last executing test programs:

26m20.745331474s ago: executing program 32 (id=189):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, '/roup_id'}}, 0x29)

23m20.104695382s ago: executing program 33 (id=1132):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="48b0", 0x2}], 0x1)
r2 = dup2(r0, r1)
write$FUSE_INIT(r2, 0x0, 0x0)

21m10.147680504s ago: executing program 34 (id=1724):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
fcntl$setstatus(r0, 0x4, 0x2c00)
recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)

20m7.961650335s ago: executing program 35 (id=2102):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000ffdbdf2d3900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a801800038005000600e6"], 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000)

18m56.954112933s ago: executing program 36 (id=2405):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c)
listen(r0, 0x3)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000001c0)={0x29, 0x10, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0xeb, 0x1, [0x8e, 0x60d6, 0x9]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0x38, "ccee8b3054b7ab9eb82247c4e39fdc43d7e92ff2d3b677c52f24354cfa857789e6ad2579d3e78ddab6c493be6d6567fa47182fdf43409532"}, @calipso={0x7, 0x8, {0x1, 0x0, 0xc, 0x7}}, @padn, @hao={0xc9, 0x10, @local}]}, 0x88)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "c58435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0)

18m50.255872928s ago: executing program 37 (id=2425):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x44, r2, 0x8a62e9efb76522f7, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "95e13b8427eb9ca16b51c9fa4713ed9e"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x44091}, 0xc004)

15m56.837357761s ago: executing program 38 (id=3079):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x74aee9d2f650e97d}, "0000000100", "065edd8d3f42749b7a6262e7a6909c6b", "7ca0e6aa", "d477cb11ab173a15"}, 0x28)

13m43.630483396s ago: executing program 39 (id=3650):
r0 = socket$inet(0x2, 0x802, 0x1)
connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vlan0\x00', 0x10)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000340)=0x40000000, 0x4)
write(r0, &(0x7f0000000440)="08008edf773c8000", 0x8)

13m34.887767123s ago: executing program 40 (id=3680):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r1)

13m29.488840823s ago: executing program 41 (id=3703):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)

8m32.104441952s ago: executing program 42 (id=4990):
r0 = socket(0x2b, 0x80801, 0x1)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4049811}, 0x20000000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

7m16.44589965s ago: executing program 5 (id=5331):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0xfffffffe})

7m13.738358562s ago: executing program 5 (id=5345):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

7m11.983118223s ago: executing program 5 (id=5353):
r0 = syz_io_uring_setup(0xec2, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x9}, &(0x7f0000000580)=<r1=>0x0, &(0x7f0000000240))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0x95d, 0xfa39, 0xe1, 0x0, 0x0)
io_uring_enter(r0, 0xedd, 0x8acb, 0x41, 0x0, 0x0)
io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0)

7m11.262249561s ago: executing program 5 (id=5358):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

7m10.428074996s ago: executing program 5 (id=5363):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000af, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8000b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2)
syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
close(r0)

7m9.83796215s ago: executing program 5 (id=5367):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0xfffffffe, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3})

7m7.571310631s ago: executing program 43 (id=5367):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0xfffffffe, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3})

6m58.00685124s ago: executing program 1 (id=5408):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000840)={0x2, 0x0, {&(0x7f0000000200)=""/242, 0xf2, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48)

6m57.395881894s ago: executing program 1 (id=5412):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x4, 0xfff6}, 0x8)

6m56.003979581s ago: executing program 1 (id=5418):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, r2, 0x1, 0x3, 0x25dfdc01, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40010)

6m55.510511228s ago: executing program 3 (id=5420):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

6m55.073834729s ago: executing program 1 (id=5422):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000240)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@test_dummy_encryption}]}, 0x3, 0x45c, &(0x7f0000000580)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1208001, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}})
pivot_root(&(0x7f00000000c0)='./file0/file0\x00', 0x0)

6m54.79204701s ago: executing program 3 (id=5424):
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0)

6m53.960379403s ago: executing program 1 (id=5427):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0x4}}, {{0x8, 0x1, r3}, {0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x240448c0)

6m53.746648084s ago: executing program 3 (id=5428):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0xb, 0x3, 0x0, 0x0, 0xfc, 0x0, 0x4f, 0xff, 0x5, 0x0, 0x8, 0x81}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r1, 0x6}, 0x8)

6m53.268576779s ago: executing program 1 (id=5431):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0)
r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3418, 0x10000, 0x0, 0x4, 0x0, r0}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0})
io_uring_enter(r1, 0x2def, 0x9566, 0x0, 0x0, 0x0)
syz_io_uring_setup(0xece, 0x0, 0x0, 0x0)

6m52.992740925s ago: executing program 3 (id=5432):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00')

6m51.563164458s ago: executing program 44 (id=5431):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0)
r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3418, 0x10000, 0x0, 0x4, 0x0, r0}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0})
io_uring_enter(r1, 0x2def, 0x9566, 0x0, 0x0, 0x0)
syz_io_uring_setup(0xece, 0x0, 0x0, 0x0)

6m51.498913439s ago: executing program 3 (id=5435):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x60, 0x0, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3, {0x10, 0x18, 0x2}}, @val={0x25, 0x3, {0x0, 0x34, 0x10}}, @void, @val={0x3c, 0x4, {0x1, 0x6, 0xb8, 0x8}}, @void, @void, @void, @void}}]]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0)

6m50.848328958s ago: executing program 3 (id=5439):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x10, 0x0, &(0x7f0000000400)="aa000000000001000061127e9740aa75", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40800)
syz_emit_ethernet(0x4e, 0x0, 0x0)

6m49.166266618s ago: executing program 45 (id=5439):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x10, 0x0, &(0x7f0000000400)="aa000000000001000061127e9740aa75", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40800)
syz_emit_ethernet(0x4e, 0x0, 0x0)

6m31.14117265s ago: executing program 2 (id=5440):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c00078018000180080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)

6m30.238029719s ago: executing program 2 (id=5458):
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file2\x00')
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')

6m29.344264505s ago: executing program 2 (id=5463):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003840)={0x14, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}}, 0xc000)
r0 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x10002, 0x0)

6m28.681006237s ago: executing program 2 (id=5465):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @private2={0xfc, 0x2, '\x00', 0xfd}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x440000, r2})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r2})

6m28.072848594s ago: executing program 2 (id=5472):
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400)

6m27.430394668s ago: executing program 2 (id=5475):
r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
ioctl$int_in(r0, 0x5452, &(0x7f0000001840)=0x5d4)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006)

6m12.103047725s ago: executing program 46 (id=5475):
r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
ioctl$int_in(r0, 0x5452, &(0x7f0000001840)=0x5d4)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000000040)={0xf, {"a2e3ad214fc752f90b5e094f4bf70e0dd038e7ff7fc6e5539b1b4d078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b4c9a240d9b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d075d0736cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911afe40db6ebe8cac64289fd3da232f1b5dbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146680400416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d483d4675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb53682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516ab68032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d95f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e08d4db9d76864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251aec29b32f8210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ac015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67784f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a700d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)

2m31.206074411s ago: executing program 7 (id=6523):
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x83, [0x751, 0x980, 0x40, 0xffffffffffffffff, 0x52, 0x5]})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000005, '\x00', "e4a18560d99f00", 0x800000, 0xffffff23})
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

2m30.462907937s ago: executing program 7 (id=6526):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7fff, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xa4}}, 0x24040080)

2m29.864681134s ago: executing program 7 (id=6530):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = epoll_create1(0x0)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
r2 = fanotify_init(0x4000, 0x0)
fanotify_mark(r2, 0x445, 0x1003, r1, 0x0)

2m29.20134341s ago: executing program 7 (id=6533):
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000000340)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d69736f383835392d392c73686f72746e616d653d77696e6e742c636f6465706167653d3836312c757466383d302c756e695f786c6174653d302c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c726f6469722c757466383d302c00531b17042f7ca50e22895c2b5d4e569f5eaf155190d8f66862a6e25caf6e3347919a6ebd4864113ab7083ee0c1019f"], 0x81, 0x2ab, &(0x7f0000000840)="$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")
r0 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x400, 0xe0, 0xcee, 0x218, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x1}, 0x50)
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})

2m28.072026182s ago: executing program 7 (id=6538):
socket$pptp(0x18, 0x1, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000480)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}])

2m26.742529356s ago: executing program 7 (id=6542):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x1ff, @loopback, 0x6}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={r1, @in={{0x2, 0x4e21, @loopback}}, 0x81, 0x738, 0x18, 0x6, 0x8}, &(0x7f0000000140)=0x98)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

2m24.335890785s ago: executing program 47 (id=6542):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x1ff, @loopback, 0x6}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={r1, @in={{0x2, 0x4e21, @loopback}}, 0x81, 0x738, 0x18, 0x6, 0x8}, &(0x7f0000000140)=0x98)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

7.955123063s ago: executing program 8 (id=7160):
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa, 0x5d032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x701})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
syz_io_uring_complete(r0)

7.735861265s ago: executing program 6 (id=7161):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r1, 0x2, 0x6, @local}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000480)={r1, 0x1, 0x6}, 0x10)

7.454391031s ago: executing program 9 (id=7163):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
r1 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10)

6.967272614s ago: executing program 6 (id=7165):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x3)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11)

6.572597146s ago: executing program 9 (id=7168):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000740)={0x0, 0x16, 0x1, "ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0})

6.501514181s ago: executing program 8 (id=7169):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x442, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000000)={0xed, 0x0, 0x4})

6.319565385s ago: executing program 6 (id=7170):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, 0x0)
tkill(r0, 0x2d)

5.675996626s ago: executing program 8 (id=7173):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x9})

5.270453269s ago: executing program 6 (id=7175):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880)
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000040)={0x1, 0x2, 0x5, 0x0, 0x0, 0x8})

4.991002142s ago: executing program 0 (id=7176):
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000001b40)="66000000220047000500fc0f8980e8ff06006d20002b1ffec0907349199f90e90101c7bb0000d3e7ff0b317cfd0d17ab68fa89b5843e9fb69ea0aabcab66a19d1cb58605cc23e7c548f113e056b447723cd91cfc183c9700dbbc54e0a4dca2f94812237d0000", 0x66)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x1000, 0x4)
sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000009ac0)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x0, 0x0)

4.388863593s ago: executing program 0 (id=7178):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000180)="e7", 0x1, 0x8080, &(0x7f00000003c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000200)="e3", 0x1}], 0x1}, 0x1)
shutdown(r0, 0x1)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x4, @empty, 0x6c1b}}, 0x0, 0x2}, &(0x7f0000000080)=0x90)

3.968965812s ago: executing program 4 (id=7179):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x34, 0x24, 0xd0f, 0x1ffffc, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x841}, 0x24008004)

3.941827154s ago: executing program 8 (id=7180):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x7f, @loopback, 0x1}, 0x1c)
listen(r0, 0x2)
shutdown(r0, 0x0)

3.366353057s ago: executing program 4 (id=7181):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010030bd7000ffdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="44000280400001002400010071756575765f69640000000000000000000000000000000000000000000000000500030003"], 0x60}, 0x1, 0x0, 0x0, 0x400}, 0x4040894)

3.279473138s ago: executing program 9 (id=7182):
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0xff4b, 0x4, 0x68, 0xfffe}, 'syz1\x00', 0x29})
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r1}, 0x14)

3.204400028s ago: executing program 8 (id=7183):
r0 = eventfd2(0x49d, 0x800)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x800000000004, 0x6000, 0x8, r0, 0x1})
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x80000001, 0x6000, 0x8, r0, 0x5})

2.821664303s ago: executing program 0 (id=7184):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
poll(&(0x7f0000000280)=[{r0, 0x2062}, {r0, 0x1080}], 0x2, 0xffffffffffbffff8)
dup2(r1, r2)

2.405249469s ago: executing program 9 (id=7185):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x13, 0x301, 0x0, 0x25dfdbfc, {0xc}}, 0x14}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]})
io_setup(0x2, &(0x7f0000000000)=<r0=>0x0)
syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_submit(r0, 0x0, 0x0)

2.376769853s ago: executing program 6 (id=7186):
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

2.24333227s ago: executing program 8 (id=7187):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000000)={0x3, 0x202, 0xd})

2.148196731s ago: executing program 4 (id=7188):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x36, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @empty, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x4}}}}}}, 0x0)

2.128748119s ago: executing program 0 (id=7189):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x2}}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @func={0x9}]}}, 0x0, 0x4a}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0)

1.700321484s ago: executing program 6 (id=7190):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0))
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

1.519877021s ago: executing program 4 (id=7191):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0)

1.448310991s ago: executing program 0 (id=7192):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f00000000c0)={0xc0, 0x0, 0x8000})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7)

1.044181297s ago: executing program 9 (id=7193):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0xa010100, 0x4e21, 0x2, 'sed\x00', 0x2, 0x0, 0x68}, 0x2c)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x22, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d2bb9149a8c9b8ad1ff7568565a98f80146847b0c6c4698efb8d42bed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)

773.454909ms ago: executing program 4 (id=7194):
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)

494.67149ms ago: executing program 0 (id=7195):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0x100, 0x8000, 0x0, "7a58beca3900000000000000000000000200"})

367.120086ms ago: executing program 9 (id=7196):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
ftruncate(r0, 0x6000000)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0xa4000061)
copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x100, 0x9, 0x0)

