last executing test programs: 6m29.887024265s ago: executing program 2 (id=44): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0x2c, 0x0, 0x4}, 0x9c) 6m28.839301152s ago: executing program 2 (id=47): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 6m28.248711522s ago: executing program 2 (id=51): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) 6m27.671987918s ago: executing program 2 (id=55): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) r1 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3, 0x0, 0x2}, 0x18) mq_timedreceive(r1, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 6m26.181272385s ago: executing program 2 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x8000, &(0x7f0000000480)=ANY=[@ANYRESHEX], 0x1, 0x5a2a, &(0x7f00000010c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x20080, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x8008bc40, 0x0) 6m21.163908348s ago: executing program 2 (id=73): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000180)=0x1d) 6m5.655185243s ago: executing program 32 (id=73): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000180)=0x1d) 5m35.917906658s ago: executing program 3 (id=166): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x602e, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x803e0000}, 0x3) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 5m30.927594485s ago: executing program 3 (id=176): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket(0x2, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5m29.119125731s ago: executing program 3 (id=178): syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x14, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) 5m25.566974394s ago: executing program 3 (id=183): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e0008006c5329c5000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 5m24.647237754s ago: executing program 3 (id=187): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f00000002c0)=0x3) 5m23.607971238s ago: executing program 3 (id=188): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) open(0x0, 0x141080, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, 0x0, 0x0) syz_io_uring_setup(0x6113, &(0x7f0000000140)={0x0, 0x9314, 0x8, 0x2, 0x349, 0x0, r7}, &(0x7f00000000c0), &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r8, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000037000000080003", @ANYRES32=r0, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r10, &(0x7f0000000100)=[{0x0}], 0x1) setsockopt$inet6_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f08d001e194c641c", "9d8e2b29f66c8654e04415e9df7ef0f3", "fd30eaa6", "dc7693f089ec2ce6"}, 0x28) 5m8.092001828s ago: executing program 33 (id=188): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) open(0x0, 0x141080, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, 0x0, 0x0) syz_io_uring_setup(0x6113, &(0x7f0000000140)={0x0, 0x9314, 0x8, 0x2, 0x349, 0x0, r7}, &(0x7f00000000c0), &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r8, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000037000000080003", @ANYRES32=r0, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r10, &(0x7f0000000100)=[{0x0}], 0x1) setsockopt$inet6_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "f08d001e194c641c", "9d8e2b29f66c8654e04415e9df7ef0f3", "fd30eaa6", "dc7693f089ec2ce6"}, 0x28) 3m52.040253148s ago: executing program 5 (id=404): keyctl$session_to_parent(0x12) 3m51.131709204s ago: executing program 5 (id=408): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000008280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000001ec0)={&(0x7f00000021c0)={0x50, 0x0, 0x8, {0x7, 0x29, 0x9f53, 0x10000008, 0xc0f7, 0x48e, 0x8, 0x8001, 0x0, 0x0, 0x80, 0x101}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000000)="d2c113c29ca1f0329c09333c4e57bb838cfea716579dab7d1cbdce058b04b86cd2573f5a46ec9ad1bb3c276903ebcad8758f3bdb0ea994c5ea01d7771c5b21040018c812e3b3d2c92d14193a28633e7a06c3239d8e97c69f11a821f535082d74ee0c1925c46bfba566d8c9647889a9dde67089b24871471415a695730085f81a0b7c8dc2eae85ccd015b85d7d1fecd2528f2a8369ee0315327ba0d506a583c716ea4fa23575566c8cf1a2a844691717179b82f10998b7d540188e57e864820665ab70db2d483c4fdcb115ea6bbd4a888f9d383f6fea063635b69686590f540c638a77fe8e8cb266cf72667e61871faf1d1810c749c30c5a7b61609d81114f7aa0355967a7513f659d021338ddb687b0f7372386170902b612c56f58dc73a1ccecb389ccd39f926ee91220a5c053dc277919ed4e32b63da14781cb46227a71388f2aeb37e8971d4a554824bb05f7e6861a916c94204feae48f115680a40b7b2da6ec3af295979016cb78ee53d347a2a8de81c26d0468db8b59df449513e109f26ccdff64403180deba17211813b69ef3f0c42f498a6f3d05a4e7f47f99a8b9ff6bb375fcd1cf444a794a7c2a274f2786c8c220b1f80f2d0c1f311960b37357e31198a44f1e25aaa320f6daad7a42c0367de29a2d0d5567098dfc4ac2b0393a7accfaed79afeec5c9d526503e8fbbd3d1f6365c698775999e5109bada3ec51a9d4b884631086bcfa4fe99135a7c482d9e3d2cbd0a58a42f8cd737a812c21185d909bab234d412bd450da975be70eac2a8db479f7030ff5f41817cd798d59a2db9d8d829765459531044ba3bfa6fc89d046c75e707133e5211fd05d20f63d4f493b23bcd966e3f4314a512451b761fb3b3ed815da07c604f71d2a86937142ede6fce427766dbde15f74f2c45d4c3c08e815b507bb05ee97ddf7ed79ea2ddd5c6ef057d455d84c79bdfd6e68ba6f5cd806a6b9dfd5ed65e394554fb59df7aba2676779a547cf8a7c97379abc760e94e01264a2a23c8c63296ec0d9a4e0aa5c9c470fe46beb8db8322372f3649b7d2ad0b8d09e77e4757a2f40835860b56d41382fabc35d891deedd2168ff3b20f3345ec3238ce795fd9b0311fbd7cf10bbefe4e9349bdf7ea5294f3fc3ded1203c01c9a057641ea122eea48e30b942fdebdc4e7263353361dfcf3562eb3f7eb491fe5394ac1e9af734950b3de71b557bd1baf334d39c5dd9e6842a3ef24004eafc5eb85fbdad5c1e49f60f565da146b119f27ec9077774e21300edf2883f34e299ae0465779ab80ba2d097f5d791a72785f35090dbc369864476c33d3279382a49ac45be1706211659d6fac1ae12d772fa270eb3746a69082e67664f4be335f2d172d52f5083a0768e5d4332352be40eb41e3406de4498e740a470141032ea251c144cdb5352d8049281898c72f13a5d3509c9c77308fe45016abfd7d42b1a022a60b9a5bbcece7c0a10bf9f157995465729b38fdcadd0d977574636206982a6b4e8f24bc75e3eb054fb9ae81e878afd24cfa9756f053bb89f0e4a42e195bd2af8a91a6dd5c9fbccd938681a7387ed22a0e3a8284d3182aa7ef1905a267850fc405494d7079f6d0364287cf7b16dc2310b15bc49fb68d1a96075cb5f30f4fc2ec0c51d0b7e806e78f108f4060a55b8c23b3c89a2f2fa321d5138019c417a504d230ec496583933daba2998e20d8f9a2e6798f681e1d4df88fa4e084513d3648ed4f6624d8b894470cf325e837ad177a634bf58d21378fa0d3370bcb724fa88314bbd0749bbe6ff9dd5d7826701891c180278833c3327a8b1500c3e86fbdaacaaba0e0f708052ddecaae4fe142689c812aeccc7211f61159e0787a8f639d1f0a4db373c17317fea5d3ca1c6060fc44a2d02502f0230334acb69861f0cdb82220827f5887a14e7eab133ce4ecd9a414b2a6b31d8c631325319bbb65ad01aaea7e157fea6cbb434c67f4582028c32f5890ceb243dc972e61e122cb36840d5838dff32d4b613ae1909f3970404fb1973f1e80b0e388141b2e24d47276be045880a4ac18fd136c08cf266b35c75e9b796f6210817439833b613195fe4688b22127a978d20f8b32e3df3297e09a565e659857d8052bf69c5006c5870bd25e6c3aeb411553924d06ccb849cdeca659448cb220d259b4ee20d256d44149814b5e13ab365c448369a43553e01874acded99d24da7d1c9c283dae95b0b5311344af85c7c9a8483fb18a5bfd7a4fb4bbade211edfa4c30f3d1b5bc9672a02adb5d638faea66424e2c82540937dc4cf21392fe16e05811f1bcfb83132deb1cf2a522f9b543758b25d6949400af5d2a7a566f4ab0f5fe0b0a8e8379850e3ed78cb823f5b59b3df4de700427b197720ec69b86c76080b2cfdc4a2619e9d2a901e247e591d79dea91257c0d4a3c7ebb86af42de6833aaaa2d69b71e684236705744b79c62079236759def4a37a0b97742dcdc1af8e54385ad496af31cffe7539e4a69d65ae28845439e5e3eea34785e6065c32f3c7b71ef4edfdb16ca9ee9d5d4e066a60f9919461ce932a61c4100276dad7a22447c681bfebac9186f23dd38509090e0c0fd60219d33174d0d1f5a2b3eb194ae1c7003b159dd560e909fcd0b14b803ded8a94f2a61ca59f9015a673c018515b7605512ecdec58b60aafcba88e88b790e6dabc09a6721613d4e60ffd8d01b07ccacc1c7f2415347f5f5aa9eb7e5d27090403a55d0364721bf0363e34bdf9d92c8e83fe39e8d23e0a038717c00f82dd27709ea69a7a857575f0e039b067750b0e226dd01091b6aecae409d563a72e0805c8c101401a9d4356c532ec27cf25ad0ea92eb137e5bb367623155b3e62baa1cb29d86e4765a635d180d26f37f58a24683494cca93547b1f9ff0cc81c085cc4509b746c5327f1f169ca3bd059d324ac91e3c05bb225e5f81655d2f5b5f0cd6389d35be14f63cf76ef856634c5c42f5f6763a457be1745d9ddc4e7a77cbe86398585dd18159eb7dadc2da143cabd5794c4caafab774c5b0ad661f6f9e7bd5163af6f214bbd6351560cfb5e9fe42d3b67912e0bb52926429a43c27aa6c52e904660029285c4b763d6becb5cd4e9a029fb092ae20df18e073627d896a8de5f89474cbc2d2a525edbaa635a9704ec9f30bc0d18dea437a986553da723befb7f91d73a9976a528d2ff2ff80aef0fb80b4c84fca0d810e1f0c3857aef2616c9908aa7dc6a02e28085ccbb88e13c8c8c1acc631e4121e39b453a5897602dfcff5629f88d75ae7375cb9d08969dc6e870870c7aaad3c62f1f39c363d7edfda2d5ce1e9e62b25cf3b31bf4da9b90616a79d3be8f031837844c13fa6ea8af83db6eaa6abcb5158c38abe7fd39b8710c7d8d830ac93d5d3cec1d038c7947861c4ea118b3c205be5c441d35ef856c9a81f970c2850397e735a2fb991fe2dd0f293224ed263963a1041dcefc67b77b25b82d6ab047eb282702ddab528cc4bfb8c82d86352057e893bfd4b41e3396d64d7f1a78f6a0d4cd420d4bf84eb791a513163f837556c1a2e7c4e84ab9bfaa3a23a7114bfd301ea1f6b5e5c94e076e8f42a4da7e05224589005625245672ef85a11d6ac4b379b72660583ccb62b3d6cf00090c9c0ef7f3e3bce7bc6e10baa0498799de647451281afb45cf053c7a57eca0732a8f9e9f02437be51649bc7d1a391aca1561fb6b2d47817394e97e426afda0fb9fdd248579b8eb768ef9e249dbef8b0ebbd0e8dec2f149e2356df3a9f728b5392875ea476b54a1c990040ef4e63373566611c5b555b5d60a0e69f32e05db3f9047ea3e261ee6e3d87516bb0fff783333eef6444c8d9d17f8b23514d6358c62cd34dbf0e9dd60f54f286c533d68f2610c82eaedd9e512884f37211f190a08cd3766c7ca6a5043ee9dbabf5994c48d03a2fa5ccedce7ffbe9cee1e9d54036ca4ca7c4fdc339011448c7aad3d14b639dc179e7a97f03b606b0e47a32b8c9ab82c59fbba5e0ab663538aba9ba71d27216614f59bdccb050cc2512f65f465e8476d36855df64b8bb181907e91f45c6262dba02b35dc238bb32b9cc7070d31f7f95f2193b5fca347874a64041ab629cb5c3a3d77ba999793badacf01c4244ae13c0d77fe01fae16c489fcd58010afc3084ffadb9bf7264f23f1ad0e8d9d762dcc431163c343054181812c9cd1a6ecdc9964caa0a2ba8cd29271e6824891129b89efc1ea2996100f1932940a49a324e8eb688d05ac7d6ba273aade15c2be8cc74ef1eafad9b9ebfdfa36edc5c6d109485a48ac6a8395ccdf23779919953cf3c61c3a635c7e782f84098f3cc6bea7644cf3924c2352c97c76bc7141227dd29f1d47ef209adc3aaefd8cf204fb265e6b262e83736c2f26b22d80870af83095338c23a47a5a86af2ae7decd1aaabd925ae900bfe8e82728e14fd82677769bc9962dbb507a61e206821ac9c0940b12d79ecb7a916b9f6573fa3d9a7ef773f66de8cf8db6536d986a29d7b50a2973d228ec48468c5ebec6253130c578e5ec2848b62e8e1082a3d584e84b86e24211a9546e1abf79e568827af5d9ba98ba7b33b5cd9cb7a81dc873ea11276049d9d6206d2ed0933ada7ef9b6823f24b756ebea834297743ffb146350f320ec9044df55b20df0ff84584c16350f465b5ad7d364f9b166fb534c2a0e65f6bb4d61feeb84463ceb4a4f7853c0c2410955881a60170b0bbc131f6699e2616752851063c7e8b0a82e4357b84e48bad8002610e5770c17ee0cb301f9dfe8d5cbb66c6962b5edcae17b5c5dd42026737ea9e2c79bfb9392d290b44d66ade6eb62e26321ee214a6d15facb7cca610b6209392179a50f3dcba1494d3f302745461f6172d329a12d68405be5ee05ad2a641a7aa3da1d1fd3198671bf1af5b39e2bdeed49df80cf0c6e0edc5c4812350097bda47d3fafb3827d73eeb0b29320c74dae6d4d61d8fc269652835f5a7f98710c644dd50d3af618651b41916bbabb9ea7cc46c8208dd7fb99474be66e1a970c899f17129a9ed17ccce0d93411e71b8f1c7790c787f7a97a50d54acbc6f4eee49a38882c34e3477c97e1c6da0b39a1e9d0d25a3cea9364033bf4f625a02412174d03dafd642526867578f71f2e52920833b8d23713d5ac48165f49545f6c7c75b5b4ef2e0682f8f2e191fdb6c0ba529856f887391f8d5aa3f7dfc5230170b97662611e53a4436bf4e98a5ceaeb16a79bb95f962b2675cb6da9f1cfcdc1ab604ef7749fe87ccb5a3660f463ff5f488b5c544cf847be84dab22d038730a7021cdc7f7ab714c1561c98a39cc92cd6aaf53c82b28665114ac18b2149ee7f1b52f894c28a49eb45d4cf6a0e65df39b3c717039ae41958fe810c1e05ad62ceef2980e0cfd891bfae0db61fb1c8d65b6812ef1bf5d426f955ab4826eae69f531979699685f5312882032a5f47ed8cf2e98e67d9f6c299d2060a04b4aa677500b48a33586b10f71293d57de846d2683621b588630a6ef06a41437bd99366787b787a68c71779132d0ee73aa5f97d5b9ca18a7ae26b7002512df1073e2eccdb4d2f137a15d9604e10547fa465aeb4f2e5899b531adeb5e72fb76c2c1c9d18ceb4a23a5f6174ba86a7119d82e35cb5a5d1c6a093351aaee0094b32b92417dc50c1d3806fffdafd2ec0e3ba176d84bdb7d59755e9083e61ded802e2a089ae9d6746f738b55845bcd4ff0a21888c2c6b972db043973fb323fd1c15e70137aa6a4bce3f60f27c1d1488f3751e5425a5776c7cc3a3c8acbfbd2171407e1a242e8e241e6e9e1287d8995265a8092ec59ad99652e63a41b744f34392017f29c1b1ca4ce7728200743d4497a70cfd2369d0ecf9e0ba6f28da25b2d918a06ad1173091b8d750b8c2120321818a0912bf47b96c9a8962930a843ea8419b24b8618b7b43482291906e151bf39d3634756d9e1ff5a6e787d1fc4be7349c38a3b882e059a5da930a9cb2a01eb8b24b54def2a2949538fc063542921947f1997dbee59842a50a043d431649ea0adde68c43259ab51592107b2618c5f761364d4d3d5d0f4d4ae1b94650cb4b695db5831c6dd789140b87525d9ed46fb8dce8fa75d68f317dfc3858d810928fb3530b7ae8701d622b0e69ab16cbbd46c8165c467850d081292da8147fe07f472776d1e2c75c17bdc0f8bafbc964da953a5efe64af69944f0f8858b2a4dece04428ede8967d0e93827910400af8a859b59579d9628191b291732bae90a3b50f8b2b7728725568a83e006ed21e940d4b7e7291ad6365138aa2d59c0b303cc298f7a70d0c39e4f17a878083631b1f96a65d7b4c5a4403929180694f55b71ba29685bdf472f0e21a1c8b3c2dbfc4892ffbc0f0f23f38ed0b785080c11b0766ffc5a0c2c750080b764df159e42ac8eb82681baec5b0ad7948153679162c223f63bf22545718accf2a30bc4402f6b54996baa00508c6def488975a2e2bf2a8dbcff49293e83f998f8baebe722cdfef96c46ac3d945d56ada194353f7cd03d2b86cb9844f7d63f008fbe553fe0023f6968e8bea9054ed3c567e5c55b283fb2337fbd20510e5e098537f5c1baa6b509f63b1e812840aaf470690894a2725f4460a106a3b0e14b12b47c3fc1a083ae7e8cd2e710b5d428b2063f7bb91105255cc0fcc8ac51398ec3df6416d283c4aba6ed44846e82be02d242c710c973c5f0a9b3b16da8a96f5cd2a164a3fa040075b0cb99944f1b34f7e79ae039d15a6c992cb40aa403de90992c064e1771f2a396734480f43b024dc799b8e242df235dc0d33cfdce41755722907f4533a1480d78e99320412326c27e15434fd3fdb19ed33a07063a8a62b39ce14be2ea1e0adadec65fcf4f19901bd801b87e90fc91f1270b420fb530b71b7aea9ad23c4a4ad28d4b63444bc2fa7b44247d5e9f0ca0209a489035b4521b5e886a419df1f9d0e27b9c5007ee75fd3909d4e0156973bdf2ff8d1a88cad1d534ba93648ecb34a30b1e760f1ee8cfb90c27c36385fd68ee48982e5f0c190e8786b7ef0e1dfd3cb1cc00efc19a92020b509d3e2c74b4265bdc765085bc49c6fc61476aa22cff375a78c59f33394cc6ff460584ebbd8dba2cbfe97feb1c9147068dbc1d3e25631ad8478d826d88c28b2cf967d07d3ff845cbb25699406d106eabd31066e9cf8abbe7598f71cca663a6f63bfb63caa95d3a363e69e9a3bc889d026df28c37e41786bf8c9a1ccc06c3499986a72bb10367f32b1b8a55365c2a5b46061b58b81c5da69ad39db6c468906f1c1225527f1b26a3dbad94b1419f3671086b061117206a634cd08beee1fcdfb4a3a7cc78b3cb1293dc900d0859505018b38033a1cc9a0051968af1f8fa60350865328b6834f9c30bb1734949fcdab62cc6904b285322da3d49f188019648cac314d65a7c57f4e25864f17e346e7ebbe411695a237622356ecc10e66c8ba33e7106a756b8d3abc1a1aababc26413adcfda74a59b9002a7e2e3edb3e7551d32c461c2e40c25cb9de751ffda44d7f353513c5bbbc473594127c09775844dec5dc922caea5532dfa98fe80d80243233a4f0c15520d9dc76da3623aabef3582380ca4d2f9558d6c71b672f259b94f26710aa1d933b3ad79c8755a96c18fcfd62a972ca80ea0d33afbfc80045ba7dab492aa06c73ea3a598b2bc6eb1549627d183c25c3486814960eb1e1b02200a92f51b8642683f88185a9ee91c6dbb576dd8a869e1338b81ec205d979242bd963308af90ec23e01d253a70440edd3ebfac8e489db0a70bb5c887f22e7a5de33918374a9ae5229d419b1948eeb23bdf8dce3c5df3b81d1a3e3b38e095f261cb9e00f5567413a5c13abb469fdf64adc830cc442a099609cf0ebd3ffe936d77d6099d816be2b4cdd31e4fdf5af5904120ec65e81138416462f9e9bbe9ba6d5980c7de01288bd9f4741848802c32f3774678367c70014e531ad7f95b5527d022232ada51148012328f1693b2d08b8eba80dc26d8e9fc369b410331ed720e410ded5bd03ce69942ffb97489a2c5b6e4da93cc73811738a141c3a16d4ff6edf2ad1b3d3ae45a21c5ca2613b92e7871dea89d3cd699b86520c80f6a391cc2911538f8108dc90203b0e74ee43a087e033265e0745a9c991facff49339c40601420bb72ef014bc4b9a51cad1dcde9f1567b4ae9d11b1416ff3d8dee15f4672bdbca4348e7e71f8d75a73851bc0ad539312b7d52c498602a5eda4630296fb40aaa90d8f6122da7fb56d02755f861df193bdc5effd8a0e54c2ef78a284f7543c2b25a81bf545be3a3f549aabe86700bf058877e3fec53813f9992814a2cebf341cedcad346dba70596da899add4d723d98366ab60997cae7e5b9d417252734d9145ab8c5ece5b5b0efdc2f2578838c500ee17b866323a951979c6f1a50da2833bc437bcddd6efaed0244df44e6069daf359289d9c50c073f0fef4be1fb3802be5ea643761ed6347a35a3f537cbde402911c28d7c7c7e6b8612facbe87221f3505ff078d0dbb28ec469fe6eba2efcb4efdcfc5745299c0850e21ee2c9ef77db8070d589c547cc7379b58677d16077093514849869ab5bf8f896fa933ba3edc676dcb73e91386cc48f01782ba635564e0f91988cf98a3a17544abfedcdc1d80540e9499bf98180feb80325194cbc369be3275ed390f8e91b8d75b1364e9fabe50a1e3b9531c3fe1aaf6523e54bb05738bd3a67ca5de01b2e479ef7678a86b13d6b747fb3cb5fe1be8913228705fc232ce422186cb79c3b66c944f6124eb414322806d47978044336221f26d3a09ed8dceb52e3c7e3413535faf1f7868cb47bbbf02c37b4cc877a1d5f4023083d5b36650b673a4e51387c64d44daf58057adaa5610d22a15329804cd51a42f663311c4e5ece9d99b5a813c4025e8e0a98c0f3ec13cf07de0b18d7e1ba7d3eb143f5825f62ae5b5f6d92b167f9dbb2177e84f23322566814296277fc2933956f818f5475b6aa031545e6e2265679d16cbedff96c4f419d5fabe99ee652feac8acf9a90771ab8ade8291b42d25ebbdc03faac02b9599fdb83621f6ae1e2e7f946520f3cff881cd600c17b4a00c08d0996f7d2bb97d35647f72b80ba8ad3b4a16cb71094b2d1193a5fa1456e4671788bc51c0d506f4809ca34620d4a75a62ddfa20ab5c4d347a08eb8784d4c572fcb473b766f5e1ce9d92db70ebee83accd58b8253da36b9542686edce545261f309144a3d64900f796620003b36ee3d44a06cc4d088f73aa45288b90476d2e1e461795d473d59500aa23a6b7724a2f0d6473dc2f0af6ea311a648e193072016e199b920bc8c0830ae18f1c17e33d73badadc0f9d34cd52b54f4d3d480a7ddfe0f140f8de1a382a4c5a722d3e0f875b69054d88b8bab94e9394ba8d28937f1ffd871d1666a377620e7f032633fe58ebc87e533bd6461b537cdde38352ece085378dd7b24fa3fd5a3dc3f5b77492e4fc91238a8bfcc4e20bb396bd3317155981ec593926f2e9f15e5ac1aa533e122441649a681d88142a93386a6ed6b2d5b18d7fb57541e31a69acee17345b08c6667ebbc53a082fbcd980b4751937ba729dd2fd9b43d06091517922dd3ea524db002db7525902a465081843191d2d7ac76adb7724ac2bb88e4cb2f3188dbf0cd47acf5011b4519ec100a44b2ee6a1dacac5aade2cdcdca777c6b5edf596b05691d247f671491f68bf2e113a7e8674309ea98ab794d05c664ade246288796270e10f4a308420a62bf0df1d1636330e88bf4cc78051e5f715c8f97b8a83119b3fb5129ac6d0733256bec96d8cf435fa005e14d88884a0ca24266a4e78e25e2519796ba31971e4d0cb44ea58c5ddf54a15e3b449642e395679fc5ba600cc6bb7f2b004bfb0d621e51f9cf16309e4a02ce4f23f4a2d225aa8c84840bf2d3522a5f7a983cfbbfe4adb62d6ea622ebb784072bc6673878c5eaa865a7657b619f48cf0c51a4b0d47b20f426adc7f8ab68238b97abf68443f0eaac3796bfd99e0bc644e4f6fc43e551eccd615db802dfb031444e09aedcb04846bb894a2cf42dd0a578dc94d727736e502194ae25bf8556373969cb7f27788b6edf5b2bf25a79c7f89289f827ed4be611d65f6bd89698b130aaadd0f2d914819f41a0185dfc73adcea80d2ee592bf32d15010cb32a95ef112bccb2b780b461637ffa1641d34e1b114cdd3dd1ceb365933efef1781f9ec620a73097594c945969c2ea036e36b2380b33599c3e1d4eb2b7f210324aee3bba5a944b71cf0246ceed878897fe00e30d0bd32b3dde08c8805e30efe39cbc9d11b97491d82fbb5d93b1997e5f3128252472ecd256b9f79611175b6f686629ee744d0ba2494607a4476ea5f934c936403509c14bddbc2403ad5d97bfed0da36707b66f39ffdcee7ab39602e740c1ca9761570cdbab5f56b2060db428921457445b15c4c92b9c4b0ebb0746936bc3053836fa884e97c96e44d18a5a52feca033ec4caf950927bf9a281ea1aacb2a8b1a1f74b20de25ad5f3e459ab8b61ba5d00eaedcb6b5467dcd8608cfd48cc8c1a01f2c9f68bc9ef9adf2fd81cb3e28277c52d58f42ea87c8896383c2fa88dd15dba7172990893fe28ad1b50095b2ca20856de64693f3a663be6e34a9ccbb09add5724c5599495d0c95d2b900444651048bf418070b324016678d694b82565931159ffc37d3eefd7b482c41637cdd69b8f7051b6e88cf87a01d26d0689057ca0f66f65a2c3fbca608f7dec52d8e41ea98d21be162eeb38b27e9465d5525e0ffac3bd989adae19bdcf98edc48ff9d9d2a2f0850fa2cac8421ee6e211b1930f9fe9cb7138e8058ae476aa93c0ca49b170eb4ebbbb6fb4020d000eae537b4dd4bdfc63e3fb281848c057b94fc14dc12f8833d5ada50c8f0178137964c3b1524c59eae7ae19066a8003b9f4036b0be91f6f24baf6839f360473907135a8eb777dfe4dcf18d15fb8e16d069c48c5a128f046667f66bb22d36e986c73d2ebaa1a9638a9e8c049d0c766e2008fb19c4aabd96e3443c48377214b01dec0f73538fa5a882553a60664e549030fc9cc21a74a73cf79cfdbbfa3676a474910a295044d804b9f6a30104fc8250da4efcfddc379c3a1b84a2050ee78b18ba84ec5cb4db62540ea7be026b48d2b9294f06aa48e44087dbc494d92fe3e8648792c2b9f5d0d580afac814f8fc74208239b5f8fa6c20fc75c9d73fbe448a4fd1eb1af10165c37e7aa72c83c47dbb92bf3203bc0bea3b3ae261636b9a6b621725aed16de5c33502f152ca3704b1e83a60cfc5807177d9e561b12f43c3ded0951c4ec7af0ab29f55e3745df0f10bedcdcee2d443c0023d7547018c94e2cbb04a5c67a81d33df4dda99f80777b1db00f91bf8abb96ca360353c08b8979d00860ee3af86988171d6739a0f546f64ec34c045afd1be790176228204782836484f6d118d734c8e1b302788aa20e704502da74cd11bc5a22bb717a1d10d5176a4426e88cc132479aa7e8370772b9776ea38d5bd217b08c50f94072acbdf93e732e6ce41f92159b626e59e39925b458465ec3b0191a56d8e1c3a76110200e38380ccfcc1a05f85608bc3ea0bdbbf326bfe003158c8c9e01e90a7ae164cc20de5b23146baa9786111", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)={0x20, 