected capacity change from 0 to 16 [ 152.311761][ T5920] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 152.342250][ T6511] erofs (device loop3): mounted with root inode @ nid 36. [ 152.612051][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 152.660038][ T5920] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 153.262837][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.281693][ T5920] usb 1-1: config 0 has no interface number 0 [ 153.358772][ T6518] syz.3.137: attempt to access beyond end of device [ 153.358772][ T6518] loop3: rw=8388608, sector=34359739344, nr_sectors = 8 limit=16 [ 153.761187][ T5920] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 153.799601][ T5920] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 153.809451][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.817852][ T5920] usb 1-1: Product: syz [ 154.037859][ T5920] usb 1-1: Manufacturer: syz [ 154.244320][ T5920] usb 1-1: SerialNumber: syz [ 154.261838][ T5920] usb 1-1: config 0 descriptor?? [ 154.267846][ T6509] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 156.319007][ T5920] asix 1-1:0.188: probe with driver asix failed with error -71 [ 156.332347][ T5920] usb 1-1: USB disconnect, device number 8 [ 156.396022][ T791] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 156.619099][ T791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.653026][ T791] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 156.692188][ T6537] tipc: Started in network mode [ 156.692328][ T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.698255][ T6537] tipc: Node identity 12c4fc69615b, cluster identity 4711 [ 156.698424][ T6537] tipc: Enabled bearer , priority 0 [ 156.782862][ T791] usb 5-1: config 0 descriptor?? [ 156.817804][ T6537] syzkaller0: entered promiscuous mode [ 156.834746][ T791] pwc: Askey VC010 type 2 USB webcam detected. [ 156.839022][ T6537] syzkaller0: entered allmulticast mode [ 157.586456][ T6530] tipc: Resetting bearer [ 157.762406][ T791] pwc: recv_control_msg error -32 req 02 val 2b00 [ 157.769986][ T791] pwc: recv_control_msg error -32 req 02 val 2700 [ 157.779488][ T791] pwc: recv_control_msg error -32 req 02 val 2c00 [ 157.788504][ T791] pwc: recv_control_msg error -32 req 04 val 1000 [ 157.806091][ T791] pwc: recv_control_msg error -32 req 04 val 1300 [ 158.024790][ T791] pwc: recv_control_msg error -32 req 04 val 1400 [ 158.162356][ T791] pwc: recv_control_msg error -32 req 02 val 2000 [ 158.164802][ T6530] tipc: Disabling bearer [ 158.180530][ T791] pwc: recv_control_msg error -32 req 02 val 2100 [ 158.193773][ T791] pwc: recv_control_msg error -32 req 04 val 1500 [ 158.201144][ T791] pwc: recv_control_msg error -32 req 02 val 2500 [ 158.271557][ T5813] tipc: Node number set to 1939864681 [ 158.378103][ T6558] loop0: detected capacity change from 0 to 512 [ 158.393194][ T6558] EXT4-fs: Ignoring removed nobh option [ 158.411401][ T791] pwc: recv_control_msg error -32 req 02 val 2600 [ 158.440624][ T791] pwc: recv_control_msg error -32 req 02 val 2900 [ 158.504481][ T6558] EXT4-fs error (device loop0): __ext4_iget:5426: inode #11: block 1: comm syz.0.151: invalid block [ 158.533634][ T791] pwc: recv_control_msg error -32 req 02 val 2800 [ 158.593486][ T6558] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.151: couldn't read orphan inode 11 (err -117) [ 158.684641][ T6558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.801788][ T791] pwc: recv_control_msg error -71 req 04 val 1200 [ 158.823289][ T791] pwc: Registered as video103. [ 158.867985][ T791] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 158.994234][ T791] usb 5-1: USB disconnect, device number 5 [ 159.402688][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.746250][ T6574] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 160.531695][ T5834] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 160.702532][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 160.724240][ T5834] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 160.748769][ T5834] usb 2-1: config 0 has no interface number 0 [ 160.762892][ T5834] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 160.796996][ T5834] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 160.812235][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.825857][ T5834] usb 2-1: Product: syz [ 160.830045][ T5834] usb 2-1: Manufacturer: syz [ 160.861711][ T5834] usb 2-1: SerialNumber: syz [ 160.878411][ T5834] usb 2-1: config 0 descriptor?? [ 160.899772][ T6577] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 161.153950][ T6577] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 162.312833][ T6592] loop3: detected capacity change from 0 to 2048 [ 162.570100][ T6592] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.746920][ T6601] tipc: Enabled bearer , priority 0 [ 162.786926][ T6601] syzkaller0: entered promiscuous mode [ 162.803962][ T6601] syzkaller0: entered allmulticast mode [ 162.856146][ T5834] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 162.872189][ T5834] asix 2-1:0.188: probe with driver asix failed with error -32 [ 163.002194][ T6600] tipc: Resetting bearer [ 163.107426][ T6600] tipc: Disabling bearer [ 163.417190][ T6611] loop5: detected capacity change from 0 to 1024 [ 163.468114][ T6611] hfsplus: bad catalog entry used to create inode [ 163.494410][ T6611] hfsplus: failed to load root directory [ 163.861789][ T5920] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 164.053727][ T5920] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 164.083312][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.116175][ T5920] usb 3-1: Product: syz [ 164.120393][ T5920] usb 3-1: Manufacturer: syz [ 164.148281][ T5834] usb 2-1: USB disconnect, device number 3 [ 164.187637][ T5920] usb 3-1: SerialNumber: syz [ 164.218266][ T5920] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 164.254043][ T5813] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 164.876747][ T6622] wireguard0: entered promiscuous mode [ 164.882686][ T6622] wireguard0: entered allmulticast mode [ 165.139105][ T6628] netlink: 'syz.1.170': attribute type 10 has an invalid length. [ 165.462695][ T5813] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 165.981484][ T5813] ath9k_htc: Failed to initialize the device [ 176.291788][ C1] sched: DL replenish lagged too much [ 182.830391][ T5834] usb 3-1: USB disconnect, device number 3 [ 182.996040][ T5834] usb 3-1: ath9k_htc: USB layer deinitialized [ 183.495790][ T6628] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 183.833838][ T5824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 183.843260][ T5824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 183.855082][ T5824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 183.878628][ T5824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 183.947257][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 183.947627][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 183.975546][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 183.988776][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 183.998492][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 184.006346][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 184.684950][ T5824] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 184.695058][ T5824] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 184.702890][ T5824] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 184.710743][ T5824] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 184.718356][ T5824] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 184.791880][ T5843] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 184.806018][ T5843] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 184.814167][ T5843] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 184.823014][ T5843] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 184.831404][ T5843] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 184.841857][ T5843] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 184.861917][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 184.869209][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 184.869905][ T5843] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 184.907455][ T5843] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 185.149766][ T5824] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 185.164092][ T5824] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 185.172170][ T5824] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 185.180093][ T5824] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 185.187939][ T5824] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 186.033168][ T5824] Bluetooth: hci6: command tx timeout [ 186.112415][ T5839] Bluetooth: hci7: command tx timeout [ 186.129447][ T6044] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.222182][ T6642] chnl_net:caif_netlink_parms(): no params data found [ 186.306574][ T6044] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.380883][ T6645] chnl_net:caif_netlink_parms(): no params data found [ 186.536460][ T6044] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.635475][ T6044] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.758781][ T6655] chnl_net:caif_netlink_parms(): no params data found [ 186.765771][ T5839] Bluetooth: hci8: command tx timeout [ 186.811905][ T6651] chnl_net:caif_netlink_parms(): no params data found [ 186.861531][ T6642] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.868939][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.876448][ T6642] bridge_slave_0: entered allmulticast mode [ 186.884270][ T6642] bridge_slave_0: entered promiscuous mode [ 186.894145][ T6648] chnl_net:caif_netlink_parms(): no params data found [ 186.911786][ T5839] Bluetooth: hci10: command tx timeout [ 186.934716][ T6645] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.942001][ T6645] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.949365][ T6645] bridge_slave_0: entered allmulticast mode [ 186.957360][ T6645] bridge_slave_0: entered promiscuous mode [ 186.992122][ T5839] Bluetooth: hci9: command tx timeout [ 187.032267][ T6642] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.039499][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.047887][ T6642] bridge_slave_1: entered allmulticast mode [ 187.058632][ T6642] bridge_slave_1: entered promiscuous mode [ 187.104588][ T6645] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.114388][ T6645] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.121883][ T6645] bridge_slave_1: entered allmulticast mode [ 187.129514][ T6645] bridge_slave_1: entered promiscuous mode [ 187.231922][ T5839] Bluetooth: hci11: command tx timeout [ 187.342182][ T6645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.376508][ T6655] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.384305][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.393727][ T6655] bridge_slave_0: entered allmulticast mode [ 187.402051][ T6655] bridge_slave_0: entered promiscuous mode [ 187.410781][ T6649] chnl_net:caif_netlink_parms(): no params data found [ 187.434615][ T6642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.482830][ T6645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.516862][ T6655] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.528251][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.535757][ T6655] bridge_slave_1: entered allmulticast mode [ 187.543313][ T6655] bridge_slave_1: entered promiscuous mode [ 187.574840][ T6642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.615692][ T6645] team0: Port device team_slave_0 added [ 187.702925][ T6651] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.710208][ T6651] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.717592][ T6651] bridge_slave_0: entered allmulticast mode [ 187.727393][ T6651] bridge_slave_0: entered promiscuous mode [ 187.738734][ T6645] team0: Port device team_slave_1 added [ 187.752224][ T6655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.788104][ T6642] team0: Port device team_slave_0 added [ 187.797271][ T6642] team0: Port device team_slave_1 added [ 187.805374][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.812672][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.820018][ T6648] bridge_slave_0: entered allmulticast mode [ 187.829925][ T6648] bridge_slave_0: entered promiscuous mode [ 187.837565][ T6651] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.846430][ T6651] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.853840][ T6651] bridge_slave_1: entered allmulticast mode [ 187.862410][ T6651] bridge_slave_1: entered promiscuous mode [ 187.869791][ T6044] bridge_slave_1: left allmulticast mode [ 187.877175][ T6044] bridge_slave_1: left promiscuous mode [ 187.883200][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.896462][ T6044] bridge_slave_0: left allmulticast mode [ 187.903034][ T6044] bridge_slave_0: left promiscuous mode [ 187.909306][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.112089][ T5839] Bluetooth: hci6: command tx timeout [ 188.192954][ T5839] Bluetooth: hci7: command tx timeout [ 188.218434][ T6044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.229769][ T6044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.244422][ T6044] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 188.258575][ T6044] bond0 (unregistering): Released all slaves [ 188.271222][ T6655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.336364][ T6648] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.346007][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.355255][ T6648] bridge_slave_1: entered allmulticast mode [ 188.363072][ T6648] bridge_slave_1: entered promiscuous mode [ 188.399508][ T6645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.409029][ T6645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.437194][ T6645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.475196][ T6044] tipc: Left network mode [ 188.507815][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.515700][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.544874][ T6642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.594097][ T6651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.604389][ T6645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.611445][ T6645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.638870][ T6645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.662178][ T6649] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.669356][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.677440][ T6649] bridge_slave_0: entered allmulticast mode [ 188.684988][ T6649] bridge_slave_0: entered promiscuous mode [ 188.711481][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.718514][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.744844][ T6642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.774202][ T6655] team0: Port device team_slave_0 added [ 188.784262][ T6648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.795602][ T6651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.831998][ T5839] Bluetooth: hci8: command tx timeout [ 188.840256][ T6649] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.847892][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.855843][ T6649] bridge_slave_1: entered allmulticast mode [ 188.863599][ T6649] bridge_slave_1: entered promiscuous mode [ 188.880079][ T6655] team0: Port device team_slave_1 added [ 188.888919][ T6648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.910154][ T6651] team0: Port device team_slave_0 added [ 188.919156][ T6651] team0: Port device team_slave_1 added [ 188.991912][ T5839] Bluetooth: hci10: command tx timeout [ 189.051334][ T6651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.060674][ T6651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.088418][ T6651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.095184][ T5839] Bluetooth: hci9: command tx timeout [ 189.101864][ T6651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.111291][ T6651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.138173][ T6651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.171248][ T6649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.194336][ T6648] team0: Port device team_slave_0 added [ 189.203958][ T6648] team0: Port device team_slave_1 added [ 189.269294][ T6649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.292875][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.299937][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.326870][ T6655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.328711][ T5839] Bluetooth: hci11: command tx timeout [ 189.339919][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.350053][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.379308][ T6655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.410139][ T6645] hsr_slave_0: entered promiscuous mode [ 189.416807][ T6645] hsr_slave_1: entered promiscuous mode [ 189.423731][ T6645] debugfs: 'hsr0' already exists in 'hsr' [ 189.429485][ T6645] Cannot create hsr debugfs directory [ 189.477918][ T6642] hsr_slave_0: entered promiscuous mode [ 189.485001][ T6642] hsr_slave_1: entered promiscuous mode [ 189.491223][ T6642] debugfs: 'hsr0' already exists in 'hsr' [ 189.498607][ T6642] Cannot create hsr debugfs directory [ 189.560007][ T6044] hsr_slave_0: left promiscuous mode [ 189.568894][ T6044] hsr_slave_1: left promiscuous mode [ 189.575325][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.582855][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.591192][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.598897][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.625457][ T6044] veth1_macvtap: left promiscuous mode [ 189.631146][ T6044] veth0_macvtap: left promiscuous mode [ 189.636973][ T6044] veth1_vlan: left promiscuous mode [ 189.642593][ T6044] veth0_vlan: left promiscuous mode [ 190.034639][ T6044] team0 (unregistering): Port device team_slave_1 removed [ 190.076573][ T6044] team0 (unregistering): Port device team_slave_0 removed [ 190.191824][ T5839] Bluetooth: hci6: command tx timeout [ 190.272161][ T5839] Bluetooth: hci7: command tx timeout [ 190.407159][ T6649] team0: Port device team_slave_0 added [ 190.417363][ T6649] team0: Port device team_slave_1 added [ 190.425452][ T6648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.444233][ T6648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.470216][ T6648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.558259][ T6648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.565688][ T6648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.592303][ T6648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.640082][ T6651] hsr_slave_0: entered promiscuous mode [ 190.647523][ T6651] hsr_slave_1: entered promiscuous mode [ 190.654094][ T6651] debugfs: 'hsr0' already exists in 'hsr' [ 190.659806][ T6651] Cannot create hsr debugfs directory [ 190.756943][ T6655] hsr_slave_0: entered promiscuous mode [ 190.776800][ T6655] hsr_slave_1: entered promiscuous mode [ 190.783132][ T6655] debugfs: 'hsr0' already exists in 'hsr' [ 190.788897][ T6655] Cannot create hsr debugfs directory [ 190.797485][ T6649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.809957][ T6649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.836313][ T6649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.902275][ T6649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.909402][ T6649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.935664][ T5839] Bluetooth: hci8: command tx timeout [ 190.942028][ T6649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.071874][ T5839] Bluetooth: hci10: command tx timeout [ 191.157338][ T5839] Bluetooth: hci9: command tx timeout [ 191.181229][ T6648] hsr_slave_0: entered promiscuous mode [ 191.189087][ T6648] hsr_slave_1: entered promiscuous mode [ 191.195913][ T6648] debugfs: 'hsr0' already exists in 'hsr' [ 191.201742][ T6648] Cannot create hsr debugfs directory [ 191.261872][ T6649] hsr_slave_0: entered promiscuous mode [ 191.268383][ T6649] hsr_slave_1: entered promiscuous mode [ 191.274906][ T6649] debugfs: 'hsr0' already exists in 'hsr' [ 191.280626][ T6649] Cannot create hsr debugfs directory [ 191.394591][ T5839] Bluetooth: hci11: command tx timeout [ 191.821338][ T6044] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.011217][ T6044] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.096577][ T6044] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.111125][ T6645] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 192.149960][ T6645] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 192.217510][ T6044] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.236105][ T6645] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 192.255190][ T6645] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 192.274470][ T5839] Bluetooth: hci6: command tx timeout [ 192.352741][ T5839] Bluetooth: hci7: command tx timeout [ 192.427847][ T6651] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.450691][ T6642] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 192.461579][ T6642] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 192.472757][ T6642] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 192.502896][ T6642] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 192.544780][ T6651] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.620966][ T6044] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.692083][ T6651] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.746548][ T6044] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.817845][ T6651] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.865604][ T6044] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.973964][ T6044] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.997792][ T5839] Bluetooth: hci8: command tx timeout [ 193.152591][ T5839] Bluetooth: hci10: command tx timeout [ 193.177705][ T6651] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 193.194545][ T6651] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 193.206649][ T6651] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 193.221237][ T6651] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 193.232883][ T5839] Bluetooth: hci9: command tx timeout [ 193.328274][ T6645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.472609][ T5839] Bluetooth: hci11: command tx timeout [ 193.489628][ T6044] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.529235][ T6642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.548524][ T6645] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.561074][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.581396][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.617238][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.624421][ T5989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.638969][ T5989] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.646163][ T5989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.683824][ T6044] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.700498][ T6642] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.776772][ T6044] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.813647][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.820837][ T6048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.876919][ T6044] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.899540][ T5989] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.906692][ T5989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.077664][ T6645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.293870][ T6655] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 194.344768][ T6651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.373350][ T6655] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 194.403503][ T6655] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 194.518660][ T6655] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 194.566075][ T6044] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.691223][ T6044] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.843613][ T6044] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.911378][ T6651] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.945465][ T6649] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 194.968477][ T6649] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 194.981357][ T6649] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 195.007640][ T6044] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.023872][ T6645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.064119][ T6649] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 195.100301][ T4489] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.107452][ T4489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.120442][ T4489] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.127686][ T4489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.285770][ T6642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.358388][ T6651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.409382][ T6648] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 195.440134][ T6648] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 195.540088][ T6648] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 195.560863][ T6648] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 195.705009][ T6044] bridge_slave_1: left allmulticast mode [ 195.731810][ T6044] bridge_slave_1: left promiscuous mode [ 195.738994][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.779027][ T6044] bridge_slave_0: left allmulticast mode [ 195.790916][ T6044] bridge_slave_0: left promiscuous mode [ 195.799197][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.836825][ T6044] bridge_slave_1: left allmulticast mode [ 195.844999][ T6044] bridge_slave_1: left promiscuous mode [ 195.850802][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.869077][ T6044] bridge_slave_0: left allmulticast mode [ 195.879851][ T6044] bridge_slave_0: left promiscuous mode [ 195.886179][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.908576][ T6044] bridge_slave_1: left allmulticast mode [ 195.918251][ T6044] bridge_slave_1: left promiscuous mode [ 195.924569][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.941537][ T6044] bridge_slave_0: left allmulticast mode [ 195.947592][ T6044] bridge_slave_0: left promiscuous mode [ 195.955063][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.967637][ T6044] bridge_slave_1: left allmulticast mode [ 195.976891][ T6044] bridge_slave_1: left promiscuous mode [ 195.993294][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.016065][ T6044] bridge_slave_0: left allmulticast mode [ 196.022372][ T6044] bridge_slave_0: left promiscuous mode [ 196.028092][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.488652][ T6044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.500452][ T6044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.510804][ T6044] bond0 (unregistering): Released all slaves [ 196.708984][ T6044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.720766][ T6044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.731230][ T6044] bond0 (unregistering): Released all slaves [ 196.927162][ T6044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.940581][ T6044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.951125][ T6044] bond0 (unregistering): Released all slaves [ 197.179482][ T6044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.191924][ T6044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.205264][ T6044] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 197.214750][ T6044] bond0 (unregistering): Released all slaves [ 197.257592][ T6655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.495430][ T6044] tipc: Left network mode [ 197.567963][ T6044] tipc: Left network mode [ 197.569924][ T6655] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.586880][ T6649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.598161][ T6044] tipc: Left network mode [ 197.644212][ T6651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.689545][ T4489] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.696768][ T4489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.706438][ T6645] veth0_vlan: entered promiscuous mode [ 197.745903][ T4489] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.753150][ T4489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.780204][ T6642] veth0_vlan: entered promiscuous mode [ 197.823560][ T6645] veth1_vlan: entered promiscuous mode [ 197.864121][ T6649] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.878942][ T6651] veth0_vlan: entered promiscuous mode [ 197.905985][ T4489] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.913173][ T4489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.940564][ T6642] veth1_vlan: entered promiscuous mode [ 197.968067][ T6651] veth1_vlan: entered promiscuous mode [ 198.056873][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.064014][ T6048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.160480][ T6645] veth0_macvtap: entered promiscuous mode [ 198.230912][ T6645] veth1_macvtap: entered promiscuous mode [ 198.397327][ T6645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.422358][ T6651] veth0_macvtap: entered promiscuous mode [ 198.459076][ T6642] veth0_macvtap: entered promiscuous mode [ 198.470202][ T6645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.516712][ T6651] veth1_macvtap: entered promiscuous mode [ 198.538304][ T6648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.604130][ T6642] veth1_macvtap: entered promiscuous mode [ 198.619242][ T4489] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.653482][ T4489] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.719423][ T6648] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.754972][ T4489] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.770527][ T4489] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.873269][ T6034] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.880507][ T6034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.915338][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.922604][ T6034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.000233][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.056612][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.085316][ T6651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.138275][ T6651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.188092][ T6050] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.198201][ T6050] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.223818][ T6044] hsr_slave_0: left promiscuous mode [ 199.229803][ T6044] hsr_slave_1: left promiscuous mode [ 199.236565][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.244248][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.255139][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.263638][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.275913][ T6044] hsr_slave_0: left promiscuous mode [ 199.283434][ T6044] hsr_slave_1: left promiscuous mode [ 199.289499][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.297772][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.306014][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.313993][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.327681][ T6044] hsr_slave_0: left promiscuous mode [ 199.335363][ T6044] hsr_slave_1: left promiscuous mode [ 199.341433][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.349533][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.357797][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.365324][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.379325][ T6044] hsr_slave_0: left promiscuous mode [ 199.386385][ T6044] hsr_slave_1: left promiscuous mode [ 199.393329][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.401446][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.409917][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.418300][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.475588][ T6044] veth1_macvtap: left promiscuous mode [ 199.481307][ T6044] veth0_macvtap: left promiscuous mode [ 199.487832][ T6044] veth1_vlan: left promiscuous mode [ 199.493499][ T6044] veth0_vlan: left promiscuous mode [ 199.504159][ T6044] veth1_macvtap: left promiscuous mode [ 199.509762][ T6044] veth0_macvtap: left promiscuous mode [ 199.515959][ T6044] veth1_vlan: left promiscuous mode [ 199.521334][ T6044] veth0_vlan: left promiscuous mode [ 199.528269][ T6044] veth1_macvtap: left promiscuous mode [ 199.533911][ T6044] veth0_macvtap: left promiscuous mode [ 199.539560][ T6044] veth1_vlan: left promiscuous mode [ 199.545226][ T6044] veth0_vlan: left promiscuous mode [ 199.552354][ T6044] veth1_macvtap: left promiscuous mode [ 199.558028][ T6044] veth0_macvtap: left promiscuous mode [ 199.563854][ T6044] veth1_vlan: left promiscuous mode [ 199.570583][ T6044] veth0_vlan: left promiscuous mode [ 200.212596][ T6044] team0 (unregistering): Port device