0s ago: executing program 4 (id=7197):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002240)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4890}, 0x4040000)

kernel console output (not intermixed with test programs):

yz
[ 1520.947495][ T5945] usb 7-1: SerialNumber: syz
[ 1521.032148][T19644] usb 1-1: Using ep0 maxpacket: 32
[ 1521.059737][T19644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1521.072035][T19644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1521.085872][T19644] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1521.098991][T19644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1521.173232][T19644] usb 1-1: config 0 descriptor??
[ 1521.198251][T19644] hub 1-1:0.0: USB hub found
[ 1521.262716][T23510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5886'.
[ 1521.333545][ T5945] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1521.341289][ T5945] uvcvideo 7-1:220.0: No valid video chain found.
[ 1521.358687][ T5945] usb 7-1: selecting invalid altsetting 0
[ 1521.410586][T19644] hub 1-1:0.0: 1 port detected
[ 1521.475370][ T5945] usb 7-1: selecting invalid altsetting 0
[ 1521.483081][ T5945] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[ 1521.587133][ T5945] usb 7-1: USB disconnect, device number 24
[ 1521.842158][T19644] usb 1-1: USB disconnect, device number 32
[ 1522.549530][T23524] loop8: detected capacity change from 0 to 256
[ 1523.423890][T23532] loop7: detected capacity change from 0 to 1024
[ 1523.499475][T23532] EXT4-fs: inline encryption not supported
[ 1523.587493][T23532] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1523.740906][T23532] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.5892: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1523.798407][T23532] EXT4-fs (loop7): Remounting filesystem read-only
[ 1523.806305][T23532] Quota error (device loop7): qtree_write_dquot: dquota write failed
[ 1523.862139][T23532] Quota error (device loop7): v2_write_file_info: Can't write info structure
[ 1523.871248][T23532] EXT4-fs (loop7): 1 orphan inode deleted
[ 1523.965249][T23532] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1524.068344][T23545] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5897'.
[ 1524.077903][T23545] netlink: 43 bytes leftover after parsing attributes in process `syz.6.5897'.
[ 1524.087394][T23545] netlink: 'syz.6.5897': attribute type 5 has an invalid length.
[ 1524.095484][T23545] netlink: 43 bytes leftover after parsing attributes in process `syz.6.5897'.
[ 1524.280164][T21723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1524.452182][   T10] vhci_hcd vhci_hcd.8: vhci_device speed not set
[ 1525.051702][T19644] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 1525.244822][T19644] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1525.297847][T19644] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1525.309082][T19644] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1525.318496][T19644] usb 9-1: Product: syz
[ 1525.323389][T19644] usb 9-1: Manufacturer: syz
[ 1525.328440][T19644] usb 9-1: SerialNumber: syz
[ 1525.777796][T19644] cdc_ether 9-1:1.0: skipping garbage
[ 1525.785620][T19644] usb 9-1: bad CDC descriptors
[ 1525.888185][T19644] usb 9-1: USB disconnect, device number 21
[ 1526.323961][T19644] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[ 1526.531748][T19644] usb 9-1: config 220 has an invalid interface number: 76 but max is 2
[ 1526.540748][T19644] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1526.550369][T19644] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1526.561621][T19644] usb 9-1: config 220 has no interface number 2
[ 1526.632016][T19644] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1526.646311][T19644] usb 9-1: config 220 interface 0 has no altsetting 0
[ 1526.653474][T19644] usb 9-1: config 220 interface 76 has no altsetting 0
[ 1526.660541][T19644] usb 9-1: config 220 interface 1 has no altsetting 0
[ 1526.836381][T19644] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1526.849421][T19644] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1526.857945][T19644] usb 9-1: Product: syz
[ 1526.863150][T19644] usb 9-1: Manufacturer: syz
[ 1526.867931][T19644] usb 9-1: SerialNumber: syz
[ 1527.031619][T20127] Bluetooth: hci1: command 0x080f tx timeout
[ 1527.265996][T19644] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1527.274177][T19644] uvcvideo 9-1:220.0: No valid video chain found.
[ 1527.332012][T19644] usb 9-1: selecting invalid altsetting 0
[ 1527.416796][T19644] usb 9-1: selecting invalid altsetting 0
[ 1527.427853][T19644] usbtest 9-1:220.1: probe with driver usbtest failed with error -22
[ 1527.562350][T19644] usb 9-1: USB disconnect, device number 22
[ 1528.522309][ T5841] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 1528.721758][ T5841] usb 1-1: Using ep0 maxpacket: 32
[ 1528.752894][ T5841] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[ 1528.761610][ T5841] usb 1-1: config 0 has no interface number 0
[ 1528.832096][ T5841] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1528.841852][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1528.850061][ T5841] usb 1-1: Product: syz
[ 1528.855528][ T5841] usb 1-1: Manufacturer: syz
[ 1528.860317][ T5841] usb 1-1: SerialNumber: syz
[ 1528.926775][ T5841] usb 1-1: config 0 descriptor??
[ 1528.960161][ T5841] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1529.247270][ T5841] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1529.350662][ T5841] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1529.626229][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1529.635538][ T5841] usb 1-1: USB disconnect, device number 33
[ 1529.669726][ T5841] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1529.797788][ T5841] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1529.831221][ T5841] quatech2 1-1:0.51: device disconnected
[ 1530.730486][T23634] netlink: 'syz.6.5924': attribute type 2 has an invalid length.
[ 1530.739398][T23634] netlink: 'syz.6.5924': attribute type 3 has an invalid length.
[ 1530.747518][T23634] netlink: 'syz.6.5924': attribute type 4 has an invalid length.
[ 1530.755552][T23634] netlink: 172 bytes leftover after parsing attributes in process `syz.6.5924'.
[ 1530.755676][T23633] loop8: detected capacity change from 0 to 512
[ 1530.830433][T23639] loop7: detected capacity change from 0 to 16
[ 1530.841191][T23633] EXT4-fs: Ignoring removed i_version option
[ 1530.847818][T23633] EXT4-fs: Ignoring removed bh option
[ 1530.894797][T23639] erofs (device loop7): mounted with root inode @ nid 36.
[ 1531.039718][T23633] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1531.161979][T23633] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1531.830154][T23650] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5929'.
[ 1531.830248][T23650] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5929'.
[ 1531.854840][T23655] loop7: detected capacity change from 0 to 128
[ 1531.876826][T23655] EXT4-fs: Ignoring removed nobh option
[ 1532.054880][T22364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1532.129344][T23655] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1532.161184][T23655] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1532.569486][T21723] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1533.322982][   T30] audit: type=1326 audit(2000002551.969:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23676 comm="syz.0.5940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ffc0000
[ 1533.432423][   T30] audit: type=1326 audit(2000002551.979:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23676 comm="syz.0.5940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ffc0000
[ 1533.458251][   T30] audit: type=1326 audit(2000002551.979:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23676 comm="syz.0.5940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf73dd539 code=0x7ffc0000
[ 1533.482079][   T30] audit: type=1326 audit(2000002552.029:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23676 comm="syz.0.5940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73dd539 code=0x7ffc0000
[ 1533.506768][   T30] audit: type=1326 audit(2000002552.069:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23676 comm="syz.0.5940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73dd539 code=0x7ffc0000
[ 1533.821776][   T30] audit: type=1326 audit(2000002552.119:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23676 comm="syz.0.5940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ffc0000
[ 1533.844716][   T30] audit: type=1326 audit(2000002552.119:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23676 comm="syz.0.5940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ffc0000
[ 1533.868307][   T30] audit: type=1326 audit(2000002552.199:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23676 comm="syz.0.5940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf73dd539 code=0x7ffc0000
[ 1533.891141][   T30] audit: type=1326 audit(2000002552.209:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23676 comm="syz.0.5940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ffc0000
[ 1533.913761][   T30] audit: type=1326 audit(2000002552.229:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23676 comm="syz.0.5940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ffc0000
[ 1534.141553][T23688] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5943'.
[ 1534.223038][T23688] netlink: 'syz.7.5943': attribute type 15 has an invalid length.
[ 1536.572720][T12359] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1536.732040][T12359] usb 5-1: Using ep0 maxpacket: 16
[ 1536.783031][T12359] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 1536.792802][T12359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1536.800996][T12359] usb 5-1: Product: syz
[ 1536.808791][T12359] usb 5-1: Manufacturer: syz
[ 1536.814770][T12359] usb 5-1: SerialNumber: syz
[ 1536.858358][T12359] usb 5-1: config 0 descriptor??
[ 1537.321947][T12359] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 1537.382696][T12359] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1537.453655][T12359] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 1537.475916][T12359] usb 5-1: media controller created
[ 1537.516612][T23726] dtv5100: rlen = 51 is too big!
[ 1537.516612][T23726] 
[ 1537.668214][T12359] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1537.775249][   T10] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[ 1537.901317][T12359] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1537.908941][T12359] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 1537.917799][T12359] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 1538.012044][   T10] usb 9-1: Using ep0 maxpacket: 16
[ 1538.088172][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1538.092996][T12359] usb 5-1: USB disconnect, device number 19
[ 1538.179963][   T10] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1538.189808][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1538.198479][   T10] usb 9-1: Product: syz
[ 1538.203078][   T10] usb 9-1: Manufacturer: syz
[ 1538.207925][   T10] usb 9-1: SerialNumber: syz
[ 1538.360452][   T10] usb 9-1: config 0 descriptor??
[ 1538.494997][   T10] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1538.505027][   T10] em28xx 9-1:0.0: DVB interface 0 found: bulk
[ 1538.659575][T12359] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[ 1538.776794][   T10] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[ 1538.908580][   T10] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1538.918595][   T10] em28xx 9-1:0.0: board has no eeprom
[ 1539.062129][T23738] loop8: detected capacity change from 0 to 512
[ 1539.091919][   T10] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1539.099965][   T10] em28xx 9-1:0.0: dvb set to bulk mode.
[ 1539.106157][T19644] em28xx 9-1:0.0: Binding DVB extension
[ 1539.206580][   T10] usb 9-1: USB disconnect, device number 23
[ 1539.247974][   T10] em28xx 9-1:0.0: Disconnecting em28xx
[ 1539.257716][T23738] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1539.305123][T23738] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1539.637194][T19644] em28xx 9-1:0.0: Registering input extension
[ 1539.678365][   T10] em28xx 9-1:0.0: Closing input extension
[ 1539.746750][   T10] em28xx 9-1:0.0: Freeing device
[ 1540.218022][T22364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1541.279054][T23787] netlink: 'syz.8.5973': attribute type 34 has an invalid length.
[ 1542.126233][T23798] loop8: detected capacity change from 0 to 256
[ 1542.267817][T23798] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1542.353248][   T30] audit: type=1800 audit(2000002561.009:353): pid=23798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5977" name="file1" dev="loop8" ino=1048849 res=0 errno=0
[ 1542.476478][   T30] audit: type=1800 audit(2000002561.099:354): pid=23798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5977" name="file1" dev="loop8" ino=1048849 res=0 errno=0
[ 1542.576267][T14168] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008)
[ 1542.584732][T14168] FAT-fs (loop8): Filesystem has been set read-only
[ 1542.656595][   T30] audit: type=1326 audit(2000002561.309:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.6.5989" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000
[ 1542.721645][T14168] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008)
[ 1542.758134][   T30] audit: type=1326 audit(2000002561.399:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.6.5989" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf7ff3539 code=0x7ffc0000
[ 1542.781806][   T30] audit: type=1326 audit(2000002561.399:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.6.5989" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000
[ 1542.783603][T14168] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008)
[ 1542.804744][   T30] audit: type=1326 audit(2000002561.399:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.6.5989" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000
[ 1542.835191][   T30] audit: type=1326 audit(2000002561.399:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.6.5989" exe="/root/syz-executor" sig=0 arch=40000003 syscall=319 compat=1 ip=0xf7ff3539 code=0x7ffc0000
[ 1542.888520][T14168] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008)
[ 1542.908666][T23802] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1543.028962][T23802] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008)
[ 1543.037523][T23802] FAT-fs (loop8): Filesystem has been set read-only
[ 1543.193009][   T30] audit: type=1326 audit(2000002561.539:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.6.5989" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000
[ 1543.215680][   T30] audit: type=1326 audit(2000002561.539:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.6.5989" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000
[ 1546.721830][T12359] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1546.923815][T12359] usb 5-1: Using ep0 maxpacket: 32
[ 1546.975024][T12359] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[ 1546.983690][T12359] usb 5-1: config 0 has no interface number 0
[ 1547.086308][T12359] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1547.095908][T12359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1547.104344][T12359] usb 5-1: Product: syz
[ 1547.108701][T12359] usb 5-1: Manufacturer: syz
[ 1547.113939][T12359] usb 5-1: SerialNumber: syz
[ 1547.214032][T12359] usb 5-1: config 0 descriptor??
[ 1547.289129][T12359] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1547.329344][T23876] loop7: detected capacity change from 0 to 512
[ 1547.440179][T23876] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1547.453222][T12359] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1547.595951][T12359] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1547.673028][T23876] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1547.722364][T23876] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1548.049324][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1548.074789][T12359] usb 5-1: USB disconnect, device number 20
[ 1548.140318][T23880] wlan1 speed is unknown, defaulting to 1000
[ 1548.158629][T12359] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1548.263522][T12359] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1548.344567][T12359] quatech2 5-1:0.51: device disconnected