0x0, 0x7, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup(r0) syz_fuse_handle_req(r2, &(0x7f0000002300)="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", 0x2000, &(0x7f0000008340)={&(0x7f0000008200)={0x50, 0xffffffffffffffda, 0x10000000008, {0x7, 0x29, 0x1, 0x4f96568c8ccfbb74, 0x5, 0x5, 0x3, 0xfffffffc, 0x0, 0x0, 0x10, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsync(r1) 3m50.267970453s ago: executing program 5 (id=413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xfdef}], 0x1) 3m48.140897155s ago: executing program 5 (id=418): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xc, 0xac, &(0x7f0000000100)="$eJzs0jFqwzAUBuBnY7cdu3foDXwHn6BnMB3tzZNLJ9+nlyh07RFygwxZsygYyUP2QAh8H0hPP/8ikP7PP2+xRryvESmlJu2aSPPyNQ7TvLTjMEVEG3+RVWU+Bw+uLs/ZR/4DWz72uatKfzh9f+4rNx+/eT7d7+IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEPV63Wuo+vK8WXbLgEAAP//2Bwh+A==") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) 3m46.019632419s ago: executing program 5 (id=425): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000640)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x10) 3m44.057719663s ago: executing program 5 (id=429): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000004c0)='./bus/file0\x00', 0x2) renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x2) 3m41.063463553s ago: executing program 34 (id=429): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000004c0)='./bus/file0\x00', 0x2) renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x2) 3m9.23970307s ago: executing program 6 (id=510): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000804, &(0x7f0000000140)=ANY=[@ANYBLOB='utf8,fmask=00000000000000000000243,allow_utime=00000000000000000000006,iocharset=cp936,fmask=00000000000000000000005,dmask=00000000000000000000004,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000001,umask=00000000000000000001042,uid=', @ANYRES8, @ANYRESOCT=0x0], 0x1, 0x1539, &(0x7f0000001f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) 3m7.875850184s ago: executing program 6 (id=514): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x3c}}, 0x0) r0 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6a, 0x400], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m7.129533178s ago: executing program 6 (id=517): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@private}}, &(0x7f0000000680)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000840)={[{@grpid}, {@nobarrier}, {@nodiscard}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r0}}, {@fowner_gt}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@flag='mand'}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_gt={'euid>', r0}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r0}}, {@dont_appraise}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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") ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x16) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d0c, 0x0) r3 = socket(0xa, 0x3, 0x7) sendmmsg(r3, &(0x7f0000000180)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="300000000000000029ce000002000000a709264bc85b0b3df8f53759c701bf"], 0x30}}], 0x2, 0x9000) r4 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000a40)={'macvlan0\x00', 0x2000}) 3m0.209012293s ago: executing program 6 (id=523): r0 = syz_open_dev$video(&(0x7f0000000040), 0xc7, 0x20000) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000340)={0x0, @bt={0x72b, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0xfff, 0xf59, 0x2, 0x1, 0x1, 0x4, 0x4, 0x6, 0x20, {0x2400000, 0x65}, 0x5, 0x7}}) 2m59.375109605s ago: executing program 6 (id=526): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x3c}}, 0x0) r0 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6a, 0x400], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m58.403907471s ago: executing program 6 (id=529): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r1, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x54f, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) 2m42.950298795s ago: executing program 35 (id=529): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r1, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x54f, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) 1m24.996128912s ago: executing program 0 (id=713): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, 0x0) 1m23.923379174s ago: executing program 0 (id=716): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x14, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x34, 0x1, 0x70bd2d, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000894}, 0x24040040) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) mlockall(0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x210000, 0x0) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0xe, 0x6, 0x203, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x404e841}, 0x8000080) 1m18.87088239s ago: executing program 0 (id=731): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m16.482044557s ago: executing program 0 (id=736): syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) r0 = openat$fb0(0xffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x541b, 0x0) 1m14.823073406s ago: executing program 0 (id=741): add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) creat(0x0, 0x41) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1m13.189803013s ago: executing program 0 (id=744): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000001dc0)='./file0/file0\x00', 0x2000c12, &(0x7f00000020c0)=ANY=[@ANYBLOB="636865636b3d72656c617865642c696f636861727365636b3d72656c617865642c696f637861727365743d63703933322c6f76657272696465726f636b7065726d3b3661703d61636f726e2c636865636b3d7374726963742c6e6f726f636b2c626c6f0100010078303030303030303030303030303430302c63727566742c636865636b3d72656c617865642c7569643d000645a6c1e199adfbc4e5a57af55061d112b46b53211c893dce553bc91c88b56451e1893cb9fd9b43338818ddd03f7909f05df5da2f58cd140826afc8be57ac8fe2cf00231898dc7b21c7cd72c7d9891f092b487f66bfb7892d2e1e758af7da50", @ANYRESHEX=0x0, @ANYBLOB="2c001f03728daf3923adddc34a323d1a7af19c36b6bb16f41f62edc7e5d46ce11fabde21d53dde432d979997105276829b9d5e41e149f56728fe24b5e19372bd5e066389ba4816674b8cc34380c9e48fc88b9122b3b20135092e958c17f26714f82bfed32b8feaee2bbfafa4e4f679271547dc7a7a54538cce099e0017bfaa2af3e6766e914d7f", @ANYRES8=r0, @ANYRES8=r0], 0x1, 0xa10, &(0x7f0000002280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000340)={0x3ff, 0x4, 0x3, 0x18, 0x14, "d2969cbbaaf7b84752ce92189c00"}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) setrlimit(0xa, &(0x7f0000000100)={0xbc, 0xe}) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) getsockopt$inet6_tcp_buf(r3, 0x6, 0x0, &(0x7f0000000dc0)=""/4096, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1014800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x1, 0xdd5, &(0x7f0000003a80)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES8=0x0, @ANYRES64=r4, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 57.799434943s ago: executing program 36 (id=744): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000001dc0)='./file0/file0\x00', 0x2000c12, &(0x7f00000020c0)=ANY=[@ANYBLOB="636865636b3d72656c617865642c696f636861727365636b3d72656c617865642c696f637861727365743d63703933322c6f76657272696465726f636b7065726d3b3661703d61636f726e2c636865636b3d7374726963742c6e6f726f636b2c626c6f0100010078303030303030303030303030303430302c63727566742c636865636b3d72656c617865642c7569643d000645a6c1e199adfbc4e5a57af55061d112b46b53211c893dce553bc91c88b56451e1893cb9fd9b43338818ddd03f7909f05df5da2f58cd140826afc8be57ac8fe2cf00231898dc7b21c7cd72c7d9891f092b487f66bfb7892d2e1e758af7da50", @ANYRESHEX=0x0, @ANYBLOB="2c001f03728daf3923adddc34a323d1a7af19c36b6bb16f41f62edc7e5d46ce11fabde21d53dde432d979997105276829b9d5e41e149f56728fe24b5e19372bd5e066389ba4816674b8cc34380c9e48fc88b9122b3b20135092e958c17f26714f82bfed32b8feaee2bbfafa4e4f679271547dc7a7a54538cce099e0017bfaa2af3e6766e914d7f", @ANYRES8=r0, @ANYRES8=r0], 0x1, 0xa10, &(0x7f0000002280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000340)={0x3ff, 0x4, 0x3, 0x18, 0x14, "d2969cbbaaf7b84752ce92189c00"}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) setrlimit(0xa, &(0x7f0000000100)={0xbc, 0xe}) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) getsockopt$inet6_tcp_buf(r3, 0x6, 0x0, &(0x7f0000000dc0)=""/4096, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1014800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x1, 0xdd5, &(0x7f0000003a80)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES8=0x0, @ANYRES64=r4, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 47.527384411s ago: executing program 7 (id=790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 45.709995695s ago: executing program 7 (id=793): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) syz_usb_disconnect(r0) 42.415727234s ago: executing program 7 (id=799): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000097c0)=[{{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000400)="2fe19fdcad2b", 0x6}], 0x1, 0x0, 0xf0, 0x8011}}], 0x1, 0x20048000) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000206"], 0x48}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 40.040461143s ago: executing program 7 (id=803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x1) 36.698028662s ago: executing program 7 (id=806): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc04c000}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x9, 0x8}, 0x8) 35.007997796s ago: executing program 7 (id=810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 19.306558708s ago: executing program 37 (id=810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 19.248806959s ago: executing program 4 (id=830): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x6}) 17.719470166s ago: executing program 4 (id=832): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000130005"], 0x2c}}, 0x0) 16.368393192s ago: executing program 4 (id=834): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) syz_usb_disconnect(r0) 13.342884027s ago: executing program 8 (id=838): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000480)={[{@nodiscard}, {@nocheckpoint_merge}, {@discard_unit_block}, {@six_active_logs}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x1ff}}, {@discard}, {@noacl}, {@fsync_mode_posix}, {@alloc_mode_def}, {@lazytime}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xfe0000}}]}, 0x1, 0x5517, &(0x7f0000005880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x82) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) gettid() r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xffd8) fallocate(r1, 0x8, 0x4000, 0x4000) 13.019172207s ago: executing program 4 (id=839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9", 0x7}], 0x1) 10.979580308s ago: executing program 4 (id=841): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 10.223824113s ago: executing program 4 (id=843): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x65, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) socket$netlink(0x10, 0x3, 0xa) open(0x0, 0x1850c2, 0x14c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x2, {0xa, 0x4e23, 0x81, @remote, 0x40}}}, 0x32) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 8.555879986s ago: executing program 8 (id=846): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) syz_usb_ep_read(r0, 0x3, 0x1000, &(0x7f0000000480)=""/4096) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, 0x0) openat(0xffffffffffffff9c, 0x0, 0x441, 0x14a) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_disconnect(r0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000400)={'gretap0\x00', r5, 0x1, 0x10, 0x7fff, 0x5, {{0xa, 0x4, 0x3, 0x21, 0x28, 0x69, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010101, @remote, {[@timestamp={0x44, 0xc, 0xc2, 0x0, 0xf, [0x5, 0xffff]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) 8.05280394s ago: executing program 1 (id=847): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) syz_usb_disconnect(r0) 5.461332593s ago: executing program 1 (id=848): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETA(r0, 0x8924, 0x0) 4.497892274s ago: executing program 1 (id=849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9", 0x7}], 0x1) 3.060679016s ago: executing program 8 (id=850): r0 = socket(0x10, 0x803, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f00000002c0)=0x3) 3.010720737s ago: executing program 1 (id=851): syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424060244"], 0x0) 2.745734899s ago: executing program 9 (id=775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000002080)=ANY=[], 0xfd, 0x5a7a, &(0x7f0000006680)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {}, [{0x2, 0x3}, {0x2, 0x6}, {0x2, 0x3}, {}, {0x2, 0x5}, {0x2, 0x3}, {0x2, 0x3}, {0x2, 0x7}, {0x2, 0x6}]}, 0x6c, 0x0) 2.25952618s ago: executing program 8 (id=852): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000130005"], 0x2c}}, 0x0) 1.700273942s ago: executing program 1 (id=853): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.520441401s ago: executing program 8 (id=854): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @remote, 0xffffffff}}, 0x24) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 636.917835ms ago: executing program 1 (id=855): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000e80)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0xfb, 0x6b4, &(0x7f0000002b40)="$eJzs3c1vHGcdB/DvrDd2Ni0hTZM2oEq1GgkQEYkTKy3mQkAI5VBVVTlwthKnseKkxXaREyHi8HrtoX9AOeSCOCFx4hKpcOBCb72BL0hISFzKAXNh0c7Orte7643dNl5bfD7R7DzzPM8885vfvOyLFU2A/1tXz6X+KEWunnt1rbW88XB2aePh7O12+bV6kqkk60mrWEtS/LvZbH6QXEmK7jBF33zAe4tzb3z08cbf20v1air710at16fqt95Xvd6pm04yUc0/hW3jXfvU4xXdyK8kOVvNYeyOJGlu84M/Pd1t6dEYtvbRfYkReLKK9vvmgBPJsfaF3r4BVO+8tX0Nbg+mdtmv/xMEAAAAHDbld+D6QPW2ms9vZjNrxfF9DAsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOtfWt5/8X1VTrlKdTVM//z2RVl6p8sLy4t+6PnlQcAAAAAAAAALCPXtzMZtZyvLPcLMq/+b9ULpwqX5/KO1nJQpZzPmuZz2pWs5yLSU70DDS5Nr+6OtVZGrXmpWFrLl96TKCdoRufwU4DAAAAAAAAwGFR7xT++rieP8nVrb//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAQVAkE+1Zigc91SdSqyc5mmSyVbGefNgpH2aPxh0AAAAA7IOpZDNrOd5ZbhY5leS58jeAo3knd7KaxaxmKQu5Xv4u0P7WX9t4OLu08XD2dmsaHPdb/9xTGOWIaf/2MHzLZ8oejdzIYllzPtfyVpZyPbVyzZYzVTydUfvietCKqfhm5ZXdRXa9mrf2/N1qPuD+nnZ2J3v8MeVEmZEj7YxMJDNVbK1sPNM5MsOP0B6PzrYtZSEXU+sGe6pvS5Pbd2Z7zreGrI3a3rG/3emWf7FTzseinYn/NtsWcqnn7HtudM6TL//uN9+fqcoHZ5d2Z6KaN8vXxuA5MduTied3k4mbS3du3byxcu6wZWLATJmJ093lq/luvpdzmc7rWc5ifpj5rGYh0/lOWZqvDn7Rc8nvkKkr25Zef1wkk9UZ2j5Ye4vppXLd41nMa3kr17OQl8t/l3Ixr+RyLmeu5wifHn2Ey6u+NnjVl5qfGxr82a9UhUaSX1bzg6GV12d68rp11s+U+X5mW81Wlk7uIktD7o2j1L9YFVrb+OnjbqT7qj8TF3sy8ezoTPyqvK2sLN25tXxz/u3dbe7ku1WhdR39PJk+ODeS1vlysnWwyqWpbWdHq+3Zbtv2fLXaTnXbagNtp/P71OudrSxmfccrdbL6DDc40qWy7fmhbbNl25metu7nrSPpft4C4MA79tVjk41/NP7ceL/xs8bNxqtHvz319akXJnPkD0e+UZ+Z+FLtheK3eT8/3vr+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfHIrd+/dml9aWljuKzSbzfsfDm/aZaHzvJpPuHp/ofNUqF10zvRfnmp1HdI0keb9HZqeVOELTyf7ta2DW/hPs9msaood+vz6j/2JmsqYUlc95695IFI3psLYbknAPrmwevvtCyt3731t8fb8mwtvLtyZu3x5bmbu8suzF24sLi3MtF/HHSXwJKzcvXeq/aY/7kgAAAAAAAAAAACA3fqM/8/A+rCmce8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLhdPZf6oxS5OHN+prW88XB2qTV1yls960lqSYofJcUHyZW0p5zoGa7YaTvvLc698dHHG/9qtlXjlf1ro9YbYmKwar2aMl21TycP9jDkyPGuVfORilG7UHT3sJWws53Ewbj9LwAA//8wChHT") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000140), 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) 0s ago: executing program 8 (id=856): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) syz_usb_disconnect(r0) kernel console output (not intermixed with test programs): as an invalid length. [ 383.668220][ T7105] tipc: Started in network mode [ 383.673424][ T7105] tipc: Node identity de3f2c92fd2a, cluster identity 4711 [ 383.682044][ T7105] tipc: Enabled bearer , priority 0 [ 383.852828][ T7105] tipc: Resetting bearer [ 383.934517][ T7114] loop1: detected capacity change from 0 to 64 [ 383.934761][ T7104] tipc: Disabling bearer [ 384.046326][ T5862] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 384.226560][ T11] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 384.292294][ T5862] usb 7-1: unable to get BOS descriptor or descriptor too short [ 384.349550][ T5862] usb 7-1: not running at top speed; connect to a high speed hub [ 384.402428][ T5862] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.414258][ T5862] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 384.453165][ T11] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 384.464909][ T11] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 384.475468][ T11] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 384.484765][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.561094][ T5862] usb 7-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 384.571754][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.580837][ T5862] usb 7-1: Product: syz [ 384.585401][ T5862] usb 7-1: Manufacturer: syz [ 384.590211][ T5862] usb 7-1: SerialNumber: syz [ 384.691051][ T7115] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 384.743042][ T11] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 385.036240][ T1997] usb 7-1: USB disconnect, device number 2 [ 385.236635][ T5862] usb 5-1: USB disconnect, device number 15 [ 386.227495][ T7135] fuse: Unknown parameter '0x0000000000000003' [ 386.704202][ T7141] fuse: Bad value for 'fd' [ 387.112133][ T7149] netlink: 'syz.5.345': attribute type 4 has an invalid length. [ 388.073107][ T7157] loop0: detected capacity change from 0 to 64 [ 388.187897][ T6175] udevd[6175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 388.455569][ T7159] tipc: Started in network mode [ 388.460786][ T7159] tipc: Node identity be798db0e117, cluster identity 4711 [ 388.469604][ T7159] tipc: Enabled bearer , priority 0 [ 388.750071][ T7156] tipc: Resetting bearer [ 388.896461][ T7153] tipc: Disabling bearer [ 390.405925][ T1997] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 390.659453][ T7181] fuse: Unknown parameter 'fd0x0000000000000003' [ 390.728985][ T1997] usb 2-1: unable to get BOS descriptor or descriptor too short [ 390.797642][ T1997] usb 2-1: not running at top speed; connect to a high speed hub [ 390.848259][ T5862] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 390.858309][ T1997] usb 2-1: config 1 has an invalid interface number: 138 but max is 0 [ 390.867648][ T1997] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.882581][ T1997] usb 2-1: config 1 has no interface number 0 [ 390.890454][ T1997] usb 2-1: config 1 interface 138 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 390.903996][ T1997] usb 2-1: config 1 interface 138 has no altsetting 0 [ 391.118908][ T1997] usb 2-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 391.123794][ T5862] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 391.128629][ T1997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.128769][ T1997] usb 2-1: Product: syz [ 391.128878][ T1997] usb 2-1: Manufacturer: syz [ 391.128988][ T1997] usb 2-1: SerialNumber: syz [ 391.163724][ T5862] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 391.173986][ T5862] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 391.188351][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.368308][ T7182] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 391.508126][ T5862] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 391.866964][ T1997] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 391.874397][ T1997] usb 2-1: MIDIStreaming interface descriptor not found [ 391.877596][ T5862] usb 7-1: USB disconnect, device number 3 [ 392.056834][ T7190] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 392.299768][ T1997] usb 2-1: USB disconnect, device number 13 [ 392.627108][ T6114] udevd[6114]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.320638][ T7130] udevd[7130]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.138/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 393.391723][ T7199] netlink: 'syz.1.359': attribute type 4 has an invalid length. [ 393.707608][ T7202] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 393.716961][ T7202] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 393.760408][ T7204] loop6: detected capacity change from 0 to 64 [ 395.319208][ T7215] tipc: Enabled bearer , priority 0 [ 395.520949][ T7215] tipc: Resetting bearer [ 395.641069][ T7212] tipc: Disabling bearer [ 396.439517][ T7225] fuse: Unknown parameter 'fd0x0000000000000003' [ 396.697556][ T7227] netlink: 336 bytes leftover after parsing attributes in process `syz.6.367'. [ 397.565991][ T5870] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 397.646255][ T7239] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 397.864293][ T5870] usb 5-1: unable to get BOS descriptor or descriptor too short [ 397.957326][ T5870] usb 5-1: not running at top speed; connect to a high speed hub [ 398.049710][ T5870] usb 5-1: config 1 has an invalid interface number: 138 but max is 0 [ 398.058342][ T5870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.068975][ T5870] usb 5-1: config 1 has no interface number 0 [ 398.075459][ T5870] usb 5-1: config 1 interface 138 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 398.089110][ T5870] usb 5-1: config 1 interface 138 has no altsetting 0 [ 398.315835][ T5862] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 398.428369][ T5870] usb 5-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 398.438160][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.446567][ T5870] usb 5-1: Product: syz [ 398.450950][ T5870] usb 5-1: Manufacturer: syz [ 398.460482][ T5870] usb 5-1: SerialNumber: syz [ 398.528161][ T5862] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 398.539935][ T5862] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 398.550374][ T5862] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 398.564463][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.701967][ T7247] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 398.884019][ T5862] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 398.886889][ T7250] netlink: 'syz.1.372': attribute type 4 has an invalid length. [ 399.094829][ T7252] loop0: detected capacity change from 0 to 64 [ 399.218933][ T5870] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 399.227546][ T5870] usb 5-1: MIDIStreaming interface descriptor not found [ 399.269644][ T5862] usb 7-1: USB disconnect, device number 4 [ 399.716032][ T5870] usb 5-1: USB disconnect, device number 16 [ 399.819319][ T6114] udevd[6114]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.163963][ T7257] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 400.173243][ T7257] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 400.495006][ T6120] udevd[6120]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.138/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 400.855649][ T5812] Bluetooth: hci5: command 0x0406 tx timeout [ 401.398379][ T7266] tipc: Enabled bearer , priority 0 [ 401.468751][ T7268] syzkaller0: entered promiscuous mode [ 401.474470][ T7268] syzkaller0: entered allmulticast mode [ 401.757423][ T7272] netlink: 36 bytes leftover after parsing attributes in process `syz.1.378'. [ 401.784576][ T7275] fuse: Unknown parameter 'fd0x0000000000000003' [ 401.803103][ T7264] tipc: Resetting bearer [ 401.916411][ T7264] tipc: Disabling bearer [ 402.391122][ T7280] netlink: 336 bytes leftover after parsing attributes in process `syz.5.381'. [ 402.838297][ T3982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.846604][ T3982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.929027][ T7287] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 402.994660][ T7292] loop4: detected capacity change from 0 to 64 [ 403.028829][ T7293] netlink: 'syz.6.384': attribute type 4 has an invalid length. [ 403.695790][ T5862] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 403.956171][ T5862] usb 6-1: unable to get BOS descriptor or descriptor too short [ 403.990553][ T5862] usb 6-1: not running at top speed; connect to a high speed hub [ 404.056319][ T5862] usb 6-1: config 1 has an invalid interface number: 138 but max is 0 [ 404.064906][ T5862] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.076138][ T5862] usb 6-1: config 1 has no interface number 0 [ 404.082995][ T5862] usb 6-1: config 1 interface 138 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 404.101072][ T5862] usb 6-1: config 1 interface 138 has no altsetting 0 [ 404.122697][ T7305] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 404.131980][ T7305] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 404.256860][ T1997] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 404.367893][ T5862] usb 6-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 404.378610][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.387173][ T5862] usb 6-1: Product: syz [ 404.396405][ T5862] usb 6-1: Manufacturer: syz [ 404.401243][ T5862] usb 6-1: SerialNumber: syz [ 404.566241][ T1997] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 404.578872][ T1997] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 404.589537][ T1997] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 404.603321][ T1997] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.757519][ T7304] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 404.879035][ T1997] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 405.247190][ T5862] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 405.254548][ T5862] usb 6-1: MIDIStreaming interface descriptor not found [ 405.305897][ T1997] usb 7-1: USB disconnect, device number 5 [ 405.392641][ T7315] netlink: 36 bytes leftover after parsing attributes in process `syz.1.392'. [ 405.637603][ T5862] usb 6-1: USB disconnect, device number 5 [ 406.188737][ T7326] tipc: Enabling of bearer rejected, failed to enable media [ 406.264796][ T7330] netlink: 336 bytes leftover after parsing attributes in process `syz.4.396'. [ 406.789786][ T7339] netlink: 'syz.6.397': attribute type 4 has an invalid length. [ 407.354032][ T7347] loop0: detected capacity change from 0 to 64 [ 407.541821][ T6096] udevd[6096]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.091038][ T7354] overlayfs: missing 'lowerdir' [ 408.291574][ T7355] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 408.464655][ T6008] udevd[6008]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.138/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 409.594556][ T7373] netlink: 36 bytes leftover after parsing attributes in process `syz.6.405'. [ 409.941105][ T7379] Bluetooth: MGMT ver 1.23 [ 410.391472][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.409'. [ 410.401791][ T7384] netlink: 32 bytes leftover after parsing attributes in process `syz.6.409'. [ 410.688618][ T7389] netlink: 'syz.0.410': attribute type 4 has an invalid length. [ 410.760939][ T7390] tipc: Enabling of bearer rejected, failed to enable media [ 411.499305][ T7403] tipc: Enabling of bearer rejected, failed to enable media [ 412.034914][ T7413] overlayfs: missing 'lowerdir' [ 412.691646][ T7417] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 413.136441][ T7428] loop5: detected capacity change from 0 to 65 [ 413.245877][ T7428] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 413.523173][ T7430] netlink: 36 bytes leftover after parsing attributes in process `syz.6.419'. [ 413.986375][ T7428] loop5: detected capacity change from 65 to 0 [ 414.841891][ C1] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.903887][ C1] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.919616][ C1] I/O error, dev loop5, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.948513][ C1] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.991691][ C1] I/O error, dev loop5, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 415.005551][ C1] I/O error, dev loop5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 415.033887][ C1] I/O error, dev loop5, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 415.045484][ C1] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 415.070876][ C1] I/O error, dev loop5, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 415.099435][ C1] I/O error, dev loop5, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 415.526947][ T7447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.424'. [ 415.536487][ T7447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.424'. [ 416.203456][ T3554] BFS-fs: find_inode(): Unable to read inode loop5:00000001 [ 416.256756][ T3554] BFS-fs: find_inode(): Unable to read inode loop5:00000000 [ 416.720299][ T3005] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.893411][ T7460] tipc: Started in network mode [ 416.899113][ T7460] tipc: Node identity 5e96bde8a804, cluster identity 4711 [ 416.907607][ T7460] tipc: Enabled bearer , priority 0 [ 416.970582][ T3005] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.103981][ T7465] tipc: Resetting bearer [ 417.261851][ T7460] syzkaller0: entered promiscuous mode [ 417.267900][ T7460] syzkaller0: entered allmulticast mode [ 417.346125][ T7463] tipc: Enabling of bearer rejected, failed to enable media [ 417.362312][ T7456] tipc: Resetting bearer [ 417.388194][ T7456] tipc: Disabling bearer [ 417.477468][ T3005] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.842547][ T3005] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.366988][ T3005] bridge_slave_1: left allmulticast mode [ 418.372886][ T3005] bridge_slave_1: left promiscuous mode [ 418.380235][ T3005] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.450205][ T3005] bridge_slave_0: left allmulticast mode [ 418.456698][ T3005] bridge_slave_0: left promiscuous mode [ 418.463374][ T3005] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.058071][ T3005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.093446][ T3005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.111066][ T3005] bond0 (unregistering): Released all slaves [ 419.287871][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.294562][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.736319][ T3005] hsr_slave_0: left promiscuous mode [ 419.755464][ T3005] hsr_slave_1: left promiscuous mode [ 419.763687][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.772155][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.802375][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.810211][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.898388][ T3005] veth1_macvtap: left promiscuous mode [ 419.904272][ T3005] veth0_macvtap: left promiscuous mode [ 419.910442][ T3005] veth1_vlan: left promiscuous mode [ 419.916113][ T3005] veth0_vlan: left promiscuous mode [ 420.498314][ T7474] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 421.637877][ T3005] team0 (unregistering): Port device team_slave_1 removed [ 421.741920][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 421.752301][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 421.763006][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 421.779200][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 421.797208][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 421.814485][ T3005] team0 (unregistering): Port device team_slave_0 removed [ 423.069914][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.438'. [ 423.079702][ T7511] netlink: 32 bytes leftover after parsing attributes in process `syz.4.438'. [ 423.157109][ T7512] netlink: 'syz.0.439': attribute type 4 has an invalid length. [ 423.389572][ T7509] loop6: detected capacity change from 0 to 1024 [ 423.624043][ T7509] hfsplus: invalid btree flag [ 423.631833][ T7509] hfsplus: failed to load attributes file [ 424.223018][ T5815] Bluetooth: hci1: command tx timeout [ 424.391276][ T7492] chnl_net:caif_netlink_parms(): no params data found [ 424.828980][ T5863] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 424.985538][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 425.008016][ T5863] usb 1-1: config 1 has an invalid interface number: 214 but max is 0 [ 425.016824][ T5863] usb 1-1: config 1 has no interface number 0 [ 425.023163][ T5863] usb 1-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 425.033700][ T5863] usb 1-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 425.044320][ T5863] usb 1-1: config 1 interface 214 has no altsetting 0 [ 425.176561][ T5863] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 425.190650][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.200598][ T5863] usb 1-1: Product: syz [ 425.205001][ T5863] usb 1-1: Manufacturer: syz [ 425.209962][ T5863] usb 1-1: SerialNumber: syz [ 425.352602][ T7522] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 425.427756][ T7522] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 425.473485][ T5863] ums-alauda 1-1:1.214: USB Mass Storage device detected [ 425.548102][ T7531] tipc: Enabled bearer , priority 0 [ 425.579063][ T5863] scsi host1: usb-storage 1-1:1.214 [ 425.641430][ T7537] syzkaller0: entered promiscuous mode [ 425.647891][ T7537] syzkaller0: entered allmulticast mode [ 425.759903][ T5863] usb 1-1: USB disconnect, device number 13 [ 425.786082][ T7531] tipc: Resetting bearer [ 425.926487][ T7530] tipc: Resetting bearer [ 426.009833][ T7530] tipc: Disabling bearer [ 426.296944][ T5815] Bluetooth: hci1: command tx timeout [ 426.727907][ T7492] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.735870][ T7492] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.743677][ T7492] bridge_slave_0: entered allmulticast mode [ 426.753575][ T7492] bridge_slave_0: entered promiscuous mode [ 426.844256][ T7543] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 426.949011][ T7492] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.957476][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.966130][ T7492] bridge_slave_1: entered allmulticast mode [ 426.977797][ T7492] bridge_slave_1: entered promiscuous mode [ 427.097413][ T7543] kvm: pic: level sensitive irq not supported [ 427.097855][ T7543] kvm: pic: non byte read [ 427.122655][ T7543] kvm: pic: level sensitive irq not supported [ 427.123495][ T7543] kvm: pic: non byte read [ 427.197099][ T7543] kvm: pic: level sensitive irq not supported [ 427.204210][ T7543] kvm: pic: non byte read [ 427.309467][ T7543] kvm: pic: level sensitive irq not supported [ 427.309875][ T7543] kvm: pic: non byte read [ 427.479278][ T7543] kvm: pic: level sensitive irq not supported [ 427.479895][ T7543] kvm: pic: non byte read [ 427.773730][ T7492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.908858][ T7492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.377834][ T5815] Bluetooth: hci1: command tx timeout [ 428.437398][ T7492] team0: Port device team_slave_0 added [ 428.472130][ T7492] team0: Port device team_slave_1 added [ 428.681643][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'. [ 428.691407][ T7564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.450'. [ 428.716792][ T7567] netlink: 'syz.6.451': attribute type 4 has an invalid length. [ 428.949778][ T7492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.957717][ T7492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.989553][ T7492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.192397][ T7492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.203775][ T7492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.230444][ T7492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.901837][ T7575] loop6: detected capacity change from 0 to 1024 [ 430.006701][ T7580] tipc: Started in network mode [ 430.011901][ T7580] tipc: Node identity 2e5c7cfa0f2, cluster identity 4711 [ 430.020580][ T7580] tipc: Enabled bearer , priority 0 [ 430.151634][ T7580] syzkaller0: entered promiscuous mode [ 430.159079][ T7580] syzkaller0: entered allmulticast mode [ 430.267681][ T7575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 430.280618][ T7575] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.456452][ T5815] Bluetooth: hci1: command tx timeout [ 430.514970][ T7492] hsr_slave_0: entered promiscuous mode [ 430.526050][ T7492] hsr_slave_1: entered promiscuous mode [ 430.535273][ T7492] debugfs: 'hsr0' already exists in 'hsr' [ 430.541198][ T7492] Cannot create hsr debugfs directory [ 430.556761][ T7575] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 4: comm syz.6.453: lblock 4 mapped to illegal pblock 4 (length 1) [ 430.598987][ T7578] tipc: Resetting bearer [ 430.618034][ T7575] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 430.631490][ T7575] EXT4-fs (loop6): This should not happen!! Data will be lost [ 430.631490][ T7575] [ 430.662988][ T7589] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 4: comm syz.6.453: lblock 4 mapped to illegal pblock 4 (length 1) [ 430.836493][ T7577] tipc: Resetting bearer [ 430.903742][ T7577] tipc: Disabling bearer [ 431.156104][ T6672] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 431.297728][ T5863] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 431.475983][ T1997] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 431.506120][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 431.569492][ T5863] usb 5-1: config 0 has an invalid interface number: 94 but max is 0 [ 431.578257][ T5863] usb 5-1: config 0 has no interface number 0 [ 431.584821][ T5863] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd [ 431.594421][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.720343][ T5863] usb 5-1: config 0 descriptor?? [ 431.751387][ T1997] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 431.763589][ T1997] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 431.774195][ T1997] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 431.783707][ T1997] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.830981][ T5863] bfusb 5-1:0.94: probe with driver bfusb failed with error -5 [ 432.007691][ T7598] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 432.030637][ T5863] usb 5-1: USB disconnect, device number 17 [ 432.088048][ T7593] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 432.158223][ T1997] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 432.215329][ C1] hrtimer: interrupt took 366528 ns [ 432.252164][ T7598] kvm: pic: non byte read [ 432.272891][ T7598] kvm: pic: level sensitive irq not supported [ 432.273360][ T7598] kvm: pic: non byte read [ 432.881905][ T1997] usb 1-1: USB disconnect, device number 14 [ 433.026639][ T7172] udevd[7172]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.340440][ T7492] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 433.426785][ T7609] netlink: 'syz.4.462': attribute type 4 has an invalid length. [ 433.488480][ T7492] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 433.617241][ T7492] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 433.764944][ T7492] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 433.797981][ T7613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.463'. [ 433.807724][ T7613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.463'. [ 435.795665][ T5863] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 436.040033][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 436.095926][ T5863] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 436.104337][ T5863] usb 2-1: config 0 has no interface number 0 [ 436.218845][ T5863] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 436.228735][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.237386][ T5863] usb 2-1: Product: syz [ 436.249305][ T5863] usb 2-1: Manufacturer: syz [ 436.254135][ T5863] usb 2-1: SerialNumber: syz [ 436.292193][ T7492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.422377][ T5863] usb 2-1: config 0 descriptor?? [ 436.528143][ T5863] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 436.639230][ T7492] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.792898][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.800563][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.960462][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.968260][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.846891][ T5862] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 437.926817][ T7652] netlink: 'syz.4.475': attribute type 4 has an invalid length. [ 438.118129][ T5862] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 438.129818][ T5862] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 438.140334][ T5862] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 438.149825][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.356084][ T7649] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 438.397673][ T5863] gspca_spca1528: reg_r err -71 [ 438.397927][ T5862] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 438.403014][ T5863] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 438.443818][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'. [ 438.454348][ T7657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.476'. [ 438.562352][ T5863] usb 2-1: USB disconnect, device number 14 [ 438.953071][ T5862] usb 7-1: USB disconnect, device number 6 [ 439.273589][ T7172] udevd[7172]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.434693][ T7678] loop6: detected capacity change from 0 to 128 [ 440.740836][ T7678] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 440.755542][ T7678] FAT-fs (loop6): Filesystem has been set read-only [ 440.791489][ T7492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.857953][ T7696] netlink: 'syz.0.486': attribute type 4 has an invalid length. [ 442.437544][ T7701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.487'. [ 443.262184][ T5865] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 443.491220][ T5865] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 443.503926][ T5865] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 443.519590][ T5865] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 443.530792][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.684584][ T7709] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 443.827571][ T5865] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 444.276551][ T5865] usb 7-1: USB disconnect, device number 7 [ 444.932485][ T7492] veth0_vlan: entered promiscuous mode [ 445.417675][ T7492] veth1_vlan: entered promiscuous mode [ 445.884357][ T7492] veth0_macvtap: entered promiscuous mode [ 446.044766][ T7492] veth1_macvtap: entered promiscuous mode [ 446.387029][ T7492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.458323][ T7492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.568007][ T3005] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.630474][ T3005] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.695097][ T3005] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.741490][ T3601] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.262316][ T7743] netlink: 'syz.1.498': attribute type 4 has an invalid length. [ 447.555575][ T5862] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 447.750142][ T5862] usb 7-1: device descriptor read/64, error -71 [ 448.048768][ T5862] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 448.167458][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.500'. [ 448.275654][ T5862] usb 7-1: device descriptor read/64, error -71 [ 448.404801][ T5862] usb usb7-port1: attempt power cycle [ 448.845897][ T5862] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 448.930674][ T5862] usb 7-1: device descriptor read/8, error -71 [ 449.236486][ T5862] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 449.327413][ T5862] usb 7-1: device descriptor read/8, error -71 [ 449.443971][ T5862] usb usb7-port1: unable to enumerate USB device [ 450.266190][ T5862] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 450.668947][ T5862] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 450.683086][ T5862] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 450.694853][ T5862] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 450.704452][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.832145][ T7773] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 450.879215][ T5862] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 451.437857][ T5862] usb 1-1: USB disconnect, device number 15 [ 452.012357][ T7791] loop6: detected capacity change from 0 to 256 [ 452.025864][ T7790] netlink: 'syz.4.509': attribute type 4 has an invalid length. [ 452.095085][ T7791] exfat: Deprecated parameter 'utf8' [ 452.287647][ T7791] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d) [ 452.517732][ T30] audit: type=1800 audit(1757562984.010:3): pid=7791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.510" name="bus" dev="loop6" ino=1048610 res=0 errno=0 [ 452.639096][ T7795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'. [ 453.787477][ T5863] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 453.887518][ T5865] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 454.049647][ T5863] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 454.062812][ T5863] usb 2-1: config 0 has no interface number 0 [ 454.070846][ T5863] usb 2-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 454.083001][ T5863] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 454.094358][ T5863] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 454.104457][ T5863] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.118059][ T5863] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 454.127517][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.139141][ T5865] usb 5-1: device descriptor read/64, error -71 [ 454.248758][ T5863] usb 2-1: config 0 descriptor?? [ 454.253844][ T7814] loop6: detected capacity change from 0 to 512 [ 454.316489][ T7814] ext4: Unknown parameter 'rootcontext' [ 454.405993][ T5865] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 454.557043][ T5865] usb 5-1: device descriptor read/64, error -71 [ 454.678311][ T5865] usb usb5-port1: attempt power cycle [ 454.698125][ T5863] hid (null): invalid report_size 671936076 [ 454.704626][ T5863] hid (null): report_id 0 is invalid [ 454.905996][ T5863] uclogic 0003:28BD:0042.0002: failed retrieving string descriptor #100: -71 [ 454.916282][ T5863] uclogic 0003:28BD:0042.0002: failed retrieving pen parameters: -71 [ 454.924689][ T5863] uclogic 0003:28BD:0042.0002: pen probing failed: -71 [ 454.932092][ T5863] uclogic 0003:28BD:0042.0002: failed probing parameters: -71 [ 454.940577][ T5863] uclogic 0003:28BD:0042.0002: probe with driver uclogic failed with error -71 [ 455.197965][ T5865] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 455.278375][ T5865] usb 5-1: device descriptor read/8, error -71 [ 455.448297][ T5863] usb 2-1: USB disconnect, device number 15 [ 455.586067][ T5865] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 455.717494][ T5865] usb 5-1: device descriptor read/8, error -71 [ 455.839674][ T5865] usb usb5-port1: unable to enumerate USB device [ 460.311578][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.319887][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.524858][ T7835] netlink: 'syz.1.521': attribute type 4 has an invalid length. [ 460.846467][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.854674][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.169572][ T5862] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 461.410603][ T5862] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 461.422391][ T5862] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 461.436814][ T5862] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 461.447794][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.538938][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'. [ 461.672594][ T7837] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 461.753723][ T5862] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 462.276276][ T5862] usb 1-1: USB disconnect, device number 16 [ 462.337284][ T5815] Bluetooth: hci4: command 0x0406 tx timeout [ 462.382707][ T6114] udevd[6114]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.795744][ T1941] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 462.877494][ T5870] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 462.969497][ T1941] usb 5-1: device descriptor read/64, error -71 [ 463.202785][ T5870] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 463.213306][ T5870] usb 2-1: config 0 interface 0 has no altsetting 0 [ 463.296335][ T1941] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 463.383467][ T5870] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 463.393578][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 463.403037][ T5870] usb 2-1: Product: syz [ 463.407909][ T5870] usb 2-1: Manufacturer: syz [ 463.412725][ T5870] usb 2-1: SerialNumber: syz [ 463.516207][ T1941] usb 5-1: device descriptor read/64, error -71 [ 463.561640][ T5870] usb 2-1: config 0 descriptor?? [ 463.637986][ T5870] usb 2-1: selecting invalid altsetting 0 [ 463.665552][ T1941] usb usb5-port1: attempt power cycle [ 464.058018][ T1941] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 464.185864][ T1941] usb 5-1: device descriptor read/8, error -71 [ 464.447794][ T1941] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 464.540193][ T1941] usb 5-1: device descriptor read/8, error -71 [ 464.675699][ T1941] usb usb5-port1: unable to enumerate USB device [ 466.190835][ T7880] netlink: 'syz.4.534': attribute type 4 has an invalid length. [ 466.383243][ T5863] usb 2-1: USB disconnect, device number 16 [ 466.842377][ T7884] siw: device registration error -23 [ 467.694093][ T7889] loop1: detected capacity change from 0 to 16 [ 467.739784][ T7889] erofs (device loop1): mounted with root inode @ nid 36. [ 467.842556][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.537'. [ 469.537053][ T5863] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 469.768774][ T5863] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 469.780652][ T5863] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 469.792195][ T5863] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 469.802177][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.846327][ T7907] loop1: detected capacity change from 0 to 256 [ 469.905083][ T7904] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 469.961700][ T7907] exfat: Deprecated parameter 'utf8' [ 470.041275][ T5863] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 470.121134][ T1941] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 470.227039][ T7907] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 470.342231][ T1941] usb 5-1: device descriptor read/64, error -71 [ 470.586917][ T5863] usb 1-1: USB disconnect, device number 17 [ 473.525887][ T1941] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 474.240017][ T7922] netlink: 'syz.4.547': attribute type 4 has an invalid length. [ 474.407687][ T7926] siw: device registration error -23 [ 475.273045][ T1941] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 475.544317][ T1941] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 475.554705][ T1941] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.674754][ T1941] usb 8-1: config 0 descriptor?? [ 475.987500][ T1941] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 478.158137][ T1941] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 478.170615][ T1941] asix 8-1:0.0: probe with driver asix failed with error -71 [ 478.329827][ T5863] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 478.519810][ T5863] usb 1-1: device descriptor read/64, error -71 [ 478.587532][ T1941] usb 8-1: USB disconnect, device number 2 [ 478.793782][ T5863] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 479.018104][ T5863] usb 1-1: device descriptor read/64, error -71 [ 479.161079][ T5863] usb usb1-port1: attempt power cycle [ 479.626358][ T5863] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 479.719588][ T5863] usb 1-1: device descriptor read/8, error -71 [ 479.957050][ T7969] siw: device registration error -23 [ 480.014347][ T5863] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 480.139524][ T5863] usb 1-1: device descriptor read/8, error -71 [ 480.262578][ T5863] usb usb1-port1: unable to enumerate USB device [ 480.605007][ T7971] netlink: 'syz.4.562': attribute type 4 has an invalid length. [ 480.657989][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 480.679060][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 480.736391][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.743085][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 480.797963][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 480.813418][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 480.825410][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 481.916399][ T7982] tipc: Enabled bearer , priority 0 [ 481.958876][ T7982] syzkaller0: entered promiscuous mode [ 481.965066][ T7982] syzkaller0: entered allmulticast mode [ 482.243385][ T7987] tipc: Resetting bearer [ 482.373565][ T7981] tipc: Resetting bearer [ 482.467362][ T7981] tipc: Disabling bearer [ 482.936571][ T5812] Bluetooth: hci5: command tx timeout [ 483.876933][ T5862] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 484.106181][ T5862] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 484.115788][ T5862] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.269384][ T5862] usb 8-1: config 0 descriptor?? [ 484.457416][ T7972] chnl_net:caif_netlink_parms(): no params data found [ 484.521720][ T5862] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 485.015774][ T5812] Bluetooth: hci5: command tx timeout [ 485.318730][ T8014] siw: device registration error -23 [ 486.365711][ T5863] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 486.412012][ T8020] netlink: 'syz.4.575': attribute type 4 has an invalid length. [ 486.559892][ T5863] usb 1-1: device descriptor read/64, error -71 [ 486.704899][ T5862] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 486.716461][ T5862] asix 8-1:0.0: probe with driver asix failed with error -71 [ 486.858364][ T5863] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 486.859160][ T5862] usb 8-1: USB disconnect, device number 3 [ 487.057804][ T5863] usb 1-1: device descriptor read/64, error -71 [ 487.116683][ T5812] Bluetooth: hci5: command tx timeout [ 487.169210][ T5863] usb usb1-port1: attempt power cycle [ 487.575742][ T5863] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 487.669279][ T5863] usb 1-1: device descriptor read/8, error -71 [ 487.986178][ T5863] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 488.047777][ T5863] usb 1-1: device descriptor read/8, error -71 [ 488.181972][ T7972] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.190209][ T7972] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.198335][ T7972] bridge_slave_0: entered allmulticast mode [ 488.209737][ T7972] bridge_slave_0: entered promiscuous mode [ 488.230377][ T5863] usb usb1-port1: unable to enumerate USB device [ 488.315552][ T7972] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.323221][ T7972] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.330950][ T7972] bridge_slave_1: entered allmulticast mode [ 488.339752][ T7972] bridge_slave_1: entered promiscuous mode [ 488.382126][ T5862] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 488.764184][ T5862] usb 8-1: Using ep0 maxpacket: 32 [ 488.833028][ T5862] usb 8-1: unable to get BOS descriptor or descriptor too short [ 488.852912][ T7972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.910831][ T5862] usb 8-1: config 6 has an invalid interface number: 169 but max is 0 [ 488.919561][ T5862] usb 8-1: config 6 has no interface number 0 [ 488.926143][ T5862] usb 8-1: config 6 interface 169 altsetting 3 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 488.938125][ T5862] usb 8-1: config 6 interface 169 has no altsetting 0 [ 489.058967][ T7972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.151185][ T5862] usb 8-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice=97.44 [ 489.160802][ T5862] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.169357][ T5862] usb 8-1: Product: syz [ 489.173737][ T5862] usb 8-1: Manufacturer: syz [ 489.182595][ T5862] usb 8-1: SerialNumber: syz [ 489.197148][ T5812] Bluetooth: hci5: command tx timeout [ 489.499334][ T8043] tipc: Enabled bearer , priority 0 [ 489.730325][ T5862] cdc_acm 8-1:6.169: skipping garbage [ 489.749865][ T5862] usb 8-1: USB disconnect, device number 4 [ 489.803517][ T8047] syzkaller0: entered promiscuous mode [ 489.809479][ T8047] syzkaller0: entered allmulticast mode [ 489.847822][ T7972] team0: Port device team_slave_0 added [ 489.866114][ T8050] tipc: Resetting bearer [ 489.944393][ T7972] team0: Port device team_slave_1 added [ 490.120290][ T8042] tipc: Resetting bearer [ 490.197204][ T8042] tipc: Disabling bearer [ 490.771942][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.779246][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.805827][ T7972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.260942][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.269818][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.296670][ T7972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.478684][ T8061] netlink: 'syz.7.586': attribute type 4 has an invalid length. [ 492.378593][ T7972] hsr_slave_0: entered promiscuous mode [ 492.390669][ T7972] hsr_slave_1: entered promiscuous mode [ 492.399991][ T7972] debugfs: 'hsr0' already exists in 'hsr' [ 492.406177][ T7972] Cannot create hsr debugfs directory [ 492.675674][ T5863] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 492.910675][ T5863] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 492.920834][ T5863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.018188][ T5863] usb 8-1: config 0 descriptor?? [ 493.412317][ T5863] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 495.259494][ T5865] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 495.462693][ T7972] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 495.489052][ T5865] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 495.500480][ T5865] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 495.510136][ T5865] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 495.519553][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.583402][ T5863] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 495.595544][ T5863] asix 8-1:0.0: probe with driver asix failed with error -71 [ 495.713442][ T5863] usb 8-1: USB disconnect, device number 5 [ 495.782876][ T7972] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 495.973536][ T7972] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 496.174776][ T7972] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 496.222610][ T5863] usb 2-1: USB disconnect, device number 17 [ 496.846799][ T5863] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 497.095736][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 497.193862][ T5863] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 497.202502][ T5863] usb 5-1: config 0 has no interface number 0 [ 497.353213][ T5863] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 497.363492][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.378228][ T5863] usb 5-1: Product: syz [ 497.384828][ T5863] usb 5-1: Manufacturer: syz [ 497.389991][ T5863] usb 5-1: SerialNumber: syz [ 497.465906][ T8088] loop0: detected capacity change from 0 to 2048 [ 497.471726][ T8090] tipc: Started in network mode [ 497.482261][ T8090] tipc: Node identity 3228dddbe972, cluster identity 4711 [ 497.492440][ T8090] tipc: Enabled bearer , priority 0 [ 497.599424][ T8093] syzkaller0: entered promiscuous mode [ 497.605808][ T8093] syzkaller0: entered allmulticast mode [ 497.634782][ T5863] usb 5-1: config 0 descriptor?? [ 497.722779][ T8088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.736885][ T8088] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.815431][ T5863] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 497.926265][ T8098] netlink: 'syz.1.597': attribute type 4 has an invalid length. [ 497.956361][ T8090] tipc: Resetting bearer [ 498.082050][ T8087] tipc: Resetting bearer [ 498.160457][ T30] audit: type=1804 audit(1757563029.660:4): pid=8088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.595" name="/newroot/132/file0/file0/file0" dev="loop0" ino=13 res=1 errno=0 [ 498.220023][ T8087] tipc: Disabling bearer [ 498.983718][ T7972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.237736][ T5806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.358786][ T7972] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.415961][ T5863] gspca_spca1528: reg_r err -71 [ 499.427431][ T5863] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 499.557881][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.565520][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.651862][ T5863] usb 5-1: USB disconnect, device number 28 [ 500.176748][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.184374][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.710590][ T11] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 502.962591][ T11] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 502.972338][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.049095][ T11] usb 5-1: config 0 descriptor?? [ 503.386324][ T11] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 504.306459][ T5865] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 504.419387][ T7972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.560443][ T5865] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 504.572057][ T5865] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 504.581816][ T5865] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 504.591528][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.740734][ T8138] netlink: 'syz.7.607': attribute type 4 has an invalid length. [ 505.030292][ T4251] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.113581][ T5865] usb 1-1: USB disconnect, device number 26 [ 505.242105][ T4251] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.526191][ T11] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 505.537965][ T4251] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.538680][ T11] asix 5-1:0.0: probe with driver asix failed with error -71 [ 505.720802][ T11] usb 5-1: USB disconnect, device number 29 [ 505.797333][ T4251] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.903651][ T8142] tipc: Enabled bearer , priority 0 [ 505.979492][ T8142] syzkaller0: entered promiscuous mode [ 505.985394][ T8142] syzkaller0: entered allmulticast mode [ 506.276213][ T8145] loop7: detected capacity change from 0 to 2048 [ 506.379426][ T8148] loop0: detected capacity change from 0 to 128 [ 506.513057][ T8142] tipc: Resetting bearer [ 506.550789][ T8145] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.556467][ T4251] bridge_slave_1: left allmulticast mode [ 506.563793][ T8145] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.569228][ T4251] bridge_slave_1: left promiscuous mode [ 506.595564][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.610231][ T8148] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 506.683764][ T8148] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 506.723396][ T4251] bridge_slave_0: left allmulticast mode [ 506.729709][ T4251] bridge_slave_0: left promiscuous mode [ 506.736739][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.893054][ T8148] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿš@­LqE:†‹ á艞Õt}²0ü$‰' [ 507.005593][ T5862] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 507.077924][ T8148] fscrypt (loop0, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 507.090790][ T1997] tipc: Node number set to 561806586 [ 507.297156][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 507.376856][ T5862] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 507.386342][ T5862] usb 5-1: config 0 has no interface number 0 [ 507.470781][ T7492] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.536871][ T5862] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 507.547291][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.556126][ T5862] usb 5-1: Product: syz [ 507.560564][ T5862] usb 5-1: Manufacturer: syz [ 507.565531][ T5862] usb 5-1: SerialNumber: syz [ 507.797861][ T5862] usb 5-1: config 0 descriptor?? [ 507.864550][ T4251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.864771][ T5806] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 507.931952][ T5862] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 508.040878][ T4251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.072182][ T4251] bond0 (unregistering): Released all slaves [ 508.133177][ T8141] tipc: Resetting bearer [ 508.220392][ T8141] tipc: Disabling bearer [ 508.353936][ T4251] tipc: Left network mode [ 509.285082][ T4251] hsr_slave_0: left promiscuous mode [ 509.345820][ T4251] hsr_slave_1: left promiscuous mode [ 509.358861][ T4251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.366598][ T4251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.483628][ T4251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.491586][ T4251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.569174][ T5862] gspca_spca1528: reg_r err -71 [ 509.574727][ T5862] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 509.710506][ T5862] usb 5-1: USB disconnect, device number 30 [ 509.780702][ T4251] veth1_macvtap: left promiscuous mode [ 509.786604][ T4251] veth0_macvtap: left promiscuous mode [ 509.792597][ T4251] veth1_vlan: left promiscuous mode [ 509.799014][ T4251] veth0_vlan: left promiscuous mode [ 510.938174][ T4251] team0 (unregistering): Port device team_slave_1 removed [ 511.121205][ T4251] team0 (unregistering): Port device team_slave_0 removed [ 512.752280][ T7972] veth0_vlan: entered promiscuous mode [ 512.967522][ T7972] veth1_vlan: entered promiscuous mode [ 513.264057][ T8186] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 513.690654][ T7972] veth0_macvtap: entered promiscuous mode [ 513.842359][ T7972] veth1_macvtap: entered promiscuous mode [ 514.319216][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.454766][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.557669][ T3601] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.642368][ T3601] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.758281][ T3601] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.844652][ T3601] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.307517][ T5865] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 515.551181][ T5865] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 515.561953][ T5865] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 515.571521][ T5865] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 515.581107][ T5865] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.779297][ T5868] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 516.045690][ T5865] usb 8-1: USB disconnect, device number 6 [ 516.047660][ T5868] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 516.061396][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.207878][ T5868] usb 1-1: config 0 descriptor?? [ 516.478791][ T5868] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 517.607521][ T8215] tipc: Enabled bearer , priority 0 [ 517.662410][ T8222] syzkaller0: entered promiscuous mode [ 517.670678][ T8222] syzkaller0: entered allmulticast mode [ 517.776345][ T8215] tipc: Resetting bearer [ 517.920034][ T8211] tipc: Resetting bearer [ 517.968607][ T8211] tipc: Disabling bearer [ 518.591542][ T5868] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 518.602915][ T5868] asix 1-1:0.0: probe with driver asix failed with error -71 [ 518.627043][ T5862] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 518.736821][ T5868] usb 1-1: USB disconnect, device number 27 [ 518.834715][ T8233] loop4: detected capacity change from 0 to 256 [ 518.865665][ T5862] usb 8-1: Using ep0 maxpacket: 16 [ 518.936261][ T5862] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 518.944565][ T5862] usb 8-1: config 0 has no interface number 0 [ 519.019749][ T5862] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 519.030149][ T5862] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.038613][ T5862] usb 8-1: Product: syz [ 519.042980][ T5862] usb 8-1: Manufacturer: syz [ 519.047909][ T5862] usb 8-1: SerialNumber: syz [ 519.171578][ T5862] usb 8-1: config 0 descriptor?? [ 519.244027][ T5862] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 520.077616][ T8242] siw: device registration error -23 [ 520.930102][ T5862] gspca_spca1528: reg_r err -71 [ 520.938331][ T5862] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71 [ 520.962584][ T5862] usb 8-1: USB disconnect, device number 7 [ 521.004336][ T7172] udevd[7172]: setting mode of /dev/bus/usb/008/007 to 020664 failed: No such file or directory [ 521.070054][ T7172] udevd[7172]: setting owner of /dev/bus/usb/008/007 to uid=0, gid=0 failed: No such file or directory [ 521.520925][ T5865] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 521.762472][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 521.773120][ T5865] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 521.783809][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 521.793965][ T5865] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 521.985870][ T5865] usb 5-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 521.995447][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.003664][ T5865] usb 5-1: Product: syz [ 522.008264][ T5865] usb 5-1: Manufacturer: syz [ 522.013066][ T5865] usb 5-1: SerialNumber: syz [ 522.213804][ T5865] usb 5-1: config 0 descriptor?? [ 522.273378][ T5865] ti_usb_3410_5052 5-1:0.0: TI USB 3410 1 port adapter converter detected [ 522.388844][ T5865] usb 5-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 522.506527][ T5865] usb 5-1: USB disconnect, device number 31 [ 522.559014][ T5865] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 522.579853][ T5865] ti_usb_3410_5052 5-1:0.0: device disconnected [ 523.375899][ T5865] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 523.656118][ T5865] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 523.666762][ T5865] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 523.678113][ T5865] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 523.695965][ T5865] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 523.707217][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.968285][ T5865] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 524.224471][ T5865] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 524.322371][ T5865] usb 2-1: USB disconnect, device number 18 [ 524.592154][ T6008] udevd[6008]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.729785][ T8277] tipc: Enabled bearer , priority 0 [ 524.783278][ T8277] syzkaller0: entered promiscuous mode [ 524.789729][ T8277] syzkaller0: entered allmulticast mode [ 524.951724][ T8277] tipc: Resetting bearer [ 525.046991][ T8276] tipc: Resetting bearer [ 525.095754][ T8276] tipc: Disabling bearer [ 525.278827][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.287042][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.574833][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.583532][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.615900][ T5862] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 525.902411][ T5862] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 525.912597][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.079388][ T5862] usb 2-1: config 0 descriptor?? [ 526.475312][ T5868] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 526.600891][ T5862] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 526.838705][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 526.917156][ T5868] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 526.926188][ T5868] usb 1-1: config 0 has no interface number 0 [ 526.945915][ T5865] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 526.984880][ T5868] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 526.994939][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.003587][ T5868] usb 1-1: Product: syz [ 527.008395][ T5868] usb 1-1: Manufacturer: syz [ 527.013337][ T5868] usb 1-1: SerialNumber: syz [ 527.110408][ T5868] usb 1-1: config 0 descriptor?? [ 527.176539][ T5868] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 527.201838][ T5865] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 527.213402][ T5865] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 527.223730][ T5865] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 527.233170][ T5865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.423755][ T8296] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 527.539604][ T5865] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 528.145771][ T5865] usb 9-1: USB disconnect, device number 2 [ 528.584443][ T7130] udevd[7130]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.721335][ T5862] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 528.733215][ T5862] asix 2-1:0.0: probe with driver asix failed with error -71 [ 528.863176][ T5868] gspca_spca1528: reg_r err -71 [ 528.869572][ T5868] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 528.940952][ T5862] usb 2-1: USB disconnect, device number 19 [ 529.050075][ T5868] usb 1-1: USB disconnect, device number 28 [ 529.926430][ T1941] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 530.175788][ T1941] usb 5-1: Using ep0 maxpacket: 8 [ 530.198692][ T1941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 530.210370][ T1941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 530.220595][ T1941] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 530.230726][ T1941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 530.244967][ T1941] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 530.256595][ T1941] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 530.266056][ T1941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.455952][ T5865] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 530.522192][ T1941] usb 5-1: config 0 descriptor?? [ 530.531799][ T8309] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 530.684206][ T5865] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 530.696038][ T5865] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 530.707955][ T5865] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 530.722160][ T5865] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 530.732261][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.111211][ T8322] tipc: Started in network mode [ 531.116814][ T8322] tipc: Node identity fe84ed918d37, cluster identity 4711 [ 531.122903][ T5865] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 531.125605][ T8322] tipc: Enabled bearer , priority 0 [ 531.436455][ T8327] syzkaller0: entered promiscuous mode [ 531.442301][ T8327] syzkaller0: entered allmulticast mode [ 531.566349][ T5865] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 531.872228][ T5865] usb 1-1: USB disconnect, device number 29 [ 531.883598][ T6010] udevd[6010]: setting mode of /dev/bus/usb/001/029 to 020664 failed: No such file or directory [ 531.947078][ T8322] tipc: Resetting bearer [ 532.057788][ T6010] udevd[6010]: setting owner of /dev/bus/usb/001/029 to uid=0, gid=0 failed: No such file or directory [ 532.238128][ T1941] tipc: Node number set to 1941171601 [ 532.287309][ T8320] tipc: Resetting bearer [ 532.388554][ T8320] tipc: Disabling bearer [ 532.521429][ T6008] udevd[6008]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.696499][ T5812] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 533.085950][ T1941] usb 5-1: USB disconnect, device number 32 [ 533.989612][ T8340] overlayfs: failed to resolve './file1': -2 [ 534.858013][ T5865] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 535.112441][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 535.169495][ T5865] usb 1-1: config 1 has an invalid interface number: 3 but max is 2 [ 535.178755][ T5865] usb 1-1: config 1 has no interface number 1 [ 535.185318][ T5865] usb 1-1: too many endpoints for config 1 interface 3 altsetting 255: 165, using maximum allowed: 30 [ 535.197571][ T5865] usb 1-1: config 1 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 165 [ 535.211258][ T5865] usb 1-1: config 1 interface 3 has no altsetting 0 [ 535.505351][ T5865] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 535.514941][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.523378][ T5865] usb 1-1: Product: syz [ 535.528047][ T5865] usb 1-1: Manufacturer: syz [ 535.532862][ T5865] usb 1-1: SerialNumber: syz [ 535.961881][ T8346] binder: 8344:8346 ioctl c0306201 0 returned -14 [ 536.160956][ T5865] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 536.170827][ T5865] usb 1-1: 2:1 : sample bitwidth 251 in over sample bytes 4 [ 536.178692][ T5865] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 536.246655][ T1941] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 536.444008][ T1941] usb 8-1: Using ep0 maxpacket: 16 [ 536.518273][ T8362] loop8: detected capacity change from 0 to 2048 [ 536.521938][ T5865] usb 1-1: USB disconnect, device number 30 [ 536.556352][ T1941] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 536.564757][ T1941] usb 8-1: config 0 has no interface number 0 [ 536.663617][ T1941] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 536.673474][ T1941] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.681965][ T1941] usb 8-1: Product: syz [ 536.686623][ T1941] usb 8-1: Manufacturer: syz [ 536.691430][ T1941] usb 8-1: SerialNumber: syz [ 536.818898][ T1941] usb 8-1: config 0 descriptor?? [ 536.857899][ T8362] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.858426][ T1941] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 537.017075][ T5862] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 537.276820][ T5862] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 537.288047][ T5862] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 537.299431][ T5862] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.315731][ T5862] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 537.326297][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.647314][ T5862] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 537.896386][ T5862] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 537.917421][ T6096] udevd[6096]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.017452][ T7972] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.021831][ T5862] usb 5-1: USB disconnect, device number 33 [ 538.157719][ T8378] tipc: Enabled bearer , priority 0 [ 538.238573][ T8378] syzkaller0: entered promiscuous mode [ 538.244300][ T8378] syzkaller0: entered allmulticast mode [ 538.498432][ T8378] tipc: Resetting bearer [ 538.519993][ T1941] gspca_spca1528: reg_r err -71 [ 538.525870][ T1941] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71 [ 538.667333][ T1941] usb 8-1: USB disconnect, device number 8 [ 538.668380][ T8376] tipc: Resetting bearer [ 538.782264][ T8376] tipc: Disabling bearer [ 539.090524][ T6010] udevd[6010]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.313896][ T1941] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 541.557667][ T1941] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 541.567284][ T1941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.582946][ T8413] loop0: detected capacity change from 0 to 2048 [ 541.691024][ T1941] usb 5-1: config 0 descriptor?? [ 541.759637][ T1941] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 541.986024][ T8413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.196819][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 542.203613][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 543.033956][ T5806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.177150][ T1941] usb 5-1: USB disconnect, device number 34 [ 543.255504][ T5865] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 543.528668][ T5865] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 543.539310][ T5865] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 543.550986][ T5865] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 543.570361][ T5865] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 543.582125][ T5865] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.799085][ T5865] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 543.807802][ T5865] usb 8-1: invalid MIDI out EP 0 [ 544.038660][ T8435] tipc: Enabled bearer , priority 0 [ 544.242278][ T8433] syzkaller0: entered promiscuous mode [ 544.248649][ T8433] syzkaller0: entered allmulticast mode [ 544.685594][ T8435] tipc: Resetting bearer [ 545.000884][ T8431] tipc: Resetting bearer [ 545.052956][ T8431] tipc: Disabling bearer [ 545.170355][ T5865] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 545.291959][ T5865] usb 8-1: USB disconnect, device number 9 [ 545.352337][ T7168] udevd[7168]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 546.980609][ T8461] loop4: detected capacity change from 0 to 256 [ 547.248846][ T8457] loop1: detected capacity change from 0 to 2048 [ 547.288371][ T1941] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 547.317106][ T8457] loop1: p1 < > p4 [ 547.317106][ T8457] p4: [ 547.370712][ T8457] loop1: p4 size 722688 extends beyond EOD, truncated [ 547.471604][ T8457] loop1: p6 start 262464109 is beyond EOD, truncated [ 547.479376][ T8457] loop1: p7 size 2304 extends beyond EOD, truncated [ 547.860425][ T1941] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 547.869222][ T1941] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 547.878705][ T1941] usb 2-1: config 220 has an invalid descriptor of length 149, skipping remainder of the config [ 547.889507][ T1941] usb 2-1: config 220 has no interface number 2 [ 547.896423][ T1941] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 547.910153][ T1941] usb 2-1: config 220 interface 0 has no altsetting 0 [ 547.917319][ T1941] usb 2-1: config 220 interface 76 has no altsetting 0 [ 547.924405][ T1941] usb 2-1: config 220 interface 1 has no altsetting 0 [ 547.960713][ T1941] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 547.970333][ T1941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.978844][ T1941] usb 2-1: Product: syz [ 547.983216][ T1941] usb 2-1: Manufacturer: syz [ 547.988183][ T1941] usb 2-1: SerialNumber: syz [ 548.963128][ T1941] usb 2-1: selecting invalid altsetting 0 [ 548.969747][ T1941] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 548.976805][ T1941] usb 2-1: No valid video chain found. [ 549.338287][ T5815] Bluetooth: hci1: command 0x0406 tx timeout [ 549.359565][ T1941] usb 2-1: selecting invalid altsetting 0 [ 549.365939][ T1941] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 549.644467][ T1941] usb 2-1: USB disconnect, device number 20 [ 550.843193][ T8474] loop4: detected capacity change from 0 to 4096 [ 550.905500][ T8251] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 550.918581][ T8474] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 551.136685][ T8251] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 551.149650][ T8251] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 551.161329][ T8251] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.174735][ T8251] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 551.184333][ T8251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.296903][ T8251] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 551.306170][ T8251] usb 1-1: invalid MIDI out EP 0 [ 551.535862][ T8488] tipc: Enabled bearer , priority 0 [ 551.678073][ T8488] syzkaller0: entered promiscuous mode [ 551.683800][ T8488] syzkaller0: entered allmulticast mode [ 551.707164][ T8474] ntfs3(loop4): ino=1a, mi_enum_attr [ 551.712755][ T8474] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 552.147786][ T8491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.190064][ T8495] tipc: Resetting bearer [ 552.233325][ T6114] udevd[6114]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.272869][ T8251] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 552.341830][ T8486] tipc: Resetting bearer [ 552.382476][ T8251] usb 1-1: USB disconnect, device number 31 [ 552.414179][ T8486] tipc: Disabling bearer [ 553.406403][ T8509] loop1: detected capacity change from 0 to 256 [ 553.628291][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.8.705'. [ 554.642769][ T8519] loop7: detected capacity change from 0 to 2048 [ 554.796335][ T8519] loop7: p1 < > p4 [ 554.796335][ T8519] p4: [ 554.867448][ T1941] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 555.054243][ T8519] loop7: p4 size 722688 extends beyond EOD, truncated [ 555.187166][ T8519] loop7: p6 start 262464109 is beyond EOD, truncated [ 555.194456][ T8519] loop7: p7 size 2304 extends beyond EOD, truncated [ 555.479499][ T1941] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 555.488658][ T1941] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 555.498712][ T1941] usb 8-1: config 220 has an invalid descriptor of length 149, skipping remainder of the config [ 555.509509][ T1941] usb 8-1: config 220 has no interface number 2 [ 555.516130][ T1941] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 555.529623][ T1941] usb 8-1: config 220 interface 0 has no altsetting 0 [ 555.539383][ T1941] usb 8-1: config 220 interface 76 has no altsetting 0 [ 555.547452][ T1941] usb 8-1: config 220 interface 1 has no altsetting 0 [ 556.160025][ T1941] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 556.169863][ T1941] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.177401][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.8.712'. [ 556.178269][ T1941] usb 8-1: Product: syz [ 556.191398][ T1941] usb 8-1: Manufacturer: syz [ 556.196764][ T1941] usb 8-1: SerialNumber: syz [ 556.416269][ T32] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 556.687698][ T32] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 556.698340][ T32] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 556.709880][ T32] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 556.723202][ T32] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 556.732679][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.827931][ T1941] usb 8-1: selecting invalid altsetting 0 [ 556.834365][ T1941] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 556.841335][ T1941] usb 8-1: No valid video chain found. [ 557.024783][ T1941] usb 8-1: selecting invalid altsetting 0 [ 557.031136][ T1941] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 557.165024][ T32] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 557.177993][ T32] usb 2-1: invalid MIDI out EP 0 [ 557.259641][ T1941] usb 8-1: USB disconnect, device number 10 [ 557.771537][ T8542] tipc: Enabled bearer , priority 0 [ 557.938163][ T8542] syzkaller0: entered promiscuous mode [ 557.943879][ T8542] syzkaller0: entered allmulticast mode [ 558.138048][ T32] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 558.224802][ T8540] tipc: Resetting bearer [ 558.288236][ T32] usb 2-1: USB disconnect, device number 21 [ 558.437262][ T8540] tipc: Disabling bearer [ 558.499344][ T8553] loop7: detected capacity change from 0 to 256 [ 558.673730][ T5984] udevd[5984]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 559.753334][ T8567] siw: device registration error -23 [ 561.719737][ T8582] loop7: detected capacity change from 0 to 1024 [ 561.921401][ T8582] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 561.934369][ T8582] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.085580][ T32] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 562.162719][ T8582] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 3: comm syz.7.729: lblock 3 mapped to illegal pblock 3 (length 3) [ 562.245975][ T8582] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 562.258840][ T8582] EXT4-fs (loop7): This should not happen!! Data will be lost [ 562.258840][ T8582] [ 562.439479][ T32] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 562.452571][ T32] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 562.464018][ T32] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 562.474241][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.734919][ T32] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 562.745988][ T32] usb 2-1: invalid MIDI out EP 0 [ 562.874256][ T8592] tipc: Enabled bearer , priority 0 [ 563.017414][ T8596] syzkaller0: entered promiscuous mode [ 563.023143][ T8596] syzkaller0: entered allmulticast mode [ 563.387588][ T8596] tipc: Resetting bearer [ 563.463423][ T4251] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:24: lblock 8 mapped to illegal pblock 8 (length 8) [ 563.481704][ T6096] udevd[6096]: setting mode of /dev/snd/midiC3D0 to 020660 failed: No such file or directory [ 563.504633][ T8590] tipc: Resetting bearer [ 563.517571][ T6096] udevd[6096]: setting owner of /dev/snd/midiC3D0 to uid=0, gid=29 failed: No such file or directory [ 563.599175][ T4251] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 563.612351][ T4251] EXT4-fs (loop7): This should not happen!! Data will be lost [ 563.612351][ T4251] [ 563.638470][ T8590] tipc: Disabling bearer [ 563.704835][ T32] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 563.822870][ T7492] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 563.912724][ T32] usb 2-1: USB disconnect, device number 22 [ 563.954455][ T7130] udevd[7130]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.597070][ T8603] siw: device registration error -23 [ 565.069159][ T8605] loop7: detected capacity change from 0 to 256 [ 566.763763][ T32] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 566.986021][ T32] usb 8-1: device descriptor read/64, error -71 [ 567.295751][ T32] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 567.495777][ T32] usb 8-1: device descriptor read/64, error -71 [ 567.641898][ T32] usb usb8-port1: attempt power cycle [ 568.055547][ T32] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 568.143856][ T32] usb 8-1: device descriptor read/8, error -71 [ 568.373909][ T8629] loop0: detected capacity change from 0 to 1764 [ 568.445683][ T32] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 568.494651][ T32] usb 8-1: device descriptor read/8, error -71 [ 568.581122][ T8251] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 568.646702][ T32] usb usb8-port1: unable to enumerate USB device [ 568.821376][ T8251] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 568.834275][ T8251] usb 9-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 568.851527][ T8251] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 568.862922][ T8251] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.190369][ T8251] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 569.199444][ T8251] usb 9-1: invalid MIDI out EP 0 [ 569.956944][ T7168] udevd[7168]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.048666][ T8251] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 570.223996][ T8251] usb 9-1: USB disconnect, device number 3 [ 570.642815][ T8634] loop0: detected capacity change from 0 to 4096 [ 570.774050][ T8639] tipc: Enabled bearer , priority 0 [ 570.805897][ T8634] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 570.876629][ T8646] syzkaller0: entered promiscuous mode [ 570.882343][ T8646] syzkaller0: entered allmulticast mode [ 570.970261][ T8634] NILFS (loop0): invalid segment: Checksum error in segment payload [ 570.979734][ T8634] NILFS (loop0): unable to fall back to spare super block [ 570.987492][ T8634] NILFS (loop0): error -22 while searching super root [ 571.035077][ T8647] siw: device registration error -23 [ 571.192659][ T8639] tipc: Resetting bearer [ 571.430188][ T8638] tipc: Resetting bearer [ 571.653837][ T8638] tipc: Disabling bearer [ 571.877652][ T6008] udevd[6008]: incorrect nilfs2 checksum on /dev/loop0 [ 572.478189][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 573.023330][ T6008] udevd[6008]: incorrect nilfs2 checksum on /dev/loop0 [ 573.976926][ T8251] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 574.165438][ T8251] usb 8-1: device descriptor read/64, error -71 [ 574.265459][ T5865] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 574.425744][ T8251] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 574.553409][ T5865] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 574.565392][ T5865] usb 9-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 574.582127][ T5865] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 574.601880][ T5865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.675429][ T8251] usb 8-1: device descriptor read/64, error -71 [ 574.797349][ T8251] usb usb8-port1: attempt power cycle [ 574.818173][ T5865] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 574.826368][ T5865] usb 9-1: invalid MIDI out EP 0 [ 575.206475][ T8251] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 575.256515][ T7172] udevd[7172]: setting mode of /dev/dmmidi3 to 020660 failed: No such file or directory [ 575.294909][ T8251] usb 8-1: device descriptor read/8, error -71 [ 575.331265][ T7172] udevd[7172]: setting owner of /dev/dmmidi3 to uid=0, gid=29 failed: No such file or directory [ 575.346727][ T7130] udevd[7130]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.388109][ T5865] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 575.493656][ T5865] usb 9-1: USB disconnect, device number 4 [ 575.577176][ T8251] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 575.723969][ T8251] usb 8-1: device descriptor read/8, error -71 [ 575.848796][ T8251] usb usb8-port1: unable to enumerate USB device [ 577.398135][ T8683] tipc: Enabled bearer , priority 0 [ 577.418210][ T8687] loop7: detected capacity change from 0 to 8 [ 577.474557][ T8685] syzkaller0: entered promiscuous mode [ 577.480591][ T8685] syzkaller0: entered allmulticast mode [ 577.569152][ T6008] udevd[6008]: incorrect cramfs checksum on /dev/loop7 [ 577.606894][ T8687] process 'syz.7.762' launched './file2' with NULL argv: empty string added [ 577.670103][ T8687] cramfs: Error -3 while decompressing! [ 577.677297][ T8687] cramfs: ffffffff95711118(26)->ffff88812cbc2000(4096) [ 577.684558][ T8687] cramfs: Error -3 while decompressing! [ 577.690714][ T8687] cramfs: ffffffff95711132(26)->ffff88812cb0b000(4096) [ 577.698718][ T8687] cramfs: Error -3 while decompressing! [ 577.704544][ T8687] cramfs: ffffffff9571114c(16)->ffff88813f5bb000(4096) [ 577.712131][ T8687] cramfs: Error -3 while decompressing! [ 577.718192][ T8687] cramfs: ffffffff95711118(26)->ffff88812cbc2000(4096) [ 577.768405][ T8683] tipc: Resetting bearer [ 577.900151][ T6008] udevd[6008]: incorrect cramfs checksum on /dev/loop7 [ 577.984001][ T8682] tipc: Resetting bearer [ 578.088547][ T8682] tipc: Disabling bearer [ 578.325530][ T5865] hid-generic 0004:0007:0005.0003: item fetching failed at offset 0/1 [ 578.393673][ T5865] hid-generic 0004:0007:0005.0003: probe with driver hid-generic failed with error -22 [ 578.721812][ T8693] tipc: Enabled bearer , priority 0 [ 578.811813][ T8691] tipc: Resetting bearer [ 579.027428][ T8691] tipc: Disabling bearer [ 579.668130][ T5862] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 579.885935][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 579.962920][ T5862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.973578][ T5862] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 579.983028][ T5862] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 579.992444][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.156635][ T5862] usb 5-1: config 0 descriptor?? [ 580.326668][ T5865] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 580.558639][ T5865] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 580.570647][ T5865] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 580.580973][ T5865] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 580.591292][ T5865] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 580.601555][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.696925][ T8251] usb 5-1: USB disconnect, device number 35 [ 580.732227][ T5865] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 581.380572][ T5865] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 581.436374][ T6096] udevd[6096]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.484327][ T5865] usb 2-1: USB disconnect, device number 23 [ 582.272018][ T5865] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 582.455704][ T5815] Bluetooth: hci5: command 0x0406 tx timeout [ 582.476589][ T5865] usb 5-1: device descriptor read/64, error -71 [ 582.716234][ T5865] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 582.906140][ T5865] usb 5-1: device descriptor read/64, error -71 [ 583.027212][ T5865] usb usb5-port1: attempt power cycle [ 583.362405][ T8715] loop1: detected capacity change from 0 to 4096 [ 583.437705][ T5865] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 583.539929][ T5865] usb 5-1: device descriptor read/8, error -71 [ 583.812908][ T5865] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 583.858044][ T5865] usb 5-1: device descriptor read/8, error -71 [ 583.967462][ T5865] usb usb5-port1: unable to enumerate USB device [ 584.494357][ T8726] tipc: Enabled bearer , priority 0 [ 584.604990][ T8729] syzkaller0: entered promiscuous mode [ 584.611136][ T8729] syzkaller0: entered allmulticast mode [ 584.769759][ T8715] ntfs3: Cannot use different iocharset when remounting! [ 584.832759][ T8730] overlayfs: upper fs does not support tmpfile. [ 584.912395][ T8727] ntfs3(loop1): failed to convert "0000" to cp949 [ 584.948887][ T8724] tipc: Resetting bearer [ 585.096278][ T8727] ntfs3(loop1): failed to convert name for inode 1e. [ 585.122210][ T8724] tipc: Disabling bearer [ 585.158168][ T8730] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 585.172758][ T8730] overlayfs: overlapping lowerdir path [ 585.179459][ T8727] ntfs3(loop1): ino=1f, mi_enum_attr [ 585.241926][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 585.263812][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 585.278260][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 585.311883][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 585.344122][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 586.557163][ T8737] tipc: Enabled bearer , priority 0 [ 586.672213][ T8736] tipc: Resetting bearer [ 586.735474][ T5865] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 586.892500][ T8736] tipc: Disabling bearer [ 587.025786][ T5865] usb 9-1: device descriptor read/64, error -71 [ 587.307497][ T5865] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 587.446270][ T5812] Bluetooth: hci4: command tx timeout [ 587.528443][ T5865] usb 9-1: device descriptor read/64, error -71 [ 587.668407][ T5865] usb usb9-port1: attempt power cycle [ 588.106133][ T5865] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 588.137543][ T5865] usb 9-1: device descriptor read/8, error -71 [ 588.390669][ T5865] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 588.475046][ T5865] usb 9-1: device descriptor read/8, error -71 [ 588.607115][ T5865] usb usb9-port1: unable to enumerate USB device [ 588.633172][ T8732] chnl_net:caif_netlink_parms(): no params data found [ 589.499635][ T5812] Bluetooth: hci4: command tx timeout [ 589.637862][ T8735] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 589.891635][ T8735] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 589.903116][ T8735] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 589.913345][ T8735] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 589.923513][ T8735] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 589.933018][ T8735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.335933][ T8735] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 591.109344][ T8735] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 591.290800][ T8735] usb 2-1: USB disconnect, device number 24 [ 591.451290][ T8770] siw: device registration error -23 [ 591.576642][ T5812] Bluetooth: hci4: command tx timeout [ 591.761238][ T7172] udevd[7172]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 592.080340][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.087994][ T8732] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.102100][ T8732] bridge_slave_0: entered allmulticast mode [ 592.110791][ T8732] bridge_slave_0: entered promiscuous mode [ 592.130601][ T8732] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.138295][ T8732] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.146015][ T8732] bridge_slave_1: entered allmulticast mode [ 592.154484][ T8732] bridge_slave_1: entered promiscuous mode [ 592.672106][ T8732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.817730][ T5865] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 592.863288][ T8732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.036904][ T5865] usb 5-1: Using ep0 maxpacket: 32 [ 593.127097][ T8251] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 593.149272][ T5865] usb 5-1: unable to get BOS descriptor or descriptor too short [ 593.182954][ T5865] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 593.191167][ T5865] usb 5-1: can't read configurations, error -71 [ 593.337744][ T8251] usb 2-1: device descriptor read/64, error -71 [ 593.444835][ T8732] team0: Port device team_slave_0 added [ 593.517798][ T8732] team0: Port device team_slave_1 added [ 593.596345][ T8251] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 593.659445][ T5812] Bluetooth: hci4: command tx timeout [ 593.839033][ T8251] usb 2-1: device descriptor read/64, error -71 [ 593.954279][ T8732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.961875][ T8732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.988394][ T8732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.002627][ T8251] usb usb2-port1: attempt power cycle [ 594.200207][ T8785] tipc: Enabled bearer , priority 0 [ 594.275054][ T8732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.282751][ T8732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.309596][ T8732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.323152][ T8786] syzkaller0: entered promiscuous mode [ 594.329768][ T8786] syzkaller0: entered allmulticast mode [ 594.385496][ T8251] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 594.443721][ T8251] usb 2-1: device descriptor read/8, error -71 [ 594.544503][ T8792] tipc: Enabled bearer , priority 0 [ 594.638896][ T3532] tipc: Resetting bearer [ 594.672812][ T8784] tipc: Resetting bearer [ 594.744982][ T8784] tipc: Disabling bearer [ 594.766879][ T8251] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 594.847526][ T8251] usb 2-1: device descriptor read/8, error -71 [ 594.899332][ T8788] tipc: Resetting bearer [ 594.984408][ T8251] usb usb2-port1: unable to enumerate USB device [ 595.161522][ T8788] tipc: Disabling bearer [ 595.568354][ T8732] hsr_slave_0: entered promiscuous mode [ 595.583519][ T8732] hsr_slave_1: entered promiscuous mode [ 595.592813][ T8732] debugfs: 'hsr0' already exists in 'hsr' [ 595.598835][ T8732] Cannot create hsr debugfs directory [ 595.746731][ T32] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 595.955892][ T32] usb 8-1: device descriptor read/64, error -71 [ 596.195879][ T32] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 596.456226][ T32] usb 8-1: device descriptor read/64, error -71 [ 596.602549][ T32] usb usb8-port1: attempt power cycle [ 597.160902][ T32] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 597.220017][ T8810] siw: device registration error -23 [ 597.843138][ T32] usb 8-1: device descriptor read/8, error -71 [ 598.057113][ T8251] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 598.116087][ T32] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 598.189060][ T32] usb 8-1: device descriptor read/8, error -71 [ 598.191469][ T8732] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 598.256326][ T8251] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 598.268176][ T8251] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 598.278292][ T8251] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 598.288364][ T8251] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 598.297703][ T8251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.317173][ T8814] binder: BINDER_SET_CONTEXT_MGR already set [ 598.323455][ T8814] binder: 8813:8814 ioctl 4018620d 80004a80 returned -16 [ 598.341733][ T32] usb usb8-port1: unable to enumerate USB device [ 598.503752][ T8732] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 598.663863][ T8732] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 598.701724][ T8251] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 598.800824][ T8732] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 599.238424][ T8251] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 599.410337][ T8251] usb 2-1: USB disconnect, device number 29 [ 599.432326][ T7168] udevd[7168]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.835796][ T32] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 599.858690][ T5863] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 600.108044][ T32] usb 9-1: Using ep0 maxpacket: 32 [ 600.156364][ T5863] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 600.168565][ T5863] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 600.180088][ T5863] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 600.195951][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.278848][ T32] usb 9-1: unable to get BOS descriptor or descriptor too short [ 600.397730][ T32] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 600.405926][ T32] usb 9-1: can't read configurations, error -71 [ 600.560919][ T8827] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 600.614986][ T5863] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 601.130537][ T8833] tipc: Enabled bearer , priority 0 [ 601.294029][ T8832] syzkaller0: entered promiscuous mode [ 601.300479][ T8832] syzkaller0: entered allmulticast mode [ 601.656656][ T8831] tipc: Resetting bearer [ 601.879740][ T8831] tipc: Disabling bearer [ 602.189794][ T8732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.646283][ T5863] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 602.836656][ T8732] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.868616][ T5863] usb 9-1: device descriptor read/64, error -71 [ 603.076236][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.083830][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.171915][ T5863] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 603.346438][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.354015][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.386733][ T5863] usb 9-1: device descriptor read/64, error -71 [ 603.509597][ T5863] usb usb9-port1: attempt power cycle [ 603.584036][ T5865] usb 5-1: USB disconnect, device number 42 [ 603.672508][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 603.680565][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 604.044089][ T5863] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 604.148675][ T5863] usb 9-1: device descriptor read/8, error -71 [ 604.435696][ T5863] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 604.510848][ T5863] usb 9-1: device descriptor read/8, error -71 [ 604.667568][ T5863] usb usb9-port1: unable to enumerate USB device [ 604.883598][ T8857] siw: device registration error -23 [ 605.661107][ T5815] Bluetooth: hci5: command 0x0406 tx timeout [ 605.919164][ T8735] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 606.175954][ T8735] usb 2-1: device descriptor read/64, error -71 [ 606.460099][ T8735] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 606.875841][ T8735] usb 2-1: device descriptor read/64, error -71 [ 607.024154][ T8735] usb usb2-port1: attempt power cycle [ 607.085483][ T32] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 607.398240][ T32] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 607.409950][ T32] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 607.420846][ T32] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 607.430264][ T32] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.531753][ T8735] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 607.637860][ T8735] usb 2-1: device descriptor read/8, error -71 [ 607.701902][ T8872] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 607.796181][ T32] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 607.941195][ T8735] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 608.040558][ T8732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.147487][ T8735] usb 2-1: device descriptor read/8, error -71 [ 608.322079][ T8735] usb usb2-port1: unable to enumerate USB device [ 608.437209][ T32] usb 9-1: USB disconnect, device number 15 [ 609.821504][ T8886] tipc: Enabled bearer , priority 0 [ 609.894172][ T8889] syzkaller0: entered promiscuous mode [ 609.901586][ T8889] syzkaller0: entered allmulticast mode [ 610.204896][ T8886] tipc: Resetting bearer [ 610.493431][ T8885] tipc: Resetting bearer [ 610.594551][ T8885] tipc: Disabling bearer [ 610.695770][ T5865] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 610.967235][ T5865] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 610.978629][ T5865] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 610.988955][ T5865] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 610.998293][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.234025][ T8894] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 611.337111][ T5865] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 612.286992][ T3005] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.543928][ T3005] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.726157][ T32] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 612.758390][ T3005] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.966466][ T32] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 612.975292][ T32] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 612.987257][ T32] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 612.998746][ T32] usb 9-1: config 220 has no interface number 2 [ 613.005437][ T32] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 613.018980][ T32] usb 9-1: config 220 interface 0 has no altsetting 0 [ 613.026080][ T32] usb 9-1: config 220 interface 76 has no altsetting 0 [ 613.033150][ T32] usb 9-1: config 220 interface 1 has no altsetting 0 [ 613.161995][ T3005] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.165509][ T32] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 613.184457][ T32] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.195601][ T32] usb 9-1: Product: syz [ 613.200010][ T32] usb 9-1: Manufacturer: syz [ 613.204819][ T32] usb 9-1: SerialNumber: syz [ 613.735626][ T8732] veth0_vlan: entered promiscuous mode [ 613.909256][ T32] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 613.916171][ T32] usb 9-1: No valid video chain found. [ 613.922125][ T32] usb 9-1: selecting invalid altsetting 0 [ 613.974057][ T8732] veth1_vlan: entered promiscuous mode [ 614.057509][ T3005] bridge_slave_1: left allmulticast mode [ 614.063399][ T3005] bridge_slave_1: left promiscuous mode [ 614.070355][ T3005] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.106118][ T8251] usb 5-1: USB disconnect, device number 43 [ 614.116165][ T32] usb 9-1: selecting invalid altsetting 0 [ 614.127969][ T32] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 614.323219][ T3005] bridge_slave_0: left allmulticast mode [ 614.329377][ T3005] bridge_slave_0: left promiscuous mode [ 614.336718][ T3005] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.381077][ T32] usb 9-1: USB disconnect, device number 16 [ 614.528509][ T5862] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 614.738633][ T5862] usb 2-1: device descriptor read/64, error -71 [ 615.035909][ T5862] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 615.236289][ T5862] usb 2-1: device descriptor read/64, error -71 [ 615.353239][ T5862] usb usb2-port1: attempt power cycle [ 615.448436][ T3005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.557729][ T3005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.603804][ T3005] bond0 (unregistering): Released all slaves [ 615.776916][ T5862] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 615.890911][ T5862] usb 2-1: device descriptor read/8, error -71 [ 616.089686][ T3005] tipc: Left network mode [ 616.192405][ T5862] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 616.267662][ T5862] usb 2-1: device descriptor read/8, error -71 [ 616.320283][ T8925] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 616.402541][ T5862] usb usb2-port1: unable to enumerate USB device [ 616.500152][ T8925] usb 5-1: device descriptor read/64, error -71 [ 616.785898][ T8925] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 616.810799][ T8732] veth0_macvtap: entered promiscuous mode [ 616.903784][ T8732] veth1_macvtap: entered promiscuous mode [ 617.040940][ T8925] usb 5-1: device descriptor read/64, error -71 [ 617.105603][ T3005] hsr_slave_0: left promiscuous mode [ 617.120150][ T3005] hsr_slave_1: left promiscuous mode [ 617.145930][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.153543][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.175631][ T8925] usb usb5-port1: attempt power cycle [ 617.230237][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.238143][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.381045][ T3005] veth1_macvtap: left promiscuous mode [ 617.395713][ T3005] veth0_macvtap: left promiscuous mode [ 617.401672][ T3005] veth1_vlan: left promiscuous mode [ 617.407445][ T3005] veth0_vlan: left promiscuous mode [ 617.578521][ T8925] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 617.596313][ T32] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 617.672100][ T8925] usb 5-1: device descriptor read/8, error -71 [ 617.865679][ T32] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 617.877163][ T32] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 617.887517][ T32] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 617.898754][ T32] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.976382][ T8925] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 618.038428][ T8925] usb 5-1: device descriptor read/8, error -71 [ 618.062374][ T8935] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 618.148916][ T8925] usb usb5-port1: unable to enumerate USB device [ 618.168614][ T32] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 618.706146][ T32] usb 9-1: USB disconnect, device number 17 [ 619.794384][ T3005] team0 (unregistering): Port device team_slave_1 removed [ 619.957653][ T3005] team0 (unregistering): Port device team_slave_0 removed [ 620.632982][ T8956] loop4: detected capacity change from 0 to 2048 [ 620.837440][ T8956] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 621.554844][ T8946] tipc: Enabled bearer , priority 0 [ 621.650444][ T8732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.754612][ T8732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.883467][ T8947] syzkaller0: entered promiscuous mode [ 621.898240][ T8947] syzkaller0: entered allmulticast mode [ 621.951962][ T8970] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.047080][ T8970] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.091372][ T8970] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.167763][ T8970] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.921422][ T8947] tipc: Resetting bearer [ 622.981290][ T8947] tipc: Disabling bearer [ 623.415823][ T32] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 623.548333][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 623.589571][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 623.617249][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 623.650716][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 623.692838][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 623.701192][ T32] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 623.712681][ T32] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 623.723001][ T32] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 623.734110][ T32] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.822195][ T8986] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 623.967723][ T32] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 625.301705][ T8925] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 625.569995][ T8925] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 625.582649][ T8925] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 625.592818][ T8925] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 625.602504][ T8925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.744829][ T9011] loop1: detected capacity change from 0 to 128 [ 625.777619][ T9011] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 625.897797][ T5812] Bluetooth: hci0: command tx timeout [ 626.099055][ T30] audit: type=1800 audit(1757563157.570:5): pid=9011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.836" name="file1" dev="loop1" ino=94 res=0 errno=0 [ 626.179372][ T5867] usb 5-1: USB disconnect, device number 48 [ 626.900951][ T8925] usb 9-1: USB disconnect, device number 18 [ 627.306935][ T8992] chnl_net:caif_netlink_parms(): no params data found [ 627.478460][ T9022] netlink: 'syz.1.837': attribute type 4 has an invalid length. [ 627.975627][ T5812] Bluetooth: hci0: command tx timeout [ 628.397934][ T4251] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.761086][ T4251] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.894445][ T9032] tipc: Enabled bearer , priority 0 [ 628.981645][ T4251] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.091138][ T9031] tipc: Resetting bearer [ 629.281755][ T9031] tipc: Disabling bearer [ 629.439931][ T4251] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.085928][ T5812] Bluetooth: hci0: command tx timeout [ 630.117773][ T4251] bridge_slave_1: left allmulticast mode [ 630.123672][ T4251] bridge_slave_1: left promiscuous mode [ 630.130796][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.192841][ T4251] bridge_slave_0: left allmulticast mode [ 630.200585][ T4251] bridge_slave_0: left promiscuous mode [ 630.208372][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.953656][ T4251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.077174][ T4251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.143252][ T4251] bond0 (unregistering): Released all slaves [ 631.698318][ T4251] tipc: Left network mode [ 631.717206][ T8992] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.727848][ T8992] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.735951][ T8992] bridge_slave_0: entered allmulticast mode [ 631.747146][ T8992] bridge_slave_0: entered promiscuous mode [ 631.960930][ T8992] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.968824][ T8992] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.976855][ T8992] bridge_slave_1: entered allmulticast mode [ 631.986075][ T8992] bridge_slave_1: entered promiscuous mode [ 632.152553][ T5812] Bluetooth: hci0: command tx timeout [ 632.688685][ T8992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.832472][ T4251] hsr_slave_0: left promiscuous mode [ 632.864027][ T4251] hsr_slave_1: left promiscuous mode [ 632.872544][ T4251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.880383][ T4251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.005611][ T8925] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 633.010272][ T4251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.022279][ T4251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.228707][ T4251] veth1_macvtap: left promiscuous mode [ 633.234533][ T4251] veth0_macvtap: left promiscuous mode [ 633.241295][ T4251] veth1_vlan: left promiscuous mode [ 633.247229][ T4251] veth0_vlan: left promiscuous mode [ 633.285599][ T8925] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 633.297854][ T8925] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 633.308756][ T8925] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 633.318124][ T8925] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.416275][ T32] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 633.619006][ T32] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 633.630033][ T32] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 633.640260][ T32] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 633.649783][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.673641][ T9068] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 633.759076][ T8925] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 634.089041][ T5867] usb 2-1: USB disconnect, device number 38 [ 634.568618][ T5867] usb 9-1: USB disconnect, device number 19 [ 635.464672][ T4251] team0 (unregistering): Port device team_slave_1 removed [ 635.558889][ T4251] team0 (unregistering): Port device team_slave_0 removed [ 635.909293][ T8992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.450647][ T3866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.458998][ T3866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.711971][ T8992] team0: Port device team_slave_0 added [ 636.863571][ T8992] team0: Port device team_slave_1 added [ 637.416607][ T3601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.424777][ T3601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.652585][ T8992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.663606][ T8992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.690840][ T8992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.007898][ T8992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.016327][ T8992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.042938][ T8992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.802689][ T8992] hsr_slave_0: entered promiscuous mode [ 638.811884][ T8992] hsr_slave_1: entered promiscuous mode [ 638.820731][ T8992] debugfs: 'hsr0' already exists in 'hsr' [ 638.826916][ T8992] Cannot create hsr debugfs directory [ 639.736659][ T9095] binder: 9092:9095 ioctl 4018620d 0 returned -22 [ 640.893668][ T9101] loop1: detected capacity change from 0 to 1024 [ 641.385932][ T5865] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 641.539518][ T9101] ===================================================== [ 641.547120][ T9101] BUG: KMSAN: uninit-value in __hfsplus_ext_cache_extent+0x7cb/0x990 [ 641.558130][ T9101] __hfsplus_ext_cache_extent+0x7cb/0x990 [ 641.564118][ T9101] hfsplus_file_extend+0x7b5/0x1df0 [ 641.570249][ T9101] hfsplus_get_block+0xfc3/0x1a20 [ 641.575793][ T9101] __block_write_begin_int+0xa73/0x3030 [ 641.581579][ T9101] cont_write_begin+0x10e1/0x1bc0 [ 641.587127][ T9101] hfsplus_write_begin+0x85/0x130 [ 641.592349][ T9101] generic_perform_write+0x362/0x1050 [ 641.598123][ T9101] __generic_file_write_iter+0x213/0x460 [ 641.604021][ T9101] generic_file_write_iter+0x131/0x980 [ 641.609807][ T9101] vfs_write+0xbe2/0x15d0 [ 641.614338][ T9101] __ia32_sys_write+0x1f9/0x4d0 [ 641.619615][ T9101] ia32_sys_call+0x35bc/0x4310 [ 641.624547][ T9101] __do_fast_syscall_32+0xb0/0x150 [ 641.629994][ T9101] do_fast_syscall_32+0x38/0x80 [ 641.635018][ T9101] do_SYSENTER_32+0x1f/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 641.639786][ T9101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 641.646600][ T9101] [ 641.649005][ T9101] Uninit was created at: [ 641.655826][ T9101] __kmalloc_noprof+0x95f/0x1310 [ 641.661003][ T9101] hfsplus_find_init+0x90/0x1d0 [ 641.666897][ T9101] hfsplus_file_extend+0x72f/0x1df0 [ 641.673481][ T9101] hfsplus_get_block+0xfc3/0x1a20 [ 641.678896][ T9101] __block_write_begin_int+0xa73/0x3030 [ 641.684685][ T9101] cont_write_begin+0x10e1/0x1bc0 [ 641.690084][ T9101] hfsplus_write_begin+0x85/0x130 [ 641.695419][ T9101] generic_perform_write+0x362/0x1050 [ 641.701028][ T9101] __generic_file_write_iter+0x213/0x460 [ 641.707523][ T9101] generic_file_write_iter+0x131/0x980 [ 641.713158][ T9101] vfs_write+0xbe2/0x15d0 [ 641.717797][ T9101] __ia32_sys_write+0x1f9/0x4d0 [ 641.719790][ T5865] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 641.722842][ T9101] ia32_sys_call+0x35bc/0x4310 [ 641.733402][ T5865] usb 9-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 641.738207][ T9101] __do_fast_syscall_32+0xb0/0x150 [ 641.738347][ T9101] do_fast_syscall_32+0x38/0x80 [ 641.747724][ T5865] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 641.752688][ T9101] do_SYSENTER_32+0x1f/0x30 [ 641.763231][ T5865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.769895][ T9101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 641.770051][ T9101] [ 641.770119][ T9101] CPU: 1 UID: 0 PID: 9101 Comm: syz.1.855 Not tainted syzkaller #0 PREEMPT(none) [ 641.770243][ T9101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 641.770327][ T9101] ===================================================== [ 641.770368][ T9101] Disabling lock debugging due to kernel taint [ 641.770428][ T9101] Kernel panic - not syncing: kmsan.panic set ... [ 641.770514][ T9101] CPU: 1 UID: 0 PID: 9101 Comm: syz.1.855 Tainted: G B syzkaller #0 PREEMPT(none) [ 641.770668][ T9101] Tainted: [B]=BAD_PAGE [ 641.770712][ T9101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 641.770793][ T9101] Call Trace: [ 641.770845][ T9101] [ 641.770887][ T9101] __dump_stack+0x26/0x30 [ 641.771051][ T9101] dump_stack_lvl+0x53/0x270 [ 641.771227][ T9101] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 641.771405][ T9101] dump_stack+0x1e/0x25 [ 641.771563][ T9101] vpanic+0x361/0xc50 [ 641.771720][ T9101] panic+0x15d/0x160 [ 641.771910][ T9101] kmsan_report+0x31c/0x320 [ 641.772059][ T9101] ? __msan_warning+0x1b/0x30 [ 641.772181][ T9101] ? __hfsplus_ext_cache_extent+0x7cb/0x990 [ 641.772344][ T9101] ? hfsplus_file_extend+0x7b5/0x1df0 [ 641.772515][ T9101] ? hfsplus_get_block+0xfc3/0x1a20 [ 641.772695][ T9101] ? __block_write_begin_int+0xa73/0x3030 [ 641.772899][ T9101] ? cont_write_begin+0x10e1/0x1bc0 [ 641.773098][ T9101] ? hfsplus_write_begin+0x85/0x130 [ 641.773251][ T9101] ? generic_perform_write+0x362/0x1050 [ 641.773469][ T9101] ? __generic_file_write_iter+0x213/0x460 [ 641.773686][ T9101] ? generic_file_write_iter+0x131/0x980 [ 641.773830][ T9101] ? vfs_write+0xbe2/0x15d0 [ 641.773989][ T9101] ? __ia32_sys_write+0x1f9/0x4d0 [ 641.774155][ T9101] ? ia32_sys_call+0x35bc/0x4310 [ 641.774282][ T9101] ? __do_fast_syscall_32+0xb0/0x150 [ 641.774418][ T9101] ? do_fast_syscall_32+0x38/0x80 [ 641.774544][ T9101] ? do_SYSENTER_32+0x1f/0x30 [ 641.774667][ T9101] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 641.774839][ T9101] ? stack_depot_save_flags+0x615/0x7b0 [ 641.774984][ T9101] ? kmsan_get_metadata+0xfb/0x160 [ 641.775154][ T9101] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 641.775302][ T9101] ? kmsan_get_metadata+0xfb/0x160 [ 641.775455][ T9101] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 641.775622][ T9101] ? hfsplus_brec_find+0x216/0x9f0 [ 641.775736][ T9101] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 642.024032][ T9101] ? __hfsplus_ext_write_extent+0x535/0x620 [ 642.030069][ T9101] ? kmsan_get_metadata+0xfb/0x160 [ 642.035318][ T9101] __msan_warning+0x1b/0x30 [ 642.039928][ T9101] __hfsplus_ext_cache_extent+0x7cb/0x990 [ 642.045804][ T9101] hfsplus_file_extend+0x7b5/0x1df0 [ 642.051165][ T9101] hfsplus_get_block+0xfc3/0x1a20 [ 642.056327][ T9101] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 642.062849][ T9101] __block_write_begin_int+0xa73/0x3030 [ 642.068722][ T9101] ? __pfx_hfsplus_get_block+0x10/0x10 [ 642.074441][ T9101] cont_write_begin+0x10e1/0x1bc0 [ 642.079619][ T9101] ? kmsan_get_metadata+0xfb/0x160 [ 642.084935][ T9101] ? kmsan_get_metadata+0xfb/0x160 [ 642.090248][ T9101] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 642.096239][ T9101] hfsplus_write_begin+0x85/0x130 [ 642.101379][ T9101] ? __pfx_hfsplus_get_block+0x10/0x10 [ 642.106971][ T9101] ? __pfx_hfsplus_write_begin+0x10/0x10 [ 642.112762][ T9101] generic_perform_write+0x362/0x1050 [ 642.118345][ T9101] __generic_file_write_iter+0x213/0x460 [ 642.124154][ T9101] generic_file_write_iter+0x131/0x980 [ 642.129726][ T9101] ? kmsan_get_metadata+0xfb/0x160 [ 642.135070][ T9101] ? __ia32_sys_write+0x1f9/0x4d0 [ 642.140346][ T9101] ? __msan_warning+0x1b/0x30 [ 642.145165][ T9101] ? filter_irq_stacks+0x13f/0x190 [ 642.150480][ T9101] ? stack_depot_save_flags+0x35/0x7b0 [ 642.156075][ T9101] ? kmsan_get_metadata+0xfb/0x160 [ 642.161326][ T9101] ? kmsan_get_metadata+0xfb/0x160 [ 642.166583][ T9101] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 642.173120][ T9101] vfs_write+0xbe2/0x15d0 [ 642.177644][ T9101] ? __pfx_generic_file_write_iter+0x10/0x10 [ 642.183803][ T9101] __ia32_sys_write+0x1f9/0x4d0 [ 642.188796][ T9101] ia32_sys_call+0x35bc/0x4310 [ 642.193659][ T9101] __do_fast_syscall_32+0xb0/0x150 [ 642.198874][ T9101] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 642.204738][ T9101] do_fast_syscall_32+0x38/0x80 [ 642.209704][ T9101] do_SYSENTER_32+0x1f/0x30 [ 642.214337][ T9101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 642.220813][ T9101] RIP: 0023:0xf7ff7539 [ 642.224968][ T9101] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 642.244851][ T9101] RSP: 002b:00000000f54f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 642.253391][ T9101] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 642.261461][ T9101] RDX: 0000000000032600 RSI: 0000000000000000 RDI: 0000000000000000 [ 642.269521][ T9101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 642.277635][ T9101] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 642.285688][ T9101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 642.293759][ T9101] [ 642.297278][ T9101] Kernel Offset: disabled [ 642.301674][ T9101] Rebooting in 86400 seconds..