team_slave_1 removed [ 200.246555][ T6044] team0 (unregistering): Port device team_slave_0 removed [ 200.774565][ T6044] team0 (unregistering): Port device team_slave_1 removed [ 200.803376][ T6044] team0 (unregistering): Port device team_slave_0 removed [ 201.332795][ T6044] team0 (unregistering): Port device team_slave_1 removed [ 201.362170][ T6044] team0 (unregistering): Port device team_slave_0 removed [ 201.895496][ T6044] team0 (unregistering): Port device team_slave_1 removed [ 201.928688][ T6044] team0 (unregistering): Port device team_slave_0 removed [ 202.311859][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.319769][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.346444][ T6050] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.368880][ T6050] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.400279][ T6655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.421405][ T6050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.437257][ T6050] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.453029][ T6649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.509153][ T6050] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.540302][ T6050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.588428][ T6050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.621101][ T6050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.816844][ T6655] veth0_vlan: entered promiscuous mode [ 202.890644][ T6655] veth1_vlan: entered promiscuous mode [ 202.936756][ T6048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.965599][ T6048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.147828][ T6034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.193183][ T6034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.247756][ T6050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.266263][ T6050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.321415][ T6655] veth0_macvtap: entered promiscuous mode [ 203.379857][ T6655] veth1_macvtap: entered promiscuous mode [ 203.437681][ T6648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.459209][ T6050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.474552][ T6050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.495142][ T6857] tipc: Started in network mode [ 203.500021][ T6857] tipc: Node identity 8a3386b79139, cluster identity 4711 [ 203.532293][ T6857] tipc: Enabled bearer , priority 0 [ 203.627706][ T6655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.647627][ T6857] syzkaller0: entered promiscuous mode [ 203.663869][ T6857] syzkaller0: entered allmulticast mode [ 203.692822][ T6649] veth0_vlan: entered promiscuous mode [ 203.842540][ T6855] tipc: Resetting bearer [ 203.890911][ T6855] tipc: Disabling bearer [ 204.027213][ T6870] netlink: 16 bytes leftover after parsing attributes in process `syz.7.174'. [ 204.104684][ T6875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.177'. [ 204.250821][ T6649] veth1_vlan: entered promiscuous mode [ 204.809530][ T6655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.940397][ T5989] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.982630][ T5989] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.991394][ T5989] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.096853][ T5989] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.322970][ T6649] veth0_macvtap: entered promiscuous mode [ 205.516165][ T6649] veth1_macvtap: entered promiscuous mode [ 206.085912][ T5989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.106498][ T5989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.175364][ T6649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.251308][ T6649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.329050][ T4489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.329426][ T6648] veth0_vlan: entered promiscuous mode [ 206.372083][ T4489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.438379][ T5989] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.472225][ T5989] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.519523][ T5989] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.589583][ T5989] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.692776][ T6648] veth1_vlan: entered promiscuous mode [ 207.014657][ T6897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.178'. [ 207.153942][ T6648] veth0_macvtap: entered promiscuous mode [ 207.187095][ T5989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.216781][ T6648] veth1_macvtap: entered promiscuous mode [ 207.221628][ T5989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.291708][ T5940] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 207.421098][ T6902] loop7: detected capacity change from 0 to 512 [ 207.504983][ T6902] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 207.585243][ T6648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.623275][ T5940] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 207.633228][ T6044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.641169][ T6044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.661373][ T6648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.686834][ T5940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.719401][ T5989] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.730208][ T6902] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.183: Invalid block bitmap block 0 in block_group 0 [ 207.764808][ T5940] usb 2-1: config 0 has no interfaces? [ 207.770477][ T5940] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 207.790622][ T6902] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 207.797332][ T5989] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.833511][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.872140][ T5940] usb 2-1: config 0 descriptor?? [ 207.912181][ T6902] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm syz.7.183: attempt to clear invalid blocks 983261 len 1 [ 207.964012][ T6902] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.183: Invalid inode table block 0 in block_group 0 [ 208.048214][ T6902] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 208.064604][ T5989] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.086253][ T5989] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.118195][ T6902] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 208.191584][ T6902] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.183: Invalid inode table block 0 in block_group 0 [ 208.353093][ T6902] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 208.462632][ T6902] EXT4-fs error (device loop7): ext4_truncate:4635: inode #11: comm syz.7.183: mark_inode_dirty error [ 208.503725][ T6902] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 208.529718][ T6902] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.183: Invalid inode table block 0 in block_group 0 [ 208.599296][ T6902] EXT4-fs (loop7): 1 truncate cleaned up [ 208.637560][ T6902] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.798048][ T4489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.830845][ T4489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.952729][ T5907] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 209.053076][ T6034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.077435][ T5834] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 209.087727][ T6034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.101726][ T5907] usb 7-1: Using ep0 maxpacket: 16 [ 209.167313][ T5907] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.222039][ T5907] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.299903][ T5907] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.344963][ T5834] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.360078][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.375953][ T5834] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 209.411664][ T5907] usb 7-1: Product: syz [ 209.429372][ T5834] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.441674][ T5907] usb 7-1: Manufacturer: syz [ 209.446280][ T5907] usb 7-1: SerialNumber: syz [ 209.484969][ T5834] usb 10-1: config 0 descriptor?? [ 209.616025][ T5834] pwc: Askey VC010 type 2 USB webcam detected. [ 209.763173][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 209.858157][ T5907] usb 7-1: 0:2 : does not exist [ 209.929869][ T5834] pwc: recv_control_msg error -32 req 02 val 2b00 [ 210.083235][ T5834] pwc: recv_control_msg error -32 req 02 val 2700 [ 210.098974][ T5907] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 210.815512][ T5834] pwc: recv_control_msg error -32 req 02 val 2c00 [ 210.892980][ T5834] pwc: recv_control_msg error -32 req 04 val 1000 [ 210.986779][ T5834] pwc: recv_control_msg error -32 req 04 val 1300 [ 211.006026][ T5907] usb 7-1: USB disconnect, device number 2 [ 211.026100][ T5834] pwc: recv_control_msg error -32 req 04 val 1400 [ 211.063433][ T5834] pwc: recv_control_msg error -32 req 02 val 2000 [ 211.162082][ T5834] pwc: recv_control_msg error -32 req 02 val 2100 [ 211.215490][ T5834] pwc: recv_control_msg error -32 req 04 val 1500 [ 211.236150][ T5834] pwc: recv_control_msg error -32 req 02 val 2500 [ 211.300924][ T6848] udevd[6848]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.458896][ T5834] pwc: recv_control_msg error -32 req 02 val 2600 [ 211.496265][ T5834] pwc: recv_control_msg error -32 req 02 val 2900 [ 211.540942][ T6642] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.552466][ T5834] pwc: recv_control_msg error -32 req 02 val 2800 [ 211.795821][ T5834] pwc: recv_control_msg error -71 req 04 val 1200 [ 211.842007][ T5834] pwc: Registered as video103. [ 212.334060][ T5834] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input12 [ 212.460765][ T5834] usb 10-1: USB disconnect, device number 2 [ 212.618628][ T5813] usb 2-1: USB disconnect, device number 4 [ 214.537688][ T6969] netlink: 'syz.9.195': attribute type 2 has an invalid length. [ 216.207094][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.204'. [ 216.270960][ T6991] netlink: 20 bytes leftover after parsing attributes in process `syz.7.204'. [ 216.672654][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.204'. [ 216.720091][ T6991] netlink: 20 bytes leftover after parsing attributes in process `syz.7.204'. [ 216.738283][ T6056] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.321261][ T6991] Zero length message leads to an empty skb [ 217.341365][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.370762][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.633114][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.638321][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'. [ 218.898824][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.7.210'. [ 220.611804][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 223.550562][ T7055] syzkaller0: entered promiscuous mode [ 223.603665][ T7055] syzkaller0: entered allmulticast mode [ 223.653774][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.8.223'. [ 223.719930][ T7060] netlink: 20 bytes leftover after