[ 1548.607852][T21723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1551.086155][T23926] Bluetooth: hci0: Opcode 0x0401 failed: -4
[ 1551.284695][T12359] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[ 1551.455115][T12359] usb 9-1: Using ep0 maxpacket: 8
[ 1551.505690][T12359] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[ 1551.515358][T12359] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1551.523690][T12359] usb 9-1: Product: syz
[ 1551.528086][T12359] usb 9-1: Manufacturer: syz
[ 1551.533057][T12359] usb 9-1: SerialNumber: syz
[ 1551.648828][T12359] usb 9-1: config 0 descriptor??
[ 1551.741222][T12359] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[ 1551.813045][T12359] dvb-usb: bulk message failed: -22 (2/0)
[ 1551.862884][T12359] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1551.913992][T12359] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[ 1551.968214][T12359] usb 9-1: media controller created
[ 1552.022514][T23924] cxusb: i2c rd: len=110 is too big!
[ 1552.022514][T23924] 
[ 1552.202824][T23942] netlink: 'syz.4.6021': attribute type 1 has an invalid length.
[ 1552.210817][T23942] netlink: 'syz.4.6021': attribute type 2 has an invalid length.
[ 1552.229482][T12359] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1552.432911][T12359] cxusb: set interface failed
[ 1552.450181][T12359] dvb-usb: bulk message failed: -22 (1/0)
[ 1552.847623][T12359] DVB: Unable to find symbol mt352_attach()
[ 1552.859783][T12359] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[ 1553.033528][T23954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1553.193718][T12359] rc_core: IR keymap rc-dvico-portable not found
[ 1553.200246][T12359] Registered IR keymap rc-empty
[ 1553.273202][T12359] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0
[ 1553.346118][T12359] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input65
[ 1553.441022][T12359] dvb-usb: schedule remote query interval to 100 msecs.
[ 1553.448352][T12359] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[ 1553.547099][T12359] usb 9-1: USB disconnect, device number 24
[ 1554.198390][T12359] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[ 1555.092332][T23987] netlink: 'syz.8.6038': attribute type 11 has an invalid length.
[ 1555.959669][T24004] loop8: detected capacity change from 0 to 256
[ 1560.120981][T24063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6062'.
[ 1560.642395][T24073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6066'.
[ 1560.690838][T24069] loop8: detected capacity change from 0 to 512
[ 1560.802952][T24069] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1560.915020][T24079] input: syz0 as /devices/virtual/input/input66
[ 1561.028971][T24069] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 1561.949348][T24090] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1562.038951][T24092] kvm: user requested TSC rate below hardware speed
[ 1562.451964][   T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1562.631649][   T10] usb 5-1: Using ep0 maxpacket: 16
[ 1562.693844][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1562.704554][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1562.794347][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1562.804347][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1562.812702][   T10] usb 5-1: Product: syz
[ 1562.817506][   T10] usb 5-1: Manufacturer: syz
[ 1562.822567][   T10] usb 5-1: SerialNumber: syz
[ 1563.253990][T24112] loop7: detected capacity change from 0 to 256
[ 1563.338661][T24112] exfat: Deprecated parameter 'namecase'
[ 1563.405281][T24112] exfat: Deprecated parameter 'namecase'
[ 1563.408877][   T10] usb 5-1: 0:2 : does not exist
[ 1563.446774][T24112] exfat: Deprecated parameter 'utf8'
[ 1563.669682][T24112] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[ 1563.851710][   T30] audit: type=1800 audit(2000002582.499:362): pid=24112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6080" name="file1" dev="loop7" ino=1048851 res=0 errno=0
[ 1563.874743][   T30] audit: type=1800 audit(2000002582.499:363): pid=24112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6080" name="file1" dev="loop7" ino=1048851 res=0 errno=0
[ 1563.897191][   T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[ 1564.136988][   T10] usb 5-1: USB disconnect, device number 21
[ 1564.360721][T22656] udevd[22656]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1564.997968][T15641] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1565.184461][T15641] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1565.397248][T15641] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1565.594260][T15641] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1566.252111][T15641] bridge_slave_1: left allmulticast mode
[ 1566.257963][T15641] bridge_slave_1: left promiscuous mode
[ 1566.264640][T15641] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1566.280850][T15641] bridge_slave_0: left allmulticast mode
[ 1566.287337][T15641] bridge_slave_0: left promiscuous mode
[ 1566.293945][T15641] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1566.893512][T15641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1566.933275][T15641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1566.971737][T15641] bond0 (unregistering): Released all slaves
[ 1567.861672][T15641] hsr_slave_0: left promiscuous mode
[ 1567.880264][T15641] hsr_slave_1: left promiscuous mode
[ 1567.943485][T15641] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1567.951146][T15641] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1568.015678][T15641] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1568.025595][T15641] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1568.177802][T15641] veth1_macvtap: left promiscuous mode
[ 1568.202958][T15641] veth0_macvtap: left promiscuous mode
[ 1568.231809][T15641] veth1_vlan: left promiscuous mode
[ 1568.237424][T15641] veth0_vlan: left promiscuous mode
[ 1568.442447][T12359] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 1568.472606][T20127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1568.490424][T20127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1568.506396][T20127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1568.534428][T20127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1568.586547][T20127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1568.750528][T12359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1568.764209][T12359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1568.840448][T12359] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1568.851128][T12359] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1568.861868][T12359] usb 1-1: Manufacturer: syz
[ 1568.924905][T12359] usb 1-1: config 0 descriptor??
[ 1570.022442][T12359] uclogic 0003:256C:006D.002F: failed retrieving string descriptor #100: -71
[ 1570.033572][T12359] uclogic 0003:256C:006D.002F: failed retrieving pen parameters: -71
[ 1570.044077][T12359] uclogic 0003:256C:006D.002F: failed probing pen v1 parameters: -71
[ 1570.054236][T12359] uclogic 0003:256C:006D.002F: failed probing parameters: -71
[ 1570.063937][T12359] uclogic 0003:256C:006D.002F: probe with driver uclogic failed with error -71
[ 1570.171911][T12359] usb 1-1: USB disconnect, device number 34
[ 1570.372373][T15641] team0 (unregistering): Port device team_slave_1 removed
[ 1570.439357][T15641] team0 (unregistering): Port device team_slave_0 removed
[ 1570.628158][T20127] Bluetooth: hci3: command tx timeout
[ 1571.463089][T24173] wlan1 speed is unknown, defaulting to 1000
[ 1572.053992][T24223] syzkaller1: entered promiscuous mode
[ 1572.062269][T24223] syzkaller1: entered allmulticast mode
[ 1572.687343][T24234] netlink: 'syz.4.6111': attribute type 11 has an invalid length.
[ 1572.702238][T20127] Bluetooth: hci3: command tx timeout
[ 1573.078106][T24173] chnl_net:caif_netlink_parms(): no params data found
[ 1573.201932][   T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[ 1573.434552][   T10] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[ 1573.444165][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1573.452600][   T10] usb 7-1: Product: syz
[ 1573.456933][   T10] usb 7-1: Manufacturer: syz
[ 1573.461859][   T10] usb 7-1: SerialNumber: syz
[ 1573.525131][T24246] loop7: detected capacity change from 0 to 512
[ 1573.843666][T24246] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1574.156700][T24257] sg_write: data in/out 989/154 bytes for SCSI command 0x0-- guessing data in;
[ 1574.156700][T24257]    program syz.0.6116 not setting count and/or reply_len properly
[ 1574.237303][   T10] (unnamed net_device) (uninitialized): Assigned a random MAC address: 06:4d:00:f4:26:fe
[ 1574.279069][T24258] ieee802154 phy0 wpan0: encryption failed: -22
[ 1574.399321][   T10] rtl8150 7-1:1.0: eth21: rtl8150 is detected
[ 1574.472308][   T10] usb 7-1: USB disconnect, device number 25
[ 1574.590035][T21723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1574.786441][T20127] Bluetooth: hci3: command tx timeout
[ 1575.133625][T24173] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1575.141645][T24173] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1575.181216][T24173] bridge_slave_0: entered allmulticast mode
[ 1575.223150][T24173] bridge_slave_0: entered promiscuous mode
[ 1575.297597][T24173] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1575.305796][T24173] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1575.363016][T24173] bridge_slave_1: entered allmulticast mode
[ 1575.404490][T24173] bridge_slave_1: entered promiscuous mode
[ 1575.767897][T24173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1575.892916][T24173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1576.176497][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1576.183289][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1576.310288][T24288] netlink: 'syz.0.6126': attribute type 11 has an invalid length.
[ 1576.343890][T24173] team0: Port device team_slave_0 added
[ 1576.410503][T24173] team0: Port device team_slave_1 added
[ 1576.756725][T24173] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1576.764291][T24173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1576.793050][T24173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1576.840989][T24173] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1576.850341][T24173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1576.877808][T24173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1576.893648][T20127] Bluetooth: hci3: command tx timeout
[ 1577.036324][T24295] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6128'.
[ 1577.218125][T24173] hsr_slave_0: entered promiscuous mode
[ 1577.275033][T24173] hsr_slave_1: entered promiscuous mode
[ 1577.340831][T24173] debugfs: 'hsr0' already exists in 'hsr'
[ 1577.350853][T24173] Cannot create hsr debugfs directory
[ 1578.942307][T24173] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1578.967375][T24173] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1578.990159][T24173] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1579.019687][T24173] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1579.456718][T24173] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1579.529275][T24173] 8021q: adding VLAN 0 to HW filter on device team0
[ 1579.583212][T15641] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1579.590696][T15641] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1579.627233][T15641] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1579.634776][T15641] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1580.577098][T24173] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1581.564233][T24173] veth0_vlan: entered promiscuous mode
[ 1581.599483][T24173] veth1_vlan: entered promiscuous mode
[ 1581.749239][T24173] veth0_macvtap: entered promiscuous mode
[ 1581.800950][T24173] veth1_macvtap: entered promiscuous mode
[ 1581.924661][T24173] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1581.972371][T24173] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1582.020450][T15633] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1582.035700][T15641] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1582.060204][T15641] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1582.084511][T15641] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1584.107572][T15630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1584.117225][T15630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1584.243334][T15630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1584.251622][T15630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1585.794460][T24428] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1585.823459][T24430] sctp: [Deprecated]: syz.6.6142 (pid 24430) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1585.823459][T24430] Use struct sctp_sack_info instead
[ 1586.002706][T24428] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 1586.013689][T24428] overlayfs: failed to look up (tracing) for ino (-66)
[ 1586.517416][T24448] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[ 1586.527278][T24448] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[ 1586.779283][T24453] loop8: detected capacity change from 0 to 64
[ 1586.857940][T24453] BFS-fs: bfs_fill_super(): loop8 is unclean, continuing
[ 1589.063542][   T30] audit: type=1326 audit(2000002607.709:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.6.6162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000
[ 1589.086387][   T30] audit: type=1326 audit(2000002607.719:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.6.6162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000
[ 1589.241926][   T30] audit: type=1326 audit(2000002607.769:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.6.6162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000
[ 1589.269487][   T30] audit: type=1326 audit(2000002607.789:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.6.6162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7ff3539 code=0x7ffc0000
[ 1589.292952][   T30] audit: type=1326 audit(2000002607.789:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.6.6162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000
[ 1589.315457][   T30] audit: type=1326 audit(2000002607.789:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.6.6162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000
[ 1589.339391][   T30] audit: type=1326 audit(2000002607.799:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.6.6162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000
[ 1589.365266][   T30] audit: type=1326 audit(2000002607.799:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.6.6162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000
[ 1589.388595][   T30] audit: type=1326 audit(2000002607.799:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.6.6162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000
[ 1589.411119][   T30] audit: type=1326 audit(2000002607.799:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.6.6162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7ff3539 code=0x7ffc0000
[ 1591.788512][T24542] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6179'.
[ 1591.799329][T24542] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6179'.
[ 1592.428434][T24548] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1592.482781][ T3079] IPVS: starting estimator thread 0...
[ 1592.592641][T24553] IPVS: using max 240 ests per chain, 12000 per kthread
[ 1594.579106][T24588] batadv_slave_0: entered promiscuous mode
[ 1594.635407][T24586] batadv_slave_0: left promiscuous mode
[ 1594.652965][T19643] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 1594.827412][ T5833] kernel write not supported for file bpf-prog (pid: 5833 comm: kworker/1:3)
[ 1594.902915][T19643] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1594.912481][T19643] usb 1-1: config 1 has no interface number 0
[ 1594.952168][T19643] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1594.963760][T19643] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1595.021679][T19643] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1595.123605][T19643] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1595.133279][T19643] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1595.141823][T19643] usb 1-1: Product: syz
[ 1595.146158][T19643] usb 1-1: Manufacturer: syz
[ 1595.151037][T19643] usb 1-1: SerialNumber: syz
[ 1596.131987][T24611] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[ 1596.165846][T19643] cdc_ncm 1-1:1.1: bind() failure
[ 1596.396981][ T5833] usb 1-1: USB disconnect, device number 35
[ 1596.999851][T24625] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1597.347147][T24625] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 1597.412746][T24625] overlayfs: failed to look up (tracing) for ino (-66)
[ 1599.201307][T24651] tun0: tun_chr_ioctl cmd 1074025675
[ 1599.207619][T24651] tun0: persist enabled
[ 1599.215361][T24651] tun0: tun_chr_ioctl cmd 1074025675
[ 1599.220863][T24651] tun0: persist enabled
[ 1599.304525][T24658] input: syz0 as /devices/virtual/input/input67
[ 1600.536931][T24675] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1600.660424][T24675] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 1600.694422][T24675] overlayfs: failed to look up (tracing) for ino (-66)
[ 1602.517061][T24700] sctp: [Deprecated]: syz.0.6230 (pid 24700) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1602.517061][T24700] Use struct sctp_sack_info instead
[ 1604.601954][ T5833] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 1604.791740][ T5833] usb 7-1: Using ep0 maxpacket: 16
[ 1604.851655][ T5833] usb 7-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1604.863359][ T5833] usb 7-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96
[ 1604.873793][ T5833] usb 7-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8
[ 1604.883876][ T5833] usb 7-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[ 1604.897391][ T5833] usb 7-1: config 1 interface 0 has no altsetting 0
[ 1605.073281][ T5833] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1605.082962][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1605.091152][ T5833] usb 7-1: SerialNumber: syz
[ 1605.234346][T24724] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1605.272478][T24724] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1605.583232][T24724] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1605.590978][T24724] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1606.079401][ T5833] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42
[ 1606.489059][ T5833] usb 7-1: USB disconnect, device number 26
[ 1606.542845][T24750] loop7: detected capacity change from 0 to 1024
[ 1606.555270][ T5833] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device
[ 1606.860603][T24750] hfsplus: catalog searching failed
[ 1607.248581][T15633] hfsplus: b-tree write err: -5, ino 3
[ 1607.355907][T21723] hfsplus: node 4:3 still has 1 user(s)!
[ 1608.965700][T24797] loop8: detected capacity change from 0 to 8
[ 1609.019376][T24797] Dev loop8: unable to read RDB block 8
[ 1609.026676][T24797]  loop8: unable to read partition table
[ 1609.062916][T24797] loop8: partition table beyond EOD, truncated
[ 1609.069503][T24797] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 1610.682038][T19643] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 1610.907362][T19643] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1610.917759][T19643] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 1610.927626][T19643] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1610.945202][T19644] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1611.025279][T19643] usb 1-1: config 0 descriptor??
[ 1611.034607][T24835] syzkaller1: entered promiscuous mode
[ 1611.040279][T24835] syzkaller1: entered allmulticast mode
[ 1611.151952][T19644] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1611.163441][T19644] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1611.174495][T19644] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1611.188301][T19644] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1611.197911][T19644] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1611.370830][T19644] usb 5-1: config 0 descriptor??
[ 1611.575163][T19643] lenovo 0003:17EF:6047.0030: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0
[ 1611.982276][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1612.034703][T19644] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 1612.129389][T19643] lenovo 0003:17EF:6047.0030: Fn-lock setting failed: -71
[ 1612.190459][T19643] lenovo 0003:17EF:6047.0030: Sensitivity setting failed: -71
[ 1612.215641][T19644] usb 5-1: USB disconnect, device number 22
[ 1612.315161][T24850] tun0: tun_chr_ioctl cmd 1074025675
[ 1612.320757][T24850] tun0: persist enabled
[ 1612.332726][T19643] usb 1-1: USB disconnect, device number 36
[ 1612.448012][T24846] tun0: tun_chr_ioctl cmd 1074025675
[ 1612.454460][T24846] tun0: persist enabled
[ 1612.817571][T24843] fido_id[24843]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1612.861053][T24848] fido_id[24848]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1613.597677][T24863] binder: binder_mmap: 24861 80000000-80b36000 bad vm_flags failed -1
[ 1614.316822][T24879] netlink: 'syz.4.6289': attribute type 29 has an invalid length.
[ 1614.367912][T24881] netlink: 'syz.4.6289': attribute type 29 has an invalid length.
[ 1615.275262][T24890] sctp: [Deprecated]: syz.0.6292 (pid 24890) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1615.275262][T24890] Use struct sctp_sack_info instead
[ 1617.345570][ T3079] IPVS: starting estimator thread 0...
[ 1617.356526][T24933] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1617.451606][T24937] IPVS: using max 240 ests per chain, 12000 per kthread
[ 1617.962102][T24941] loop8: detected capacity change from 0 to 512
[ 1618.113062][T24941] EXT4-fs error (device loop8): __ext4_fill_super:5553: inode #2: comm syz.8.6309: casefold flag without casefold feature
[ 1618.278464][T24941] EXT4-fs (loop8): get root inode failed
[ 1618.284732][T24941] EXT4-fs (loop8): mount failed
[ 1619.923064][T19644] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[ 1620.147361][T19644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1620.150379][T24974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6331'.
[ 1620.159472][T19644] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[ 1620.159690][T19644] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[ 1620.159826][T19644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1620.204255][T19644] usb 1-1: config 0 descriptor??
[ 1620.266558][T24968] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1620.553369][T19644] usbhid 1-1:0.0: can't add hid device: -71
[ 1620.560260][T19644] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1620.658700][T19644] usb 1-1: USB disconnect, device number 37
[ 1621.117771][T19644] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1621.217615][T24986] syzkaller1: entered promiscuous mode
[ 1621.223515][T24986] syzkaller1: entered allmulticast mode
[ 1621.311958][T19644] usb 1-1: Using ep0 maxpacket: 32
[ 1621.344737][T19644] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[ 1621.358313][T19644] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[ 1621.367884][T19644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1621.484577][T19644] usb 1-1: config 0 descriptor??
[ 1621.517499][T24991] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[ 1621.972969][T19644] hid-multitouch 0003:0EEF:72C4.0032: unknown main item tag 0x0
[ 1622.057673][T19644] hid-multitouch 0003:0EEF:72C4.0032: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0
[ 1622.151068][T19644] usb 1-1: USB disconnect, device number 38
[ 1622.494960][T25003] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ
[ 1622.792485][T25000] fido_id[25000]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1624.369265][T25035] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 1624.903898][T25042] loop7: detected capacity change from 0 to 1024
[ 1625.282977][T25042] hfsplus: request for non-existent node 33554434 in B*Tree
[ 1625.290702][T25042] hfsplus: request for non-existent node 33554434 in B*Tree
[ 1629.019551][T25120] sctp: [Deprecated]: syz.6.6367 (pid 25120) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1629.019551][T25120] Use struct sctp_sack_info instead
[ 1629.788189][T25122] loop7: detected capacity change from 0 to 4096
[ 1630.051835][T19644] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1630.258791][T19644] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1630.273262][T19644] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1630.342067][T19644] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1630.354648][T19644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1630.363535][T19644] usb 1-1: SerialNumber: syz
[ 1630.666166][T19644] usb 1-1: 0:2 : does not exist
[ 1630.842561][T19644] usb 1-1: USB disconnect, device number 39
[ 1631.048609][T22656] udevd[22656]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1632.912459][T25172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6385'.
[ 1633.631816][T19644] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 1633.838973][T19644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1633.850464][T19644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1633.860702][T19644] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 1633.870288][T19644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1633.978523][T19644] usb 1-1: config 0 descriptor??
[ 1634.534168][T19644] hid-steam 0003:28DE:1142.0033: unknown main item tag 0x0
[ 1634.542129][T19644] hid-steam 0003:28DE:1142.0033: unknown main item tag 0x0
[ 1634.549737][T19644] hid-steam 0003:28DE:1142.0033: unknown main item tag 0x4
[ 1634.653916][T19644] hid-steam 0003:28DE:1142.0033: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[ 1634.725716][T19644] usb 1-1: USB disconnect, device number 40
[ 1635.199095][T25197] fido_id[25197]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1637.654855][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1637.664024][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1637.800683][T25235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6406'.
[ 1639.243528][T25258] loop8: detected capacity change from 0 to 256
[ 1639.294446][T25258] exfat: Deprecated parameter 'namecase'
[ 1639.505713][T25258] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[ 1639.933962][T25267] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6418'.
[ 1640.705547][T25278] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1642.611626][T19644] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[ 1642.848223][T19644] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1642.858775][T19644] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1642.923417][T19644] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1642.933198][T19644] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1642.941760][T19644] usb 7-1: SerialNumber: syz
[ 1643.251317][T19644] usb 7-1: 0:2 : does not exist
[ 1643.417268][T19644] usb 7-1: USB disconnect, device number 27
[ 1643.666116][T22656] udevd[22656]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1644.143620][T25324] loop7: detected capacity change from 0 to 4096
[ 1646.564453][T19644] usb 7-1: new full-speed USB device number 28 using dummy_hcd
[ 1646.781695][T19644] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1646.792239][T19644] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1646.800430][T19644] usb 7-1: Product: syz
[ 1646.805759][T19644] usb 7-1: Manufacturer: syz
[ 1646.811309][T19644] usb 7-1: SerialNumber: syz
[ 1647.185269][T19644] usb 7-1: config 0 descriptor??
[ 1647.419289][T19644] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1647.985326][T25369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6453'.
[ 1648.255793][T19644] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1648.305548][T19644] usb 7-1: USB disconnect, device number 28
[ 1649.031780][T19644] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1649.232012][T19644] usb 5-1: Using ep0 maxpacket: 32
[ 1649.276720][T19644] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[ 1649.290346][T19644] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1649.297403][T19644] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[ 1649.306845][T19644] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1649.399281][T19644] usb 5-1: config 0 descriptor??
[ 1649.530020][T25393] loop7: detected capacity change from 0 to 256
[ 1649.675437][T19644] usbhid 5-1:0.0: can't add hid device: -71
[ 1649.682334][T19644] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1649.771754][T19644] usb 5-1: USB disconnect, device number 23
[ 1649.796219][   T30] kauditd_printk_skb: 14 callbacks suppressed
[ 1649.796292][   T30] audit: type=1326 audit(2000002668.419:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25382 comm="syz.8.6458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x7fc00000
[ 1650.271847][T19644] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1650.494181][T19644] usb 5-1: Using ep0 maxpacket: 32
[ 1650.564366][T19644] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[ 1650.578326][T19644] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1650.585908][T19644] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[ 1650.595492][T19644] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1650.693998][T19644] usb 5-1: config 0 descriptor??
[ 1651.167427][T19644] saitek 0003:06A3:0621.0034: item fetching failed at offset 2/5
[ 1651.247030][T19644] saitek 0003:06A3:0621.0034: parse failed
[ 1651.253752][T19644] saitek 0003:06A3:0621.0034: probe with driver saitek failed with error -22
[ 1651.395292][T19644] usb 5-1: USB disconnect, device number 24
[ 1654.472487][T25449] wlan1 speed is unknown, defaulting to 1000
[ 1656.640362][   T30] audit: type=1326 audit(2000002675.279:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25466 comm="syz.6.6489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7fc00000
[ 1656.892617][T25476] loop8: detected capacity change from 0 to 4096
[ 1656.947643][T25476] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[ 1659.050848][   T30] audit: type=1326 audit(2000002677.689:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25500 comm="syz.7.6502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7fc00000
[ 1659.175217][   T30] audit: type=1326 audit(2000002677.699:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25500 comm="syz.7.6502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf743d539 code=0x7fc00000
[ 1659.968722][T20127] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[ 1659.980831][T20127] CPU: 0 UID: 0 PID: 20127 Comm: kworker/u9:2 Tainted: G             L      syzkaller #0 PREEMPT(voluntary) 
[ 1659.981009][T20127] Tainted: [L]=SOFTLOCKUP
[ 1659.981061][T20127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1659.981186][T20127] Workqueue: hci4 hci_rx_work
[ 1659.981445][T20127] Call Trace:
[ 1659.981494][T20127]  <TASK>
[ 1659.981542][T20127]  __dump_stack+0x26/0x30
[ 1659.981690][T20127]  dump_stack_lvl+0x14c/0x1c0
[ 1659.981846][T20127]  dump_stack+0x1e/0x25
[ 1659.981985][T20127]  sysfs_create_dir_ns+0x46c/0x540
[ 1659.982158][T20127]  kobject_add_internal+0x1084/0x19b0
[ 1659.982326][T20127]  kobject_add+0x2c1/0x410
[ 1659.982545][T20127]  ? kmsan_get_metadata+0xf1/0x160
[ 1659.982734][T20127]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1659.982937][T20127]  device_add+0xa70/0x1c00
[ 1659.983120][T20127]  hci_conn_add_sysfs+0x159/0x2e0
[ 1659.983370][T20127]  le_conn_complete_evt+0x1d0a/0x2250
[ 1659.983616][T20127]  hci_le_conn_complete_evt+0x157/0x260
[ 1659.983794][T20127]  hci_le_meta_evt+0x6eb/0x960
[ 1659.983944][T20127]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1659.984130][T20127]  hci_event_packet+0xce2/0x1e40
[ 1659.984261][T20127]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1659.984452][T20127]  hci_rx_work+0x8c3/0xfc0
[ 1659.984590][T20127]  ? kmsan_get_metadata+0xf1/0x160
[ 1659.984777][T20127]  ? __pfx_hci_rx_work+0x10/0x10
[ 1659.984908][T20127]  process_scheduled_works+0xae7/0x1d60
[ 1659.985153][T20127]  worker_thread+0x1741/0x1de0
[ 1659.985382][T20127]  kthread+0xd5a/0xf00
[ 1659.985511][T20127]  ? __pfx_worker_thread+0x10/0x10
[ 1659.985712][T20127]  ? __pfx_kthread+0x10/0x10
[ 1659.985841][T20127]  ret_from_fork+0x207/0x6f0
[ 1659.986014][T20127]  ? __switch_to+0x521/0x750
[ 1659.986169][T20127]  ? __pfx_kthread+0x10/0x10
[ 1659.986306][T20127]  ret_from_fork_asm+0x1a/0x30
[ 1659.986505][T20127]  </TASK>