parsing attributes in process `syz.8.223'. [ 223.762296][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 223.843159][ T5920] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 224.008028][ T78] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.017054][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.8.223'. [ 224.026248][ T5920] usb 8-1: Using ep0 maxpacket: 32 [ 224.038033][ T5920] usb 8-1: unable to get BOS descriptor or descriptor too short [ 224.052089][ T78] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.065539][ T7060] netlink: 20 bytes leftover after parsing attributes in process `syz.8.223'. [ 224.079174][ T5920] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.252009][ T5920] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.269603][ T7067] netlink: 60 bytes leftover after parsing attributes in process `syz.1.225'. [ 224.306845][ T5920] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.322323][ T5920] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.339522][ T5920] usb 8-1: Product: syz [ 224.344740][ T7068] netlink: 'syz.1.225': attribute type 1 has an invalid length. [ 224.399728][ T5920] usb 8-1: Manufacturer: syz [ 224.405850][ T5920] usb 8-1: SerialNumber: syz [ 224.411077][ T78] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.490415][ T6034] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.669529][ T5920] usb 8-1: USB disconnect, device number 2 [ 225.326715][ T7080] loop0: detected capacity change from 0 to 2048 [ 225.417225][ T7079] netlink: 'syz.8.228': attribute type 2 has an invalid length. [ 225.501753][ T7080] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.114066][ T7095] loop7: detected capacity change from 0 to 1024 [ 226.137882][ T7095] EXT4-fs: Ignoring removed bh option [ 226.199822][ T7095] ext4: Bad value for 'max_batch_time' [ 228.801001][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.9.237'. [ 229.026731][ T7122] loop1: detected capacity change from 0 to 1024 [ 229.823299][ T7122] hfsplus: bad catalog entry used to create inode [ 229.830161][ T7122] hfsplus: failed to load root directory [ 232.618212][ T7140] loop0: detected capacity change from 0 to 1024 [ 232.811473][ T7140] hfsplus: bad catalog entry used to create inode [ 232.884486][ T7140] hfsplus: failed to load root directory [ 233.600123][ T7150] random: crng reseeded on system resumption [ 234.711674][ T5834] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 234.891693][ T5834] usb 9-1: Using ep0 maxpacket: 16 [ 234.907120][ T5834] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.947600][ T5834] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.226019][ T5834] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.259498][ T5834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.324995][ T5834] usb 9-1: Product: syz [ 235.350239][ T5834] usb 9-1: Manufacturer: syz [ 235.350352][ T5834] usb 9-1: SerialNumber: syz [ 235.607479][ T5834] usb 9-1: 0:2 : does not exist [ 235.657074][ T5834] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 235.790720][ T5834] usb 9-1: USB disconnect, device number 2 [ 236.193086][ T6988] udevd[6988]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.387806][ T7193] netlink: 'syz.8.253': attribute type 10 has an invalid length. [ 237.836785][ T7193] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 238.394747][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'. [ 241.544543][ T7228] netlink: 'syz.8.260': attribute type 4 has an invalid length. [ 242.571913][ T5933] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 243.206628][ T5933] usb 9-1: Using ep0 maxpacket: 16 [ 246.922965][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 247.683420][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 247.912350][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 247.993518][ T7273] loop6: detected capacity change from 0 to 1024 [ 248.000859][ T7273] EXT4-fs: Ignoring removed bh option [ 248.054331][ T7273] ext4: Bad value for 'max_batch_time' [ 249.121950][ T5933] usb 9-1: unable to read config index 0 descriptor/start: -110 [ 249.129782][ T5933] usb 9-1: can't read configurations, error -110 [ 249.289160][ T5933] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 249.581695][ T5933] usb 9-1: device descriptor read/64, error -32 [ 249.718162][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.7.274'. [ 250.349133][ T7289] netlink: 20 bytes leftover after parsing attributes in process `syz.7.274'. [ 250.557284][ T5933] usb usb9-port1: attempt power cycle [ 250.643363][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.7.274'. [ 250.671783][ T7289] netlink: 20 bytes leftover after parsing attributes in process `syz.7.274'. [ 250.821055][ T7306] loop0: detected capacity change from 0 to 512 [ 250.908882][ T7306] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 250.922054][ T5933] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 250.986989][ T5933] usb 9-1: device descriptor read/8, error -32 [ 251.004330][ T7306] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.279: Invalid block bitmap block 0 in block_group 0 [ 251.461773][ T7306] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 251.499910][ T7306] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.279: attempt to clear invalid blocks 983261 len 1 [ 251.574069][ T7306] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.279: Invalid inode table block 0 in block_group 0 [ 251.662087][ T7306] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 251.698020][ T7306] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 251.905344][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.282'. [ 252.315822][ T7306] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.279: Invalid inode table block 0 in block_group 0 [ 252.414729][ T7306] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 252.933824][ T7306] EXT4-fs error (device loop0): ext4_truncate:4635: inode #11: comm syz.0.279: mark_inode_dirty error [ 253.109983][ T7306] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 253.281531][ T7306] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.279: Invalid inode table block 0 in block_group 0 [ 253.294995][ T7306] EXT4-fs (loop0): 1 truncate cleaned up [ 253.309488][ T7306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.686062][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.6.287'. [ 255.000886][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.011974][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.450790][ T7360] random: crng reseeded on system resumption [ 256.490655][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.293'. [ 256.521723][ T7371] netlink: 20 bytes leftover after parsing attributes in process `syz.6.293'. [ 256.530878][ T6651] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.664373][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.293'. [ 256.673334][ T6044] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.700174][ T6044] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.759709][ T6044] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.782669][ T7371] netlink: 20 bytes leftover after parsing attributes in process `syz.6.293'. [ 256.812056][ T6044] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.181825][ T5894] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 258.061711][ T5894] usb 8-1: Using ep0 maxpacket: 32 [ 258.108459][ T5894] usb 8-1: unable to get BOS descriptor or descriptor too short [ 258.442655][ T7387] smc: net device bond0 applied user defined pnetid SYZ2 [ 259.077085][ T5894] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.113430][ T5894] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.151381][ T5894] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.185764][ T5894] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.299427][ T5894] usb 8-1: Product: syz [ 259.397432][ T5894] usb 8-1: Manufacturer: syz [ 259.464759][ T5894] usb 8-1: SerialNumber: syz [ 260.343115][ T5894] usb 8-1: can't set config #1, error -71 [ 260.409861][ T5894] usb 8-1: USB disconnect, device number 3 [ 260.475288][ T7401] loop6: detected capacity change from 0 to 128 [ 260.608167][ T7401] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.696533][ T7401] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.090478][ T5894] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 261.956604][ T5894] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.009316][ T5894] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.046018][ T5894] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 262.091724][ T5894] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 263.209735][ T5894] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 263.219495][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 263.253638][ T5894] usb 7-1: SerialNumber: syz [ 263.564442][ T5894] usb 7-1: 0:2 : does not exist [ 263.572003][ T5894] usb 7-1: unit 5 not found! [ 263.624237][ T6645] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.667156][ T5894] usb 7-1: USB disconnect, device number 3 [ 264.125998][ T6988] udevd[6988]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.611744][ T5839] Bluetooth: hci11: link tx timeout [ 264.618141][ T5839] Bluetooth: hci11: killing stalled connection 11:aa:aa:aa:aa:aa [ 264.908044][ T7445] loop8: detected capacity change from 0 to 512 [ 264.962777][ T7445] EXT4-fs: Ignoring removed nobh option [ 265.075417][ T7445] EXT4-fs error (device loop8): __ext4_iget:5426: inode #11: block 1: comm syz.8.311: invalid block [ 265.263979][ T7445] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.311: couldn't read orphan inode 11 (err -117) [ 265.781387][ T7445] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.676874][ T5824] Bluetooth: hci11: command 0x0406 tx timeout [ 268.044852][ T6648] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.295863][ T7478] loop0: detected capacity change from 0 to 128 [ 268.373412][ T7478] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 268.421715][ T7474] netlink: 'syz.6.319': attribute type 10 has an invalid length. [ 268.423692][ T7478] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.498703][ T7474] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.507046][ T7474] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.633444][ T7474] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.640720][ T7474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.649325][ T7474] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.656578][ T7474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.710836][ T7474] team0: Port device bridge0 added [ 270.595292][ T5907] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 270.809505][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.841674][ T5907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.891808][ T5907] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 270.935283][ T5907] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 271.017199][ T5907] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 