[ 1660.170058][T20127] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1660.188170][T20127] Bluetooth: hci4: failed to register connection device
[ 1660.228987][T25529] loop7: detected capacity change from 0 to 512
[ 1660.416849][T25529] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1660.542387][T25529] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.6510: bad orphan inode 16
[ 1660.564590][T25529] ext4_test_bit(bit=15, block=4) = 0
[ 1660.570088][T25529] EXT4-fs (loop7): 1 orphan inode deleted
[ 1660.603767][T25529] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1660.701634][T25529] EXT4-fs (loop7): shut down requested (0)
[ 1661.156119][T21723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1662.303716][T25532] Bluetooth: hci4: command 0x0406 tx timeout
[ 1663.430524][T19643] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 1663.681849][T19643] usb 1-1: config 3 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1663.693819][T19643] usb 1-1: config 3 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1663.705000][T19643] usb 1-1: config 3 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1663.719089][T19643] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[ 1663.729265][T19643] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1664.383032][T20127] Bluetooth: hci4: command 0x0406 tx timeout
[ 1664.433573][T19643] waterforce 0003:1044:7A4D.0035: item fetching failed at offset 0/1
[ 1664.446621][T19643] waterforce 0003:1044:7A4D.0035: hid parse failed with -22
[ 1664.454685][T19643] waterforce 0003:1044:7A4D.0035: probe with driver waterforce failed with error -22
[ 1664.566200][T25598] loop7: detected capacity change from 0 to 256
[ 1664.677934][T19643] usb 1-1: USB disconnect, device number 41
[ 1665.053278][T25602] syzkaller1: entered promiscuous mode
[ 1665.058956][T25602] syzkaller1: entered allmulticast mode
[ 1665.257195][T21723] FAT-fs (loop7): error, corrupted directory (invalid entries)
[ 1665.266097][T21723] FAT-fs (loop7): Filesystem has been set read-only
[ 1665.308028][T21723] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 1665.754540][T25608] wlan1 speed is unknown, defaulting to 1000
[ 1667.030013][T25628] binder: 25626:25628 ioctl c018620c 80000200 returned -1
[ 1667.036791][T14168] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1667.303465][T14168] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1667.439606][T14168] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1667.574017][T14168] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1668.160609][T14168] bridge_slave_1: left allmulticast mode
[ 1668.166836][T14168] bridge_slave_1: left promiscuous mode
[ 1668.173482][T14168] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1668.253804][T14168] bridge_slave_0: left allmulticast mode
[ 1668.259650][T14168] bridge_slave_0: left promiscuous mode
[ 1668.266473][T14168] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1669.176646][T14168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1669.236875][T14168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1669.290573][T14168] bond0 (unregistering): Released all slaves
[ 1669.864533][T25653] vcan0: tx drop: invalid sa for name 0x0000000000000002
[ 1670.058630][T25532] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1670.071751][T25532] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1670.093285][T25532] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1670.116531][T25532] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1670.135037][T25532] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1670.366105][T14168] hsr_slave_0: left promiscuous mode
[ 1670.402547][T14168] hsr_slave_1: left promiscuous mode
[ 1670.413182][T14168] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1670.420781][T14168] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1670.493696][T14168] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1670.501275][T14168] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1670.587149][T14168] veth1_macvtap: left promiscuous mode
[ 1670.618024][T14168] veth0_macvtap: left promiscuous mode
[ 1670.645111][T14168] veth1_vlan: left promiscuous mode
[ 1670.650687][T14168] veth0_vlan: left promiscuous mode
[ 1672.222182][T25532] Bluetooth: hci2: command tx timeout
[ 1672.362051][T14168] team0 (unregistering): Port device team_slave_1 removed
[ 1672.469848][T14168] team0 (unregistering): Port device team_slave_0 removed
[ 1673.066155][T25655] wlan1 speed is unknown, defaulting to 1000
[ 1673.580990][T14168] IPVS: stop unused estimator thread 0...
[ 1674.303149][T25532] Bluetooth: hci2: command tx timeout
[ 1674.344637][T25655] chnl_net:caif_netlink_parms(): no params data found
[ 1675.252081][T11239] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 1675.462031][T11239] usb 1-1: Using ep0 maxpacket: 32
[ 1675.492841][T11239] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[ 1675.501309][T11239] usb 1-1: config 0 has no interface number 0
[ 1675.551007][T11239] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1675.562022][T11239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1675.570322][T11239] usb 1-1: Product: syz
[ 1675.575032][T11239] usb 1-1: Manufacturer: syz
[ 1675.579801][T11239] usb 1-1: SerialNumber: syz
[ 1675.639513][T25742] loop8: detected capacity change from 0 to 512
[ 1675.688344][T25742] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1675.689193][T11239] usb 1-1: config 0 descriptor??
[ 1675.766245][T11239] smsc95xx v2.0.0
[ 1675.782822][T25742] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[ 1675.894633][T25742] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[ 1675.962220][T25742] System zones: 1-12
[ 1675.986562][T25655] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1675.997729][T25655] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1676.012855][T25742] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.6575: corrupted in-inode xattr: e_value size too large
[ 1676.029307][T25655] bridge_slave_0: entered allmulticast mode
[ 1676.034518][T25655] bridge_slave_0: entered promiscuous mode
[ 1676.058131][T25655] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1676.067909][T25655] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1676.109707][T25655] bridge_slave_1: entered allmulticast mode
[ 1676.121006][T25655] bridge_slave_1: entered promiscuous mode
[ 1676.136216][T25742] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.6575: couldn't read orphan inode 15 (err -117)
[ 1676.212734][T25742] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1676.230470][T11239] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1676.242090][T11239] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1676.382334][T25532] Bluetooth: hci2: command tx timeout
[ 1676.479888][T25655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1676.558836][T25655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1676.711811][T11239] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1676.750488][T24173] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1676.760871][T11239] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[ 1676.829265][T11239] usb 1-1: USB disconnect, device number 42
[ 1676.951628][T25655] team0: Port device team_slave_0 added
[ 1677.030307][T25655] team0: Port device team_slave_1 added
[ 1677.408090][T25655] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1677.415999][T25655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1677.443612][T25655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1677.551948][T25655] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1677.559290][T25655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1677.585953][T25655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1678.047847][T25765] batadv_slave_1: entered promiscuous mode
[ 1678.108782][T25655] hsr_slave_0: entered promiscuous mode
[ 1678.156307][T25655] hsr_slave_1: entered promiscuous mode
[ 1678.195034][T25655] debugfs: 'hsr0' already exists in 'hsr'
[ 1678.201118][T25655] Cannot create hsr debugfs directory
[ 1678.306938][T25762] batadv_slave_1: left promiscuous mode
[ 1678.464820][T25532] Bluetooth: hci2: command tx timeout
[ 1680.471974][T11239] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[ 1680.686310][T11239] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1680.698599][T11239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1680.756349][T11239] usb 1-1: config 0 descriptor??
[ 1680.787284][T11239] cp210x 1-1:0.0: cp210x converter detected
[ 1680.802841][ T5833] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1680.982395][ T5833] usb 5-1: Using ep0 maxpacket: 8
[ 1681.035529][ T5833] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1681.045273][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1681.053831][ T5833] usb 5-1: Product: syz
[ 1681.071040][ T5833] usb 5-1: Manufacturer: syz
[ 1681.076037][ T5833] usb 5-1: SerialNumber: syz
[ 1681.218156][ T5833] usb 5-1: config 0 descriptor??
[ 1681.278999][T11239] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1681.303722][ T5833] gspca_main: se401-2.14.0 probing 047d:5003
[ 1681.336038][T25655] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1681.415325][T11239] usb 1-1: cp210x converter now attached to ttyUSB0
[ 1681.470845][T25655] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1681.516452][T25655] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1681.557461][T11239] usb 1-1: USB disconnect, device number 43
[ 1681.638499][T11239] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1681.696323][T25655] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1681.728429][ T5833] gspca_se401: ExtraFeatures: 5
[ 1681.744598][T11239] cp210x 1-1:0.0: device disconnected
[ 1681.941309][ T5833] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input68
[ 1682.122246][ T5833] usb 5-1: USB disconnect, device number 25
[ 1682.460295][T25817] netlink: 'syz.8.6599': attribute type 12 has an invalid length.
[ 1682.472328][T25817] netlink: 'syz.8.6599': attribute type 29 has an invalid length.
[ 1682.481942][T25817] netlink: 'syz.8.6599': attribute type 1 has an invalid length.
[ 1682.489838][T25817] netlink: 'syz.8.6599': attribute type 2 has an invalid length.
[ 1682.498062][T25817] netlink: 'syz.8.6599': attribute type 1 has an invalid length.
[ 1682.506168][T25817] netlink: 228 bytes leftover after parsing attributes in process `syz.8.6599'.
[ 1683.329163][T25824] macvlan4: entered promiscuous mode
[ 1683.382959][T25824] batman_adv: batadv0: Adding interface: macvlan4
[ 1683.389561][T25824] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1683.416213][T25824] batman_adv: batadv0: Not using interface macvlan4 (retrying later): interface not active
[ 1683.642283][T25655] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1683.849338][T25655] 8021q: adding VLAN 0 to HW filter on device team0
[ 1683.917860][T25661] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1683.925526][T25661] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1684.008839][T14168] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1684.016499][T14168] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1684.290413][T25840] 9p: Bad value for 'rfdno'
[ 1685.314283][T19644] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1685.531749][T19644] usb 5-1: Using ep0 maxpacket: 16
[ 1685.559146][T19644] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1685.564841][T25866] netlink: 'syz.8.6612': attribute type 1 has an invalid length.
[ 1685.572420][T19644] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1685.577831][T25866] netlink: 'syz.8.6612': attribute type 2 has an invalid length.
[ 1685.687700][T19644] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1685.698087][T19644] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1685.707148][T19644] usb 5-1: Product: syz
[ 1685.711657][T19644] usb 5-1: Manufacturer: syz
[ 1685.716424][T19644] usb 5-1: SerialNumber: syz
[ 1686.082273][T19644] usb 5-1: 0:2 : does not exist
[ 1686.137485][T25655] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1686.195719][T19644] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[ 1686.448351][T19644] usb 5-1: USB disconnect, device number 26
[ 1686.633640][T22656] udevd[22656]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1686.998552][T25882] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6616'.
[ 1687.675514][T25898] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6619'.
[ 1689.109201][T25655] veth0_vlan: entered promiscuous mode
[ 1689.237298][T25655] veth1_vlan: entered promiscuous mode
[ 1689.659078][T25655] veth0_macvtap: entered promiscuous mode
[ 1689.795480][T25655] veth1_macvtap: entered promiscuous mode
[ 1689.953599][T19644] kernel write not supported for file bpf-prog (pid: 19644 comm: kworker/0:8)
[ 1690.104930][T25655] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1690.218157][T25655] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1690.385257][T25661] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1690.412129][ T5833] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[ 1690.456845][T25661] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1690.476568][T19644] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[ 1690.500447][T25661] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1690.542854][T25661] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1690.591817][ T5833] usb 1-1: Using ep0 maxpacket: 8
[ 1690.670392][ T5833] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[ 1690.679380][ T5833] usb 1-1: config 0 has no interface number 0
[ 1690.707983][ T5833] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1690.717767][T19644] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[ 1690.720072][ T5833] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1690.727640][T19644] usb 5-1: config 0 has no interface number 0
[ 1690.748127][ T5833] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1690.759651][ T5833] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1690.773185][ T5833] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1690.773319][T19644] usb 5-1: config 0 interface 41 has no altsetting 0
[ 1690.782748][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1690.923251][ T5833] usb 1-1: config 0 descriptor??
[ 1690.924887][T19644] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1690.937699][T19644] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1690.946563][T19644] usb 5-1: Product: syz
[ 1690.950903][T19644] usb 5-1: Manufacturer: syz
[ 1690.955938][T19644] usb 5-1: SerialNumber: syz
[ 1691.060837][ T5833] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1691.105296][T19644] usb 5-1: config 0 descriptor??
[ 1691.460600][T25952] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1691.984830][T19644] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9
[ 1692.055680][T19644] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[ 1692.230222][T19644] usb 5-1: USB disconnect, device number 27
[ 1693.080137][T19644] usb 1-1: USB disconnect, device number 44
[ 1693.161990][T19644] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[ 1693.581941][T11239] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[ 1693.703376][T25969] ptrace attach of "./syz-executor exec"[25975] was attempted by "./syz-executor exec"[25969]
[ 1693.775377][T11239] usb 7-1: Using ep0 maxpacket: 32
[ 1693.801923][T19644] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 1693.806307][T11239] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1693.891207][T11239] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1693.909824][T11239] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1693.920734][T11239] usb 7-1: Product: syz
[ 1693.925768][T11239] usb 7-1: Manufacturer: syz
[ 1693.930537][T11239] usb 7-1: SerialNumber: syz
[ 1693.994469][T19644] usb 1-1: Using ep0 maxpacket: 8
[ 1694.019246][T11239] usb 7-1: config 0 descriptor??
[ 1694.039587][T19644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1694.051115][T19644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1694.061632][T19644] usb 1-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00
[ 1694.071064][T19644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1694.188809][T19644] usb 1-1: config 0 descriptor??
[ 1694.362628][ T5945] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1694.476128][T11239] gs_usb 7-1:0.0: Configuring for 80 interfaces
[ 1694.631722][ T5945] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1694.641917][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1694.688862][ T5945] usb 5-1: config 0 descriptor??
[ 1694.746632][ T5945] cp210x 5-1:0.0: cp210x converter detected
[ 1694.889017][T19644] usb 1-1: USB disconnect, device number 45
[ 1695.110300][T11239] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO)
[ 1695.226964][ T5945] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[ 1695.308038][ T5945] usb 5-1: cp210x converter now attached to ttyUSB0
[ 1695.336562][T11239] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71
[ 1695.444289][T11239] usb 7-1: USB disconnect, device number 29
[ 1695.522390][ T5833] usb 5-1: USB disconnect, device number 28
[ 1695.599143][ T5833] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1695.687821][ T5833] cp210x 5-1:0.0: device disconnected
[ 1697.069986][T26018] syzkaller1: entered promiscuous mode
[ 1697.075946][T26018] syzkaller1: entered allmulticast mode
[ 1697.889169][T15640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1697.897467][T15640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1698.203729][T15633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1698.213115][T15633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1698.706430][T26038] sctp: [Deprecated]: syz.6.6656 (pid 26038) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1698.706430][T26038] Use struct sctp_sack_info instead
[ 1699.040914][T26041] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6545'.
[ 1699.060658][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1699.067515][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1699.145776][T26041] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6545'.
[ 1700.733708][T26066] loop8: detected capacity change from 0 to 2048
[ 1700.855354][T26066] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1700.871864][ T5833] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[ 1701.113485][ T5833] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1701.123782][ T5833] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[ 1701.132482][ T5833] usb 1-1: Product: syz
[ 1701.136830][ T5833] usb 1-1: Manufacturer: syz
[ 1701.141937][ T5833] usb 1-1: SerialNumber: syz
[ 1701.238605][ T5833] usb 1-1: config 0 descriptor??
[ 1701.263482][T26077] loop9: detected capacity change from 0 to 512
[ 1701.298693][ T5833] ch341 1-1:0.0: ch341-uart converter detected
[ 1701.350963][T26077] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found
[ 1701.359154][T26077] UDF-fs: Scanning with blocksize 512 failed
[ 1701.486148][T26077] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found
[ 1701.498756][T26077] UDF-fs: Scanning with blocksize 1024 failed
[ 1701.612793][T26077] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found
[ 1701.620490][T26077] UDF-fs: Scanning with blocksize 2048 failed
[ 1701.767410][T26077] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[ 1701.943730][T26077] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1702.419889][ T5833] usb 1-1: failed to send control message: -71
[ 1702.426629][ T5833] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[ 1702.507262][ T5833] usb 1-1: USB disconnect, device number 46
[ 1702.520735][T26089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6673'.
[ 1702.554427][ T5833] ch341 1-1:0.0: device disconnected
[ 1703.812798][T26101] bond1: entered allmulticast mode
[ 1703.863764][T26101] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1705.121715][ T5945] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 1705.188032][T26130] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[ 1705.316656][ T5945] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1705.326397][ T5945] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1705.390735][ T5945] usb 10-1: config 0 descriptor??
[ 1706.069067][ T5945] usb 10-1: Cannot set autoneg
[ 1706.122316][ T5945] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1706.215968][ T5945] usb 10-1: USB disconnect, device number 25
[ 1707.459410][T26170] loop9: detected capacity change from 0 to 16
[ 1707.539172][T26170] erofs (device loop9): mounted with root inode @ nid 36.
[ 1708.110261][T26172] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1708.683524][T26183] loop9: detected capacity change from 0 to 2048
[ 1708.780557][T25532] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[ 1708.790495][T25532] CPU: 0 UID: 0 PID: 25532 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT(voluntary) 
[ 1708.790675][T25532] Tainted: [L]=SOFTLOCKUP
[ 1708.790749][T25532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1708.790862][T25532] Workqueue: hci3 hci_rx_work
[ 1708.791007][T25532] Call Trace:
[ 1708.791057][T25532]  <TASK>
[ 1708.791108][T25532]  __dump_stack+0x26/0x30
[ 1708.791257][T25532]  dump_stack_lvl+0x14c/0x1c0
[ 1708.791416][T25532]  dump_stack+0x1e/0x25
[ 1708.791563][T25532]  sysfs_create_dir_ns+0x46c/0x540
[ 1708.791724][T25532]  kobject_add_internal+0x1084/0x19b0
[ 1708.791889][T25532]  kobject_add+0x2c1/0x410
[ 1708.792093][T25532]  ? kmsan_get_metadata+0xf1/0x160
[ 1708.792277][T25532]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1708.792466][T25532]  device_add+0xa70/0x1c00
[ 1708.792648][T25532]  hci_conn_add_sysfs+0x159/0x2e0
[ 1708.792838][T25532]  le_conn_complete_evt+0x1d0a/0x2250
[ 1708.793036][T25532]  hci_le_conn_complete_evt+0x157/0x260
[ 1708.793210][T25532]  hci_le_meta_evt+0x6eb/0x960
[ 1708.793349][T25532]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1708.793525][T25532]  hci_event_packet+0xce2/0x1e40
[ 1708.793661][T25532]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1708.793848][T25532]  hci_rx_work+0x8c3/0xfc0
[ 1708.793989][T25532]  ? kmsan_get_metadata+0xf1/0x160
[ 1708.794181][T25532]  ? __pfx_hci_rx_work+0x10/0x10
[ 1708.794312][T25532]  process_scheduled_works+0xae7/0x1d60
[ 1708.794548][T25532]  worker_thread+0x1741/0x1de0
[ 1708.794767][T25532]  kthread+0xd5a/0xf00
[ 1708.794894][T25532]  ? __pfx_worker_thread+0x10/0x10
[ 1708.795088][T25532]  ? __pfx_kthread+0x10/0x10
[ 1708.795213][T25532]  ret_from_fork+0x207/0x6f0
[ 1708.795386][T25532]  ? __switch_to+0x521/0x750
[ 1708.795539][T25532]  ? __pfx_kthread+0x10/0x10
[ 1708.795677][T25532]  ret_from_fork_asm+0x1a/0x30
[ 1708.795871][T25532]  </TASK>
[ 1708.841250][T26192] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1708.843493][T25532] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1709.007082][T25532] Bluetooth: hci3: failed to register connection device
[ 1710.918653][T26218] syzkaller1: entered promiscuous mode
[ 1710.924902][T26218] syzkaller1: entered allmulticast mode
[ 1711.022369][T20127] Bluetooth: hci3: command 0x2016 tx timeout
[ 1711.550848][T26228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6718'.
[ 1711.707135][ T5841] usb 10-1: new full-speed USB device number 26 using dummy_hcd
[ 1711.979367][ T5841] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1711.992486][ T5841] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1712.003212][ T5841] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1712.025431][ T3079] kernel read not supported for file /video7 (pid: 3079 comm: kworker/1:2)
[ 1712.100481][ T5841] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1712.110154][ T5841] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1712.119582][ T5841] usb 10-1: Product: syz
[ 1712.124636][ T5841] usb 10-1: Manufacturer: syz
[ 1712.129485][ T5841] usb 10-1: SerialNumber: syz
[ 1712.479307][T26225] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6717'.
[ 1712.783822][T15630] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1712.792457][T15630] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1712.812416][T11239] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1712.822351][ T5841] usb 10-1: 0:2 : does not exist
[ 1712.987343][ T5841] usb 10-1: USB disconnect, device number 26
[ 1713.102332][T20127] Bluetooth: hci3: command 0x2016 tx timeout
[ 1713.179265][T22656] udevd[22656]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1713.505887][ T5841] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1713.823821][ T5841] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1714.371924][T26270] program syz.0.6732 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1714.807010][T26278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6735'.
[ 1714.905544][T26278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6735'.
[ 1715.962495][ T3079] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[ 1716.141596][ T3079] usb 10-1: Using ep0 maxpacket: 8
[ 1716.167384][ T3079] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1716.178249][ T3079] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1716.188663][ T3079] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1716.199418][ T3079] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1716.213746][ T3079] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1716.223888][ T3079] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1716.543527][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1716.583155][ T3079] usb 10-1: GET_CAPABILITIES returned 2f
[ 1716.589103][ T3079] usbtmc 10-1:16.0: can't read capabilities
[ 1716.814069][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1716.825815][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1716.852283][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1716.861819][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1716.875223][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1716.884669][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1716.902333][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1716.912267][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1716.922966][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1716.932393][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1716.944226][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1716.962770][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1716.992143][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1717.001625][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1717.022847][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1717.032304][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1717.051183][ T5945] usb 10-1: USB disconnect, device number 27
[ 1717.305675][T26302] loop8: detected capacity change from 0 to 1764
[ 1717.346790][T26302] iso9660: Bad value for 'gid'
[ 1717.352230][T26302] iso9660: Bad value for 'gid'
[ 1717.470131][T26309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6746'.
[ 1718.264912][T26317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6747'.
[ 1718.274306][T26317] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6747'.
[ 1718.286711][T26317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6747'.
[ 1718.328937][T26317] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6747'.
[ 1718.357380][T26302] loop8: detected capacity change from 0 to 8192
[ 1718.404680][T26302] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found
[ 1718.412439][T26302] UDF-fs: Scanning with blocksize 512 failed
[ 1718.452132][T26302] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found
[ 1718.459721][T26302] UDF-fs: Scanning with blocksize 1024 failed
[ 1718.531986][T26302] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found
[ 1718.539567][T26302] UDF-fs: Scanning with blocksize 2048 failed
[ 1718.641139][T26302] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1719.018096][T26328] loop9: detected capacity change from 0 to 128
[ 1719.902324][T26337] netlink: 'syz.6.6753': attribute type 30 has an invalid length.
[ 1719.910347][T26337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6753'.
[ 1720.941763][ T5945] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 1721.122802][ T5945] usb 1-1: Using ep0 maxpacket: 32
[ 1721.206212][ T5945] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[ 1721.216173][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1721.224656][ T5945] usb 1-1: Product: syz
[ 1721.229817][ T5945] usb 1-1: Manufacturer: syz
[ 1721.235114][ T5945] usb 1-1: SerialNumber: syz
[ 1721.300888][ T5945] usb 1-1: config 0 descriptor??
[ 1721.657292][ T5945] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 047
[ 1721.937877][T26351] i2c i2c-1: failure reading data
[ 1721.984403][T12359] usb 1-1: USB disconnect, device number 47
[ 1722.441578][T26377] ipvlan1: entered promiscuous mode
[ 1722.459623][T26375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6768'.
[ 1722.490008][T26374] ipvlan1: left promiscuous mode
[ 1722.512061][T26375] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6768'.
[ 1723.200290][T26388] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6774'.
[ 1723.282860][T26388] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6774'.
[ 1723.618462][T26393] pim6reg: entered allmulticast mode
[ 1723.673172][T26396] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6776'.
[ 1723.683106][T26399] pim6reg: left allmulticast mode
[ 1723.982116][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1724.648908][T26412] loop8: detected capacity change from 0 to 2048
[ 1724.741885][T26412] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1724.939875][T26418] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1725.582338][ T5945] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[ 1725.776060][ T5945] usb 7-1: Using ep0 maxpacket: 8
[ 1725.862084][ T5945] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1725.872492][ T5945] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1725.882818][ T5945] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1725.893145][ T5945] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1725.907184][ T5945] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1725.916646][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1726.290926][T26437] loop8: detected capacity change from 0 to 512
[ 1726.352299][ T5945] usb 7-1: GET_CAPABILITIES returned 2f
[ 1726.358159][ T5945] usbtmc 7-1:16.0: can't read capabilities
[ 1726.453844][T26437] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1726.613592][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1726.620979][   T30] audit: type=1800 audit(2000002745.269:392): pid=26437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6786" name="file1" dev="loop8" ino=15 res=0 errno=0
[ 1726.623595][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1726.683104][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1726.692925][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1726.743933][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1726.753778][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1726.769207][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1726.779169][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1726.808717][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1726.818732][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1726.842551][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1726.851914][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1726.904593][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1726.914407][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1726.958428][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1726.967819][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1727.081901][ T5841] usb 10-1: new low-speed USB device number 28 using dummy_hcd
[ 1727.151738][T12359] usb 7-1: USB disconnect, device number 30
[ 1727.260886][T24173] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1727.298232][ T5841] usb 10-1: config 1 has an invalid interface descriptor of length 6, skipping
[ 1727.307729][ T5841] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1727.319394][ T5841] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1727.329711][ T5841] usb 10-1: config 1 has no interface number 1
[ 1727.381735][ T5841] usb 10-1: string descriptor 0 read error: -71
[ 1727.388634][ T5841] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1727.400253][ T5841] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1727.434242][ T5841] usb 10-1: can't set config #1, error -71
[ 1727.530406][ T5841] usb 10-1: USB disconnect, device number 28
[ 1728.384423][   T30] audit: type=1326 audit(2000002747.029:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26458 comm="syz.6.6794" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff3539 code=0x0