271.052323][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 271.100017][ T5907] usb 1-1: SerialNumber: syz [ 271.196655][ T5920] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 271.539235][ T5920] usb 8-1: Using ep0 maxpacket: 32 [ 271.988581][ T5920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.059678][ T5920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.153168][ T5920] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 272.791661][ T5920] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 272.800728][ T5920] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.846825][ T5920] usb 8-1: config 0 descriptor?? [ 272.942031][ T6651] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 272.942618][ T5907] usb 1-1: 0:2 : does not exist [ 273.035106][ T5907] usb 1-1: unit 5 not found! [ 273.113355][ T5907] usb 1-1: USB disconnect, device number 9 [ 273.176608][ T792] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 273.438441][ T5920] usbhid 8-1:0.0: can't add hid device: -71 [ 273.445641][ T5920] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 275.389816][ T792] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.428817][ T5920] usb 8-1: USB disconnect, device number 4 [ 275.449442][ T6988] udevd[6988]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.730677][ T792] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.839620][ T792] usb 10-1: string descriptor 0 read error: -71 [ 275.911639][ T792] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 275.930707][ T7547] loop6: detected capacity change from 0 to 512 [ 275.951909][ T792] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 276.257124][ T7547] EXT4-fs: Ignoring removed nobh option [ 276.934818][ T792] usb 10-1: can't set config #1, error -71 [ 276.955891][ T792] usb 10-1: USB disconnect, device number 3 [ 277.171706][ T5920] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 277.183714][ T7547] EXT4-fs error (device loop6): __ext4_iget:5426: inode #11: block 1: comm syz.6.334: invalid block [ 277.256449][ T7547] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.334: couldn't read orphan inode 11 (err -117) [ 277.359619][ T7547] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.383385][ T5920] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.490731][ T5920] usb 8-1: config 0 has no interfaces? [ 277.499772][ T5920] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 277.522309][ T5920] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.568882][ T5920] usb 8-1: Product: syz [ 277.624251][ T5920] usb 8-1: Manufacturer: syz [ 277.663565][ T5920] usb 8-1: SerialNumber: syz [ 277.710616][ T5920] usb 8-1: config 0 descriptor?? [ 278.257610][ T5940] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 278.301806][ T5894] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 278.666812][ T5920] usb 8-1: USB disconnect, device number 5 [ 278.673768][ T7560] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 278.884413][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 278.906415][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.930612][ T5894] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.942055][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.952443][ T5894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.974540][ T5940] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 278.988370][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.684484][ T5894] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.698236][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.708001][ T5940] usb 1-1: config 0 descriptor?? [ 279.714558][ T5894] usb 2-1: Product: syz [ 279.732209][ T5894] usb 2-1: Manufacturer: syz [ 279.736897][ T5894] usb 2-1: SerialNumber: syz [ 280.105800][ T5894] usb 2-1: 0:2 : does not exist [ 280.869069][ T5894] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 281.001059][ T5940] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 281.206487][ T5940] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 281.232180][ T5894] usb 2-1: USB disconnect, device number 5 [ 281.507893][ T5940] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 281.965094][ T6645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.053545][ T7581] udevd[7581]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.096286][ T7575] cp2112 0003:10C4:EA90.0002: Error starting transaction: -38 [ 282.203953][ T5940] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 282.264923][ T5940] usb 1-1: USB disconnect, device number 10 [ 282.410905][ T7603] fido_id[7603]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 286.347521][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 287.771641][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 287.783237][ T9] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 287.792299][ T9] usb 8-1: config 0 has no interface number 0 [ 287.803033][ T9] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 287.814348][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.817931][ T9] usb 8-1: Product: syz [ 288.822513][ T9] usb 8-1: Manufacturer: syz [ 288.827111][ T9] usb 8-1: SerialNumber: syz [ 288.874754][ T9] usb 8-1: config 0 descriptor?? [ 288.948538][ T9] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 289.071512][ T7662] netlink: 'syz.1.364': attribute type 10 has an invalid length. [ 289.169138][ T9] usb 8-1: qt2_attach - failed to power on unit: -71 [ 289.210540][ T9] quatech2 8-1:0.51: probe with driver quatech2 failed with error -71 [ 289.312050][ T9] usb 8-1: USB disconnect, device number 6 [ 290.677383][ T7662] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 291.857265][ T7683] smc: net device bond0 applied user defined pnetid SYZ2 [ 293.220850][ T5920] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 293.673287][ T5920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.715439][ T5920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.801522][ T7708] smc: net device bond0 applied user defined pnetid SYZ2 [ 294.441659][ T5920] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 294.450727][ T5920] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.513395][ T5920] usb 8-1: config 0 descriptor?? [ 294.772094][ T7720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.378'. [ 294.946159][ T7721] netlink: 'syz.8.379': attribute type 10 has an invalid length. [ 294.995916][ T5920] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 295.165793][ T5894] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 295.507287][ T5920] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 295.612534][ T5920] cp2112 0003:10C4:EA90.0003: error requesting version [ 295.699859][ T5894] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 295.706047][ T5920] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -32 [ 295.887206][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.898430][ T5894] usb 1-1: config 0 has no interfaces? [ 296.150921][ T5894] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 296.239067][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.279322][ T5894] usb 1-1: config 0 descriptor?? [ 297.613943][ T5940] usb 8-1: USB disconnect, device number 7 [ 302.835662][ T7787] loop7: detected capacity change from 0 to 512 [ 302.933089][ T7787] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 302.966465][ T7787] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 303.047471][ T7787] EXT4-fs (loop7): orphan cleanup on readonly fs [ 303.098497][ T5834] usb 1-1: USB disconnect, device number 11 [ 303.121067][ T7787] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 303.171894][ T7787] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 303.356138][ T7787] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 305.646370][ T7787] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 305.773826][ T7787] EXT4-fs (loop7): Remounting filesystem read-only [ 305.829153][ T7787] EXT4-fs (loop7): 1 truncate cleaned up [ 306.365806][ T7787] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 308.428621][ T6642] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.153516][ T5839] Bluetooth: hci6: command 0x0406 tx timeout [ 309.161604][ T5842] Bluetooth: hci7: command 0x0406 tx timeout [ 309.168163][ T5842] Bluetooth: hci8: command 0x0406 tx timeout [ 309.176569][ T5842] Bluetooth: hci10: command 0x0406 tx timeout [ 309.183694][ T5839] Bluetooth: hci9: command 0x0406 tx timeout [ 312.615570][ T7845] loop1: detected capacity change from 0 to 256 [ 312.727878][ T7845] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 312.992999][ T31] audit: type=1800 audit(1770595509.893:3): pid=7845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.406" name="file1" dev="loop1" ino=1048670 res=0 errno=0 [ 312.994815][ T7845] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2048) [ 313.098085][ T7845] FAT-fs (loop1): Filesystem has been set read-only [ 313.152841][ T31] audit: type=1800 audit(1770595509.893:4): pid=7845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.406" name="file1" dev="loop1" ino=1048670 res=0 errno=0 [ 313.205254][ T7845] FAT-fs (loop1): error, invalid FAT chain (i_pos 196, last_block 8200) [ 313.289777][ T7845] FAT-fs (loop1): error, invalid FAT chain (i_pos 196, last_block 8200) [ 313.362387][ T7860] netlink: 16 bytes leftover after parsing attributes in process `syz.6.408'. [ 313.681072][ T7844] FAT-fs (loop1): error, corrupted file size (i_pos 196, 3811) [ 313.801672][ T5940] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 314.119857][ T5940] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 314.139805][ T5940] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.539342][ T5940] usb 7-1: config 0 has no interfaces? [ 314.561686][ T5940] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 314.626934][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.695261][ T5940] usb 7-1: config 0 descriptor?? [ 314.916272][ T7883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.413'. [ 315.333608][ T5940] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 315.664837][ T5940] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 315.726733][ T5940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.771614][ T5940] usb 2-1: config 0 has no interfaces? [ 315.791463][ T5940] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 315.857544][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.953599][ T5940] usb 2-1: config 0 descriptor?? [ 316.822227][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.828571][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.490579][ T7906] loop7: detected capacity change from 0 to 16 [ 318.022041][ T7906] erofs (device loop7): invalid checksum 0xde366481, 0xc32427af expected [ 318.076815][ T6988] udevd[6988]: incorrect erofs checksum on /dev/loop7 [ 318.335269][ T792] usb 7-1: USB disconnect, device number 4 [ 323.791260][ T6076] usb 2-1: USB disconnect, device number 6 [ 326.600421][ T7966] loop8: detected capacity change from 0 to 1024 [ 326.721052][ T7966] hfsplus: bad catalog entry used to create inode [ 326.732671][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 326.741502][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 326.749078][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.756505][ T7966] hfsplus: failed to load root directory [ 326.757348][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.769808][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 328.921646][ T52] Bluetooth: hci1: command tx timeout [ 330.038212][ T8015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.440'. [ 330.223091][ T7972] chnl_net:caif_netlink_parms(): no params data found [ 330.461966][ T5834] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 330.786546][ T5834] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 330.831728][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.842380][ T5834] usb 2-1: config 0 has no interfaces? [ 330.847867][ T5834] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 330.857309][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.958869][ T5834] usb 2-1: config 0 descriptor?? [ 330.991918][ T52] Bluetooth: hci1: command tx timeout [ 331.607838][ T6032] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.645822][ T7972] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.656803][ T7972] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.681910][ T7972] bridge_slave_0: entered allmulticast mode [ 331.710508][ T7972] bridge_slave_0: entered promiscuous mode [ 331.752218][ T6032] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.855719][ T7972] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.877293][ T7972] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.908901][ T7972] bridge_slave_1: entered allmulticast mode [ 331.931077][ T7972] bridge_slave_1: entered promiscuous mode [ 331.937654][ T8049] netlink: 'syz.7.448': attribute type 10 has an invalid length. [ 332.008171][ T6032] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.062331][ T8049] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.070107][ T8049] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.115659][ T8049] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.122898][ T8049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.130459][ T8049] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.137659][ T8049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.269635][ T8049] team0: Port device bridge0 added [ 332.429758][ T6032] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.500399][ T7972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.653130][ T7972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.751160][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.7.450'. [ 332.850527][ T7972] team0: Port device team_slave_0 added [ 332.878090][ T7972] team0: Port device team_slave_1 added [ 333.071955][ T52] Bluetooth: hci1: command tx timeout [ 333.404002][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.508131][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.043945][ T7972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.881400][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.097481][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.151675][ T52] Bluetooth: hci1: command tx timeout [ 335.296581][ T7972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.394939][ T9] usb 2-1: USB disconnect, device number 7 [ 335.767155][ T6032] bridge_slave_1: left allmulticast mode [ 335.787600][ T6032] bridge_slave_1: left promiscuous mode [ 335.811880][ T6032] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.886392][ T6032] bridge_slave_0: left allmulticast mode [ 335.908253][ T6032] bridge_slave_0: left promiscuous mode [ 335.919038][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.701686][ T5970] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 336.894535][ T5970] usb 8-1: config 2 descriptor has 1 excess byte, ignoring [ 336.942351][ T5970] usb 8-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 337.001004][ T5970] usb 8-1: config 2 interface 0 has no altsetting 0 [ 337.041375][ T5970] usb 8-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 337.069484][ T5970] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.254282][ T5970] usb 8-1: Product: syz [ 337.258536][ T5970] usb 8-1: Manufacturer: syz [ 337.281266][ T5970] usb 8-1: SerialNumber: syz [ 337.286919][ T8115] loop1: detected capacity change from 0 to 1024 [ 337.505328][ T8115] hfsplus: bad catalog entry used to create inode [ 337.513608][ T8115] hfsplus: failed to load root directory [ 337.521167][ T6032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.586134][ T6032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.629552][ T6032] bond0 (unregistering): Released all slaves [ 337.997709][ T7972] hsr_slave_0: entered promiscuous mode [ 338.022992][ T7972] hsr_slave_1: entered promiscuous mode [ 338.041984][ T7972] debugfs: 'hsr0' already exists in 'hsr' [ 338.065616][ T7972] Cannot create hsr debugfs directory [ 338.298811][ T5970] ims_pcu 8-1:2.0: Missing CDC union descriptor [ 338.358544][ T5970] ims_pcu 8-1:2.0: probe with driver ims_pcu failed with error -22 [ 338.542294][ T5970] usb 8-1: USB disconnect, device number 8 [ 339.431367][ T8129] netlink: 16 bytes leftover after parsing attributes in process `syz.6.468'. [ 339.721651][ T9] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 341.993756][ T6032] hsr_slave_0: left promiscuous mode [ 342.062842][ T6032] hsr_slave_1: left promiscuous mode [ 342.087918][ T6032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.107008][ T6032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.202795][ T6032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.461872][ T6032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.705797][ T6032] veth1_macvtap: left promiscuous mode [ 343.726488][ T6032] veth0_macvtap: left promiscuous mode [ 343.744533][ T6032] veth1_vlan: left promiscuous mode [ 343.749934][ T6032] veth0_vlan: left promiscuous mode [ 344.436510][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.7.478'. [ 345.078288][ T9] usb 7-1: device descriptor read/all, error -71 [ 349.081801][ T32] INFO: task syz.0.169:6622 blocked for more than 143 seconds. [ 349.089561][ T32] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 351.448419][ T32] Blocked by coredump. [ 351.461961][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.470722][ T32] task:syz.0.169 state:D stack:22336 pid:6622 tgid:6620 ppid:5821 task_flags:0x40054c flags:0x00080003 [ 351.501814][ T32] Call Trace: [ 351.505139][ T32] [ 351.508090][ T32] __schedule+0x1522/0x51d0 [ 351.531613][ T32] ? __pfx___schedule+0x10/0x10 [ 351.536570][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.551569][ T32] ? schedule+0x90/0x360 [ 351.555885][ T32] schedule+0x164/0x360 [ 351.560070][ T32] schedule_timeout+0xc3/0x2c0 [ 351.581590][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.587316][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 351.601572][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.607478][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 351.621569][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.627301][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.651589][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.656913][ T32] ? wait_for_completion+0x274/0x5e0 [ 351.671568][ T32] wait_for_completion+0x2cc/0x5e0 [ 351.676755][ T32] ? __pfx_wait_for_completion+0x10/0x10 [ 351.691571][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.697284][ T32] ? __flush_work+0x100/0xc50 [ 351.711582][ T32] __flush_work+0xa17/0xc50 [ 351.716188][ T32] ? __flush_work+0x100/0xc50 [ 351.720898][ T32] ? __pfx___flush_work+0x10/0x10 [ 351.741569][ T32] ? __pfx_wq_barrier_func+0x10/0x10 [ 351.746967][ T32] ? work_grab_pending+0x115/0x990 [ 351.761642][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.769223][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.793223][ T32] ? __cancel_work_sync+0x5c/0x110 [ 351.798412][ T32] __cancel_work_sync+0xbe/0x110 [ 351.807551][ T32] hci_cmd_sync_clear+0x30/0x230 [ 351.812604][ T32] hci_unregister_dev+0x194/0x5a0 [ 351.817720][ T32] vhci_release+0x152/0x1a0 [ 351.822315][ T32] ? __pfx_vhci_release+0x10/0x10 [ 351.827400][ T32] __fput+0x44f/0xa70 [ 351.831419][ T32] task_work_run+0x1d9/0x270 [ 351.836109][ T32] ? __pfx_task_work_run+0x10/0x10 [ 351.841272][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.847189][ T32] ? kmem_cache_free+0x195/0x610 [ 351.852236][ T32] ? do_exit+0x696/0x2310 [ 351.856638][ T32] do_exit+0x69b/0x2310 [ 351.861016][ T32] ? __pfx_do_exit+0x10/0x10 [ 351.865685][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 351.872121][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.877847][ T32] do_group_exit+0x21b/0x2d0 [ 351.882539][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.887823][ T32] get_signal+0x1284/0x1330 [ 351.892446][ T32] arch_do_signal_or_restart+0xbc/0x830 [ 351.898046][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.903786][ T32] ? __x64_sys_sendmsg+0x26f/0x2a0 [ 351.909132][ T32] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 351.915418][ T32] exit_to_user_mode_loop+0x86/0x480 [ 351.920776][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 351.926481][ T32] ? rcu_is_watching+0x15/0xb0 [ 351.931301][ T32] do_syscall_64+0x2b7/0xf80 [ 351.936009][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.942300][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.948282][ T32] RIP: 0033:0x7fbc4c19aeb9 [ 351.953153][ T32] RSP: 002b:00007fbc4d0db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.961688][ T32] RAX: 0000000000000040 RBX: 00007fbc4c416090 RCX: 00007fbc4c19aeb9 [ 351.969882][ T32] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 351.979570][ T32] RBP: 00007fbc4c208c1f R08: 0000000000000000 R09: 0000000000000000 [ 351.987667][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.995739][ T32] R13: 00007fbc4c416128 R14: 00007fbc4c416090 R15: 00007fff78a55ba8 [ 352.003857][ T32] [ 352.007001][ T32] [ 352.007001][ T32] Showing all locks held in the system: [ 352.014839][ T32] 3 locks held by kworker/u8:0/12: [ 352.020013][ T32] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 352.032223][ T32] #1: ffffc90000117bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 352.043508][ T32] #2: ffffffff8f9ac6c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 352.054421][ T32] 1 lock held by khungtaskd/32: [ 352.059311][ T32] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 352.069530][ T32] 3 locks held by kworker/u9:1/5140: [ 352.077972][ T32] #0: ffff888027821148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 352.088923][ T32] #1: ffffc9000ee6fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 352.102475][ T32] #2: ffff88807efd8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 352.112551][ T32] 1 lock held by syslogd/5171: [ 352.117363][ T32] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140 [ 352.127436][ T32] 1 lock held by dhcpcd/5484: [ 352.132173][ T32] #0: ffffffff8f9ac6c8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 