[ 1730.105523][   T30] audit: type=1326 audit(2000002748.739:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26486 comm="syz.0.6805" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73dd539 code=0x0
[ 1733.177709][T26538] loop8: detected capacity change from 0 to 128
[ 1733.323163][T26538] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1733.462479][T26538] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1733.570719][T26549] sctp: [Deprecated]: syz.4.6822 (pid 26549) Use of int in maxseg socket option.
[ 1733.570719][T26549] Use struct sctp_assoc_value instead
[ 1733.725516][T26538] EXT4-fs error (device loop8): dx_make_map:1296: inode #2: block 63: comm syz.8.6819: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[ 1733.855787][T26538] EXT4-fs (loop8): Remounting filesystem read-only
[ 1734.167424][T24173] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1735.065020][T26565] program syz.4.6827 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1735.296344][T26569] loop8: detected capacity change from 0 to 128
[ 1735.931244][T26578] binder: 26576:26578 ioctl c0306201 800004c0 returned -22
[ 1736.899857][T26597] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6838'.
[ 1738.596754][T26619] loop9: detected capacity change from 0 to 1024
[ 1738.764096][T11239] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 1739.020146][T11239] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1739.031848][T11239] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1739.042384][T11239] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1739.052418][T11239] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1739.157396][T26620] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1739.257821][T11239] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 1739.342172][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1739.729313][T11239] usb 9-1: USB disconnect, device number 25
[ 1740.062951][T26642] netlink: 'syz.9.6855': attribute type 1 has an invalid length.
[ 1740.072197][T26642] netlink: 'syz.9.6855': attribute type 3 has an invalid length.
[ 1740.080758][T26642] netlink: 'syz.9.6855': attribute type 8 has an invalid length.
[ 1740.090154][T26642] netlink: 172 bytes leftover after parsing attributes in process `syz.9.6855'.
[ 1740.101048][T26642] NCSI netlink: No device for ifindex 131092
[ 1740.113612][T26641] loop5: detected capacity change from 0 to 4095
[ 1740.992640][T26651] loop8: detected capacity change from 0 to 1024
[ 1741.051842][T19643] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1741.057073][T26651] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1741.264324][T19643] usb 5-1: Using ep0 maxpacket: 32
[ 1741.308946][T19643] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1741.320446][T19643] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1741.446910][T19643] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1741.456489][T19643] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1741.465327][T19643] usb 5-1: Product: syz
[ 1741.469661][T19643] usb 5-1: Manufacturer: syz
[ 1741.476682][T11239] usb 9-1: new full-speed USB device number 26 using dummy_hcd
[ 1741.640245][T19643] hub 5-1:4.0: USB hub found
[ 1741.716401][T11239] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1741.727140][T11239] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1741.805012][T11239] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1741.815322][T11239] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1741.824468][T11239] usb 9-1: Product: syz
[ 1741.828800][T11239] usb 9-1: Manufacturer: syz
[ 1741.835826][T11239] usb 9-1: SerialNumber: syz
[ 1741.894531][T19643] hub 5-1:4.0: 2 ports detected
[ 1742.632493][T11239] usb 9-1: Audio class v2/v3 interfaces need an interface association
[ 1742.769563][T11239] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1742.855996][T11239] usb 9-1: USB disconnect, device number 26
[ 1742.995503][T19643] hub 5-1:4.0: hub_hub_status failed (err = -32)
[ 1743.003336][T19643] hub 5-1:4.0: config failed, can't get hub status (err -32)
[ 1743.035834][T22656] udevd[22656]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1743.136929][T19643] usb 5-1: USB disconnect, device number 29
[ 1746.297988][T26719] overlayfs: missing 'lowerdir'
[ 1746.662099][T19643] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[ 1746.865021][T19643] usb 7-1: Using ep0 maxpacket: 32
[ 1746.894960][T19643] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[ 1746.903839][T19643] usb 7-1: config 0 has no interface number 0
[ 1746.944925][T19643] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1746.957496][T19643] usb 7-1: config 0 interface 85 has no altsetting 0
[ 1747.095717][T19643] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1747.105182][T19643] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1747.113972][T19643] usb 7-1: Product: syz
[ 1747.118305][T19643] usb 7-1: Manufacturer: syz
[ 1747.123241][T19643] usb 7-1: SerialNumber: syz
[ 1747.225980][T19643] usb 7-1: config 0 descriptor??
[ 1747.347019][T26737] loop8: detected capacity change from 0 to 512
[ 1747.434481][T26738] loop9: detected capacity change from 0 to 1024
[ 1747.542978][T26738] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1747.618571][T26738] EXT4-fs (loop9): revision level too high, forcing read-only mode
[ 1747.645347][T26738] EXT4-fs (loop9): orphan cleanup on readonly fs
[ 1747.760094][T26738] EXT4-fs error (device loop9): __ext4_get_inode_loc:4830: comm syz.9.6889: Invalid inode table block 0 in block_group 0
[ 1747.828223][T26738] EXT4-fs (loop9): Remounting filesystem read-only
[ 1747.840578][T26738] Quota error (device loop9): write_blk: dquota write failed
[ 1747.849208][T26738] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[ 1747.922567][T26744] batadv_slave_1: entered promiscuous mode
[ 1747.939005][T19643] appletouch 7-1:0.85: Geyser mode initialized.
[ 1747.970281][T26742] batadv_slave_1: left promiscuous mode
[ 1747.983418][T26738] EXT4-fs (loop9): 1 truncate cleaned up
[ 1747.998075][T19643] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input69
[ 1748.046118][T26738] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1748.169256][T19643] usb 7-1: USB disconnect, device number 31
[ 1748.286947][T26738] EXT4-fs (loop9): shut down requested (1)
[ 1748.296546][T19643] appletouch 7-1:0.85: input: appletouch disconnected
[ 1748.698734][T25655] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1749.415871][T26758] block nbd9: not configured, cannot reconfigure
[ 1749.504456][T26761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6898'.
[ 1749.541687][T26765] loop8: detected capacity change from 0 to 1024
[ 1751.592087][T26792] overlay: filesystem on ./file0 not supported as upperdir
[ 1752.507267][T26802] loop9: detected capacity change from 0 to 1024
[ 1753.389529][T26809] loop8: detected capacity change from 0 to 2048
[ 1753.665441][T26809] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[ 1753.673515][T26809] UDF-fs: Scanning with blocksize 512 failed
[ 1753.830484][T26809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1754.022010][T18440] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 1754.204592][T18440] usb 5-1: Using ep0 maxpacket: 16
[ 1754.284823][T18440] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1754.295311][T18440] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1754.426295][T18440] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1754.437106][T18440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1754.445725][T18440] usb 5-1: Product: syz
[ 1754.450636][T18440] usb 5-1: Manufacturer: syz
[ 1754.455532][T18440] usb 5-1: SerialNumber: syz
[ 1754.776655][T18440] usb 5-1: 0:2 : does not exist
[ 1754.880082][T18440] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[ 1755.008229][T26827] wlan1 speed is unknown, defaulting to 1000
[ 1755.079176][T18440] usb 5-1: USB disconnect, device number 30
[ 1755.318076][T22656] udevd[22656]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1756.288064][T18440] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 1756.549634][T18440] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1756.561890][T18440] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1756.572610][T18440] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1756.587185][T18440] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1756.596799][T18440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1756.687193][T18440] usb 5-1: config 0 descriptor??
[ 1756.732531][T26850] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6926'.
[ 1756.911916][T26850] vlan2: entered allmulticast mode
[ 1756.917350][T26850] dummy0: entered allmulticast mode
[ 1756.986395][T26850] bridge0: port 3(vlan2) entered blocking state
[ 1756.995739][T26850] bridge0: port 3(vlan2) entered disabled state
[ 1757.041311][T26850] vlan2: entered promiscuous mode
[ 1757.074155][T26850] dummy0: entered promiscuous mode
[ 1757.293824][T18440] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 1757.537829][T18440] usb 5-1: USB disconnect, device number 31
[ 1758.124484][T26856] fido_id[26856]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1758.670990][T26877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6934'.
[ 1758.839785][T26877] gtp0: entered promiscuous mode
[ 1758.845141][T26877] gtp0: entered allmulticast mode
[ 1760.515391][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1760.522253][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1761.109994][T26919] ip_vti0: Master is either lo or non-ether device
[ 1761.611798][T18440] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1761.819724][T18440] usb 5-1: config 0 has no interfaces?
[ 1761.828253][T18440] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1761.837734][T18440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1761.911205][T18440] usb 5-1: config 0 descriptor??
[ 1762.254317][   T30] audit: type=1326 audit(2000002780.899:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.0.6954" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ff00000
[ 1762.276998][   T30] audit: type=1326 audit(2000002780.899:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.0.6954" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ff00000
[ 1762.300375][   T30] audit: type=1326 audit(2000002780.899:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.0.6954" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ff00000
[ 1762.323104][   T30] audit: type=1326 audit(2000002780.899:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.0.6954" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ff00000
[ 1762.348135][   T30] audit: type=1326 audit(2000002780.899:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.0.6954" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ff00000
[ 1762.371533][   T30] audit: type=1326 audit(2000002780.899:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.0.6954" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ff00000
[ 1762.396214][   T30] audit: type=1326 audit(2000002780.899:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.0.6954" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ff00000
[ 1762.419384][   T30] audit: type=1326 audit(2000002780.899:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.0.6954" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ff00000
[ 1762.443063][   T30] audit: type=1326 audit(2000002780.899:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.0.6954" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ff00000
[ 1762.450376][T26923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1762.554763][   T30] audit: type=1326 audit(2000002780.899:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.0.6954" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ff00000
[ 1762.589976][T26923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1762.668642][T11239] usb 5-1: USB disconnect, device number 32
[ 1766.361944][T18440] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 1766.583199][T18440] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1766.595718][T18440] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1766.606682][T18440] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1766.616482][T18440] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1766.794229][T26996] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1766.873957][T18440] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 1766.963512][T27005] loop9: detected capacity change from 0 to 1024
[ 1767.198272][T18440] usb 1-1: USB disconnect, device number 48
[ 1767.490525][T25357] udevd[25357]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1767.547299][T15633] hfsplus: b-tree write err: -5, ino 4
[ 1767.661846][T25532] Bluetooth: hci3: command 0x2016 tx timeout
[ 1768.141961][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1768.636025][T27024] loop8: detected capacity change from 0 to 1024
[ 1768.893983][T18440] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 1769.036162][T15630] hfsplus: b-tree write err: -5, ino 4
[ 1769.134591][T18440] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1769.144075][T18440] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1769.246337][T18440] usb 1-1: config 0 descriptor??
[ 1769.278915][T18440] cp210x 1-1:0.0: cp210x converter detected
[ 1769.727752][T18440] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1770.053723][T18440] usb 1-1: cp210x converter now attached to ttyUSB0
[ 1770.120231][T27042] wlan1 speed is unknown, defaulting to 1000
[ 1770.221051][T18440] usb 1-1: USB disconnect, device number 49
[ 1770.293545][T18440] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1770.393112][T18440] cp210x 1-1:0.0: device disconnected
[ 1770.569057][T27051] loop8: detected capacity change from 0 to 256
[ 1770.725363][T27051] exFAT-fs (loop8): failed to test first cluster bit of root dir(5)
[ 1771.123971][T18440] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1771.378526][T18440] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1771.390495][T18440] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1771.400790][T18440] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1771.411576][T18440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1771.564688][T27053] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1771.709446][T18440] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1772.207992][T18440] usb 5-1: USB disconnect, device number 33
[ 1773.019062][T27079] loop8: detected capacity change from 0 to 512
[ 1773.047085][T27082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7000'.
[ 1773.213846][T27079] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1773.453179][   T30] kauditd_printk_skb: 24 callbacks suppressed
[ 1773.453256][   T30] audit: type=1800 audit(2000002792.099:429): pid=27079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6998" name="file1" dev="loop8" ino=15 res=0 errno=0
[ 1773.841821][T12359] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[ 1773.894331][T24173] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1774.077773][T12359] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1774.087010][T12359] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1774.100535][T12359] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1774.224230][T12359] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1774.235947][T12359] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1774.264047][T12359] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1774.274580][T12359] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1774.283949][T12359] usb 10-1: Product: syz
[ 1774.288369][T12359] usb 10-1: Manufacturer: syz
[ 1774.361170][T12359] cdc_wdm 10-1:1.0: skipping garbage
[ 1774.366979][T12359] cdc_wdm 10-1:1.0: skipping garbage
[ 1774.428929][T12359] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[ 1774.435485][T12359] cdc_wdm 10-1:1.0: Unknown control protocol
[ 1774.538546][T27108] input: syz0 as /devices/virtual/input/input71
[ 1774.827908][T27112] syzkaller1: entered promiscuous mode
[ 1774.833865][T27112] syzkaller1: entered allmulticast mode
[ 1775.412191][T12359] usb 10-1: USB disconnect, device number 29
[ 1777.462763][ T5945] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[ 1777.696549][ T5945] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1777.706855][ T5945] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1777.791238][ T5945] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1777.801048][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1777.809464][ T5945] usb 7-1: Product: syz