352.141395][ T32] 2 locks held by getty/5578: [ 352.146140][ T32] #0: ffff8880303520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 352.156899][ T32] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 352.167341][ T32] 3 locks held by kworker/u8:10/5989: [ 352.172992][ T32] #0: ffff88814d0a4148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 352.186292][ T32] #1: ffffc90005077bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 352.200200][ T32] #2: ffffffff8f9ac6c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 352.209903][ T32] 4 locks held by kworker/u8:11/6032: [ 352.215371][ T32] #0: ffff88801b2df148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 352.226542][ T32] #1: ffffc9000b2f7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 352.237298][ T32] #2: ffffffff8f99ddb0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xfe/0x7b0 [ 352.246765][ T32] #3: ffffffff8f9ac6c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe5/0xa00 [ 352.257090][ T32] 4 locks held by syz-executor/6645: [ 352.262493][ T32] #0: ffff88807caf0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 352.275906][ T32] #1: ffff88807caf00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 352.288817][ T32] #2: ffffffff8fb38ea8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 352.299000][ T32] #3: ffff888055b39338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 352.308513][ T32] 2 locks held by udevd/6988: [ 352.313278][ T32] 2 locks held by syz-executor/7972: [ 352.318639][ T32] #0: ffffffff8f0e9f48 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 352.329789][ T32] #1: ffffffff8f9ac6c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 352.394774][ T32] 2 locks held by syz.7.478/8175: [ 352.399963][ T32] #0: ffffffff8fef66e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 352.412313][ T32] #1: ffffffff8f9ac6c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 352.421500][ T32] 1 lock held by syz.0.476/8167: [ 352.426571][ T32] #0: ffffffff8f9ac6c8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 352.436129][ T32] 1 lock held by syz.0.476/8176: [ 352.441117][ T32] #0: ffffffff8f9ac6c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 352.450695][ T32] 1 lock held by syz.0.476/8178: [ 352.455732][ T32] #0: ffffffff8f9ac6c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 352.465321][ T32] 1 lock held by syz.1.481/8197: [ 352.470329][ T32] #0: ffffffff8f9ac6c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 352.479904][ T32] 3 locks held by syz.8.483/8227: [ 352.486434][ T32] #0: ffff888029f7d160 (&mousedev->mutex/1){+.+.}-{4:4}, at: mixdev_close_devices+0x31/0x210 [ 352.496966][ T32] #1: ffff88802a342160 (&mousedev->mutex#2){+.+.}-{4:4}, at: mixdev_close_devices+0xba/0x210 [ 352.507591][ T32] #2: ffff88802a3412c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_close_device+0x4c/0x280 [ 352.517645][ T32] [ 352.543728][ T32] ============================================= [ 352.543728][ T32] [ 352.559050][ T32] NMI backtrace for cpu 1 [ 352.559071][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 352.559099][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 352.559114][ T32] Call Trace: [ 352.559123][ T32] [ 352.559134][ T32] dump_stack_lvl+0xe8/0x150 [ 352.559171][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 352.559207][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.559238][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 352.559286][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 352.559327][ T32] sys_info+0x135/0x170 [ 352.559358][ T32] watchdog+0xf90/0xfe0 [ 352.559391][ T32] ? watchdog+0x209/0xfe0 [ 352.559427][ T32] kthread+0x726/0x8b0 [ 352.559460][ T32] ? __pfx_watchdog+0x10/0x10 [ 352.559486][ T32] ? __pfx_kthread+0x10/0x10 [ 352.559512][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.559546][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 352.559570][ T32] ? __pfx_kthread+0x10/0x10 [ 352.559600][ T32] ret_from_fork+0x51b/0xa40 [ 352.559630][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 352.559651][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.559680][ T32] ? __switch_to+0xc82/0x1410 [ 352.559719][ T32] ? __pfx_kthread+0x10/0x10 [ 352.559750][ T32] ret_from_fork_asm+0x1a/0x30 [ 352.559802][ T32] [ 352.559834][ T32] Sending NMI from CPU 1 to CPUs 0: [ 352.702597][ C0] NMI backtrace for cpu 0 [ 352.702617][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 352.702644][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 352.702658][ C0] RIP: 0010:lock_release+0x140/0x3a0 [ 352.702698][ C0] Code: 0f 84 d7 00 00 00 48 85 ed 0f 84 13 01 00 00 83 7d 24 00 0f 85 d6 01 00 00 8b 45 20 3d 00 00 20 00 48 8b 5c 24 08 8b 54 24 14 <72> 25 89 c1 81 e1 00 00 e0 ff 25 ff ff 1f 00 01 c8 05 00 00 e0 ff [ 352.702721][ C0] RSP: 0018:ffffc90000007850 EFLAGS: 00000083 [ 352.702741][ C0] RAX: 0000000000022007 RBX: 0000000000000202 RCX: 0000000080000101 [ 352.702757][ C0] RDX: 0000000000000001 RSI: ffffffff8e55a360 RDI: ffffffff8e295f18 [ 352.702773][ C0] RBP: ffffffff8e295f18 R08: ffffc900000079e7 R09: ffffc900000079d8 [ 352.702790][ C0] R10: dffffc0000000000 R11: fffff52000000f3d R12: 0000000000000001 [ 352.702807][ C0] R13: 0000000000000001 R14: ffffffff8e55a360 R15: ffffffff8e2953c0 [ 352.702825][ C0] FS: 0000000000000000(0000) GS:ffff8881256f3000(0000) knlGS:0000000000000000 [ 352.702843][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.702859][ C0] CR2: 00005592c6143a38 CR3: 0000000030607000 CR4: 0000000000350ef0 [ 352.702877][ C0] Call Trace: [ 352.702885][ C0] [ 352.702895][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 352.702924][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 352.702949][ C0] unwind_next_frame+0x1aaa/0x23c0 [ 352.702978][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 352.703012][ C0] ? cpu_startup_entry+0x43/0x60 [ 352.703036][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 352.703068][ C0] arch_stack_walk+0x11b/0x150 [ 352.703097][ C0] ? rest_init+0x2de/0x300 [ 352.703132][ C0] stack_trace_save+0xa9/0x100 [ 352.703161][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 352.703190][ C0] ? stack_trace_save+0xa9/0x100 [ 352.703221][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.703248][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 352.703282][ C0] kasan_save_track+0x3e/0x80 [ 352.703303][ C0] ? kasan_save_track+0x3e/0x80 [ 352.703323][ C0] ? kasan_save_free_info+0x46/0x50 [ 352.703354][ C0] ? __kasan_slab_free+0x5c/0x80 [ 352.703375][ C0] ? kfree+0x1be/0x650 [ 352.703407][ C0] ? slab_free_after_rcu_debug+0x5e/0x250 [ 352.703434][ C0] ? rcu_core+0xc9e/0x1750 [ 352.703468][ C0] ? handle_softirqs+0x22a/0x7c0 [ 352.703488][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 352.703508][ C0] ? irq_exit_rcu+0x9/0x30 [ 352.703527][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 352.703551][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 352.703575][ C0] ? pv_native_safe_halt+0xf/0x20 [ 352.703597][ C0] ? default_idle+0x9/0x20 [ 352.703625][ C0] ? default_idle_call+0x72/0xb0 [ 352.703657][ C0] ? do_idle+0x1bd/0x500 [ 352.703676][ C0] ? cpu_startup_entry+0x43/0x60 [ 352.703720][ C0] kasan_save_free_info+0x46/0x50 [ 352.703752][ C0] __kasan_slab_free+0x5c/0x80 [ 352.703775][ C0] ? slab_free_after_rcu_debug+0x5e/0x250 [ 352.703803][ C0] kfree+0x1be/0x650 [ 352.703837][ C0] ? rcu_core+0xc2a/0x1750 [ 352.703872][ C0] slab_free_after_rcu_debug+0x5e/0x250 [ 352.703900][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 352.703928][ C0] ? rcu_core+0xc2a/0x1750 [ 352.703962][ C0] rcu_core+0xc9e/0x1750 [ 352.704012][ C0] ? __pfx_rcu_core+0x10/0x10 [ 352.704048][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.704074][ C0] ? tasklet_action_common+0x3f0/0x4b0 [ 352.704100][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.704131][ C0] handle_softirqs+0x22a/0x7c0 [ 352.704153][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 352.704180][ C0] __irq_exit_rcu+0x5f/0x150 [ 352.704200][ C0] irq_exit_rcu+0x9/0x30 [ 352.704220][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 352.704244][ C0] [ 352.704251][ C0] [ 352.704260][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 352.704284][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 352.704309][ C0] Code: 98 60 02 e9 fe 25 79 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 49 12 00 fb f4 d7 25 79 f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 352.704328][ C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000246 [ 352.704346][ C0] RAX: 00000000008da5bb RBX: ffffffff8199570d RCX: 0000000080000001 [ 352.704362][ C0] RDX: 0000000000000001 RSI: ffffffff8dcc9ce4 RDI: ffffffff8c073b00 [ 352.704379][ C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 352.704396][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef2070 [ 352.704413][ C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000 [ 352.704431][ C0] ? do_idle+0x1bd/0x500 [ 352.704456][ C0] default_idle+0x9/0x20 [ 352.704483][ C0] default_idle_call+0x72/0xb0 [ 352.704512][ C0] do_idle+0x1bd/0x500 [ 352.704531][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 352.704556][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.704586][ C0] ? __pfx_do_idle+0x10/0x10 [ 352.704612][ C0] cpu_startup_entry+0x43/0x60 [ 352.704634][ C0] rest_init+0x2de/0x300 [ 352.704666][ C0] start_kernel+0x380/0x3d0 [ 352.704700][ C0] x86_64_start_reservations+0x24/0x30 [ 352.704726][ C0] x86_64_start_kernel+0x143/0x1c0 [ 352.704753][ C0] common_startup_64+0x13e/0x147 [ 352.704792][ C0] [ 353.239954][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 353.246823][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 353.255927][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 353.265973][ T32] Call Trace: [ 353.269329][ T32] [ 353.272248][ T32] vpanic+0x1e0/0x670 [ 353.276239][ T32] panic+0xc5/0xd0 [ 353.279957][ T32] ? __pfx_panic+0x10/0x10 [ 353.284382][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.290011][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.295637][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 353.301021][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.306645][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 353.312809][ T32] watchdog+0xfda/0xfe0 [ 353.316966][ T32] ? watchdog+0x209/0xfe0 [ 353.321392][ T32] kthread+0x726/0x8b0 [ 353.325462][ T32] ? __pfx_watchdog+0x10/0x10 [ 353.330132][ T32] ? __pfx_kthread+0x10/0x10 [ 353.334711][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.340345][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.345533][ T32] ? __pfx_kthread+0x10/0x10 [ 353.350120][ T32] ret_from_fork+0x51b/0xa40 [ 353.354703][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 353.359888][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.365513][ T32] ? __switch_to+0xc82/0x1410 [ 353.370207][ T32] ? __pfx_kthread+0x10/0x10 [ 353.374794][ T32] ret_from_fork_asm+0x1a/0x30 [ 353.379578][ T32] [ 353.382858][ T32] Kernel Offset: disabled [ 353.387167][ T32] Rebooting in 86400 seconds..