[ 1777.813881][ T5945] usb 7-1: Manufacturer: syz
[ 1777.818654][ T5945] usb 7-1: SerialNumber: syz
[ 1777.931152][ T5945] usb 7-1: config 0 descriptor??
[ 1777.966862][T27144] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1778.014305][T27144] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1778.342988][T27144] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1778.574004][T27144] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1779.388462][ T5945] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[ 1779.497131][ T5945] dm9601 7-1:0.0 eth9: register 'dm9601' at usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08
[ 1779.574409][T27179] vxcan1: tx address claim with dlc 0
[ 1779.587614][ T5945] usb 7-1: USB disconnect, device number 32
[ 1779.617163][ T5945] dm9601 7-1:0.0 eth9: unregister 'dm9601' usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet
[ 1779.715374][T12359] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[ 1779.929789][T27185] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7032'.
[ 1779.939101][T12359] usb 9-1: Using ep0 maxpacket: 16
[ 1780.004486][T12359] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1780.017513][T12359] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1780.028187][T12359] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1780.037618][T12359] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1780.048418][T12359] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1780.190984][T12359] usb 9-1: config 0 descriptor??
[ 1780.840075][T12359] hid (null): usage index exceeded
[ 1780.845736][T12359] hid (null): global environment stack underflow
[ 1781.095804][T12359] usb 9-1: USB disconnect, device number 27
[ 1781.573104][T27206] loop9: detected capacity change from 0 to 2048
[ 1781.749712][T27206] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1781.962106][ T5945] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[ 1782.195858][ T5945] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1782.209962][ T5945] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1782.220285][ T5945] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1782.229859][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1782.261078][T27218] loop8: detected capacity change from 0 to 512
[ 1782.339856][T27218] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1782.347839][T27218] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1782.392560][T27210] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1782.422890][ T5945] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 1782.509144][T27218] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.7042: bad orphan inode 131083
[ 1782.624233][T27218] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1782.928658][ T5945] usb 7-1: USB disconnect, device number 33
[ 1783.307378][T24173] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1783.829924][T27244] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7048'.
[ 1785.947583][T27277] mkiss: ax0: crc mode is auto.
[ 1786.748484][T27290] loop9: detected capacity change from 0 to 16
[ 1786.834920][T27290] erofs (device loop9): mounted with root inode @ nid 36.
[ 1789.742238][T25532] Bluetooth: hci5: command 0x1003 tx timeout
[ 1789.761652][T20127] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1791.915551][T27356] loop9: detected capacity change from 0 to 8192
[ 1791.950129][T27369] loop8: detected capacity change from 0 to 256
[ 1793.157923][T27380] pim6reg1: entered promiscuous mode
[ 1793.165572][T27380] pim6reg1: entered allmulticast mode
[ 1793.263838][T25532] Bluetooth: hci2: command 0x0406 tx timeout
[ 1793.382967][T18440] kernel read not supported for file /input/event1 (pid: 18440 comm: kworker/0:2)
[ 1795.554353][T20127] Bluetooth: hci1: hardware error 0x00
[ 1795.747603][T27418] netlink: 'syz.8.7106': attribute type 61 has an invalid length.
[ 1795.755842][T27418] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7106'.
[ 1796.046301][T19644] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0
[ 1796.132473][T19644] hid-generic 0000:0000:0000.0039: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1797.076788][T27429] fido_id[27429]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1797.242367][T27443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7114'.
[ 1797.602216][T20127] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1797.902701][T27449] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 1798.351671][T12359] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[ 1798.572255][T12359] usb 9-1: Using ep0 maxpacket: 8
[ 1798.610541][T12359] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1798.620072][T12359] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1798.765186][T12359] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1798.776282][T12359] pvrusb2: **********
[ 1798.782286][T12359] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1798.792729][T12359] pvrusb2: Important functionality might not be entirely working.
[ 1798.800701][T12359] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1798.812426][T12359] pvrusb2: **********
[ 1798.971786][ T5841] usb 7-1: new low-speed USB device number 34 using dummy_hcd
[ 1799.006078][ T2330] pvrusb2: Invalid write control endpoint
[ 1799.235547][ T5841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1799.247142][ T5841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 8
[ 1799.250072][T19644] usb 9-1: USB disconnect, device number 28
[ 1799.258903][ T5841] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1799.259053][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1799.368452][ T5841] usb 7-1: config 0 descriptor??
[ 1799.412141][T27475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7126'.
[ 1799.415753][T27466] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1799.479178][ T2330] pvrusb2: Invalid write control endpoint
[ 1799.490222][ T2330] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1799.501659][ T2330] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1799.509354][ T2330] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1799.519762][ T2330] pvrusb2: Device being rendered inoperable
[ 1799.611896][ T2330] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1799.651986][ T2330] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1799.702646][ T5841] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1799.722122][ T2330] pvrusb2: Attached sub-driver cx25840
[ 1799.727974][ T2330] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1799.738679][ T2330] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1799.911257][T12359] usb 7-1: USB disconnect, device number 34
[ 1800.698609][T27491] loop8: detected capacity change from 0 to 1024
[ 1805.001934][T27554] ALSA: seq fatal error: cannot create timer (-19)
[ 1805.483790][T27568] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1805.892573][T27575] veth1_to_bond: entered allmulticast mode
[ 1805.926720][T27574] veth1_to_bond: left allmulticast mode
[ 1806.905678][T27591] input: syz0 as /devices/virtual/input/input72
[ 1807.341944][T12359] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[ 1807.531733][T12359] usb 10-1: Using ep0 maxpacket: 16
[ 1807.587990][T12359] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1807.600047][T12359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1807.745214][T12359] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1807.756094][T12359] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1807.765411][T12359] usb 10-1: Product: syz
[ 1807.770393][T12359] usb 10-1: Manufacturer: syz
[ 1807.775580][T12359] usb 10-1: SerialNumber: syz
[ 1807.848911][T27608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1807.912743][T12359] usb 10-1: config 0 descriptor??
[ 1807.930959][T12359] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1807.940735][T12359] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class)
[ 1808.581825][T19644] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[ 1808.610786][T12359] em28xx 10-1:0.0: unknown em28xx chip ID (238)
[ 1808.802854][T19644] usb 7-1: Using ep0 maxpacket: 32
[ 1808.820304][T12359] em28xx 10-1:0.0: Config register raw data: 0xee
[ 1808.832045][T12359] em28xx 10-1:0.0: I2S Audio (3 sample rate(s))
[ 1808.838504][T12359] em28xx 10-1:0.0: No AC97 audio processor
[ 1808.921867][T19644] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1808.933310][T19644] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1808.943587][T19644] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1808.952984][T19644] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1809.091645][T12359] usb 10-1: USB disconnect, device number 30
[ 1809.144047][T19644] usb 7-1: config 0 descriptor??
[ 1809.735054][T19644] savu 0003:1E7D:2D5A.003A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0
[ 1809.947123][T19644] usb 7-1: USB disconnect, device number 35
[ 1810.445877][T27641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7181'.
[ 1810.486550][T27641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7181'.
[ 1810.574138][T27638] fido_id[27638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1811.684583][T12359] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 1811.995339][T12359] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1812.022910][T12359] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1812.034558][T12359] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1812.045132][T12359] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1812.158680][T12359] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1812.168391][T12359] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1812.177802][T12359] usb 9-1: Manufacturer: syz
[ 1812.281983][T12359] usb 9-1: config 0 descriptor??
[ 1812.748170][T12359] appleir 0003:05AC:8243.003B: unknown main item tag 0x0
[ 1812.865536][T12359] appleir 0003:05AC:8243.003B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0
[ 1813.012717][T19644] usb 9-1: USB disconnect, device number 29
[ 1813.253402][T14168] =====================================================
[ 1813.260676][T14168] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xe7b/0xc820
[ 1813.269469][T14168]  n_tty_receive_buf_standard+0xe7b/0xc820
[ 1813.282121][T14168]  n_tty_receive_buf_common+0x1a59/0x2610
[ 1813.289114][T14168]  n_tty_receive_buf2+0x4c/0x60
[ 1813.294952][T14168]  tty_ldisc_receive_buf+0xc6/0x2c0
[ 1813.300339][T14168]  tty_port_default_receive_buf+0xd7/0x1a0
[ 1813.306492][T14168]  flush_to_ldisc+0x43e/0xe40
[ 1813.312243][T14168]  process_scheduled_works+0xae7/0x1d60
[ 1813.317991][T14168]  worker_thread+0x1741/0x1de0
[ 1813.323117][T14168]  kthread+0xd5a/0xf00
[ 1813.327373][T14168]  ret_from_fork+0x207/0x6f0
[ 1813.333296][T14168]  ret_from_fork_asm+0x1a/0x30
[ 1813.339810][T14168] 
[ 1813.342488][T14168] Uninit was stored to memory at:
[ 1813.347755][T14168]  n_tty_receive_buf_standard+0xe74/0xc820
[ 1813.353888][T14168]  n_tty_receive_buf_common+0x1a59/0x2610
[ 1813.363774][T14168]  n_tty_receive_buf2+0x4c/0x60
[ 1813.375541][T14168]  tty_ldisc_receive_buf+0xc6/0x2c0
[ 1813.381669][T14168]  tty_port_default_receive_buf+0xd7/0x1a0
[ 1813.392595][T14168]  flush_to_ldisc+0x43e/0xe40
[ 1813.397456][T14168]  process_scheduled_works+0xae7/0x1d60
[ 1813.404642][T14168]  worker_thread+0x1741/0x1de0
[ 1813.409612][T14168]  kthread+0xd5a/0xf00
[ 1813.414462][T14168]  ret_from_fork+0x207/0x6f0
[ 1813.419262][T14168]  ret_from_fork_asm+0x1a/0x30
[ 1813.424432][T14168] 
[ 1813.426831][T14168] Uninit was created at:
[ 1813.431304][T14168]  __kmalloc_noprof+0xae9/0x1bf0
[ 1813.436615][T14168]  __tty_buffer_request_room+0x3d4/0x7a0
[ 1813.442574][T14168]  __tty_insert_flip_string_flags+0x157/0x6e0
[ 1813.448848][T14168]  uart_insert_char+0x368/0x930
[ 1813.453976][T14168]  serial8250_read_char+0x1ba/0x670
[ 1813.459346][T14168]  serial8250_handle_irq+0x930/0x1110
[ 1813.465127][T14168]  serial8250_default_handle_irq+0x116/0x370
[ 1813.471310][T14168]  serial8250_interrupt+0xcb/0x420
[ 1813.476770][T14168]  __handle_irq_event_percpu+0x118/0xed0
[ 1813.482700][T14168]  handle_irq_event+0xe0/0x2a0
[ 1813.487642][T14168]  handle_edge_irq+0x2a9/0xb30
[ 1813.493991][T14168]  __common_interrupt+0x9d/0x180
[ 1813.499316][T14168]  common_interrupt+0x94/0xb0
[ 1813.504839][T14168]  asm_common_interrupt+0x2b/0x40
[ 1813.510051][T14168] 
[ 1813.512596][T14168] CPU: 0 UID: 0 PID: 14168 Comm: kworker/u8:16 Tainted: G             L      syzkaller #0 PREEMPT(voluntary) 
[ 1813.525172][T14168] Tainted: [L]=SOFTLOCKUP
[ 1813.529611][T14168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1813.539915][T14168] Workqueue: events_unbound flush_to_ldisc
[ 1813.546022][T14168] =====================================================
[ 1813.553133][T14168] Disabling lock debugging due to kernel taint
[ 1813.559403][T14168] Kernel panic - not syncing: kmsan.panic set ...
[ 1813.565950][T14168] CPU: 0 UID: 0 PID: 14168 Comm: kworker/u8:16 Tainted: G    B        L      syzkaller #0 PREEMPT(voluntary) 
[ 1813.577970][T14168] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[ 1813.583689][T14168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1813.593868][T14168] Workqueue: events_unbound flush_to_ldisc
[ 1813.599844][T14168] Call Trace:
[ 1813.603198][T14168]  <TASK>
[ 1813.606202][T14168]  __dump_stack+0x26/0x30
[ 1813.610681][T14168]  dump_stack_lvl+0x50/0x1c0
[ 1813.615447][T14168]  ? dump_stack+0x12/0x25
[ 1813.619951][T14168]  dump_stack+0x1e/0x25
[ 1813.624255][T14168]  vpanic+0x435/0xd40
[ 1813.628411][T14168]  panic+0x15d/0x160
[ 1813.632502][T14168]  kmsan_report+0x31a/0x320
[ 1813.637189][T14168]  ? __msan_warning+0x1b/0x30
[ 1813.642041][T14168]  ? n_tty_receive_buf_standard+0xe7b/0xc820
[ 1813.648318][T14168]  ? n_tty_receive_buf_common+0x1a59/0x2610
[ 1813.654426][T14168]  ? n_tty_receive_buf2+0x4c/0x60
[ 1813.659663][T14168]  ? tty_ldisc_receive_buf+0xc6/0x2c0
[ 1813.665204][T14168]  ? tty_port_default_receive_buf+0xd7/0x1a0
[ 1813.671579][T14168]  ? flush_to_ldisc+0x43e/0xe40
[ 1813.676600][T14168]  ? process_scheduled_works+0xae7/0x1d60
[ 1813.682494][T14168]  ? worker_thread+0x1741/0x1de0
[ 1813.687599][T14168]  ? kthread+0xd5a/0xf00
[ 1813.691996][T14168]  ? ret_from_fork+0x207/0x6f0
[ 1813.697156][T14168]  ? ret_from_fork_asm+0x1a/0x30
[ 1813.702254][T14168]  ? ret_from_fork_asm+0x1a/0x30
[ 1813.707510][T14168]  ? common_interrupt+0x5e/0xb0
[ 1813.712694][T14168]  ? kmsan_get_metadata+0x146/0x160
[ 1813.718151][T14168]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 1813.724799][T14168]  ? kmsan_get_metadata+0x146/0x160
[ 1813.730205][T14168]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1813.736212][T14168]  ? n_tty_receive_char+0x1223/0x14f0
[ 1813.741800][T14168]  ? kmsan_get_metadata+0xf1/0x160
[ 1813.747123][T14168]  __msan_warning+0x1b/0x30
[ 1813.751790][T14168]  n_tty_receive_buf_standard+0xe7b/0xc820
[ 1813.758007][T14168]  ? kmsan_get_metadata+0xf1/0x160
[ 1813.763796][T14168]  n_tty_receive_buf_common+0x1a59/0x2610
[ 1813.769699][T14168]  ? kmsan_get_metadata+0xf1/0x160
[ 1813.775178][T14168]  ? psi_group_change+0xf8c/0x1420
[ 1813.780449][T14168]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 1813.786987][T14168]  ? n_tty_receive_buf_common+0x7f1/0x2610
[ 1813.793029][T14168]  n_tty_receive_buf2+0x4c/0x60
[ 1813.798096][T14168]  ? __pfx_n_tty_receive_buf2+0x10/0x10
[ 1813.803832][T14168]  tty_ldisc_receive_buf+0xc6/0x2c0
[ 1813.809236][T14168]  tty_port_default_receive_buf+0xd7/0x1a0
[ 1813.815245][T14168]  flush_to_ldisc+0x43e/0xe40
[ 1813.820532][T14168]  ? __pfx_tty_port_default_receive_buf+0x10/0x10
[ 1813.827130][T14168]  ? __pfx_flush_to_ldisc+0x10/0x10
[ 1813.832487][T14168]  process_scheduled_works+0xae7/0x1d60
[ 1813.838284][T14168]  worker_thread+0x1741/0x1de0
[ 1813.843264][T14168]  kthread+0xd5a/0xf00
[ 1813.847470][T14168]  ? __pfx_worker_thread+0x10/0x10
[ 1813.852779][T14168]  ? __pfx_kthread+0x10/0x10
[ 1813.857493][T14168]  ret_from_fork+0x207/0x6f0
[ 1813.862249][T14168]  ? __switch_to+0x521/0x750
[ 1813.866991][T14168]  ? __pfx_kthread+0x10/0x10
[ 1813.871722][T14168]  ret_from_fork_asm+0x1a/0x30
[ 1813.876703][T14168]  </TASK>
[ 1813.880348][T14168] Kernel Offset: disabled
[ 1813.884730][T14168] Rebooting in 86400 seconds..